Check indicators (IoC lookup)
Check IP addresses, domains, URLs and file hashes against our consolidated IoC database. It is fed by abuse.ch (URLhaus, MalwareBazaar, Feodo Tracker), AlienVault OTX, CISA and curated industry feeds.
Indicators total
889,116
Indicators total
Across all sources, deduplicated.
77,933
New in 24 h
Shows how current the data is.
12
Active feeds
abuse.ch, AlienVault OTX and our own sources.
Quick lookup
Enter an IP, domain, URL or file hash; we return the score and when it was last seen. Signed-in users see the full provenance.
Most recently observed indicators
redacted preview
| Indicator | Type | Score | Country | Network (ASN) | Malware / tags | ATT&CK | Sources | Last seen |
|---|---|---|---|---|---|---|---|---|
| 209.99.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 35.205.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.62.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 35.94.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 144.225.x.x | IP address | 75 | – | – | rogue-packet | – | blocklist.de, CINS Army | |
| 34.34.x.x | IP address | 70 | – | – | level:3 | – | Emerging Threats (ET open), ipsum (stamparm) | |
| 60.165.x.x | IP address | 70 | – | – | level:5 | – | blocklist.de, Emerging Threats (ET open) | |
| 34.38.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 80.94.x.x | IP address | 75 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 103.90.x.x | IP address | 70 | – | – | level:5 | – | blocklist.de, Emerging Threats (ET open) | |
| 184.33.x.x | IP address | 70 | – | – | level:3 | – | Emerging Threats (ET open), ipsum (stamparm) | |
| 219.154.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 207.175.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 121.233.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 202.155.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 77.91.x.x | IP address | 85 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 102.220.x.x | IP address | 85 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 81.97.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 207.175.x.x | IP address | 70 | – | – | aggregator | – | blocklist.de, Emerging Threats (ET open) | |
| 77.40.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 142.93.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 120.192.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 116.110.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 116.99.x.x | IP address | 70 | – | – | level:3 | – | Emerging Threats (ET open), ipsum (stamparm) | |
| 94.154.x.x | IP address | 92 | – | – | category:ssh | – | abuse.ch ThreatFox, blocklist.de | |
| 207.175.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 101.47.x.x | IP address | 70 | – | – | level:5 | – | blocklist.de, Emerging Threats (ET open) | |
| 34.62.x.x | IP address | 70 | – | – | level:3 | – | Emerging Threats (ET open), ipsum (stamparm) | |
| 34.62.x.x | IP address | 70 | – | – | level:3 | – | Emerging Threats (ET open), ipsum (stamparm) | |
| 185.136.x.x | IP address | 85 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.156.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 146.148.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 45.156.x.x | IP address | 80 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 160.250.x.x | IP address | 70 | – | – | level:5 | – | blocklist.de, Emerging Threats (ET open) | |
| 106.13.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.78.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.38.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 191.7.x.x | IP address | 70 | – | – | level:3 | – | blocklist.de, Emerging Threats (ET open) | |
| 138.226.x.x | IP address | 85 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 202.155.x.x | IP address | 75 | – | – | rogue-packet | – | blocklist.de, CINS Army | |
| 103.170.x.x | IP address | 80 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 116.110.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.38.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 138.197.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 160.250.x.x | IP address | 85 | – | – | rogue-packet | – | blocklist.de, CINS Army | |
| 116.110.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 34.79.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 66.116.x.x | IP address | 70 | – | – | level:5 | – | blocklist.de, Emerging Threats (ET open) | |
| 34.156.x.x | IP address | 70 | – | – | category:ssh | – | blocklist.de, Emerging Threats (ET open) | |
| 168.228.x.x | IP address | 75 | – | – | rogue-packet | – | blocklist.de, CINS Army |
Note: IP and domain values are redacted in the public view for data protection reasons (1.2.x.x, *.example.com). Full values are available to customers via the API.