Check indicators (IoC lookup)
Check IP addresses, domains, URLs and file hashes against our consolidated IoC database. It is fed by abuse.ch (URLhaus, MalwareBazaar, Feodo Tracker), AlienVault OTX, CISA and curated industry feeds.
Indicators total
922,528
Indicators total
Across all sources, deduplicated.
67,662
New in 24 h
Shows how current the data is.
12
Active feeds
abuse.ch, AlienVault OTX and our own sources.
Quick lookup
Enter an IP, domain, URL or file hash; we return the score and when it was last seen. Signed-in users see the full provenance.
Most recently observed indicators
redacted preview
| Indicator | Type | Score | Country | Network (ASN) | Malware / tags | ATT&CK | Sources | Last seen |
|---|---|---|---|---|---|---|---|---|
| 194.53.x.x | IP address | 40 | ES | AS9009 · M247 Europe SRL | nickname:MoorishArt | – | Tor Exit Node List | |
| 2605:6400:… | IP address | 40 | LU | AS53667 · FranTech Solutions | nickname:Estevez4893 | – | Tor Exit Node List | |
| 2602:f7d8:… | IP address | 40 | US | AS401401 · Unredacted Inc | nickname:UnredactedGundersen | – | Tor Exit Node List | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | aggregator | – | blocklist.de, ipsum (stamparm) | |
| 161.97.x.x | IP address | 70 | DE | AS51167 · Contabo GmbH | nickname:fatstor7 | – | blocklist.de, Tor Exit Node List | |
| 190.211.x.x | IP address | 40 | CH | AS51852 · Private Layer INC | nickname:kuhlerTag | – | Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 40 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:Digitalcourage4ipca | – | Tor Exit Node List | |
| 23.129.x.x | IP address | 60 | US | AS396507 · Emerald Onion | aggregator | – | ipsum (stamparm), Tor Exit Node List | |
| 2001:67c:… | IP address | 40 | NL | AS215125 · Church of Cyberology | nickname:NTH92R7 | – | Tor Exit Node List | |
| 2620:7:… | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex57 | – | blocklist.de, Tor Exit Node List | |
| 2620:18c:… | IP address | 40 | US | AS396507 · Emerald Onion | nickname:eo180 | – | Tor Exit Node List | |
| 2001:b030:… | IP address | 40 | TW | AS3462 · Chunghwa Telecom Co., Ltd. | nickname:GuruKopi | – | Tor Exit Node List | |
| 192.42.x.x | IP address | 70 | NL | AS215125 · Church of Cyberology | aggregator | – | blocklist.de, ipsum (stamparm) | |
| 23.191.x.x | IP address | 70 | US | AS401401 · Unredacted Inc | blocklist | – | blocklist.de, Tor Exit Node List | |
| 45.66.x.x | IP address | 70 | NL | AS61125 · SABOTAGE LLC | aggregator | – | blocklist.de, ipsum (stamparm) | |
| 2620:18c:… | IP address | 40 | US | AS396507 · Emerald Onion | nickname:zimmermann | – | Tor Exit Node List | |
| 198.98.x.x | IP address | 60 | US | AS53667 · FranTech Solutions | aggregator | – | ipsum (stamparm), Tor Exit Node List | |
| 2620:7:… | IP address | 40 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex171 | – | Tor Exit Node List | |
| 192.42.x.x | IP address | 70 | NL | AS215125 · Church of Cyberology | level:4 | – | blocklist.de, ipsum (stamparm) | |
| 23.191.x.x | IP address | 70 | US | AS401401 · Unredacted Inc | blocklist | – | blocklist.de, Tor Exit Node List | |
| 2620:7:… | IP address | 40 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex200 | – | Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 70 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:Digitalcourage4ipba | – | blocklist.de, Tor Exit Node List | |
| 23.129.x.x | IP address | 60 | US | AS396507 · Emerald Onion | aggregator | – | ipsum (stamparm), Tor Exit Node List | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex236 | – | blocklist.de, Tor Exit Node List | |
| 104.167.x.x | IP address | 40 | US | AS26286 · MysticDev LLC | nickname:KingShadow1 | – | Tor Exit Node List | |
| 2001:67c:… | IP address | 40 | NL | AS215125 · Church of Cyberology | nickname:NTH63R3 | – | Tor Exit Node List | |
| 2a0e:bfc7:… | IP address | 40 | BG | AS211619 · MAXKO d.o.o. | nickname:MixSOFRelay | – | Tor Exit Node List | |
| 2605:6400:… | IP address | 40 | LU | AS53667 · FranTech Solutions | nickname:EigerNord | – | Tor Exit Node List | |
| 5.2.x.x | IP address | 70 | NL | AS60404 · The Infrastructure Group B.V. | aggregator | – | blocklist.de, ipsum (stamparm) | |
| 2602:f7d8:… | IP address | 40 | US | AS401401 · Unredacted Inc | nickname:UnredactedDeltour | – | Tor Exit Node List | |
| 162.210.x.x | IP address | 40 | US | AS46841 · Fork Networking, LLC | nickname:suckit | – | Tor Exit Node List | |
| 185.220.x.x | IP address | 70 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:Digitalcourage4ipba | – | blocklist.de, ipsum (stamparm) | |
| 23.129.x.x | IP address | 60 | US | AS396507 · Emerald Onion | nickname:eo202 | – | ipsum (stamparm), Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 40 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:relayon0180 | – | Tor Exit Node List | |
| 102.130.x.x | IP address | 40 | ZA | AS328364 · Host Africa (Pty) Ltd | nickname:Magalie | – | Tor Exit Node List | |
| 89.127.x.x | IP address | 40 | IS | AS44925 · 1984 ehf | nickname:3300Warriorculture | – | Tor Exit Node List | |
| 82.39.x.x | IP address | 70 | GB | AS207295 · Akhtar Technologies Limited | category:bots | – | blocklist.de, Tor Exit Node List | |
| 2a01:ecc0:… | IP address | 40 | FI | AS213877 · U1 DIGITAL SERVICES LTD | nickname:finrelay | – | Tor Exit Node List | |
| 185.56.x.x | IP address | 70 | NL | AS211720 · Datashield, Inc. | nickname:TorDola2 | – | blocklist.de, ipsum (stamparm) | |
| 2a14:c380:… | IP address | 40 | HK | AS211507 · Julian Achter | nickname:depression | – | Tor Exit Node List | |
| 23.191.x.x | IP address | 70 | US | AS401401 · Unredacted Inc | nickname:UnredactedBowen | – | blocklist.de, Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 40 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:Digitalcourage4ipdb | – | Tor Exit Node List | |
| 23.137.x.x | IP address | 70 | US | AS22295 · Advin Services LLC | nickname:forest02 | – | blocklist.de, ipsum (stamparm) | |
| 23.129.x.x | IP address | 60 | US | AS396507 · Emerald Onion | aggregator | – | ipsum (stamparm), Tor Exit Node List | |
| 69.12.x.x | IP address | 40 | US | AS36352 · HostPapa | nickname:Quetzalcoatl | – | Tor Exit Node List | |
| 23.129.x.x | IP address | 70 | US | AS396507 · Emerald Onion | nickname:eo199 | – | blocklist.de, ipsum (stamparm) | |
| 23.129.x.x | IP address | 70 | US | AS396507 · Emerald Onion | nickname:eo217 | – | blocklist.de, ipsum (stamparm) | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | aggregator | – | blocklist.de, ipsum (stamparm) | |
| 194.36.x.x | IP address | 70 | NL | AS60117 · Host Sailor Ltd | nickname:DollyParted | – | blocklist.de, Tor Exit Node List | |
| 192.42.x.x | IP address | 70 | NL | AS215125 · Church of Cyberology | level:4 | – | blocklist.de, ipsum (stamparm) |
Note: IP and domain values are redacted in the public view for data protection reasons (1.2.x.x, *.example.com). Full values are available to customers via the API.