Check indicators (IoC lookup)

    Check IP addresses, domains, URLs and file hashes against our consolidated IoC database. It is fed by abuse.ch (URLhaus, MalwareBazaar, Feodo Tracker), AlienVault OTX, CISA and curated industry feeds.

    Indicators total

    910,305

    Indicators total

    Across all sources, deduplicated.

    67,719

    New in 24 h

    Shows how current the data is.

    12

    Active feeds

    abuse.ch, AlienVault OTX and our own sources.

    Quick lookup

    Enter an IP, domain, URL or file hash; we return the score and when it was last seen. Signed-in users see the full provenance.

    Most recently observed indicators

    redacted preview

    Most recently observed indicators with type, score, origin and sources
    IndicatorTypeScoreCountryNetwork (ASN)Malware / tagsATT&CKSourcesLast seen
    965aa465…8942MD554––hotair–AlienVault OTX
    9876c685…192eMD554––hotair–AlienVault OTX
    66277efe…171dMD554––hotair–AlienVault OTX
    cdf15be7…d9e9MD554––hotair–AlienVault OTX
    a4c1b0ee…8d85MD554––hotair–AlienVault OTX
    03680e30…775bMD554––hotair–AlienVault OTX
    5691854f…ed39MD554––hotair–AlienVault OTX
    82d9be42…040aMD554––hotair–AlienVault OTX
    5fdb2635…a1d3MD554––hotair–AlienVault OTX
    d108ffdc…2175MD554––hotair–AlienVault OTX
    1f862be8…74c6MD554––hotair–AlienVault OTX
    6e9020f2…9ea4MD554––hotair–AlienVault OTX
    631a27dc…3879MD554––hotair–AlienVault OTX
    c253689a…9173MD554––hotair–AlienVault OTX
    e36ea598…78a0MD554––hotair–AlienVault OTX
    7fa504b2…1aebMD554––hotair–AlienVault OTX
    0119d129…921dMD554––hotair–AlienVault OTX
    80667638…3facMD554––hotair–AlienVault OTX
    974eb3d5…2b97MD554––hotair–AlienVault OTX
    85e2c447…979bMD554––hotair–AlienVault OTX
    3d809693…f8ffMD554––hotair–AlienVault OTX
    4c300a6f…76cdMD554––hotair–AlienVault OTX
    4a1fcfe0…a06fMD554––hotair–AlienVault OTX
    ac351dda…531eMD554––hotair–AlienVault OTX
    96fc9b02…31c7MD554––hotair–AlienVault OTX
    5c9fde16…e7d1MD554––hotair–AlienVault OTX
    ec5f4f22…3a6dMD554––hotair–AlienVault OTX
    46ad1321…c7d5MD554––hotair–AlienVault OTX
    7aa7b1f6…622cMD554––hotair–AlienVault OTX
    b53f5d8b…8ddfMD554––hotair–AlienVault OTX
    27b6c1c7…be1cMD554––hotair–AlienVault OTX
    e1430a43…6575MD554––hotair–AlienVault OTX
    2ab34636…3eabMD554––hotair–AlienVault OTX
    482c3294…0f33MD554––hotair–AlienVault OTX
    d6cf4bc3…f096MD554––hotair–AlienVault OTX
    7244a270…84d9MD554––hotair–AlienVault OTX
    87fb76dd…49bbMD554––hotair–AlienVault OTX
    c317bde7…691dMD554––hotair–AlienVault OTX
    9f640d34…72b7MD554––hotair–AlienVault OTX
    bdc76d30…52bdMD554––hotair–AlienVault OTX
    cfa759fc…8716MD554––wmrat–AlienVault OTX
    1c54c50c…0838MD554––wmrat–AlienVault OTX
    34115e45…5300MD554––wmrat–AlienVault OTX
    8d335ec4…29fcMD554––wmrat–AlienVault OTX
    d8971688…7e3fMD554––bwm–AlienVault OTX
    3c6e73a8…f346MD554––bwm–AlienVault OTX
    6c559f68…98abMD554––gaganode–AlienVault OTX
    adffb0d7…4525MD554––gaganode–AlienVault OTX
    5667ef2c…8445MD554––bwm–AlienVault OTX
    c59436bb…b65fMD554––gaganode–AlienVault OTX

    Note: IP and domain values are redacted in the public view for data protection reasons (1.2.x.x, *.example.com). Full values are available to customers via the API.