Check indicators (IoC lookup)
Check IP addresses, domains, URLs and file hashes against our consolidated IoC database. It is fed by abuse.ch (URLhaus, MalwareBazaar, Feodo Tracker), AlienVault OTX, CISA and curated industry feeds.
Indicators total
917,024
Indicators total
Across all sources, deduplicated.
68,748
New in 24 h
Shows how current the data is.
12
Active feeds
abuse.ch, AlienVault OTX and our own sources.
Quick lookup
Enter an IP, domain, URL or file hash; we return the score and when it was last seen. Signed-in users see the full provenance.
Most recently observed indicators
redacted preview
| Indicator | Type | Score | Country | Network (ASN) | Malware / tags | ATT&CK | Sources | Last seen |
|---|---|---|---|---|---|---|---|---|
| 204.85.x.x | IP address | 70 | US | AS36850 · University of North Carolina at Chapel Hill | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 81.16.x.x | IP address | 70 | AT | AS13022 · Streams Telecommunicationsservices GmbH | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 2001:9b0:… | IP address | 40 | SE | AS8473 · Bahnhof AB | nickname:WYSWYG | – | Tor Exit Node List | |
| 94.156.x.x | IP address | 70 | ZA | AS214209 · Internet Magnate (Pty) Ltd | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 23.191.x.x | IP address | 40 | US | AS401401 · Unredacted Inc | nickname:UnredactedLin | – | Tor Exit Node List | |
| 2607:fa18:… | IP address | 40 | US | AS6315 · XMission, L.C. | nickname:xmission | – | Tor Exit Node List | |
| 185.220.x.x | IP address | 70 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:relayon0166 | – | blocklist.de, ipsum (stamparm) | |
| 204.137.x.x | IP address | 70 | US | AS399820 · SPARKED HOST LLC | nickname:iworkbederdrunk | – | blocklist.de, ipsum (stamparm) | |
| 192.42.x.x | IP address | 70 | NL | AS215125 · Church of Cyberology | level:5 | – | blocklist.de, ipsum (stamparm) | |
| 204.8.x.x | IP address | 60 | US | AS62744 · Quintex Alliance Consulting | license:free_commercial | – | ipsum (stamparm), Tor Exit Node List | |
| 2620:18c:… | IP address | 40 | US | AS396507 · Emerald Onion | nickname:eo195 | – | Tor Exit Node List | |
| 2602:f7d8:… | IP address | 40 | US | AS401401 · Unredacted Inc | nickname:UnredactedGun | – | Tor Exit Node List | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex137 | – | blocklist.de, ipsum (stamparm) | |
| 151.242.x.x | IP address | 60 | ZA | AS214209 · Internet Magnate (Pty) Ltd | nickname:forest20 | – | ipsum (stamparm), Tor Exit Node List | |
| 2001:67c:… | IP address | 40 | NL | AS215125 · Church of Cyberology | nickname:NTH64R2 | – | Tor Exit Node List | |
| 23.191.x.x | IP address | 70 | US | AS401401 · Unredacted Inc | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 179.43.x.x | IP address | 70 | CH | AS51852 · Private Layer INC | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 77.81.x.x | IP address | 40 | NL | AS43927 · HOSTERION SRL | nickname:tspio | – | Tor Exit Node List | |
| 23.129.x.x | IP address | 60 | US | AS396507 · Emerald Onion | license:free_commercial | – | ipsum (stamparm), Tor Exit Node List | |
| 2001:67c:… | IP address | 70 | DK | AS210731 · Forening for DotSrc | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 185.225.x.x | IP address | 70 | HU | AS41075 · ATW Internet Kft. | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 45.66.x.x | IP address | 70 | NL | AS61125 · SABOTAGE LLC | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 23.128.x.x | IP address | 70 | US | AS400226 · StormyCloud Inc | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 150.40.x.x | IP address | 70 | NL | AS211619 · MAXKO d.o.o. | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 5.255.x.x | IP address | 70 | NL | AS60404 · The Infrastructure Group B.V. | nickname:oer893bhds | – | blocklist.de, ipsum (stamparm) | |
| 103.146.x.x | IP address | 40 | ID | AS136052 · PT Cloud Hosting Indonesia | nickname:plasterparis | – | Tor Exit Node List | |
| 23.191.x.x | IP address | 70 | US | AS401401 · Unredacted Inc | license:free_commercial | – | blocklist.de, Tor Exit Node List | |
| 185.227.x.x | IP address | 40 | FI | AS206804 · Realcloud OU | nickname:giovanna | – | Tor Exit Node List | |
| 2600:3c0a:… | IP address | 40 | US | AS63949 · Akamai Technologies, Inc. | nickname:bluto | – | Tor Exit Node List | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 185.220.x.x | IP address | 70 | DE | AS60729 · Stiftung Erneuerbare Freiheit | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 185.220.x.x | IP address | 70 | DE | AS60729 · Stiftung Erneuerbare Freiheit | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 2620:7:… | IP address | 40 | US | AS62744 · Quintex Alliance Consulting | nickname:Quintex241 | – | Tor Exit Node List | |
| 2620:18c:… | IP address | 40 | US | AS396507 · Emerald Onion | nickname:eo210 | – | Tor Exit Node List | |
| 2001:41d0:… | IP address | 40 | FR | AS16276 · OVH SAS | nickname:0xdeadbeef | – | Tor Exit Node List | |
| 2a0c:5cc0:… | IP address | 40 | CY | AS197648 · CLOUDLAYER8 LIMITED | nickname:eden | – | Tor Exit Node List | |
| 2a00:1dc0:… | IP address | 40 | MD | AS43289 · Trabia SRL | nickname:Angband | – | Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 40 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:relayon0133 | – | Tor Exit Node List | |
| 2620:18c:… | IP address | 40 | US | AS396507 · Emerald Onion | nickname:eo221 | – | Tor Exit Node List | |
| 2a00:63c1:… | IP address | 40 | AT | AS44133 · IPAX GmbH | nickname:geistslowy | – | Tor Exit Node List | |
| 2605:6400:… | IP address | 40 | LU | AS53667 · FranTech Solutions | nickname:Quetzalcoatl | – | Tor Exit Node List | |
| 2a0b:f4c2:… | IP address | 40 | DE | AS60729 · Stiftung Erneuerbare Freiheit | nickname:artikel10ber121 | – | Tor Exit Node List | |
| 23.129.x.x | IP address | 70 | US | AS396507 · Emerald Onion | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 185.100.x.x | IP address | 40 | FI | AS200651 · FlokiNET ehf | nickname:MyTorStar | – | Tor Exit Node List | |
| 2602:f7d8:… | IP address | 40 | US | AS401401 · Unredacted Inc | nickname:UnredactedArea51 | – | Tor Exit Node List | |
| 23.129.x.x | IP address | 70 | US | AS396507 · Emerald Onion | category:ssh | – | blocklist.de, ipsum (stamparm) | |
| 2a04:52c0:… | IP address | 40 | NL | AS60404 · The Infrastructure Group B.V. | nickname:Truancy | – | Tor Exit Node List | |
| 204.8.x.x | IP address | 70 | US | AS62744 · Quintex Alliance Consulting | license:free_commercial | – | blocklist.de, ipsum (stamparm) | |
| 172.232.x.x | IP address | 70 | IT | AS63949 · Akamai Technologies, Inc. | nickname:LocalenbyITExit | – | blocklist.de, Tor Exit Node List |
Note: IP and domain values are redacted in the public view for data protection reasons (1.2.x.x, *.example.com). Full values are available to customers via the API.