Live IOC Feed

Newly reported indicators of compromise; 473,896 tracked.

Trending today

Picked up by the most independent feeds in the last 24 hours. See all trending →

IndicatorRoleFamily / threatFeeds today
IP 165.154.1[.]144AttackerAttacking host3
IP 151.59.7[.]174AttackerAttacking host3
IP 45.9.2[.]178AttackerAttacking host3
IP 201.24.116[.]175AttackerAttacking host3
IP 212.118.18[.]112AttackerAttacking host3

6 indicators match · newest first · updated 2026-10-12 15:15 UTC

First seenTypeIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 14:53IP114.114.114[.]114Malware1 feed 12k sandbox samples
10-12 14:53IP218.85.157[.]99Malware1 feed 8,026 sandbox samples
10-12 13:57IP74.114.154[.]18Malware1 feed 2,286 sandbox samples
10-12 13:57IP95.216.186[.]40Malware1 feed 427 sandbox samples
10-12 13:57SHA2561893d2797cd9455c1710ed4ded61d8b70988a53a6861ea6e195639fab6d728a3Malware1 feed ——
10-12 13:57SHA256b80ff59233eed4ed4578f04cdff7a242923cacf9454e2619be7e5112b523cc99Malware1 feed ——

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.