Live IOC Feed

Newly reported indicators of compromise; 467,910 tracked.

Trending today

Picked up by the most independent feeds in the last 24 hours. See all trending →

IndicatorRoleFamily / threatFeeds today
IP 165.154.1[.]144AttackerAttacking host4
IP 43.167.198[.]92AttackerMalicious IP4
IP 45.9.2[.]178AttackerAttacking host3
IP 201.24.116[.]175AttackerAttacking host3
IP 207.175.138[.]62AttackerAttacking host3

42 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenTypeIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 09:53IP88.99.66[.]31Malware1 feed 7,306 sandbox samples
10-12 09:53IP185.215.113[.]104Malware1 feed 589 sandbox samples—
10-12 09:53IP74.114.154[.]22Malware1 feed 2,293 sandbox samples
10-12 09:53IP74.114.154[.]18Malware1 feed 2,286 sandbox samples
10-12 09:53IP37.0.10[.]214Malware1 feed 540 sandbox samples
10-12 09:53IP37.0.10[.]237Malware1 feed 315 sandbox samples
10-12 09:53IP94.140.114[.]57Malware1 feed 42 sandbox samples
10-12 09:53IP185.65.135[.]234Malware1 feed 416 sandbox samples
10-12 09:53IP185.215.113[.]15Malware1 feed 660 sandbox samples—
10-12 09:53IP185.177.125[.]94Malware1 feed 255 sandbox samples
10-12 09:53IP188.124.36[.]242Malware1 feed 534 sandbox samples
10-12 09:53SHA256bec709a6b2d5ea7564e1f2d8004b7d913862a9cec8b6f8ed99d79f2e5d31d5f2Malware1 feed ——
10-12 09:53SHA256eaf98fc208f4bbd3f9ce2d238dbdf69252c2f5be62952c52fd528666559ad174Malware1 feed ——
10-12 09:36IP159.69.92[.]223Malware1 feed 591 sandbox samples
10-12 09:36IP37.0.10[.]244Malware1 feed 405 sandbox samples
10-12 09:36IP185.215.113[.]83Malware1 feed 46 sandbox samples—
10-12 09:36SHA256fee2dcb562ffea36515223c30328a0f0d4029e130f472f2e290ab3ad1490d54cMalware1 feed ——
10-12 09:19SHA2567db66246f13e75d65e5d85fde81aaafcd6fcc2ad808d3917807599c5222e748aMalware1 feed ——
10-12 09:04IP194.145.227[.]159Malware1 feed 130 sandbox samples
10-12 09:04IP160.16.200[.]77Malware1 feed 181 sandbox samples
10-12 09:04SHA25695a319f0a34bc123d49f828faa59f36ef86c963e09f3b8abbe94f7f4f4ca7054Malware1 feed ——
10-12 09:04SHA256e5a63cc9f32473141c474d6c5af18cdc504ac5404a622ac764d36baef79f4f43Malware1 feed ——
10-12 09:04SHA256f28f4f33f2fcdc0b6a8a7aa8a814014f7eea92b49d1e98ec407faab96407e5fbMalware1 feed ——
10-12 08:46SHA256ca7eecd015e6a879de60d2c3953921da41400edd6e75f1d1f79c5cb050ed79d5Malware1 feed ——
10-12 08:21IP45.133.1[.]182Malware1 feed 871 sandbox samples
10-12 08:21SHA256ab8112a61fec804cefd305d2ae29e70b7bd6e7ac24948ccf592ce79cacceace6Malware1 feed ——
10-12 07:53IP185.215.113[.]107Malware1 feed 96 sandbox samples—
10-12 07:53IP91.121.67[.]60Malware1 feed 1,252 sandbox samples
10-12 07:53IP192.243.59[.]12Malware1 feed 479 sandbox samples
10-12 07:53IP45.133.1[.]107Malware1 feed 1,135 sandbox samples
10-12 07:53IP65.108.20[.]195Malware1 feed 409 sandbox samples
10-12 07:53IP195.2.74[.]10Malware1 feed 110 sandbox samples
10-12 07:53SHA256f47ef979b17822ab92b8522217df026feb80d623f81fd8e87bad8dc1289b4e4fMalware1 feed ——
10-12 07:26IP94.26.228[.]204Malware1 feed 171 sandbox samples
10-12 07:26IP104.247.81[.]99Malware1 feed 160 sandbox samples
10-12 07:26IP23.88.105[.]196Malware1 feed 88 sandbox samples
10-12 07:26SHA256d66626284376304d8ac0380c6618ff0f9ce160a2fb9fdddef129df7a7959bf98Malware1 feed ——
10-12 06:58IP94.142.143[.]143Malware1 feed 345 sandbox samples
10-12 06:58IP77.91.68[.]253Malware1 feed 19 sandbox samples
10-12 06:58IP5.182.39[.]146Malware1 feed 38 sandbox samples—
10-12 06:58SHA25629441ec9344f39ee1444a52cd736949e9c0a8fd4f6996f5726287bcdf4558711Malware1 feed ——
10-12 06:58SHA256a2a6dee57019060a282f51b2e1d6d3d1292af008cbb0c94b978bc86d008a57a0Malware1 feed ——

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.