Live IOC Feed

Newly reported indicators of compromise; 467,910 tracked.

Trending today

Picked up by the most independent feeds in the last 24 hours. See all trending →

IndicatorRoleFamily / threatFeeds today
IP 165.154.1[.]144AttackerAttacking host4
IP 43.167.198[.]92AttackerMalicious IP4
IP 45.9.2[.]178AttackerAttacking host3
IP 201.24.116[.]175AttackerAttacking host3
IP 207.175.138[.]62AttackerAttacking host3

11 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenTypeIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:08IP178.237.33[.]50Malware1 feed 1,159 sandbox samples
10-12 09:12IP180.93.125[.]92:2245C21 feed
10-12 08:25Domainprofacelisting[.]infoC21 feed ——
10-12 08:21SHA256a2c6a31ef73c44e03774f46e1e98bf22f893964c4a6858e5a0f03040c2cd93daMalware1 feed ——
10-12 08:05IP102.220.163[.]78:2404C21 feed
10-12 08:05IP216.9.224[.]78:2404C21 feed
10-12 08:05IP91.92.41[.]164:2404C21 feed
10-12 08:00Domainwww[.]jbnowclassprojecttodaybackup1[.]comC21 feed ——
10-12 08:00Domainwww[.]jbnowclassprojecttodaybackup2[.]comC21 feed ——
10-12 08:00Domainwww[.]jbnowclassprojecttoday[.]comC21 feed ——
10-12 08:00Domainwww[.]jbnowclassprojecttodaybackup[.]comC21 feed ——

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.