Live IOC Feed

Newly reported indicators of compromise; 467,910 tracked.

Trending today

Picked up by the most independent feeds in the last 24 hours. See all trending →

IndicatorRoleFamily / threatFeeds today
IP 165.154.1[.]144AttackerAttacking host4
IP 43.167.198[.]92AttackerMalicious IP4
IP 45.9.2[.]178AttackerAttacking host3
IP 201.24.116[.]175AttackerAttacking host3
IP 207.175.138[.]62AttackerAttacking host3

10 indicators match · newest first · updated 2026-10-12 10:40 UTC

First seenTypeIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:21IP212.193.30[.]45Malware1 feed 1,205 sandbox samples
10-12 08:21IP85.202.169[.]116Malware1 feed 37 sandbox samples
10-12 08:21SHA2566c644d4d959dfc8fa442850f3029ddf11ea93f27a1742a21bbb30ef0908b70f6Malware1 feed ——
10-12 08:21SHA2567b9918ffa0445b656795323b0cffe24eb0a129d95bce2ed964ff0d998186dcadMalware1 feed ——
10-12 08:21SHA256ccab1ffbb1db6ca0ea792c6c28ed16a200a3217ee0d076da5433619efb6cb4ccMalware1 feed ——
10-12 08:21IP2.56.57[.]65Malware1 feed 17 sandbox samples
10-12 08:21IP193.106.191[.]81Malware1 feed 17 sandbox samples—
10-12 08:21IP89.185.84[.]2Malware1 feed 9 sandbox samples
10-12 08:21IP62.204.41[.]144Malware1 feed 49 sandbox samples
10-12 08:21IP193.124.22[.]8Malware1 feed 8 sandbox samples

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.