Curated Blocklists

Updated 2026-10-08 ·IoCs expire after 30 days
View API docs
Confidence
IP addresses
184,003
C2, scanners and botnets. Includes CIDR ranges.
Sign in
Domains
44,346
Malware delivery, phishing and C2 hosts.
Sign in
URLs
85,810
Exact payload and phishing URLs.
Sign in
File hashes
98,782
MD5, SHA-1 and SHA-256 of malware.
Sign in
Emails
15,022
Attacker and extortion addresses.
Sign in
Everything
427,963
The master list: all indicator types.
Sign in

New indicators, last 30 days