Curated Blocklists

Updated 2026-10-05 ·IoCs expire after 30 days
View API docs
Confidence
IP addresses
140,633
C2, scanners and botnets. Includes CIDR ranges.
Sign in
Domains
37,895
Malware delivery, phishing and C2 hosts.
Sign in
URLs
68,741
Exact payload and phishing URLs.
Sign in
File hashes
83,325
MD5, SHA-1 and SHA-256 of malware.
Sign in
Emails
7,676
Attacker and extortion addresses.
Sign in
Everything
338,270
The master list: all indicator types.
Sign in

New indicators, last 30 days