Threat feed

Attack IPs & domains — recent threat feed

Sources of active exploitation attempts and network attacks. Aggregated from 100+ threat intelligence sources, refreshed daily.

Download the full Attack blocklist Check an IP or domain

Malicious IPs

301 490

Malicious domains

Last updated

2026-09-05

Downloads are point-in-time snapshots. To consume Attack indicators continuously, pull the STIX/TAXII threat intelligence feed into OpenCTI, MISP, or your own pipeline.

Other threat categories

Malware Phishing Command & Control (C2)Botnet Spam Scam Fraud Ransomware Abuse Proxy & Anonymizers Suspicious Cryptomining

Attack IPs & domains — recent threat feed

Recently listed IPs

Other threat categories