Skip to main content

Threat feed

Suspicious IPs & domains — recent threat feed

Indicators showing suspicious but not yet confirmed behavior. Aggregated from 100+ threat intelligence sources, refreshed daily.

Malicious IPs

620 981

Malicious domains

1 186 143

Last updated

2026-09-05

Downloads are point-in-time snapshots. To consume Suspicious indicators continuously, pull the STIX/TAXII threat intelligence feed into OpenCTI, MISP, or your own pipeline.

Recently listed IPs

Recently listed domains

Other threat categories