Live IOC Feed
103,926 recently reported malicious indicators from the last 7 days. Values are defanged — don't visit them.
| Indicator | Type | Malware / threat | First seen | Source |
|---|---|---|---|---|
| 62[.]60[.]226[.]22 | ip | Stealc | ThreatFox | |
| 78[.]129[.]237[.]27 | ip | Stealc | ThreatFox | |
| hxxp://62[.]60[.]226[.]22/ | url | Stealc | ThreatFox | |
| hxxp://78[.]129[.]237[.]27/ | url | Stealc | ThreatFox | |
| hxxp://94[.]26[.]83[.]90/ | url | Stealc | ThreatFox | |
| 1994d6b00720a36289725b5885aecbe34307d512 | hash | Stealc | ThreatFox | |
| 78fb06eef2722709feb14cd85ecd74e5 | hash | Stealc | ThreatFox | |
| 655d159778124a3e86adaa7fb139de2c107b9936f2d719b54756de98b8135deb | hash | Stealc | ThreatFox | |
| 109[.]238[.]86[.]106 | ip | Stealc | ThreatFox | |
| 111[.]90[.]150[.]193 | ip | Stealc | ThreatFox | |
| 144[.]31[.]57[.]121 | ip | Stealc | ThreatFox | |
| 146[.]70[.]169[.]146 | ip | Stealc | ThreatFox | |
| 150[.]241[.]66[.]89 | ip | Stealc | ThreatFox | |
| 167[.]148[.]195[.]14 | ip | Stealc | ThreatFox | |
| 176[.]65[.]144[.]135 | ip | Stealc | ThreatFox | |
| 178[.]63[.]28[.]35 | ip | Stealc | ThreatFox | |
| 181[.]174[.]164[.]31 | ip | Stealc | ThreatFox | |
| 185[.]103[.]167[.]136 | ip | Stealc | ThreatFox | |
| 193[.]111[.]117[.]22 | ip | Stealc | ThreatFox | |
| 2[.]27[.]160[.]21 | ip | Stealc | ThreatFox | |
| 23[.]94[.]145[.]143 | ip | Stealc | ThreatFox | |
| 23[.]94[.]252[.]54 | ip | Stealc | ThreatFox | |
| 45[.]61[.]176[.]112 | ip | Stealc | ThreatFox | |
| 80[.]96[.]58[.]22 | ip | Stealc | ThreatFox | |
| 85[.]239[.]149[.]151 | ip | Stealc | ThreatFox | |
| 87[.]120[.]104[.]161 | ip | Stealc | ThreatFox | |
| 87[.]120[.]104[.]209 | ip | Stealc | ThreatFox | |
| 89[.]124[.]101[.]217 | ip | Stealc | ThreatFox | |
| 91[.]210[.]146[.]45 | ip | Stealc | ThreatFox | |
| 94[.]26[.]83[.]205 | ip | Stealc | ThreatFox | |
| 91[.]210[.]146[.]74 | ip | Stealc | ThreatFox | |
| 94[.]26[.]0[.]120 | ip | Stealc | ThreatFox | |
| 95[.]85[.]243[.]33 | ip | Stealc | ThreatFox | |
| 94[.]26[.]90[.]228 | ip | Stealc | ThreatFox | |
| hxxp://109[.]238[.]86[.]106/ | url | Stealc | ThreatFox | |
| hxxp://111[.]90[.]150[.]193/ | url | Stealc | ThreatFox | |
| hxxp://144[.]31[.]57[.]121/ | url | Stealc | ThreatFox | |
| hxxp://146[.]70[.]169[.]146/ | url | Stealc | ThreatFox | |
| hxxp://167[.]148[.]195[.]14/ | url | Stealc | ThreatFox | |
| hxxp://150[.]241[.]66[.]89/ | url | Stealc | ThreatFox | |
| hxxp://176[.]65[.]144[.]135/ | url | Stealc | ThreatFox | |
| hxxp://178[.]63[.]28[.]35/ | url | Stealc | ThreatFox | |
| hxxp://181[.]174[.]164[.]31/ | url | Stealc | ThreatFox | |
| hxxp://185[.]103[.]167[.]136/ | url | Stealc | ThreatFox | |
| hxxp://192[.]162[.]199[.]70/ | url | Stealc | ThreatFox | |
| hxxp://193[.]111[.]117[.]22/ | url | Stealc | ThreatFox | |
| hxxp://2[.]27[.]160[.]21/ | url | Stealc | ThreatFox | |
| hxxp://23[.]94[.]145[.]143/ | url | Stealc | ThreatFox | |
| hxxp://23[.]94[.]252[.]54/ | url | Stealc | ThreatFox | |
| hxxp://45[.]61[.]176[.]112/ | url | Stealc | ThreatFox | |
| hxxp://80[.]96[.]58[.]22/ | url | Stealc | ThreatFox | |
| hxxp://85[.]239[.]149[.]151/ | url | Stealc | ThreatFox | |
| hxxp://87[.]120[.]104[.]161/ | url | Stealc | ThreatFox | |
| hxxp://87[.]120[.]104[.]209/ | url | Stealc | ThreatFox | |
| hxxp://89[.]124[.]101[.]217/ | url | Stealc | ThreatFox | |
| hxxp://91[.]210[.]146[.]45/ | url | Stealc | ThreatFox | |
| hxxp://91[.]210[.]146[.]74/ | url | Stealc | ThreatFox | |
| hxxp://94[.]26[.]0[.]120/ | url | Stealc | ThreatFox | |
| hxxp://94[.]26[.]83[.]205/ | url | Stealc | ThreatFox | |
| hxxp://94[.]26[.]90[.]228/ | url | Stealc | ThreatFox | |
| hxxp://95[.]85[.]243[.]33/ | url | Stealc | ThreatFox | |
| 28f4630b283f8e821ac37cb3a3e6703c78dcc1dc95fbde039e18971d032c29f3 | hash | Stealc | ThreatFox | |
| c8c98f125ad6593be01f56a833384b03f0f514800026b2270a6604bc5e1997be | hash | Stealc | ThreatFox | |
| 09183c07bf99667be170cd9759d7ea7fd14ac9b132336633e7ff51da02d28535 | hash | Stealc | ThreatFox | |
| 20e2ce809ce5c3938ea58fe092d835b8 | hash | Stealc | ThreatFox | |
| 97a0ec4c7466744b05200649a20a3dc3bb167e11 | hash | Stealc | ThreatFox | |
| 88e307318d02ec40845f4a3652e1f7bf1126508a | hash | Stealc | ThreatFox | |
| baaadd859d1ab4142442003a80681dfa8ac306038de626f383e0110fd656c3b4 | hash | Stealc | ThreatFox | |
| d2e3dcdcc038fff84849a359b18281d1 | hash | Stealc | ThreatFox | |
| abc580ad3860919a5b2cdd8d9f48cbaa | hash | Stealc | ThreatFox | |
| 5bcee2e27ed48fed733580f4c6a7b8fde4bd6976 | hash | Stealc | ThreatFox | |
| f59012e49f2e8fd657a11cf2008fe74ca289d189552e29cdc3d1078956ad0d31 | hash | Stealc | ThreatFox | |
| 63ba3a7317f12efb1090152c900234cbe86477b81ceefac2987055d289d8fe1d | hash | Stealc | ThreatFox | |
| 6ee24211c870cfa69b6f3308459668df | hash | Stealc | ThreatFox | |
| 78f05bd41f29448afecd416bd6545371282f3c39 | hash | Stealc | ThreatFox | |
| da747fb547b9d33b91c476d5fb566e18d648a132c8a12210e507f85eaaf0d7df | hash | Stealc | ThreatFox | |
| hxxps://claude-ai-fuliapi[.]pages[.]dev/downloads/latest[.]exe | url | Stealc | ThreatFox | |
| hxxps://download-latest-ai-application[.]pages[.]dev/downloads/ChatGPT[.]exe | url | Stealc | ThreatFox | |
| 193[.]148[.]56[.]145 | ip | Stealc | ThreatFox |