IOC Lookup · abuse.ch

IOC Lookup

Check an IP address, domain, URL, or file hash against URLhaus and MalwareBazaar threat intelligence feeds.

Enter IP · Domain · URL · MD5 / SHA-1 / SHA-256 hash

Examples:

Public IOC Feeds

Malware distribution URLs, shared by the community

Malware samples database with hashes, signatures, tags

Botnet C2 IPs for Emotet, Dridex, QBot, TrickBot

Community-sourced IOCs with MITRE ATT&CK mapping

Clusters of threat actors, malware, ATT&CK patterns

Open threat exchange with pulses and IOC packages