CTI · indicators of compromise
IOC feeds
Observables extracted from our own curated coverage — never a mirror of third-party feeds. Corroborated means the observable appears in two or more independent stories; reported means a single source. Status is maintained by age and takedown signals.
Corroborated (7)
| Observable | Type | First seen | Last seen | Status | Sources |
|---|---|---|---|---|---|
| 103.102.31.18 | ipv4 | 2026-09-05 | 2026-09-22 | active | 2 stories |
| 5.180.41.35 | ipv4 | 2026-06-17 | 2026-07-25 | expired | 2 stories |
| 82.192.72.4 | ipv4 | 2026-09-05 | 2026-09-22 | active | 2 stories |
| cybersecurefox.com | domain | 2026-09-09 | 2026-10-13 | active | 36 stories |
| apply.fbijobs.gov | domain | 2026-09-22 | 2026-09-22 | revoked | 4 stories |
| bigtlog.pipe | domain | 2026-03-27 | 2026-09-07 | expired | 2 stories |
| registry.coder.com | domain | 2026-09-03 | 2026-09-08 | expired | 2 stories |
Reported (211)
| Observable | Type | First seen | Last seen | Status | Sources |
|---|---|---|---|---|---|
| 103.236.84.103 | ipv4 | 2026-09-18 | 2026-09-18 | active | 1 story |
| 104.207.144.154 | ipv4 | 2026-05-30 | 2026-05-30 | expired | 1 story |
| 111.228.49.20 | ipv4 | 2026-09-12 | 2026-09-12 | expired | 1 story |
| 118.69.65.60 | ipv4 | 2024-02-19 | 2024-02-19 | expired | 1 story |
| 120.53.19.157 | ipv4 | 2026-09-15 | 2026-09-15 | active | 1 story |
| 135.136.63.63 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 138.2.102.66 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 138.226.246.94 | ipv4 | 2026-06-22 | 2026-06-22 | expired | 1 story |
| 139.28.49.138 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 144.208.127.155 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 146.19.216.119 | ipv4 | 2026-05-30 | 2026-05-30 | expired | 1 story |
| 146.70.139.154 | ipv4 | 2026-06-30 | 2026-06-30 | expired | 1 story |
| 146.70.169.246 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 146.70.41.178 | ipv4 | 2026-08-30 | 2026-08-30 | expired | 1 story |
| 152.53.173.29 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 152.53.173.30 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 155.133.5.14 | ipv4 | 2024-02-19 | 2024-02-19 | expired | 1 story |
| 155.133.5.15 | ipv4 | 2024-02-19 | 2024-02-19 | expired | 1 story |
| 158.220.87.79 | ipv4 | 2026-08-12 | 2026-08-12 | expired | 1 story |
| 160.119.76.250 | ipv4 | 2026-04-13 | 2026-04-13 | expired | 1 story |
| 160.191.242.92 | ipv4 | 2026-09-09 | 2026-09-09 | expired | 1 story |
| 160.250.132.238 | ipv4 | 2026-09-14 | 2026-09-14 | expired | 1 story |
| 162.120.71.224 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 162.219.30.165 | ipv4 | 2026-09-25 | 2026-09-25 | active | 1 story |
| 162.33.177.101 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 162.35.122.126 | ipv4 | 2026-09-12 | 2026-09-12 | expired | 1 story |
| 162.55.0.0 | ipv4 | 2026-09-01 | 2026-09-01 | expired | 1 story |
| 162.55.80.0 | ipv4 | 2026-09-01 | 2026-09-01 | expired | 1 story |
| 165.154.68.30 | ipv4 | 2026-09-12 | 2026-09-12 | expired | 1 story |
| 165.99.207.153 | ipv4 | 2026-09-15 | 2026-09-15 | active | 1 story |
| 166.88.134.62 | ipv4 | 2026-08-02 | 2026-08-02 | expired | 1 story |
| 172.86.116.8 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 176.65.148.184 | ipv4 | 2026-09-01 | 2026-09-02 | expired | 1 story |
| 176.65.149.52 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 187.108.1.130 | ipv4 | 2026-01-28 | 2026-01-28 | expired | 1 story |
| 192.236.147.131 | ipv4 | 2026-06-06 | 2026-06-06 | expired | 1 story |
| 192.236.147.138 | ipv4 | 2026-06-06 | 2026-06-06 | expired | 1 story |
| 192.42.116.105 | ipv4 | 2026-06-30 | 2026-06-30 | expired | 1 story |
| 192.42.116.58 | ipv4 | 2026-06-30 | 2026-06-30 | expired | 1 story |
| 193.141.60.212 | ipv4 | 2026-06-06 | 2026-06-06 | expired | 1 story |
| 193.24.211.91 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 193.32.126.168 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 194.213.18.137 | ipv4 | 2026-07-22 | 2026-07-22 | expired | 1 story |
| 194.233.84.90 | ipv4 | 2026-09-20 | 2026-09-20 | active | 1 story |
| 194.48.154.67 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 194.58.66.0 | ipv4 | 2026-05-13 | 2026-05-13 | expired | 1 story |
| 206.72.242.124 | ipv4 | 2026-07-27 | 2026-07-27 | expired | 1 story |
| 206.72.242.162 | ipv4 | 2026-07-27 | 2026-07-27 | expired | 1 story |
| 208.115.232.194 | ipv4 | 2024-10-24 | 2024-10-24 | expired | 1 story |
| 209.182.225.136 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 212.132.98.170 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 212.86.125.24 | ipv4 | 2026-06-22 | 2026-06-22 | expired | 1 story |
| 213.111.148.90 | ipv4 | 2026-06-22 | 2026-06-22 | expired | 1 story |
| 213.209.159.154 | ipv4 | 2026-09-12 | 2026-09-12 | expired | 1 story |
| 216.146.25.208 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 216.152.148.54 | ipv4 | 2026-06-26 | 2026-06-26 | expired | 1 story |
| 217.154.53.116 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 217.154.53.187 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 23.225.52.67 | ipv4 | 2026-03-12 | 2026-03-12 | expired | 1 story |
| 23.234.64.0 | ipv4 | 2026-09-08 | 2026-09-08 | expired | 1 story |
| 31.177.110.136 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 34.153.223.102 | ipv4 | 2026-07-20 | 2026-07-20 | expired | 1 story |
| 37.32.73.156 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 38.54.107.167 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 38.54.88.201 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 38.60.157.139 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 38.60.157.212 | ipv4 | 2026-06-26 | 2026-06-26 | expired | 1 story |
| 38.76.183.197 | ipv4 | 2026-09-10 | 2026-09-10 | expired | 1 story |
| 39.96.201.230 | ipv4 | 2026-09-13 | 2026-09-13 | expired | 1 story |
| 45.131.66.106 | ipv4 | 2026-07-01 | 2026-07-01 | expired | 1 story |
| 45.140.205.28 | ipv4 | 2026-09-28 | 2026-09-28 | active | 1 story |
| 45.149.172.51 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 45.234.176.202 | ipv4 | 2026-01-28 | 2026-01-28 | expired | 1 story |
| 45.55.158.47 | ipv4 | 2025-01-14 | 2025-01-14 | expired | 1 story |
| 45.61.157.15 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 45.76.26.42 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 45.77.149.152 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 45.77.212.12 | ipv4 | 2023-06-15 | 2023-06-15 | expired | 1 story |
| 45.78.224.85 | ipv4 | 2026-10-01 | 2026-10-01 | active | 1 story |
| 45.90.4.121 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 45.90.4.128 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 45.95.147.178 | ipv4 | 2026-04-13 | 2026-04-13 | expired | 1 story |
| 47.105.36.109 | ipv4 | 2026-09-29 | 2026-09-29 | active | 1 story |
| 47.121.130.18 | ipv4 | 2026-09-18 | 2026-09-18 | active | 1 story |
| 47.236.173.77 | ipv4 | 2026-09-11 | 2026-09-11 | expired | 1 story |
| 47.94.56.71 | ipv4 | 2026-09-08 | 2026-09-08 | expired | 1 story |
| 49.0.202.115 | ipv4 | 2026-10-04 | 2026-10-04 | active | 1 story |
| 49.232.21.222 | ipv4 | 2026-09-29 | 2026-09-29 | active | 1 story |
| 51.91.190.241 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 51.91.190.242 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 64.20.53.230 | ipv4 | 2026-07-01 | 2026-07-01 | expired | 1 story |
| 64.62.156.162 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 64.62.156.222 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 64.62.156.94 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 64.94.84.97 | ipv4 | 2026-06-06 | 2026-06-06 | expired | 1 story |
| 65.109.70.162 | ipv4 | 2026-09-02 | 2026-09-02 | expired | 1 story |
| 66.42.99.200 | ipv4 | 2026-06-09 | 2026-06-09 | expired | 1 story |
| 77.247.126.158 | ipv4 | 2024-10-24 | 2024-10-24 | expired | 1 story |
| 79.141.160.78 | ipv4 | 2026-07-22 | 2026-07-22 | expired | 1 story |
| 8.19.75.217 | ipv4 | 2026-07-27 | 2026-07-27 | expired | 1 story |
| 85.11.187.8 | ipv4 | 2026-06-20 | 2026-06-20 | expired | 1 story |
| 85.175.101.203 | ipv4 | 2026-09-15 | 2026-10-03 | active | 1 story |
| 88.119.175.104 | ipv4 | 2024-08-22 | 2024-08-22 | expired | 1 story |
| 88.214.21.183 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 89.116.171.182 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 89.117.94.35 | ipv4 | 2026-09-16 | 2026-09-16 | active | 1 story |
| 89.126.211.166 | ipv4 | 2026-10-03 | 2026-10-03 | active | 1 story |
| 9.20.4.14 | ipv4 | 2026-09-09 | 2026-09-09 | expired | 1 story |
| 91.92.242.30 | ipv4 | 2026-08-20 | 2026-08-20 | expired | 1 story |
| 92.63.180.133 | ipv4 | 2026-09-14 | 2026-09-14 | expired | 1 story |
| 94.154.32.160 | ipv4 | 2026-06-22 | 2026-06-22 | expired | 1 story |
| 96.62.224.81 | ipv4 | 2026-09-28 | 2026-09-28 | active | 1 story |
| abacusadv.com | domain | 2026-08-23 | 2026-08-23 | expired | 1 story |
| adminmenueditor.com | domain | 2026-09-15 | 2026-09-15 | active | 1 story |
| ai-thermal.com | domain | 2026-08-27 | 2026-08-27 | expired | 1 story |
| alduncanson.react | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| analysis.abyssos | domain | 2026-08-10 | 2026-08-10 | expired | 1 story |
| api.claudeopus | domain | 2026-08-05 | 2026-08-05 | expired | 1 story |
| api.telegram.org | domain | 2026-09-16 | 2026-09-16 | active | 1 story |
| api.virtualizor.com | domain | 2026-09-01 | 2026-09-01 | expired | 1 story |
| api.weatherlive | domain | 2026-10-08 | 2026-10-08 | active | 1 story |
| autoload.files | domain | 2026-05-23 | 2026-05-23 | expired | 1 story |
| avbuffer.free | domain | 2026-06-23 | 2026-06-23 | expired | 1 story |
| awqhnjewqjkl.icu | domain | 2026-08-07 | 2026-08-07 | expired | 1 story |
| azurenetfiles.net | domain | 2026-06-11 | 2026-06-11 | expired | 1 story |
| backblazeb2.com | domain | 2026-09-16 | 2026-09-16 | active | 1 story |
| backdoor.turn | domain | 2026-06-16 | 2026-06-16 | expired | 1 story |
| brmconfig.com | domain | 2026-09-01 | 2026-09-01 | expired | 1 story |
| caldav.icloud | domain | 2026-09-24 | 2026-09-24 | active | 1 story |
| canal1zac1a.onrender.com | domain | 2026-06-26 | 2026-06-26 | expired | 1 story |
| capabilities.abyssos | domain | 2026-08-10 | 2026-08-10 | expired | 1 story |
| cdn.bloom | domain | 2026-09-09 | 2026-09-09 | expired | 1 story |
| cdn10.sendibt1.com | domain | 2026-09-18 | 2026-09-18 | active | 1 story |
| cdn11.sendibt1.com | domain | 2026-09-18 | 2026-09-18 | active | 1 story |
| cdn2.sendibt1.com | domain | 2026-09-18 | 2026-09-18 | active | 1 story |
| cdn4.sendibt1.com | domain | 2026-09-18 | 2026-09-18 | active | 1 story |
| city-forum.com | domain | 2026-08-12 | 2026-08-12 | expired | 1 story |
| com.android.sys.bcprot | domain | 2026-10-08 | 2026-10-08 | active | 1 story |
| com.android.sys.gmsprot | domain | 2026-10-08 | 2026-10-08 | active | 1 story |
| com.android.sys.prot | domain | 2026-10-08 | 2026-10-08 | active | 1 story |
| com.android.system.lite | domain | 2026-10-08 | 2026-10-08 | active | 1 story |
| com.apple.finder.agent | domain | 2026-09-24 | 2026-09-24 | active | 1 story |
| com.apple.system.services.activity | domain | 2026-06-24 | 2026-06-24 | expired | 1 story |
| com.finder.helper.plist | domain | 2025-12-10 | 2025-12-10 | expired | 1 story |
| com.utils.launcher | domain | 2026-09-10 | 2026-09-10 | expired | 1 story |
| comfyupdate.org | domain | 2025-07-07 | 2025-07-07 | expired | 1 story |
| communication.abyssos | domain | 2026-08-10 | 2026-08-10 | expired | 1 story |
| company.onmicrosoft.com | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| cre-ads.com | domain | 2026-03-12 | 2026-03-12 | expired | 1 story |
| daymath.mjs | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| delivery.evidence | domain | 2026-08-11 | 2026-08-11 | expired | 1 story |
| driverx86-adobe.onrender.com | domain | 2026-06-26 | 2026-06-26 | expired | 1 story |
| eeongous.com | domain | 2026-09-04 | 2026-09-04 | expired | 1 story |
| env-check.daemontools | domain | 2026-05-05 | 2026-05-05 | expired | 1 story |
| files.virtualizor.com | domain | 2026-09-01 | 2026-09-01 | expired | 1 story |
| gateway.icloud | domain | 2026-09-24 | 2026-09-24 | active | 1 story |
| git.churchofmalware | domain | 2026-08-12 | 2026-08-12 | expired | 1 story |
| git.projectnightcrawler | domain | 2026-08-12 | 2026-08-12 | expired | 1 story |
| github.aoitour | domain | 2026-08-14 | 2026-08-14 | expired | 1 story |
| gogets.dev | domain | 2026-09-18 | 2026-09-23 | active | 1 story |
| gs.thc.org | domain | 2026-09-16 | 2026-09-16 | active | 1 story |
| index-ap3.tyler2miler-proton-me-s-account.workers.dev | domain | 2026-03-23 | 2026-03-23 | expired | 1 story |
| ipssrl.com | domain | 2026-08-15 | 2026-08-15 | expired | 1 story |
| itorrents.org | domain | 2026-09-18 | 2026-09-19 | revoked | 1 story |
| laboo.boo | domain | 2026-09-04 | 2026-09-04 | expired | 1 story |
| leappoach.info | domain | 2026-09-04 | 2026-09-04 | expired | 1 story |
| magne-sjaastad.opm | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| mail.uaiubifas | domain | 2026-09-10 | 2026-09-10 | expired | 1 story |
| mythtime.xyz | domain | 2026-09-04 | 2026-09-04 | expired | 1 story |
| nightmare-stresser.com | domain | 2026-09-22 | 2026-09-22 | revoked | 1 story |
| nightmarestresser.org | domain | 2026-09-22 | 2026-09-22 | revoked | 1 story |
| nqsaaskw.com | domain | 2026-03-12 | 2026-03-12 | expired | 1 story |
| openai-backup.one | domain | 2026-09-01 | 2026-09-01 | expired | 1 story |
| poison-claude.bitsender | domain | 2026-08-04 | 2026-08-04 | expired | 1 story |
| pool.hashvault | domain | 2026-08-27 | 2026-08-27 | expired | 1 story |
| reliaquest.claims | domain | 2026-08-24 | 2026-08-24 | revoked | 1 story |
| review.chm | domain | 2026-08-12 | 2026-08-12 | expired | 1 story |
| rumbledb.jsoniq | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| sendibt1.com | domain | 2026-09-18 | 2026-09-18 | active | 1 story |
| setup.mdc | domain | 2026-06-08 | 2026-06-08 | expired | 1 story |
| setup.mjs | domain | 2026-08-05 | 2026-08-05 | expired | 1 story |
| sphealth.aspx | domain | 2026-09-24 | 2026-09-24 | active | 1 story |
| stonevillenc.org | domain | 2026-09-11 | 2026-09-11 | expired | 1 story |
| synologyupdates.com | domain | 2025-07-07 | 2025-07-07 | expired | 1 story |
| sys.rzadmin.password | domain | 2026-07-08 | 2026-07-10 | expired | 1 story |
| tappercuddy.com | domain | 2026-08-15 | 2026-08-15 | expired | 1 story |
| third-party.com | domain | 2026-05-02 | 2026-09-23 | active | 1 story |
| trainingannouncement.pdf.lnk | domain | 2026-08-19 | 2026-08-19 | expired | 1 story |
| trendaisecurity.com | domain | 2026-08-24 | 2026-08-24 | expired | 1 story |
| userstat.net | domain | 2026-03-12 | 2026-03-12 | expired | 1 story |
| usher.ttvnw | domain | 2026-09-14 | 2026-09-14 | expired | 1 story |
| virtualizor.com | domain | 2026-09-01 | 2026-09-01 | expired | 1 story |
| vlxx.arm | domain | 2026-09-09 | 2026-09-11 | expired | 1 story |
| vultrobjects.com | domain | 2026-09-16 | 2026-09-16 | active | 1 story |
| weatherdataai.theworkpc.com | domain | 2026-06-26 | 2026-06-26 | expired | 1 story |
| witha.name | domain | 2026-09-15 | 2026-10-06 | active | 1 story |
| wp-user-consent.php | domain | 2026-09-15 | 2026-09-15 | active | 1 story |
| wp2shell.com | domain | 2026-07-17 | 2026-07-19 | expired | 1 story |
| xemphimlau.com | domain | 2026-03-12 | 2026-03-12 | expired | 1 story |
| zimbra-metadata.com | domain | 2026-07-23 | 2026-07-23 | expired | 1 story |
| zk-call-messenger-installer-3.9.2-lts.dmg | domain | 2025-12-22 | 2025-12-22 | revoked | 1 story |
| zkcall.net | domain | 2025-12-22 | 2025-12-22 | revoked | 1 story |
| zmailanalytics.com | domain | 2026-07-23 | 2026-07-23 | expired | 1 story |
| 13382c16e2401b07451577b46e634b8031ec254d98b876e59692b5fa22abc1d4 | sha256 | 2026-09-09 | 2026-09-09 | expired | 1 story |
| 16df15306f966ae5c5184901747a32087483c03eebd7bf19dbfc38e2c4d23ff8 | sha256 | 2025-10-20 | 2025-10-20 | expired | 1 story |
| 26bd5b0722d1dbab5db749a063c49bc8638653ac2addfead7a9cb3d6d57bccc9 | sha256 | 2026-09-07 | 2026-09-07 | expired | 1 story |
| 321e1fb01eb3462b48ff6ccdef132acc1182e3f7456548439f0d4ead12fd98bf | sha256 | 2026-08-18 | 2026-08-18 | expired | 1 story |
| 8858ea412dc306b3558885af18006c5ca24689e8875733b5e13b3c2692e603cb | sha256 | 2026-09-21 | 2026-09-21 | active | 1 story |
| bf0681e43f51e98fe7ec24bf73a43facc66b0feb325a3a835f8f01b2861b926e | sha256 | 2026-09-22 | 2026-09-22 | active | 1 story |
| daf619aa8cc74dab02c360f46f9f4b7b1654ba478ee89992a3512a46f1f4c209 | sha256 | 2026-05-02 | 2026-05-02 | expired | 1 story |
| e37e3ddeeaaa9e0c4fdbcb829b4895a6521031c80053fc436625b61e6ee5b1a6 | sha256 | 2026-09-08 | 2026-09-08 | expired | 1 story |
Raw feeds
For the raw, uncurated feeds defenders should also pull from directly: