Threatbase | Cyber Threat Intelligence Platform

Threatbase is a cyber threat intelligence platform for defenders. Scan any IP address, domain, URL, or file hash against continuously updated indicators of compromise (IOCs), and deploy curated, high-performance blocklists to your firewalls, IDS/IPS, and SIEM — free to start, with a Pro tier for precision, privacy and scale.

What you can do with Threatbase

Check whether an IP address or domain is malicious in real time
Download free IPv4, IPv6, domain, URL, hash, and CIDR blocklists
Report malicious infrastructure to the community threat feed
Track global threat trends across millions of indicators

Explore

Report a malicious IP
Frequently asked questions
Top community contributors
About Threatbase
Reporting policy

Aggregated and maintained by Threatbase, with data courtesy of the wider open-source intelligence community.