Threatbase | Cyber Threat Intelligence Platform

Threatbase is a cyber threat intelligence platform for defenders. The published indicator of compromise (IOC) corpus is the latest published build, committed and readable now, and the curated, high-performance blocklists can still be deployed to your firewalls, IDS/IPS, and SIEM. Searching an IP address, domain, URL, or file hash, and reporting malicious infrastructure, run against the rebuilt database.

What you can do with Threatbase

Check whether an IP address or domain is malicious
Download free IPv4, IPv6, domain, URL, hash, and CIDR blocklists
Report malicious infrastructure to the community threat feed
Track global threat trends across the millions of indicators in the published corpus

Explore

What the platform runs on and what it still needs
Report a malicious IP (closed during the database migration)
Frequently asked questions
Top community contributors
About Threatbase
Reporting policy

Aggregated and maintained by Threatbase, with data courtesy of the wider open-source intelligence community.