NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

Active IOC requests

You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.



Date (UTC)Request IDMalwareIOC TypeThreat TypeRewardRequester
2025-06-18 09:18#380 FlyTrapsha256_hashpayload 50 credits@b14ckr053
2025-06-17 10:37#379 DAAMsha256_hashpayload 10 creditsAnonymous
2025-06-17 08:51#378 ValleyRATurlbotnet_cc 10 credits@spider
2025-06-15 17:30#377 Lumma Stealerdomaincc_skimming 10 credits@molzy
2025-06-12 21:40#376 Rattyip:portbotnet_cc 10 credits@aisaacsphd
2025-06-12 15:58#375 Quasar RATip:portbotnet_cc 10 credits@netresec
2025-06-12 15:58#374 XWormip:portbotnet_cc 10 credits@netresec
2025-06-10 06:58#373 PureLogs Stealerip:portbotnet_cc 10 credits@netresec
2025-06-09 07:20#372 Miraiip:portbotnet_cc 10 credits@emmathecatlol
2025-06-04 15:06#371 PlugXsha256_hashpayload 10 creditsAnonymous
2025-06-04 14:03#370 Chaossha256_hashpayload 10 credits@Paul
2025-06-03 13:45#369 MoDi RATip:portbotnet_cc 10 credits@NihatTunarli
2025-05-31 15:11#368 Lumma Stealermd5_hashpayload 10 credits@ahmedhesham
2025-05-30 09:58#367 XWormip:portbotnet_cc 50 creditsAnonymous
2025-05-21 09:56#366 NetSupportManager RATdomainbotnet_cc 10 credits@wajdi
2025-05-20 18:23#365 CryptBoturlpayload_delivery 20 credits@aachum
2025-05-20 06:26#364 Lumma Stealersha256_hashpayload 10 creditsAnonymous
2025-05-19 13:03#363 FAKEUPDATESdomainbotnet_cc 10 creditsAnonymous
2025-05-17 06:41#362 Xbotsha256_hashpayload 10 credits@monkeyyey
2025-05-16 11:25#361 Sliversha256_hashpayload 50 credits@adm3rs1v3
2025-05-14 03:22#360 888 RATurlbotnet_cc 10 credits@panda11
2025-05-12 16:39#359 NetSupportManager RATip:portbotnet_cc 10 creditsAnonymous
2025-05-10 13:56#358 Lumma Stealerurlbotnet_cc 50 creditsAnonymous
2025-05-08 07:36#357 Abcbotip:portbotnet_cc 10 credits@g8now123
2025-05-06 07:22#356 XWormip:portbotnet_cc 10 credits@01Xyris
2025-05-02 03:26#355 XWormurlbotnet_cc 50 creditsAnonymous
2025-05-02 03:26#354 XWormdomainbotnet_cc 50 creditsAnonymous
2025-05-02 03:25#353 XWormip:portbotnet_cc 50 creditsAnonymous
2025-04-29 23:15#352 AbstractEmumd5_hashpayload 10 credits@GUI
2025-04-29 08:22#351 FastCashmd5_hashpayload 10 credits@parash
2025-04-28 20:23#350 QakBotdomaincc_skimming 10 creditsAnonymous
2025-04-26 06:56#349 888 RATip:portbotnet_cc 10 credits@creator01
2025-04-23 08:28#348 Unidentified 029domainbotnet_cc 10 creditsAnonymous
2025-04-21 07:33#347 888 RATurlbotnet_cc 50 creditsAnonymous
2025-04-20 05:17#346 Cobalt Strikeurlbotnet_cc 10 credits@miki
2025-04-18 04:36#345 888 RATdomainbotnet_cc 10 credits@houn
2025-04-14 08:17#344 FastCashurlbotnet_cc 10 credits@hemalparmar
2025-04-07 13:57#343 DarkVision RATip:portbotnet_cc 10 credits@Robert3D
2025-03-28 08:55#342 FastCaship:portbotnet_cc 10 credits@gloria0113
2025-03-28 08:54#341 Suterusuip:portbotnet_cc 10 credits@gloria0113
2025-03-27 15:26#340 Akiraurlpayload_delivery 10 credits@marioxxx
2025-03-27 15:19#339 Akiraip:portbotnet_cc 10 credits@marioxxx
2025-03-21 08:03#338 TitanStealersha256_hashpayload 10 creditsAnonymous
2025-03-17 17:34#337 Lumma Stealerip:portbotnet_cc 10 creditsAnonymous
2025-03-17 11:26#336 SkinnyBoydomainbotnet_cc 10 credits@Ker4es
2025-03-17 11:26#335 Sliverdomainbotnet_cc 10 credits@Ker4es
2025-03-17 11:26#334 Sliverurlbotnet_cc 10 credits@Ker4es
2025-03-13 10:59#333 MedusaLockersha256_hashpayload 10 credits@soccccc
2025-03-06 06:59#332 Miraiip:portbotnet_cc 10 creditsAnonymous
2025-03-04 08:00#331 Kuiperdomainbotnet_cc 10 credits@xkorva03
2025-02-27 16:33#330 Copybaraurlbotnet_cc 10 credits@badwater
2022-08-10 09:25#113 Cobalt Strikedomainpayload_delivery 10 creditsAnonymous
2022-08-10 09:25#112 Cobalt Strikeip:portbotnet_cc 10 creditsAnonymous