Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated.
➡️ Read here for more info

Active IOC requests

You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.



Date (UTC)Request IDMalwareIOC TypeThreat TypeRewardRequester
2025-09-01 16:04#404 TamperedChefurlbotnet_cc 10 credits@P425s8a
2025-08-22 10:49#403 BoneSpyip:portbotnet_cc 10 creditsAnonymous
2025-08-21 07:48#402 Abereboturlbotnet_cc 10 credits@Manh
2025-08-14 12:37#401 Andromedamd5_hashpayload 10 credits@Drake
2025-08-12 15:02#400 XWormip:portbotnet_cc 10 credits@Saber
2025-08-12 13:26#399 XWormip:portbotnet_cc 10 credits@akanine
2025-08-11 09:14#398 FastCashmd5_hashpayload 10 credits@medsa
2025-08-11 08:41#397 PureRATip:portbotnet_cc 10 credits@netresec
2025-08-10 10:35#396 TemptingCedar Spywareip:portbotnet_cc 10 creditsAnonymous
2025-08-08 13:29#395 FastCashdomaincc_skimming 10 credits@Legandrary
2025-08-08 06:51#394 Akiramd5_hashpayload 10 credits@sbksib
2025-07-31 03:43#393 FastCashdomainbotnet_cc 10 credits@NQSang
2025-07-21 16:59#392 PureCrypterip:portbotnet_cc 10 credits@netresec
2025-07-21 00:17#391 Tofseeurlpayload_delivery 10 credits@aachum
2025-07-18 07:09#390 Backdooriturlpayload_delivery 10 creditsAnonymous
2025-07-17 14:25#389 WikiLoaderurlbotnet_cc 10 credits@RakeshEmpirical
2025-07-11 19:21#388 Revenge RATip:portbotnet_cc 10 credits@BookMan911
2025-07-11 05:46#387 Agent Smithurlbotnet_cc 10 credits@Jihed77
2025-07-10 19:53#386 Emotetdomainpayload_delivery 10 credits@g33k247
2025-07-06 21:47#385 LockBitdomainbotnet_cc 10 credits@mohamed101
2025-06-28 14:04#384 Kimsukyip:portbotnet_cc 10 credits@Superman
2025-06-25 10:10#383 Stabuniqdomainbotnet_cc 10 credits@Kocarnik
2025-06-24 14:51#382 Lokiurlbotnet_cc 10 credits@xuantan2345
2025-06-21 06:32#381 Aberebotip:portbotnet_cc 10 creditsAnonymous
2025-06-18 09:18#380 FlyTrapsha256_hashpayload 50 credits@b14ckr053
2025-06-17 10:37#379 DAAMsha256_hashpayload 10 creditsAnonymous
2025-06-17 08:51#378 ValleyRATurlbotnet_cc 10 credits@spider
2025-06-15 17:30#377 Lumma Stealerdomaincc_skimming 10 credits@molzy
2025-06-12 21:40#376 Rattyip:portbotnet_cc 10 credits@aisaacsphd
2025-06-12 15:58#375 Quasar RATip:portbotnet_cc 10 credits@netresec
2025-06-12 15:58#374 XWormip:portbotnet_cc 10 credits@netresec
2025-06-10 06:58#373 PureLogs Stealerip:portbotnet_cc 10 credits@netresec
2025-06-09 07:20#372 Miraiip:portbotnet_cc 10 credits@emmathecatlol
2025-06-04 15:06#371 PlugXsha256_hashpayload 10 creditsAnonymous
2025-06-04 14:03#370 Chaossha256_hashpayload 10 credits@Paul
2025-06-03 13:45#369 MoDi RATip:portbotnet_cc 10 credits@NihatTunarli
2025-05-31 15:11#368 Lumma Stealermd5_hashpayload 10 credits@ahmedhesham
2025-05-30 09:58#367 XWormip:portbotnet_cc 50 creditsAnonymous
2025-05-21 09:56#366 NetSupportManager RATdomainbotnet_cc 10 credits@wajdi
2025-05-20 18:23#365 CryptBoturlpayload_delivery 20 credits@aachum
2025-05-20 06:26#364 Lumma Stealersha256_hashpayload 10 creditsAnonymous
2025-05-19 13:03#363 FAKEUPDATESdomainbotnet_cc 10 creditsAnonymous
2025-05-17 06:41#362 Xbotsha256_hashpayload 10 credits@monkeyyey
2025-05-16 11:25#361 Sliversha256_hashpayload 50 credits@adm3rs1v3
2025-05-14 03:22#360 888 RATurlbotnet_cc 10 credits@panda11
2025-05-12 16:39#359 NetSupportManager RATip:portbotnet_cc 10 creditsAnonymous
2025-05-10 13:56#358 Lumma Stealerurlbotnet_cc 50 creditsAnonymous
2025-05-08 07:36#357 Abcbotip:portbotnet_cc 10 credits@g8now123
2025-05-06 07:22#356 XWormip:portbotnet_cc 10 credits@01Xyris
2025-05-02 03:26#355 XWormurlbotnet_cc 50 creditsAnonymous
2025-05-02 03:26#354 XWormdomainbotnet_cc 50 creditsAnonymous
2025-05-02 03:25#353 XWormip:portbotnet_cc 50 creditsAnonymous
2022-08-10 09:25#113 Cobalt Strikedomainpayload_delivery 10 creditsAnonymous
2022-08-10 09:25#112 Cobalt Strikeip:portbotnet_cc 10 creditsAnonymous