NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

Active IOC requests

You can request IOCs from the community and reward people who share their IOCs. Below is a list of current active IOC requests from the community.



Date (UTC)Request IDMalwareIOC TypeThreat TypeRewardRequester
2025-03-28 08:55#342 FastCaship:portbotnet_cc 10 credits@gloria0113
2025-03-28 08:54#341 Suterusuip:portbotnet_cc 10 credits@gloria0113
2025-03-27 15:26#340 Akiraurlpayload_delivery 10 credits@marioxxx
2025-03-27 15:19#339 Akiraip:portbotnet_cc 10 credits@marioxxx
2025-03-21 08:03#338 TitanStealersha256_hashpayload 10 creditsAnonymous
2025-03-17 17:34#337 Lumma Stealerip:portbotnet_cc 10 creditsAnonymous
2025-03-17 11:26#336 SkinnyBoydomainbotnet_cc 10 credits@Ker4es
2025-03-17 11:26#335 Sliverdomainbotnet_cc 10 credits@Ker4es
2025-03-17 11:26#334 Sliverurlbotnet_cc 10 credits@Ker4es
2025-03-13 10:59#333 MedusaLockersha256_hashpayload 10 credits@soccccc
2025-03-06 06:59#332 Miraiip:portbotnet_cc 10 creditsAnonymous
2025-03-04 08:00#331 Kuiperdomainbotnet_cc 10 credits@xkorva03
2025-02-27 16:33#330 Copybaraurlbotnet_cc 10 credits@badwater
2025-02-20 12:11#329 ScareCrowurlpayload_delivery 10 credits@runchtokyo
2025-02-19 12:39#328 Cobalt Strikeip:portpayload_delivery 10 creditsAnonymous
2025-02-17 10:49#327 BADBOXip:portbotnet_cc 10 creditsAnonymous
2025-02-17 00:50#326 LockBitsha256_hashpayload 10 creditsAnonymous
2025-02-15 09:34#325 ActionSpymd5_hashpayload 10 creditsAnonymous
2025-02-12 10:23#324 FastCashurlpayload_delivery 10 credits@JFK_
2025-02-07 07:57#323 Lumma Stealerdomaincc_skimming 10 credits@akiemkaza
2025-02-07 07:39#322 Vidardomaincc_skimming 10 credits@akiemkaza
2025-01-31 21:17#321 Lumma Stealerdomaincc_skimming 10 creditsAnonymous
2025-01-31 16:04#320 FastCaship:portbotnet_cc 10 creditsAnonymous
2025-01-30 14:41#319 888 RATsha256_hashpayload 10 creditsAnonymous
2025-01-26 21:33#318 Emotetip:portpayload_delivery 10 credits@BrunoSantana
2025-01-14 03:54#317 AbstractEmumd5_hashpayload 15 creditsAnonymous
2025-01-14 03:54#316 AbstractEmuip:portbotnet_cc 15 creditsAnonymous
2025-01-14 03:53#315 888 RATip:portbotnet_cc 15 credits@chrischang
2025-01-13 23:59#314 Nexusip:portbotnet_cc 10 creditsAnonymous
2025-01-09 15:09#313 Rookdomainbotnet_cc 10 credits@DataSOC
2025-01-08 11:03#312 Yassoip:portbotnet_cc 10 credits@h0c1n3
2025-01-03 20:43#311 DCRaturlbotnet_cc 50 credits@Folz
2025-01-03 05:03#310 RedLine Stealerip:portbotnet_cc 10 credits@Sreehari3011
2024-12-26 07:43#309 ZXShellsha1_hashpayload 10 creditsAnonymous
2024-12-17 06:15#308 Lilithurlbotnet_cc 10 creditsAnonymous
2024-12-13 04:11#307 GootLoaderip:portpayload_delivery 10 creditsAnonymous
2024-12-12 15:16#306 888 RATdomaincc_skimming 10 credits@ziad128
2024-12-10 09:49#305 FAKEUPDATESdomainbotnet_cc 10 creditsAnonymous
2024-12-06 20:40#304 Remcosip:portbotnet_cc 10 credits@justromeo
2022-08-10 09:25#113 Cobalt Strikedomainpayload_delivery 10 creditsAnonymous
2022-08-10 09:25#112 Cobalt Strikeip:portbotnet_cc 10 creditsAnonymous