IOC data feed (public)
Download indicators of compromise (IOCs) to protect your site and network from malware, phishing, attackers and spam.
All feeds are plain text files generated every 12 hours and limited in size. Please don't fetch them more often than every 12 hours.
- Web-spam IPs, last 3 months nicta_ip_webspam_3m.txt
Most active web-spam IPs for the last 3 months. Spam-active IPs take part not only in spamming but also in other attacks: fraud, phishing, DDoS, SQL and PHP injections, etc.
- Top 500 web-spam IPs nicta_ip_webspam_top500.txt
The 500 most active web-spam IPs. Spam-active IPs take part not only in spamming but also in other attacks: fraud, phishing, DDoS, SQL and PHP injections, etc.
- Web-spam e-mails, last 3 months nicta_mail_webspam_3m.txt
Most active web-spam e-mail addresses for the last 3 months.
- Recent malware URLs nicta_url_malware_recent.txt
Plain text feed of the latest malware and dangerous URLs.
Complete feeds
For our partners we offer malware samples, URL, IP and other data feeds updated in real time. For more information please contact us.