I am looking for updated lists of IP addresses that belong to malware's C&C, botnets, malicious scanners, or other sort of malicious activities.

Is there any public database of malicious IP addresses?

closed as off-topic by Ghedipunk, Xander, Conor Mancone, ThoriumBR, Anders Jul 4 at 8:48

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Why do you want this? Such a database, if made public, would quickly invalidate itself and become uselessly unreliable, if it even was reliable to begin with (which isn't likely). Your question smells like an XY problem. Please clarify your end goal. – Nic Hartley Jul 3 at 19:24
  • different goals, see how they are distributed geographically, add them to my blacklist, ... – MOH Jul 3 at 19:25
  • Here's one. <s>malwaredomainlist.com/</s><br> malwaredomainlist.com/mdl.php Last update: 2017 – user211258 Jul 3 at 19:46
  • Thanks, it hasn't been updated since 2017. – MOH Jul 3 at 19:58
  • You need a supplier such as google or microsoft to deliver up-to-date lists of these domains, ip's and so forth – user211258 Jul 3 at 20:06

There are several freely available threat intelligence feed around.

See e.g. https://threatfeeds.io/

Do note that such lists are ephemeral in nature. Which IPs are currently being used for malicious activity is ever changing, and the information generally decreases in value as soon as it is openly published. For this reason, most high-quality threat feeds come from organizations that either sell them, or only share them with trusted partners.

Not the answer you're looking for? Browse other questions tagged or ask your own question.