IOC Search

The Indicator of Compromise (IOC) Search allows users to search any IP address or domain to see if it is a malicious actor found in any of our threatER-provided Threat or Block feeds. If available, information about country and ASN are returned as well.

To perform a search:

1. Select the spyglass icon in the top navigation bar
2. Enter an IP address or domain
3. Select the search icon in the modal

General Information on the IP or Domain, including country or ASN origin will display. History on any Threat or Block feeds provided by threatER will be included and the section can be expanded to view List History details.

Users can also perform the search by selecting the hyperlinked IP address or domain within a threatER-provided feed.