MalwareWorld: aggregated threat intelligence

MalwareWorld aggregates 80+ active public blacklists into a unified dataset of suspicious IPs, domains and ranges.

Loading data…

Search

Exact host lookup (IP / domain / range). URL input is supported.

Note MalwareWorld only aggregates data from external blacklists and cannot remove entries directly. All data is downloaded from third-party sources. To remove an IP or domain, please contact the organization maintaining the original list where it appears.

Maps

Aggregated IP locations

Month Category

Blacklist stats

Most active sources and host share by category.

Top blacklists by matches

Loading…

Hosts by category

Loading…

Source freshness Loading…

Sorted by the most recent upstream update. GitHub commit dates and HTTP metadata are preferred; otherwise MalwareWorld tracks content-hash changes between runs.

Source Category Last update Last checked Status Matches

Downloads

All source blacklists Suspicious IPs Suspicious domains Suspicious ranges Bad reputation domains Bad reputation IPs Bad reputation ranges Malware domains Malware IPs Malware ranges Known attacker domains Known attacker IPs Known attacker ranges Spammer domains Spammer IPs Spammer ranges Phishing domains Phishing IPs Phishing ranges Cryptocurrency domains Cryptocurrency IPs Cryptocurrency ranges Hide source domains Hide source IPs Hide source ranges Adware domains Adware IPs Adware ranges DGA domains DGA IPs DGA ranges Run stats (JSON)