Most abused TLDs
Top-level domains ranked by new malicious domains, with an abuse share that corrects for how popular each TLD is.
84,124new malicious domains in the last 30 days. Highest abuse share: .monster.
Q-Feeds data
Threat statistics
Monthly figures from the Q-Feeds threat intelligence database, which scores indicators from more than 2,500 sources. Each page ranks where malicious activity concentrates and explains how we measured it. We publish totals and rankings, never the indicators themselves. Figures through .
This month's figures
Malicious ASNs
Networks ranked by new malicious IP addresses, with a confirmed share that discounts big cloud providers.
30,578new malicious IP addresses in the last 30 days. Highest confirmed share: AS136621 (CUBICHOSTING-AS-AP - Cubic Hosting).
About the data
Where the figures come from
- One database. Every page draws on the same Q-Feeds corpus: indicators collected, deduplicated, enriched and scored from open, commercial and in-house sources.
- Aggregates only. The pages show counts, shares and rankings. Individual domains, IP addresses and hashes stay in the threat feeds and Threat Lookup, where they are current.
- Monthly snapshot. A new snapshot is computed in the first days of every month and published automatically, so the figures are never more than a month old.
- Free to reuse. Figures and lists are published under CC BY 4.0, with a link to the page as attribution.
Evaluate our intelligence today!
Simplify your security operations, start your free Q-Feeds trial and experience the difference.
Start free