← Back to Index

• ThreatFox — Community-driven IOC feed
• URLhaus — Malicious URL tracker
• Feodo Tracker — Banking trojan command and control trackers
• MalwareBazaar — Malware sample and hash sharing platform
• AlienVault OTX — Open threat exchange community

• Spamhaus — Blocklists for IPs, domains, and spam sources
• AbuseIPDB — Community-reported IP abuse database
• CIRCL OSINT Feeds — Public OSINT-based threat feeds from Luxembourg
• Abuse.ch SSLBL — SSL certificate blocklist for malicious infrastructure
• PhishTank — Community phishing URL repository (overlaps phishing but also feed source)
• OpenPhish — Automated phishing intelligence feed

• GreyNoise — Contextual intelligence for internet scanners
• Shodan Alerts — Monitor exposure of internet-connected assets
• Censys Search and Data — Enriched dataset of hosts and certificates