cybersecurity:osint:docs_intel-feeds

Table of Contents

📡 Intelligence Feeds

📡 Intelligence Feeds

Community Threat Feeds

ThreatFox — Community-driven IOC feed
URLhaus — Malicious URL tracker
Feodo Tracker — Banking trojan command and control trackers
MalwareBazaar — Malware sample and hash sharing platform
AlienVault OTX — Open threat exchange community

Commercial and Specialized Feeds

Spamhaus — Blocklists for IPs, domains, and spam sources
AbuseIPDB — Community-reported IP abuse database
CIRCL OSINT Feeds — Public OSINT-based threat feeds from Luxembourg
Abuse.ch SSLBL — SSL certificate blocklist for malicious infrastructure
PhishTank — Community phishing URL repository (overlaps phishing but also feed source)
OpenPhish — Automated phishing intelligence feed

Attack Surface and Internet Scanning

GreyNoise — Contextual intelligence for internet scanners
Shodan Alerts — Monitor exposure of internet-connected assets
Censys Search and Data — Enriched dataset of hosts and certificates