intel-feeds.md

📡 Intelligence Feeds

← Back to Index

Community Threat Feeds

• ThreatFox — Community-driven IOC feed
• URLhaus — Malicious URL tracker
• Feodo Tracker — Banking trojan command and control trackers
• MalwareBazaar — Malware sample and hash sharing platform
• AlienVault OTX — Open threat exchange community

Commercial and Specialized Feeds

• Spamhaus — Blocklists for IPs, domains, and spam sources
• AbuseIPDB — Community-reported IP abuse database
• CIRCL OSINT Feeds — Public OSINT-based threat feeds from Luxembourg
• Abuse.ch SSLBL — SSL certificate blocklist for malicious infrastructure
• PhishTank — Community phishing URL repository (overlaps phishing but also feed source)
• OpenPhish — Automated phishing intelligence feed

Attack Surface and Internet Scanning

• GreyNoise — Contextual intelligence for internet scanners
• Shodan Alerts — Monitor exposure of internet-connected assets
• Censys Search and Data — Enriched dataset of hosts and certificates