Threat Intelligence Feed Directory

A searchable index of security event streams, IoC lists, reputation blocklists, and vulnerability alert feeds — with format, delivery, and licensing details for each.

Total Feeds: 103
Active Categories: 8

Showing 103 of 103 feeds

Abuse.ch Feodo Tracker

Technical specification, format details, update frequency, and integration instructions for Abuse.ch Feodo Tracker (Botnet C2).

Botnet C2 CSV / Plaintext Free/Open Source

Abuse.ch MalwareBazaar

Technical specification, format details, update frequency, and integration instructions for Abuse.ch MalwareBazaar (Malware Hashes).

Malware Hashes JSON API Free/Open Source

Abuse.ch SSLBL

Technical specification, format details, update frequency, and integration instructions for Abuse.ch SSLBL (Botnet C2).

Botnet C2 CSV / Plaintext Free/Open Source

Abuse.ch ThreatFox

Technical specification, format details, update frequency, and integration instructions for Abuse.ch ThreatFox (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Free/Open Source

Abuse.ch URLhaus

Technical specification, format details, update frequency, and integration instructions for Abuse.ch URLhaus (Malicious URLs).

Malicious URLs CSV / Plaintext Free/Open Source

AbuseIPDB

Technical specification, format details, update frequency, and integration instructions for AbuseIPDB (IP Reputation / Blocklist).

IP Reputation / Blocklist JSON API Freemium (API Key)

AlienVault OTX

Technical specification, format details, update frequency, and integration instructions for AlienVault OTX (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Free/Open Source

Anomali ThreatStream

Technical specification, format details, update frequency, and integration instructions for Anomali ThreatStream (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Commercial

ANY.RUN

Technical specification, format details, update frequency, and integration instructions for ANY.RUN (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

APWG eCX

Technical specification, format details, update frequency, and integration instructions for APWG eCX (Phishing URLs).

Phishing URLs JSON API Commercial

Bambenek Consulting C2 Feeds

Technical specification, format details, update frequency, and integration instructions for Bambenek Consulting C2 Feeds (Botnet C2).

Botnet C2 CSV / Plaintext Free/Open Source

Binary Defense Banlist

Technical specification, format details, update frequency, and integration instructions for Binary Defense Banlist (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

blocklist.de

Technical specification, format details, update frequency, and integration instructions for blocklist.de (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

C2IntelFeeds

Technical specification, format details, update frequency, and integration instructions for C2IntelFeeds (Botnet C2).

Botnet C2 CSV / Plaintext Free/Open Source

CINS Army List

Technical specification, format details, update frequency, and integration instructions for CINS Army List (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

CIRCL hashlookup

Technical specification, format details, update frequency, and integration instructions for CIRCL hashlookup (Malware Hashes).

Malware Hashes JSON API Free/Open Source

CIRCL Passive DNS

Technical specification, format details, update frequency, and integration instructions for CIRCL Passive DNS (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

CISA KEV Catalog

Technical specification, format details, update frequency, and integration instructions for CISA KEV Catalog (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

Cisco Talos IP Blacklist

Technical specification, format details, update frequency, and integration instructions for Cisco Talos IP Blacklist (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

ClamAV Signature Database

Technical specification, format details, update frequency, and integration instructions for ClamAV Signature Database (Threat Signatures).

Threat Signatures CSV / Plaintext Free/Open Source

CoinBlockerLists

Technical specification, format details, update frequency, and integration instructions for CoinBlockerLists (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

CrowdSec

Technical specification, format details, update frequency, and integration instructions for CrowdSec (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Free/Open Source

CrowdStrike Falcon Intel

Technical specification, format details, update frequency, and integration instructions for CrowdStrike Falcon Intel (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Commercial

CVE Details

Technical specification, format details, update frequency, and integration instructions for CVE Details (Exploited Vulnerabilities).

Exploited Vulnerabilities CSV / Plaintext Free/Open Source

CVE Program

Technical specification, format details, update frequency, and integration instructions for CVE Program (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

CyberCrime Tracker

Technical specification, format details, update frequency, and integration instructions for CyberCrime Tracker (Botnet C2).

Botnet C2 CSV / Plaintext Free/Open Source

DAN TOR Exit List

Technical specification, format details, update frequency, and integration instructions for DAN TOR Exit List (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Debian Security Tracker

Technical specification, format details, update frequency, and integration instructions for Debian Security Tracker (Exploited Vulnerabilities).

Exploited Vulnerabilities CSV / Plaintext Free/Open Source

Emerging Threats Compromised IPs

Technical specification, format details, update frequency, and integration instructions for Emerging Threats Compromised IPs (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Emerging Threats ET Open

Technical specification, format details, update frequency, and integration instructions for Emerging Threats ET Open (Threat Signatures).

Threat Signatures Suricata / Snort Rules Free/Open Source

ENISA EU Vulnerability Database

Technical specification, format details, update frequency, and integration instructions for ENISA EU Vulnerability Database (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

Exploit-DB

Technical specification, format details, update frequency, and integration instructions for Exploit-DB (Exploited Vulnerabilities).

Exploited Vulnerabilities CSV / Plaintext Free/Open Source

Filescan.io

Technical specification, format details, update frequency, and integration instructions for Filescan.io (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

FireHOL IP Lists

Technical specification, format details, update frequency, and integration instructions for FireHOL IP Lists (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

GitHub Advisory Database

Technical specification, format details, update frequency, and integration instructions for GitHub Advisory Database (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

Google Safe Browsing

Technical specification, format details, update frequency, and integration instructions for Google Safe Browsing (Malicious URLs).

Malicious URLs JSON API Freemium (API Key)

GreenSnow

Technical specification, format details, update frequency, and integration instructions for GreenSnow (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

GreyNoise

Technical specification, format details, update frequency, and integration instructions for GreyNoise (IP Reputation / Blocklist).

IP Reputation / Blocklist JSON API Freemium (API Key)

Hatching Triage

Technical specification, format details, update frequency, and integration instructions for Hatching Triage (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

Hybrid Analysis

Technical specification, format details, update frequency, and integration instructions for Hybrid Analysis (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

IBM X-Force Exchange

Technical specification, format details, update frequency, and integration instructions for IBM X-Force Exchange (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Freemium (API Key)

Intezer Analyze

Technical specification, format details, update frequency, and integration instructions for Intezer Analyze (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

IPsum

Technical specification, format details, update frequency, and integration instructions for IPsum (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

MalShare

Technical specification, format details, update frequency, and integration instructions for MalShare (Malware Hashes).

Malware Hashes JSON API Free/Open Source

Maltiverse

Technical specification, format details, update frequency, and integration instructions for Maltiverse (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

Malware Traffic Analysis

Technical specification, format details, update frequency, and integration instructions for Malware Traffic Analysis (Malicious URLs).

Malicious URLs CSV / Plaintext Free/Open Source

MalwareURL

Technical specification, format details, update frequency, and integration instructions for MalwareURL (Malicious URLs).

Malicious URLs JSON API Commercial

Mandiant Advantage

Technical specification, format details, update frequency, and integration instructions for Mandiant Advantage (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Commercial

Microsoft Defender Threat Intelligence

Technical specification, format details, update frequency, and integration instructions for Microsoft Defender Threat Intelligence (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Commercial

Microsoft Security Response Center

Technical specification, format details, update frequency, and integration instructions for Microsoft Security Response Center (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

MISP Threat Sharing

Technical specification, format details, update frequency, and integration instructions for MISP Threat Sharing (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) MISP Free/Open Source

MISP Warninglists

Technical specification, format details, update frequency, and integration instructions for MISP Warninglists (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) MISP Free/Open Source

Neo23x0 Signature Base

Technical specification, format details, update frequency, and integration instructions for Neo23x0 Signature Base (Threat Signatures).

Threat Signatures YARA Rules Free/Open Source

Nextron VALHALLA

Technical specification, format details, update frequency, and integration instructions for Nextron VALHALLA (Malware Hashes).

Malware Hashes JSON API Freemium (API Key)

NVD CVE Feed

Technical specification, format details, update frequency, and integration instructions for NVD CVE Feed (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

OpenCTI

Technical specification, format details, update frequency, and integration instructions for OpenCTI (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Free/Open Source

OpenPhish

Technical specification, format details, update frequency, and integration instructions for OpenPhish (Phishing URLs).

Phishing URLs CSV / Plaintext Freemium (API Key)

OSV Vulnerability Database

Technical specification, format details, update frequency, and integration instructions for OSV Vulnerability Database (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

Packet Storm

Technical specification, format details, update frequency, and integration instructions for Packet Storm (Exploited Vulnerabilities).

Exploited Vulnerabilities CSV / Plaintext Free/Open Source

Palo Alto Networks Unit 42

Technical specification, format details, update frequency, and integration instructions for Palo Alto Networks Unit 42 (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Commercial

Phishing Army

Technical specification, format details, update frequency, and integration instructions for Phishing Army (Phishing URLs).

Phishing URLs CSV / Plaintext Free/Open Source

PhishStats

Technical specification, format details, update frequency, and integration instructions for PhishStats (Malicious URLs).

Malicious URLs JSON API Free/Open Source

PhishTank

Technical specification, format details, update frequency, and integration instructions for PhishTank (Phishing URLs).

Phishing URLs JSON API Freemium (API Key)

Phishunt.io

Technical specification, format details, update frequency, and integration instructions for Phishunt.io (Phishing URLs).

Phishing URLs JSON API Freemium (API Key)

Project Honey Pot

Technical specification, format details, update frequency, and integration instructions for Project Honey Pot (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Proofpoint ET Pro Rules

Technical specification, format details, update frequency, and integration instructions for Proofpoint ET Pro Rules (Threat Signatures).

Threat Signatures Suricata / Snort Rules Commercial

Pulsedive

Technical specification, format details, update frequency, and integration instructions for Pulsedive (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

Ransomware.live

Technical specification, format details, update frequency, and integration instructions for Ransomware.live (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Free/Open Source

Rapid7 AttackerKB

Technical specification, format details, update frequency, and integration instructions for Rapid7 AttackerKB (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

Recorded Future

Technical specification, format details, update frequency, and integration instructions for Recorded Future (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Commercial

Red Hat CVE Database

Technical specification, format details, update frequency, and integration instructions for Red Hat CVE Database (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

SANS ISC DShield

Technical specification, format details, update frequency, and integration instructions for SANS ISC DShield (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

SANS ISC Suspicious Domains

Technical specification, format details, update frequency, and integration instructions for SANS ISC Suspicious Domains (Malicious URLs).

Malicious URLs CSV / Plaintext Free/Open Source

Scamalytics

Technical specification, format details, update frequency, and integration instructions for Scamalytics (IP Reputation / Blocklist).

IP Reputation / Blocklist JSON API Freemium (API Key)

Shadowserver

Technical specification, format details, update frequency, and integration instructions for Shadowserver (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) CSV / Plaintext Free/Open Source

SigmaHQ

Technical specification, format details, update frequency, and integration instructions for SigmaHQ (Threat Signatures).

Threat Signatures Sigma Rules Free/Open Source

Silent Push

Technical specification, format details, update frequency, and integration instructions for Silent Push (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

Snort Community Rules

Technical specification, format details, update frequency, and integration instructions for Snort Community Rules (Threat Signatures).

Threat Signatures Suricata / Snort Rules Free/Open Source

Snort Talos Rules

Technical specification, format details, update frequency, and integration instructions for Snort Talos Rules (Threat Signatures).

Threat Signatures Suricata / Snort Rules Commercial

Spam404 Blocklist

Technical specification, format details, update frequency, and integration instructions for Spam404 Blocklist (Malicious URLs).

Malicious URLs CSV / Plaintext Free/Open Source

Spamhaus DROP

Technical specification, format details, update frequency, and integration instructions for Spamhaus DROP (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Spamhaus EDROP

Technical specification, format details, update frequency, and integration instructions for Spamhaus EDROP (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Spamhaus PBL

Technical specification, format details, update frequency, and integration instructions for Spamhaus PBL (IP Reputation / Blocklist).

IP Reputation / Blocklist DNSBL / RPZ Freemium (API Key)

Spamhaus SBL

Technical specification, format details, update frequency, and integration instructions for Spamhaus SBL (IP Reputation / Blocklist).

IP Reputation / Blocklist DNSBL / RPZ Freemium (API Key)

Spamhaus XBL

Technical specification, format details, update frequency, and integration instructions for Spamhaus XBL (IP Reputation / Blocklist).

IP Reputation / Blocklist DNSBL / RPZ Freemium (API Key)

Spamhaus ZEN

Technical specification, format details, update frequency, and integration instructions for Spamhaus ZEN (IP Reputation / Blocklist).

IP Reputation / Blocklist DNSBL / RPZ Freemium (API Key)

StopForumSpam

Technical specification, format details, update frequency, and integration instructions for StopForumSpam (IP Reputation / Blocklist).

IP Reputation / Blocklist JSON API Free/Open Source

Team Cymru Fullbogons

Technical specification, format details, update frequency, and integration instructions for Team Cymru Fullbogons (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

ThreatConnect

Technical specification, format details, update frequency, and integration instructions for ThreatConnect (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) STIX/TAXII Commercial

Turris Greylist

Technical specification, format details, update frequency, and integration instructions for Turris Greylist (IP Reputation / Blocklist).

IP Reputation / Blocklist CSV / Plaintext Free/Open Source

Ubuntu Security Notices

Technical specification, format details, update frequency, and integration instructions for Ubuntu Security Notices (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source

UCEPROTECT

Technical specification, format details, update frequency, and integration instructions for UCEPROTECT (IP Reputation / Blocklist).

IP Reputation / Blocklist DNSBL / RPZ Free/Open Source

URLScan.io

Technical specification, format details, update frequency, and integration instructions for URLScan.io (Malicious URLs).

Malicious URLs JSON API Freemium (API Key)

Validin

Technical specification, format details, update frequency, and integration instructions for Validin (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

VirusShare

Technical specification, format details, update frequency, and integration instructions for VirusShare (Malware Hashes).

Malware Hashes CSV / Plaintext Free/Open Source

VirusTotal

Technical specification, format details, update frequency, and integration instructions for VirusTotal (Indicators of Compromise (IoCs)).

Indicators of Compromise (IoCs) JSON API Freemium (API Key)

VulDB

Technical specification, format details, update frequency, and integration instructions for VulDB (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Freemium (API Key)

VulnCheck KEV

Technical specification, format details, update frequency, and integration instructions for VulnCheck KEV (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Freemium (API Key)

Vulners

Technical specification, format details, update frequency, and integration instructions for Vulners (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Freemium (API Key)

vx-underground

Technical specification, format details, update frequency, and integration instructions for vx-underground (Malware Hashes).

Malware Hashes CSV / Plaintext Free/Open Source

WPScan Vulnerability Database

Technical specification, format details, update frequency, and integration instructions for WPScan Vulnerability Database (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Freemium (API Key)

YARAify

Technical specification, format details, update frequency, and integration instructions for YARAify (Threat Signatures).

Threat Signatures YARA Rules Free/Open Source

Zero Day Initiative

Technical specification, format details, update frequency, and integration instructions for Zero Day Initiative (Exploited Vulnerabilities).

Exploited Vulnerabilities JSON API Free/Open Source