threat-feeds

Here are 17 public repositories matching this topic...

InQuest / ThreatIngestor

Extract and aggregate threat intelligence.

ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform

Updated Jan 31, 2024
Python

NewBee119 / Ti_Collector

Star

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

iocs threat-intelligence dns-sniffer threat-article-crawler threat-feeds

Updated Oct 28, 2017
Python

wolffcatskyy / crowdsec-blocklist-import

Star

10-20x more blocks for your CrowdSec bouncers — 120k+ IPs from 36 free threat feeds

docker security firewall blocklist cybersecurity threat-intelligence threat-feeds crowdsec ip-blocklist tor-exit-nodes

Updated Mar 25, 2026
Python

bobby-tablez / TTP-Threat-Feeds

Star

Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨

automation ai threat-hunting threat-intelligence threat-feeds threat-research llm llms threat-reports

Updated Apr 5, 2026
Python

alex-ilgayev / secfeed

Star

AI-Powered Security Feed in Real Time

golang rss security ai openai devsecops threat-intelligence threat-feeds llm ollama security-feeds

Updated Mar 22, 2025
Go

rstcloud / rstcloud-import2misp

Star

Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.

misp misp-galaxy threat-intelligence threat-feeds threat-research threat-reports

Updated Jun 16, 2025
Python

PKHarsimran / SwiftIOC-Automated-Threat-Intelligence-Collector

Star

Automated threat intelligence collector built with Python and GitHub Actions — fetches recent IOCs from open sources, normalizes and enriches them (IP, URL, hash, CVE), and publishes ready-to-use feeds in CSV, JSON, and STIX formats.

python ioc json csv splunk cybersecurity infosec siem misp stix threat-intelligence threat-feeds opencti github-actions cortex-xdr

Updated Apr 20, 2026
Python

martinkubecka / C2Hunter

Star

🦅 Use fingerprinting to actively hunt for Command and Control servers on Shodan. Process threat feeds from Abuse.ch services to create a local database of C2 servers.

security shodan threat-hunting fingerprinting blueteam threat-intelligence c2 command-and-control threat-feeds

Updated May 12, 2023
Python

rynmon / malScraper

Star

Scrapes a list of Payload Domains, IOC's & C2 IPs from from various feeds for easy blacklisting.

malware-analysis security-tools threat-intelligence security-research blue-team threat-feeds domain-blocklist malware-traffic-analysis ioc-collection c2-detection malware-tracking

Updated Jan 25, 2026
Rust

vincentkoc / autosecure

Sponsor

Star

Threat-feed IP block automation for Linux and macOS firewalls (iptables, nftables, pf) with cron-ready updates, dry-run previews, and package releases.

security firewall iptables hardening network-security nftables linux-security devsecops threat-intelligence macos-security ip-blocking threat-feeds ip-blocklist

Updated Apr 16, 2026
Shell

choupit0 / FortiRule

Star

Easily manage blocking any external threat across all your FortiGate firewalls within a minute.

debian fortigate fortinet security-tools threat-feeds

Updated Aug 15, 2025
JavaScript

juergen2025sys / NETSHIELD

Star

Automated IPv4 threat intelligence: combined blacklist from 100+ feeds, confidence scoring, ASN reputation, geo-tagged per country. Updated every 3h.

security firewall blocklist ipv4 cybersecurity opnsense ip geoip pfsense fortigate threat-intelligence abuseipdb threat-feeds github-actions ipblacklist ip-blocklist threat-feed blocklist-aggregator

Updated Apr 20, 2026
Python

nwiecz / C2IntelFeedsFGT

Star

Automatically created C2 Feeds for Fortigate

fortigate threat-intelligence threat-feeds fortigate-automation

Updated Apr 20, 2026

QIO1984 / CYBRWIRE

Star

A retro-styled terminal dashboard in Python that pulls live cybersecurity threat feeds — CVEs, APT reports, zero-day alerts, ransomware, malicious IPs, and more. Features a scrolling ticker, color-coded severity, threat heat metrics, and API Tools. Fun, informative, and visually awesome — serious intel without taking itself too seriously.