awesome-lists icon indicating copy to clipboard operation
awesome-lists copied to clipboard

more lists to check for possible integration

Open mthcht opened this issue 8 months ago • 3 comments

  • https://api.cybercure.ai/feed/get_hash?type=csv
  • https://api.cybercure.ai/feed/get_ips?type=csv
  • https://api.cybercure.ai/feed/get_url?type=csv
  • https://api.ransomware.live/allcyberattacks
  • https://bazaar.abuse.ch/export/txt/md5/recent/
  • https://bazaar.abuse.ch/export/txt/sha1/recent/
  • https://bazaar.abuse.ch/export/txt/sha256/recent/
  • https://blocklist.greensnow.co/greensnow.txt
  • https://blocklists.0dave.ch/ssh.txt
  • https://cdn.ellio.tech/community-feed
  • https://cinsscore.com/list/ci-badguys.txt
  • https://feeds.ecrimelabs.net/data/metasploit-cve
  • https://feodotracker.abuse.ch/blocklist/
  • https://feodotracker.abuse.ch/downloads/ipblocklist.txt
  • https://github.com/ThreatMon/ThreatMon-Daily-C2-Feeds
  • https://github.com/X4BNet/lists_vpn/blob/main/output/vpn/ipv4.txt
  • https://github.com/carbonblack/active_c2_ioc_public/blob/main/cobaltstrike/actor-specific/cobaltstrike_luckymouse_ta428.csv
  • https://github.com/carbonblack/active_c2_ioc_public/blob/main/cobaltstrike/actor-specific/cobaltstrike_pyxie.csv
  • https://github.com/carbonblack/active_c2_ioc_public/blob/main/shadowpad/shadowpad_202209.tsv
  • https://github.com/drb-ra/C2IntelFeeds/blob/master/feeds/IPC2s-30day.csv
  • https://github.com/drb-ra/C2IntelFeeds/blob/master/feeds/domainC2s.csv
  • https://github.com/drb-ra/C2IntelFeeds/blob/master/feeds/domainC2swithURLwithIP-30day-filter-abused.csv
  • https://github.com/drb-ra/C2IntelFeeds/blob/master/feeds/domainC2swithURLwithIP-30day-filter-abused.csv
  • https://github.com/drb-ra/C2IntelFeeds/blob/master/feeds/unverified/IPC2s.csv
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Brute%20Ratel%20C4%20IPs.txt
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Brute%20Ratel%20C4%20IPs.txt
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Havoc%20C2%20IPs.txt
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Metasploit%20Framework%20C2%20IPs.txt
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Posh%20C2%20IPs.txt
  • https://github.com/montysecurity/C2-Tracker/blob/main/data/Sliver%20C2%20IPs.txt
  • https://hole.cert.pl/domains/domains.csv
  • https://iocfeed.mrlooquer.com/feed.csv
  • https://iocfeed.mrlooquer.com/feed.csv
  • https://lists.blocklist.de/lists/all.txt
  • https://lists.blocklist.de/lists/apache.txt
  • https://lists.blocklist.de/lists/bots.txt
  • https://lists.blocklist.de/lists/bruteforcelogin.txt
  • https://lists.blocklist.de/lists/ftp.txt
  • https://lists.blocklist.de/lists/imap.txt
  • https://lists.blocklist.de/lists/mail.txt
  • https://lists.blocklist.de/lists/ssh.txt
  • https://lists.blocklist.de/lists/strongips.txt
  • https://mirai.security.gives/data/ip_list.txt
  • https://misp.cert.ssi.gouv.fr/feed-misp/hashes.csv
  • https://nocdn.nrd-list.com/0/nrd-list-32-days.txt
  • https://nocdn.threat-list.com/0/domains.txt
  • https://nocdn.threat-list.com/1/domains.txt
  • https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
  • https://osint.digitalside.it/Threat-Intel/lists/latesturls.txt
  • https://osint.digitalside.it/Threat-Intel/lists/latesturls.txt
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/month.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/month.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/month.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/month.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/month.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/today.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/today.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/today.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/today.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/today.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/year.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/year.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/year.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/year.csv
  • https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/year.csv
  • https://raw.githubusercontent.com/aptnotes/data/master/APTnotes.csv
  • https://raw.githubusercontent.com/aptnotes/data/master/APTnotes.csv
  • https://raw.githubusercontent.com/fox-it/cobaltstrike-extraneous-space/master/cobaltstrike-servers.csv
  • https://raw.githubusercontent.com/ktsaou/blocklist-ipsets/master/firehol_level1.netset
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/BurpSuite%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Deimos%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/GoPhish%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Gotham%20Stealer%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Hachcat%20Cracking%20Tool%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Metasploit%20Framework%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Mythic%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/NimPlant%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/PANDA%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/Posh%20C2%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/PowerSploit%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/XMRig%20Monero%20Cryptominer%20IPs.txt
  • https://raw.githubusercontent.com/montysecurity/C2-Tracker/main/data/all.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/1.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/2.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/4.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/5.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/6.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/7.txt
  • https://raw.githubusercontent.com/stamparm/ipsum/master/levels/8.txt
  • https://raw.githubusercontent.com/tsirolnik/spam-domains-list/master/spamdomains.txt
  • https://reputation.alienvault.com/reputation.generic
  • https://rules.emergingthreats.net/blockrules/compromised-ips.txt
  • https://services.nvd.nist.gov/rest/json/cves/2.0
  • https://snort.org/downloads/ip-block-list
  • https://sslbl.abuse.ch/blacklist/ja3_fingerprints.csv
  • https://sslbl.abuse.ch/blacklist/sslblacklist.csv
  • https://sslbl.abuse.ch/blacklist/sslipblacklist.csv
  • https://sslbl.abuse.ch/blacklist/sslipblacklist.txt
  • https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.csv
  • https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.txt
  • https://threatfox.abuse.ch/downloads/hostfile/
  • https://threatfox.abuse.ch/export/csv/md5/recent/
  • https://threatfox.abuse.ch/export/csv/sha256/recent/
  • https://threatfox.abuse.ch/export/csv/urls/recent/
  • https://threatview.io/Downloads/DOMAIN-High-Confidence-Feed.txt
  • https://threatview.io/Downloads/Experimental-IOC-Tweets.txt
  • https://threatview.io/Downloads/High-Confidence-CobaltStrike-C2%20-Feeds.txt
  • https://threatview.io/Downloads/High-Confidence-CobaltStrike-C2%20-Feeds.txt
  • https://threatview.io/Downloads/IP-High-Confidence-Feed.txt
  • https://threatview.io/Downloads/MD5-HASH-ALL.txt
  • https://threatview.io/Downloads/SHA-HASH-FEED.txt
  • https://threatview.io/Downloads/URL-High-Confidence-Feed.txt
  • https://trends.netcraft.com/cybercrime/tlds
  • https://urlabuse.com/public/data/data.txt
  • https://urlabuse.com/public/data/hacked_url.txt
  • https://urlabuse.com/public/data/malware_url.txt
  • https://urlabuse.com/public/data/malware_url.txt
  • https://urlabuse.com/public/data/phishing_url.txt
  • https://urlhaus.abuse.ch/downloads/csv_recent/
  • https://www.binarydefense.com/banlist.txt
  • https://www.botvrij.eu/data/blocklist/blocklist_domain.csv
  • https://www.botvrij.eu/data/feed-osint/hashes.csv
  • https://www.botvrij.eu/data/ioclist.md5
  • https://www.botvrij.eu/data/ioclist.md5
  • https://www.botvrij.eu/data/ioclist.sha256
  • https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
  • https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

mthcht avatar Mar 07 '25 22:03 mthcht

mthcht avatar Mar 07 '25 22:03 mthcht

https://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds

mthcht avatar Mar 31 '25 05:03 mthcht

  • [ ] URLs https://threatfox.abuse.ch/export/csv/urls/full/
  • [ ] IP/PORT https://threatfox.abuse.ch/export/csv/ip-port/full/

mthcht avatar Jul 03 '25 13:07 mthcht