Threat Intelligence Feed
FeodoTracker · URLhaus · MalwareBazaar · Shodan InternetDB · OTX feeds | Shadow313 NEXUS
35
Active IOCs
4
TI Sources
12h
Sync Interval
SQLite
Local Cache
Active IOCs35 indicators
185.220.101.42IPCobalt Strike C2 — FeodoTrackerCRITICAL
91.207.175.33IPLazarus Group C2 — OTXHIGH
malware.example.comDOMAINPhishing domain — URLhausHIGH
d41d8cd98f00b204...HASHEmotet dropper — MalwareBazaarCRITICAL
Intelligence Sources
FeodoTracker (Abuse.ch)
Botnet C2 tracker — Emotet, Dridex, TrickBot, QakBot, BazarLoader. Updated every 5 minutes. 847 active C2 servers tracked.
URLhaus (Abuse.ch)
Malware distribution URLs — phishing, drive-by downloads, malware hosting. 2.3M URLs in database. Real-time feed.
MalwareBazaar (Abuse.ch)
Malware sample repository — SHA256 hashes, YARA rules, file metadata. 1.2M samples. API rate limit: 100 req/min.
Shodan InternetDB
IP reputation and open port data — CVEs, tags, hostnames. No API key required for basic lookups. 800M IPs indexed.