Find Threat-actor profiles from an IP address

GreyNoise

Internet scanner reputation intelligence

AbuseIPDB

a community IP reputation database for checking and reporting abusive interne

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Anomali ThreatStream

Anomali TIP and feed management platform

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cortex

an observable analysis and active response engine used with TheHive and secur

CrowdSec CTI

Crowdsourced IP reputation and threat intelligence platform

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

Group-IB Threat Intelligence

Russian-region-focused TI platform

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

Kaspersky Threat Intelligence Portal

Kaspersky free IOC reputation portal

MISP

an open-source threat intelligence platform for sharing indicators, events, g

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

Mandiant Advantage

Mandiant TI and APT analytics platform

OpenCTI

an open-source cyber threat intelligence platform for modeling entities, rela

OpenPhish

a phishing intelligence service that detects and publishes active phishing in

PhishTank

a community phishing verification service for checking and submitting suspect

Pulsedive

a threat intelligence platform for enriching indicators, domains, IPs, and UR

QiAnXin TI

QiAnXin Chinese TI portal

Recorded Future

Recorded Future TI graph and risk platform

TheHive

a scalable security incident response platform for case management and analys

ThreatBook

Chinese commercial TI platform

ThreatConnect

ThreatConnect TIP and SOAR platform

ThreatFox

an abuse.ch platform for sharing malware indicators and command-and-control i

ThreatMiner

Free TI aggregator for IOC enrichment

ThreatQ

ThreatQuotient TIP and investigation platform

Yeti

an intelligence platform for organizing observables, indicators, entities, an

abuse.ch Hunting

Cross-platform IOC hunting over MalwareBazaar, ThreatFox, URLhaus and YARAify

pygreynoise

Python client and CLI for GreyNoise IP noise and RIOT lookups