Build software better, together

juergen2025sys / NETSHIELD

Automated IPv4 threat intelligence: combined blacklist from 100+ feeds with confidence scoring. Updated every 3h.

Updated Oct 26, 2026
Python

austin-lai / Collection-of-AzureSentinel-Playbook

Collection of Azure Sentinel - Playbook | Logic App (Template)

playbook ingestion threat-intel logic-app azure-sentinel azure-sentinel-playbook azure-logic-app azure-sentinel-playbook-template playbook-template threat-feed

Updated May 13, 2022

webamon-org / Daily-Threat-Brief

Star

Your daily summary of tracked changes for Webamon campaigns and emerging clusters seen across the web.

threat-analysis threat-intelligence threat-intel dtb threat-feeds threat-detection threat-feed webamon daily-threat-brief

Updated Oct 25, 2026

ipanalytics / BlackRoute

Star

Security intelligence pipeline for aggregating hostile IP infrastructure, abuse feeds, anonymizers, and attack telemetry into runtime lookup databases.

botnet tor cybersecurity geoip maxmind asn cidr network-security threat-intelligence vpn-detection mmdb ip-reputation security-research threat-detection ip-blocklist threat-feed abuse-intelligence ipintel reputation-database

Updated Sep 12, 2026
Go

gorkemgun / sgb-blocklist

Star

Hourly plain-text mirror of the T.C. Siber Güvenlik Başkanlığı malicious address lists, split by type and category.

blocklist phishing malicious-domains threat-intelligence indicators-of-compromise dns-blocklist malicious-ip threat-feed malicious-urls

Updated Oct 26, 2026
Python

steponeerror / ip-radar-blocklist

Star

Daily tiered IP blocklist exported from the ip-radar 41-source consensus engine — top 100/500/1000/5000/10000, CSV + ipset-ready txt, atomic manifest

Updated Oct 26, 2026
Python

Tagoletta / SiberGuvenlikBaskanligi-API

Sponsor

Star

Unofficial, automatically updated threat-intelligence blocklists sourced from Türkiye’s public cybersecurity API. Firewall-ready domain, URL, IPv4 and IPv6 feeds.

ioc firewall blocklist pi-hole cybersecurity opnsense pfsense malicious-domains turkey turkiye threat-intelligence url-blocklist domain-blocklist ip-blocklist malicious-ips threat-feed miktrotik

Updated Oct 26, 2026
Python

ThreatCull downloads public blocklists, drops duplicates, private ranges and your own infrastructure, scores each indicator by how many independent sources list it, and serves the result to your firewalls, DNS servers and SIEM.

whitelist firewall blocklist domains self-hosted threatintel firewall-rules threat-intelligence pihole pihole-blocklists threat-intel threat-feeds awsome-list piholeblocklist blocklist-converter threatresearch threat-feed blocklist-aggregator

Updated Oct 24, 2026
Python

Jam0k / Public-Feeds-IOCs

Star

Free, no-auth threat intelligence feeds: validated IOC blocklists (domains, IPs, hashes), threat clusters and CVE data, snapshotted daily. TLP:CLEAR — git history shows when an indicator first appeared. From ThreatCluster.

ioc blocklist dataset cybersecurity cve cti threat-intelligence threat-feed

Updated Oct 25, 2026

k0jir0900 / nexus

Star

SOC enrichment feeds: daily IPv4/IPv6 External Dynamic Lists (EDL) of public NTP pool servers and commercial VPN infrastructure. Plain text, one entry per line, ready for firewall lists, IDS datasets and SIEM lookups.

Updated Oct 26, 2026

0xDanielLopez / phishunt-feed

Star

Free real-time phishing-domains threat feed (CC0 1.0), mirrored from phishunt.io. TXT/JSON/CSV + API + MCP.

ioc osint blocklist phishing cybersecurity cc0 threat-intelligence threat-feed phishing-feed

Updated Oct 26, 2026
Python

usethisname1419 / ThreatFeed

Sponsor

Star

Scrolling threat feed

intelligence python3 feed cybersecurity threat-hunting security-tools threat-intelligence malware-detection threat-intel cyber-threat-intelligence cybersec threat-monitor threat-data threat-feed

Updated Mar 25, 2025
Python

taruo / fortigate-adguard-filter

Star

AdGuard DNS filter converted to a FortiGate domain threat feed, updated daily by GitHub Actions

blocklist adblock fortigate fortinet adguard github-actions dns-filtering adguard-dns threat-feed

Updated Oct 25, 2026
C#

Tagoletta / Fed0gaT

Sponsor

Star

Automated CTI aggregator producing validated, deduplicated and firewall-ready IP, hash and URL threat feeds every hour.

ioc firewall cybersecurity siem cti threat-intelligence edr indicators-of-compromise url-blocklist ip-blocklist threat-intelligence-feeds threat-feed malware-hashes fed0gat

Updated Oct 26, 2026
Python

fabs-net / swarmnoise

Star

GreyNoise Project Swarm — Sensor Data Collector to Threat Feed

security ioc firewall project threat feed swarm threat-intelligence greynoise ip-blocklist threat-feed

Updated May 15, 2026
Python

mhearsh / threat-intel-feed

Star

Curated high-confidence IOC feed (IP, domain, URL, file hashes), 0-100 scored, every 2h. Ready-to-import for Palo Alto, FortiGate, Check Point, Cisco, Defender, CrowdStrike, SentinelOne, Splunk, Sentinel, STIX 2.1.