Small collection of tools to help speed up malware and CTI analysis.
-
Updated
Nov 28, 2025 - Go
Small collection of tools to help speed up malware and CTI analysis.
AbuseAI, AI-powered abuse management platform for hosting companies and ISPs.
This Python script fetches a list of malicious IP addresses from Abuse CH's IP blocklist and dynamically adds them to the Windows firewall rules, blocking both outgoing and incoming connections to those IPs.
Python CLI tool that checks domains, IPs, and URLs against Abuse.ch and AlienVault OTX threat intelligence feeds
Open-source CTI feed aggregator — 45K+ IOCs from 6 free feeds, zero dependencies, no API keys. Built by the AIguard team (aiguardai.com)
AbuseGuard AI: Intelligent Abuse Management Platform for Hosting & ISPs 2026
Cyber threat intelligence pipeline: abuse.ch feeds → Bruin → BigQuery → Streamlit dashboard. How fast do malicious URLs get taken down, and what malware is behind them?
Complete toolkit for abuse.ch APIs — URLhaus, MalwareBazaar, ThreatFox, Feodo Tracker
Fetches 1–7 days of ThreatFox IOCs, displays color-coded results to terminal, and exports to CSV
JavaScript/TypeScript client for abuse.ch APIs — the largest open-source malware threat intelligence platform. 1.5M+ malware samples, 3M+ malicious URLs, IOC sharing.
Agregador y normalizador de IOCs de threat intelligence (URLhaus, ThreatFox) sobre SQLite
To associate your repository with the abuse-ch topic, visit your repo's landing page and select "manage topics."