Malware IOC feedFree

ThreatFox

Malware IOC feed by abuse.ch.

Community-driven feed of indicators associated with malware families, botnets, command-and-control servers, and campaigns.

Threat IntelligenceFreeOfficial site listedCommunity voting
Visit site

Overview

What ThreatFox is good for

Community-driven feed of indicators associated with malware families, botnets, command-and-control servers, and campaigns.

Built for threat intelligence and malware analysis workflows.

Useful when evaluating malware ioc feed capabilities.

Helpful for ioc, malware, abusech investigations and triage.

Evaluation guide

Quick decision notes

Best fit

Threat intelligence analysts enriching indicators, checking reputation, and pivoting from weak signals into stronger context.

Check before using

Confirm current pricing, data limits, account requirements, and licensing on the official site before production use.

Typical inputs

#ioc · #malware · #abusech

Discovery path

Use the categories, source links, and similar tools below to compare it with nearby options.

Use cases

Where it fits

Threat intelligence analysts enriching indicators, checking reputation, and pivoting from weak signals into stronger context.
Malware researchers triaging samples, hashes, families, strings, and behavioural clues.

Classification

Categories and tags

Threat IntelligenceMalware Analysis#ioc#malware#abusech

Sources

Official links and checks

Use these links to verify current plans, access requirements, documentation, releases, and support status.

Reviews

Community reviews and comments

Community reviews

Comment provider is not configured yet. This placeholder keeps the review area visible while setup is completed.

Suggest a review

FAQ

Questions about ThreatFox

What is ThreatFox used for?

ThreatFox is used for malware ioc feed workflows. Community-driven feed of indicators associated with malware families, botnets, command-and-control servers, and campaigns.

Is ThreatFox free?

The listed pricing model is Free. Check the official site for exact plan limits, usage restrictions, and current commercial terms.

Which teams should evaluate ThreatFox?

It is most relevant to teams working across threat intelligence, malware analysis workflows.

What are alternatives to ThreatFox?

Start with the similar tools section on this page. It highlights tools with overlapping categories, tags, and operational use cases.