Public intelligence

Feeds and indicators

Browse researcher-owned sources by publisher, coverage and latest content update, or inspect their public indicators. Each entity keeps the evidence of its source.

Publish a maintained feed

Honeypot infrastructure watch

Coverage: IOCPublisher: @hookgab

A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.

honeypothistorical
FREE Searchable
499,400 indicators Latest content: Oct 17, 2026
Open feed

CTIDAO community threat intel

Coverage: IOCPublisher: UQCjRzK8…rVJHr1

A community-maintained historical collection of malware and malicious infrastructure indicators contributed to CTIDAO.

malwarelegacyhistorical
FREE Searchable
333 indicators Latest content: Feb 23, 2026
Open feed