Threat Intelligence Platforms for Botnet

IPQS IP Address Block List

IP address blocklist service for identifying and blocking fraudulent IPs

IPQualityScore IP Risk Score API

Real-time IP fraud detection and risk scoring API for identifying malicious IPs

IPQS Proxy Detection Database

Database for detecting proxies, VPNs, Tor nodes, and high-risk IP addresses

SecurityZones SURBL BV

Domain reputation threat intelligence feeds for malicious domain detection

NETSCOUT ATLAS Intelligence Feed (AIF)

AI-powered threat intelligence feed for automated DDoS protection

GreyNoise Block: Fully configurable, real-time blocklists

Detects compromised assets via outbound traffic to GreyNoise sensors & malicious IPs

Cyble Cyber Threat Intelligence Platform

AI-driven threat intelligence platform for threat detection and response

ZeroFox Threat Intelligence Feeds

Threat intelligence feeds for SOC teams from social, dark web & botnet sources

Hale

Hale is a modular botnet command and control monitoring tool that tracks C&C server communications across multiple protocols with web-based analysis interface and collaborative research capabilities.

SSLBL - SSL Blacklist

A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.