v21 Third Party Feeds

I think this would be interesting for everyone to see what (free) feeds may be useful here... But we have to be careful because posting links may lead to account blocks for spamming here in forum... so just add the https to the links (I hope this will work now)

I found this lists in a Sophos KB-Article:

    rules.emergingthreats.net/blockrules/compromised-ips.txt
    check.torproject.org/torbulkexitlist

URLs

    osint.digitalside.it/Threat-Intel/lists/latesturls.txt
    urlhaus.abuse.ch/downloads/text/

Domains

    raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/master/disposable_email_blocklist.conf
    osint.digitalside.it/Threat-Intel/lists/latestdomains.txt

regards

Thanks Steve

Added

Check out:  blocklist.de/en/export.html

Note: All IP addresses that have attacked one of our customers/servers in the last 48 hours.

I have now:

hi m8ey-au  how did you get these added in I have had a look on their websites but cannot figure them out? I have added Crowdsec and greynoise.

hi m8ey-au  how did you get these added in I have had a look on their websites but cannot figure them out? I have added Crowdsec and greynoise.

found the link at Third-party threat feeds

Hey Charlie Dodd 

I can give you the ones I have on a DM if it helps. All are free, one needs an account and API key.

Thank you m8ey-au I've managed to get them added via the link I posted in the above comment