abuse.ch Hunting alternatives
6 tools in the catalogue cover the same ground as abuse.ch Hunting and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- BI.ZONE Threat IntelligencefreemiumThreat portal with strong coverage of groups active in the post-Soviet space, an area where Western sources are thin.
- Feodo TrackerfreeTracks command-and-control servers of banking trojans such as Emotet, Dridex and TrickBot.
- GitGuardian Public MonitoringfreemiumWatches public repositories for credentials leaked by an organisation's developers. Catches keys published by mistake, often within minutes.
- GreyNoisefreemiumThreat intelligence platform that classifies IP addresses scanning the internet as malicious, benign, or noise using a global sensor network. 50 free daily API calls.
- GTFOBinsfreeCurated list of Unix binaries that can bypass local security restrictions in misconfigured systems.
- LeakIXfreemiumSearch engine for exposed services and leaked data: indexes misconfigured databases, open directories, exposed files.
abuse.ch Hunting
Threat Intelligence
Also written abuse ch Hunting, abuse.chHunting
Cross-search over the abuse.ch feeds: malicious URLs, samples, botnet command servers and SSL fingerprints, from one of the most cited non-profit sources.
RECOMMENDED USE
Searching several trusted malware feeds at once
Information
Video tutorials
Learn to use abuse.ch Hunting
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
URLhaus (abuse.ch)
Threat IntelligenceCommunity-driven database of malicious URLs used for malware distribution. Searchable by URL, domain, IP, CIDR, or hash. Integrates with threat feeds and blocklists.
Malware Patrol
Threat IntelligenceThreat feeds on malicious domains, ransomware and command-and-control servers, with a free tier.
OPENHUNTING.IO Threat Library
Threat IntelligenceOpen library of threat actors, malware families and campaigns, cross-referenced and sourced. A free alternative to commercial platforms.
Lazarusholic
Threat IntelligenceSpecialised archive on North Korean operations: samples, indicators and reports gathered in one place, where the material is usually scattered.
User reviews
Be the first to leave a review