Abuse.ch
Unifies threat intelligence fetching from multiple abuse.ch platforms into a single, queryable server.
About
Abuse.ch provides a centralized server for gathering and correlating threat intelligence from various abuse.ch platforms, including MalwareBazaar, URLhaus, and ThreatFox. It offers a unified API similar to VirusTotal for querying comprehensive reports on files, URLs, IP addresses, and domains. Leveraging Pydantic schemas for data validation, the tool streamlines the process of accessing and integrating critical security data, serving as a unified API layer where individual platforms might lack one.
Key Features
- Provides a unified API for querying threat intelligence across MalwareBazaar, URLhaus, and ThreatFox
- Offers VT-like reporting for files, URLs, IPs, and domains
- Uses Pydantic schemas for robust data validation and serialization
- Enables direct correlation of intelligence from disparate abuse.ch sources
- 1 GitHub stars
Use Cases
- Automating security analysis of suspicious indicators (IPs, domains, URLs, file hashes)
- Gathering and correlating threat intelligence from multiple abuse.ch sources
- Integrating abuse.ch threat data into security tools and workflows
Sponsored