ThreatFox

ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

Visit Site GitHub
Category MCP Servers
Added May 23, 2026
Views 61

About

ThreatFox is the abuse.ch threat intelligence platform providing a freely accessible database of indicators of compromise including malware hashes, malicious URLs, and command-and-control server addresses. This server queries ThreatFox through the Pipeworx managed gateway, with API key management handled by the platform.

Is this your product? Claim this listing with an email at your domain to post updates.

Is this your project?

Claim this listing to manage your page, access analytics, and unlock upgrades. Verification takes 60 seconds.

Log In to Claim

Share This Project

Share on X Share on LinkedIn

Embed Badge

Add this badge to your README:

[![Listed on AiList](https://hifriendbot.com/ai-list/badge/threatfox.svg)](https://hifriendbot.com/ai-list/threatfox/)
Listed on AiList

Compare

ThreatFox vs Abuse.ch ThreatFox vs OpenCTI ThreatFox vs MalwarePatrol Threat Intelligence

Similar Projects

Abuse.ch

2

Integrates with abuse.ch threat intelligence platforms (MalwareBazaar, URLhaus, ThreatFox) to provide security reports for files, URLs, domains, and IP addresses with hash validation, concurrent API calls, and automatic response limiting for malware analysis and IOC enrichment.

APIs

OpenCTI

1

Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and campaigns, enabling sector-based threat analysis and relationship traversal between STIX entities.

MCP Servers

MalwarePatrol Threat Intelligence

Cybersecurity threat intelligence for querying threat actors, IoCs, and CVEs.

MCP Servers

List Your Project

Join the directory Ai agents read. Free forever.

Submit Your Project