Threat Intel Scrany (TIS)

Centralized collection, management, and secure export of threat intelligence indicators (IPv4, IPv6, FQDN, URL).

TIS pulls indicators from configured feeds, deduplicates and stores them, and re-exports them in formats your routers, firewalls, or DNS servers already understand — plain, hosts, and BIND/Unbound-ready rpz zone files. Currently tracking approximately … indicators.

Quick links

Documentation Client scripts API browser

Pull a list

curl "https://tis.cap-net.cz/api/v1/export?format=plain&access_token=YOUR_TOKEN"

Or use the helper script

Get tis-pull.sh as described in the client scripts documentation, then:

./tis-pull.sh --token YOUR_TOKEN --format hosts --destination /etc/hosts.blocked