From IOC Lists to Firewall Blocks: Building a Threat Feed Pipeline Without a Paid Subscription — Part 1

pratik.dabhi.4u@gmail.com (Pratik) — Mon, 29 Jun 2026 20:00:00 +0530

This started with a simple thought: we already trust community intelligence during investigation, so why are we not using it before the traffic reaches us?

No paid threat-intel subscription. No heavy SIEM licensing story. No fancy black-box appliance.

Firewall on Pratik’s Localhost

From IOC Lists to Firewall Blocks: Building a Threat Feed Pipeline Without a Paid Subscription — Part 1