Popular

Threat Feeds

Real-time threat intelligence

Continuously updated threat intelligence feeds. Access malicious IPs, domains, URLs, and file hashes via API, streaming, or download.

Get AccessAPI Docs
5min
Update Cycle
500M+
IOCs
50+
Sources
2yr
History

Key Features

Everything you need to protect your infrastructure and users

Real-Time Updates

New threats propagated within 5-15 minutes.

Multiple Formats

JSON, CSV, STIX, and plain text.

Streaming Access

WebSocket and SSE for live updates.

Global Coverage

Threats from all regions and sectors.

Confidence Scoring

Each IOC includes confidence levels.

Custom Filters

Filter by category, time, and type.

Use Cases

How security teams use this tool

SIEM Enrichment

Feed data directly into your SIEM.

Firewall Rules

Auto-update blocklists with fresh IOCs.

Threat Hunting

Search for IOCs in your environment.

Security Research

Analyze threat trends and patterns.

Frequently Asked Questions

How often are feeds updated?
Feeds are updated continuously with new IOCs propagated every 5-15 minutes. Critical threats are added within minutes.
What delivery methods are available?
REST API, streaming (WebSocket/SSE), STIX/TAXII, and downloadable files in JSON, CSV, and text formats.
Can I filter the feeds?
Yes, you can filter by threat category, confidence level, time range, and specific IOC types.
What is the data retention?
We retain historical data for 2 years. Enterprise plans have extended retention options.

Related Tools

Blocklists

Ready-to-use lists

STIX/TAXII

Standard formats

Streaming API

Live feeds

Ready to Get Started?

Join thousands of security teams using isMalicious to protect their infrastructure.

Start Free TrialContact Sales