Threat Feeds Real-time threat intelligence
Continuously updated threat intelligence feeds. Access malicious IPs, domains, URLs, and file hashes via API, streaming, or download.
No credit card required · Free API key
Recent threat Feed Statistics
Real numbers from our global sensor network, updated every 5 minutes.
Current data sample
500 000 000
Total threats
200 000 000
Malicious domains
250 000 000
Malicious IPs
594+
Data sources
No credit card required · Instant access to full datasets
0min
Update Cycle
Indexed
Indicators
Configured
Sources
0yr
History
Key features. Everything you need to protect your infrastructure and users.
Real-Time Updates
New threats propagated within 5-15 minutes.
Multiple Formats
JSON, CSV, and plain text downloads.
Streaming Access
WebSocket and SSE for live updates.
Global Coverage
Threats from all regions and sectors.
STIX/TAXII Support
Standard threat intel formats for TIP integration (Enterprise).
Custom Filters
Filter by category, time, and type.
Use cases. How security teams use this tool.
SIEM Enrichment
Feed data directly into your SIEM.
Firewall Rules
Auto-update blocklists with fresh IOCs.
Threat Hunting
Search for IOCs in your environment.
Security Research
Analyze threat trends and patterns.
Frequently asked questions.
How often are feeds updated?
What delivery methods are available?
Can I filter the feeds?
What is the data retention?
Related tools.
Ready to get started?
Join thousands of security teams using isMalicious to protect their infrastructure.
No credit card required · Free API key