Hosted IP, domain, URL, and hash lists with integrations so you can make the most of your tactical intelligence.
Build security and categorical IP, domain, URL, and hash lists that can be updated whenever you need
Track how indicators are added and removed from your lists over time and by who.
Output as a text file, to Pub/Sub, SQS, GCS, S3, BigQuery, Cisco Umbrella or anywhere else you need to so that your allow/block/categorical lists are most effective!
Publish indicators with comments, URL references, and evidence that support convictions.
Add, delete and search for IPs, URLs, domains, and hashes via our blazingly fast API.
IPs, URLs, domains, and hashes are added via "entries". (python example)
>>> import requests
>>> entry = 'http://buithiyennhi[.]com:80/smt/loki/fre.php ^8e3951897bf8371e6010e3254b99e86d #lokibot -- C2 for lokibot'
>>> api_key = { 'X-API-KEY': 'YOUR_API_KEY' }
>>> requests.post('https://api.ioclists.com/v1/feeds/user/feed', data={ 'entry': entry }, headers=api_key ).json()
Search for entries related to a specific Indicator. (curl example)
$ curl "https://api.ioclists.com/v1/indicator/entries?indicator=1.1.1.1"
{"result": "SUCCESS", "entries": [ ... ] "} "
Learn more in the API Documentation
We're built for the community and fortified for the enterprise.