Introduction

The MRTI feed allows clients to integrate Outpost24’s Cyber Threat Intelligence into their own solutions.

The use of this API will add Cyber Threat Intelligence to your existing data, addressing a comprehensive range of cyber threats including compromised URLs, domains, IPs, etc. to turn global threat data into predictive, actionable intelligence specifically for your enterprise and the unique threats it faces. Our powerful networks of specialized search engines constantly scour the web for up-to-the-minute data and delivers real-time actionable information.

The MRTI feed resources are available through HTTP. They return JSON responses. We currently have the following main resources available through our API:

• Bot Ip: Data related to an infected IP that is part of a botnet. Outpost24 provides three different Bot IPs feeds: the first one contains IPs that were infected by Point of Sale botnets (POS), The second feed includes IPs infected by botnets that are not POS, and the last one gathers all the data together.
• Crimeservers: Data related to a server that has been used to perform some kind of malicious activity.
• Malware: Data related to malwares that have been recently analyzed by our system.