Public access
Please use the following URLs to download our publicly available Threat Data Feeds:

https://fulfilment.threatint.network/tdf?feed=bad-ips

https://fulfilment.threatint.network/tdf?feed=bad-networks

https://fulfilment.threatint.network/tdf?feed=bad-domains

https://fulfilment.threatint.network/tdf?feed=bad-fqdns

https://fulfilment.threatint.network/tdf?feed=bad-urls

https://fulfilment.threatint.network/tdf?feed=anonymiser-ips

The public lists shown above contain about 1% of all Threat Data Feeds we provide to subscribers.

Subscribers
If you have a valid subscription, the URLs differ slightly. The basic format is:

https://fulfilment.threatint.network/tdf?email=<email address>&subscription=<subscription id>&feed=<feed>

Kindly use the <email address> used when subscribing, the <subscription id> from your welcome email

<feed> is one of the following:
bad-ips
bad-networks
bad-domains
bad-fqdns
bad-urls
anonymiser-ips

Notice:
If your email address contains characters like + , you may need to encode the address.
Please see
RFC#3986, section 2.1 ("percent encoding")
developer.mozilla.org/en-US/docs/Glossary/percent-encoding
developers.google.com/maps/url-encoding
for details.
Was this article helpful?
Cancel
Thank you!