CompromiseLens Threat Intelligence

IP Address	Risk Score	Country	Network / ISP	Threat Type	First Seen	Times Seen	Status
Loading threat feed...

API Access

Integrate CompromiseLens threat intelligence directly into your SIEM, firewall, or security tools.

🆓

Free

100 IOCs/day, 24h delayed feed, JSON export

$0/month

⚡

Pro

Full real-time feed, 10,000 IOCs/day, STIX/TAXII, webhooks

$29/month

🏢

Enterprise

Unlimited IOCs, bulk download, SIEM push, custom feeds, SLA

$199/month

Quick Start

# Get threat indicators

curl -H "X-API-Key: YOUR_KEY" \

https://api.compromiselens.com/threat-intel/indicators

# Check a specific IP

curl -H "X-API-Key: YOUR_KEY" \

https://api.compromiselens.com/threat-intel/indicators/1.2.3.4

# Get summary stats

curl -H "X-API-Key: YOUR_KEY" \

https://api.compromiselens.com/threat-intel/summary

Use Cases & Documentation

Integrate CompromiseLens Threat Intelligence into your security stack

🌐

IP Intelligence

Check any IP against our database of known malicious actors. Get abuse scores, geolocation, ASN data, and full threat history.

GET /threat-intel/indicators/{ip}

📥

Bulk IOC Feed

Download our full IOC feed for import into your SIEM, firewall, or TIP. Updated hourly with enriched metadata.

GET /threat-intel/indicators

🔥

Firewall Blocklist

Auto-update your firewall with high-confidence malicious IPs. Compatible with pfSense, FortiGate, Cisco, nginx, and UFW.

GET /threat-intel/indicators?min_score=80

📊

Attack Analytics

Aggregate attack statistics by country, ASN, threat type, and time period. Understand global attack patterns.

GET /threat-intel/by-country

🛡️

SIEM Integration

Push threat indicators to Splunk, Microsoft Sentinel, QRadar, or any SIEM via webhook or direct API polling.

Enterprise plan

⚡

Real-Time Webhooks

Receive instant push notifications when new high-confidence threats are detected. POST to your endpoint within seconds.

Enterprise plan

API Reference

Method	Endpoint	Description	Auth
GET	/threat-intel/summary	Summary stats	Public
GET	/threat-intel/public/indicators	Preview feed (10 IOCs)	Public
GET	/threat-intel/indicators	Full IOC feed with filters	API Key
GET	/threat-intel/indicators/{ip}	Lookup specific IP	API Key
GET	/threat-intel/top-attackers	Top IPs by frequency	API Key
GET	/threat-intel/by-country	Attack stats by country	API Key

🔑 Authentication

CompromiseLens Threat Intelligence uses its own independent account system. Create a free account to get your API key. CompromiseLens dashboard subscribers get automatic access — sign in with your dashboard credentials or create a new TI account.

curl -H "Authorization: Bearer YOUR_TOKEN" https://api.compromiselens.com/threat-intel/indicators

Real-World Threat IntelligenceFrom Active Attack Data

API Access

Free

Pro

Enterprise

Quick Start

Use Cases & Documentation

IP Intelligence

Bulk IOC Feed

Firewall Blocklist

Attack Analytics

SIEM Integration

Real-Time Webhooks

API Reference

Real-World Threat Intelligence
From Active Attack Data