Live Honeypot Feed Active

Threat Intelligence API

Real-time IoCs, malicious IPs, malware hashes, and attacker TTPs — sourced from production honeypot infrastructure and delivered via STIX 2.1.

💰 View Pricing 📖 API Docs 🚀 Free Beta
—
Threat IoCs
—
Attack Events
—
Attacker IPs
—
Malware Samples
Capabilities

What You Get

🔴 Real-Time Data

Live threat intelligence from active honeypot infrastructure capturing real-world attacks as they happen across 6 sensors.

🔗 STIX 2.1 Compatible

Industry-standard format for seamless integration with SIEM, SOAR, Sentinel, Splunk, and CrowdStrike.

🎯 MITRE ATT&CK Mapping

Every attack automatically tagged with relevant MITRE ATT&CK techniques for contextual analysis and triage.

📦 Multiple Formats

Export data in JSON, STIX 2.1, CSV, or TAXII for maximum compatibility with your existing security stack.

🚀 Get Your Free API Key

No credit card required. 1,000 lookups/day, forever.

Need more? Upgrade for higher limits

💰 View Pricing
{footer_html()}