Download Feeds
This API endpoint allows you to download feed files containing threat intelligence data.
Endpoint: https://apis.threatwinds.com/api/feeds/v1/download/list/{level}/{type}/{name}
Parameters
Headers
| Parameter | Type | Required | Description |
|---|---|---|---|
| Authorization | string | Optional | Bearer token obtained from an active session |
| api-key | string | Optional | Your API key |
| api-secret | string | Optional | Your API secret |
Path Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| level | string | Yes | Accuracy level of the feed. Possible values: “level1”, “level2”, “level3” |
| type | string | Yes | Type of feed. Possible values: “accumulative”, “daily” |
| name | string | Yes | Name of the feed (e.g., “ip”, “md5”, etc.) |
Note: Path parameter values (
level,type) are case-sensitive.
Request
To download a feed file, use a GET request, for example:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/list/level1/accumulative/ip' \
-H 'accept: application/gzip' \
-H 'Authorization: Bearer YOUR_BEARER_TOKEN'
Or using API key and secret:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/list/level1/accumulative/ip' \
-H 'accept: application/gzip' \
-H 'api-key: your-api-key' \
-H 'api-secret: your-api-secret'
Response
A successful response will return the feed file content in one of the following formats:
| Feed Type | Content Type | File Extension | Description |
|---|---|---|---|
| accumulative | application/gzip | .tar.gz | Compressed tar archive of complete feed data |
| daily | application/x-ndjson | .ndjson | Newline-delimited JSON of daily updates |
The response format is automatically determined based on the type parameter in the URL path.
Error Response Headers
For responses with status codes other than 200, the following headers are included:
| Header | Description |
|---|---|
| x-error | Contains a description of the error that occurred |
| x-error-id | Contains a unique identifier for the error for support |
Error Codes
| Status Code | Description | Possible Cause |
|---|---|---|
| 404 | Not Found | File not found |
| 400 | Bad Request | Invalid request parameters |
| 429 | Too Many Requests | Rate limit exceeded; wait and retry |
| 500 | Internal Server Error | Server-side error; please contact support if persistent |
Checksum File
You can download the checksum file (bases.sum) which contains MD5 hashes for all available feed files. This allows you to verify the integrity of downloaded feeds.
Endpoint: https://apis.threatwinds.com/api/feeds/v1/download/checksum
Parameters
Headers
| Parameter | Type | Required | Description |
|---|---|---|---|
| Authorization | string | Optional | Bearer token obtained from an active session |
| api-key | string | Optional | Your API key |
| api-secret | string | Optional | Your API secret |
Request
To download the checksum file, use a GET request:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/checksum' \
-H 'accept: text/plain' \
-H 'Authorization: Bearer YOUR_BEARER_TOKEN'
Or using API key and secret:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/checksum' \
-H 'accept: text/plain' \
-H 'api-key: your-api-key' \
-H 'api-secret: your-api-secret'
Response
A successful response will return the bases.sum file as plain text, containing MD5 checksums for all feed files.
Example Response:
d41d8cd98f00b204e9800998ecf8427e ip_level1.list.tar.gz
5d41402abc4b2a76b9719d911017c592 md5_level1.list.tar.gz
7d793037a0760186574b0282f2f435e7 domain_level2.list.tar.gz
...
Each line contains an MD5 hash followed by the corresponding feed filename.
Error Codes
| Status Code | Description | Possible Cause |
|---|---|---|
| 404 | Not Found | Checksum file not found |
| 429 | Too Many Requests | Rate limit exceeded; wait and retry |
| 500 | Internal Server Error | Server-side error; please contact support if persistent |