Download Feeds
This API endpoint allows you to download feed files containing threat intelligence data.
Endpoint: https://apis.threatwinds.com/api/feeds/v1/download/list/{level}/{type}/{name}
Parameters
Headers
| Parameter | Type | Required | Description |
|---|---|---|---|
| Authorization | string | Optional* | Bearer token obtained from an active session |
| api-key | string | Optional* | Your API key |
| api-secret | string | Optional* | Your API secret |
Path Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| level | string | Yes | Accuracy level of the feed. Possible values: “level1”, “level2”, “level3” |
| type | string | Yes | Type of feed. Possible values: “accumulative”, “daily” |
| name | string | Yes | Name of the feed (e.g., “ip”, “md5”, etc.) |
Note: You must use either the Authorization header OR the API key and secret combination.
Request
To download a feed file, use a GET request, for example:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/list/level1/accumulative/ip' \
-H 'accept: application/gzip' \
-H 'Authorization: Bearer fq6JoEFTsxiXAl1cVdPDnK4emIQCwaUBfq9JoEFTsxhXAl1cVxPDnK4emIQCwaUB'
Or using API key and secret:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/list/level1/accumulative/ip' \
-H 'accept: application/gzip' \
-H 'api-key: your-api-key' \
-H 'api-secret: your-api-secret'
Response
A successful response will return the feed file content in one of the following formats:
| Feed Type | Content Type | File Extension | Description |
|---|---|---|---|
| accumulative | application/gzip | .tar.gz | Compressed tar archive of complete feed data |
| daily | application/x-ndjson | .ndjson | Newline-delimited JSON of daily updates |
The response format is automatically determined based on the type parameter in the URL path.
Error Response Headers
For responses with status codes other than 200 and 202, the following headers are included:
| Header | Description |
|---|---|
| x-error | Contains a description of the error that occurred |
| x-error-id | Contains a unique identifier for the error for support |
Error Codes
| Status Code | Description | Possible Cause |
|---|---|---|
| 404 | Not Found | File not found |
| 400 | Bad Request | Invalid request parameters or malformed JSON |
| 500 | Internal Server Error | Server-side error; please contact support if persistent |
Checksum File
You can download the checksum file (bases.sum) which contains MD5 hashes for all available feed files. This allows you to verify the integrity of downloaded feeds.
Endpoint: https://apis.threatwinds.com/api/feeds/v1/download/checksum
Parameters
Headers
| Parameter | Type | Required | Description |
|---|---|---|---|
| Authorization | string | Optional* | Bearer token obtained from an active session |
| api-key | string | Optional* | Your API key |
| api-secret | string | Optional* | Your API secret |
Note: You must use either the Authorization header OR the API key and secret combination.
Request
To download the checksum file, use a GET request:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/checksum' \
-H 'accept: text/plain' \
-H 'Authorization: Bearer fq6JoEFTsxiXAl1cVdPDnK4emIQCwaUBfq9JoEFTsxhXAl1cVxPDnK4emIQCwaUB'
Or using API key and secret:
curl -X 'GET' \
'https://apis.threatwinds.com/api/feeds/v1/download/checksum' \
-H 'accept: text/plain' \
-H 'api-key: your-api-key' \
-H 'api-secret: your-api-secret'
Response
A successful response will return the bases.sum file as plain text, containing MD5 checksums for all feed files.
Example Response:
d41d8cd98f00b204e9800998ecf8427e ip_level1.list.tar.gz
5d41402abc4b2a76b9719d911017c592 md5_level1.list.tar.gz
7d793037a0760186574b0282f2f435e7 domain_level2.list.tar.gz
...
Each line contains an MD5 hash followed by the corresponding feed filename.