Submit a single IOC

Submit an IOC to the shared threat intelligence database.

The gateway classifies the IOC into a malware family, compresses metadata, and deduplicates atomically. All subscribed agents receive the new/updated IOC instantly via WebSocket.

Include X-Agent-Id header to track per-agent contribution stats and apply per-agent daily quota (default: 5,000 IOCs/day).

Rate limit: 60 requests/minute per IP.

post/v1/ioc

Request

  • Base URL: https://nullcone.ai/api
  • URL: https://nullcone.ai/api/v1/ioc
  • Auth: none declared

Request body

ioc_typestring required
valuestring required
severityinteger
confidenceinteger
family_hintstring nullable
contextstring
tagsstring[]
sourcestring

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.