IOC feed from Telegram CTI channels
IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].
10000 (raw units)
price
8
calls / 30d
7
unique payers
2026-09-14
updated
Provider
telesint-api.onrender.com · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "10000",
"maxTimeoutSeconds": 300
}
]Output schema
{
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"channel": "vxunderground",
"limit": 20,
"min_confidence": 70,
"offset": 0,
"severity": "high",
"since": "2026-05-01T00:00:00Z",
"tag": "ransomware",
"tlp": "WHITE",
"type": "ip"
},
"type": "http"
},
"output": {
"example": {
"endpoint": "ioc",
"items": [
{
"category": "ioc",
"channel": "https://t[.]me/vxunderground",
"confidence": 80,
"id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
"iocs": [
{
"context": "Exploit repository",
"type": "url",
"value": "https://github[.]com/Nightmare-Eclipse/MiniPlasma"
},
{
"context": "C2 callback address",
"type": "ip",
"value": "185.220[.]101.47"
},
{
"context": "Dropper hash",
"type": "sha256",
"value": "e3b0c44298fc1c149afb4c8996fb924..."
}
],
"severity": "high",
"summary": "Windows zero-day exploit released by Nightmare Eclipse threat group targeting government networks",
"tags": [
"zero-day",
"windows",
"government",
"exploit"
],
"tlp": "WHITE",
"ts": "2026-05-27T14:32:00Z",
"ttps": [
{
"id": "T1204.002",
"name": "User Execution: Malicious File",
"tactic": "Execution"
},
{
"id": "T1071.001",
"name": "Application Layer Protocol: Web Protocols",
"tactic": "Command and Control"
}
]
}
],
"limit": 20,
"offset": 0,
"source": "TeleSint",
"total": 42
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"channel": {
"description": "Partial match on source Telegram channel name",
"type": "string"
},
"limit": {
"description": "Page size, default 20, max 100",
"type": "number"
},
"min_confidence": {
"description": "Minimum AI confidence score 0-100",
"type": "number"
},
"offset": {
"description": "Pagination offset, default 0",
"type": "number"
},
"severity": {
"description": "Minimum severity: critical | high | medium | low | info",
"type": "string"
},
"since": {
"description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z",
"type": "string"
},
"tag": {
"description": "Tag keyword filter, e.g. ransomware, cobalt-strike, apt",
"type": "string"
},
"tlp": {
"description": "TLP classification: WHITE | GREEN | AMBER | RED",
"type": "string"
},
"type": {
"description": "IOC type: ip | domain | url | md5 | sha1 | sha256 | cve",
"type": "string"
}
},
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
}Use it
curl
curl "https://telesint-api.onrender.com/ioc" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://telesint-api.onrender.com/ioc");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://telesint-api.onrender.com/ioc")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/5053.json, and this resource appears in /discovery/resources and /discovery/search.