{
  "x402Version": 2,
  "id": 8938,
  "slug": "8938",
  "resource": "https://ot-intel-api.onrender.com/ot/ioc",
  "description": "IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "10000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "queryParams": {
            "type": "ip",
            "value": "185.220.101.45"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "abuse_confidence_score": 87,
            "country_code": "DE",
            "data_sources": [
              "AlienVault-OTX",
              "AbuseIPDB",
              "DeepSeek-CTI-Analysis"
            ],
            "freshness": "2025-05-22T10:00:00.000Z",
            "ics_association": {
              "associated_with_ics_campaign": true,
              "campaign_context": "IP observed in VOLTZITE reconnaissance activity against US electric utilities.",
              "confidence": "high",
              "ics_tags_found": [
                "ics",
                "scada",
                "modbus"
              ],
              "known_threat_actor": "VOLTZITE"
            },
            "ioc": {
              "type": "ip",
              "value": "185.220.101.45"
            },
            "isp": "Tor Project",
            "pulse_count": 50,
            "reputation": -2,
            "tor_node": true,
            "total_abuse_reports": 142
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "type": {
                    "description": "IOC type: ip or domain",
                    "enum": [
                      "ip",
                      "domain"
                    ],
                    "type": "string"
                  },
                  "value": {
                    "description": "The IOC: IP address or domain name",
                    "type": "string"
                  }
                },
                "required": [
                  "value",
                  "type"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "ot-intel-api.onrender.com",
  "lastUpdated": "2026-09-12T17:10:15.904Z",
  "quality": {
    "calls30d": 3,
    "uniquePayers30d": 3,
    "lastCalledAt": "2026-09-12T17:10:15.638Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "ot-intel-api.onrender.com",
    "manifest_name": "ot-intel-api.onrender.com",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}