82trust / 100

Ot Ioc

by ot-intel-api.onrender.com in Company & people data

x402 APIPassing, checked 1 h ago

IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns.

GET https://ot-intel-api.onrender.com/ot/ioc

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
268 ms typical, 268 ms slowest 5%
Last check
1 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://ot-intel-api.onrender.com/ot/ioc?type=ip&value=185.220.101.45"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fot-intel-api.onrender.com%2Fot%2Fioc
const res = await pay("https://ot-intel-api.onrender.com/ot/ioc?type=ip&value=185.220.101.45");
console.log(await res.json());

Example input

{
  "type": "ip",
  "value": "185.220.101.45"
}

Example output

{
  "abuse_confidence_score": 87,
  "country_code": "DE",
  "data_sources": [
    "AlienVault-OTX",
    "AbuseIPDB",
    "DeepSeek-CTI-Analysis"
  ],
  "freshness": "2025-05-22T10:00:00.000Z",
  "ics_association": {
    "associated_with_ics_campaign": true,
    "campaign_context": "IP observed in VOLTZITE reconnaissance activity against US electric utilities.",
    "confidence": "high",
    "ics_tags_found": [
      "ics",
      "scada",
      "modbus"
    ],
    "known_threat_actor": "VOLTZITE"
  },
  "ioc": {
    "type": "ip",
    "value": "185.220.101.45"
  },
  "isp": "Tor Project",
  "pulse_count": 50,
  "reputation": -2,
  "tor_node": true,
  "total_abuse_reports": 142
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
1 h agoPassed402268 ms$0.01
5 h agoPassed402638 ms$0.01
10 h agoPassed402246 ms$0.01