The IP address feed is a continuous real-time stream of JSON-encoded structures that contains information about each IP address analyzed by VirusTotal. Those JSON-encoded structures are put together in batches, with a new batch generated every minute. The batch consists of a text file containing one JSON structure per line.
Special privileges required
IP feeds endpoints are only available to users with a IP feeds license. Contact us for more information.