Ics Threat Actor Asn Infrastructure Profiling API
ICS threat actor ASN infrastructure profiling. Pass ?asn=AS215540. Returns ICS actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing kit links (Tycoon2FA, EvilProxy, NakedPages), bulletproof hosting indicators, abuse categories (c2, staging, phishing), and an OT-specific blocking recommendation with WAF rule hint. ASN analysis reveals infrastructure clustering that survives IP/domain rotation — critical for OT defenders tracking persistent actor infrastructure.
Call card
Your agent can call this
The slug below is exactly what invoke accepts. Addendpoint (a route_cards[].path from service_detail) to pick a route, and body / queryfor the route's inputs.
Reliability
Daily probe success ratio, last 30 days. Last probed 2026-08-25 (last probe failed).
Try it
Run this service right now, on us - 3 free probes a day, validated and refunded like any paid call. Query params optional.