IP addresses

The IP address feed is a continuous real-time stream of JSON-encoded structures that contains information about each IP address analyzed by VirusTotal. Those JSON-encoded structures are put together in batches, with a new batch generated every minute. The batch consists of a text file containing one JSON structure per line.