Threat intelligence IPs/URL to be searched against poxy logs

[pdafale_lgiasup]

I am working on a specific requirement where outgoing proxy connections towards Threat list IPs/URLs need to be alerted. I need to to map dest_ip and url fields to Threat lists.
Can someone please help me with the query for the same.

Regards,
Prathamesh

[to4kawa]

hi, @pdafale_lgiasuper
Is Threat list IPs/URLs CSV? what's column and detail?