NovaSense Blacklist API

NovaSense provides a REST API for obtaining lists and checking IP addresses. We recommend using the full list on a firewall or ADC, or using the RBL service. The API is available for subscribers and allows on-demand lookups and list downloads of the complete NovaSense threat feeds.

Paid Service

The Blacklist API is a paid service. Once you are subscribed you can use all of the functionality below.

IP Lookup

curl -X POST -d "ip=180.71.58.82&api_token=YOUR_ACCOUNT_TOKEN" https://novasense-threats.com/api/lookup

Safe Response:
{
    "block":false,
    "msg":"IP address was not found in any NovaSense list."
}
Blocked Response:
{
    "block":true,
    "msg":"IP address was found in 2 NovaSense list(s)."
}

List Download

List categories: abusers|malware|threats|botnets
List times: 7d|1d|SENSE

You can download the lists directly via the download URL:
curl -L https://novasense-threats.com/api/download/paid/{category}/{time}?api_token=YOUR_ACCOUNT_TOKEN&score=0
Notice the -L to follow redirects.

The SENSE list is the latest full live NovaSense feed for the best protection with minimal false positives.

You may optionally add an &score=X parameter to the query string to only return results with a score higher than X.

Custom Scored Download

You may request results ABOVE a certain score using the score parameter.

For example:
curl -L https://novasense-threats.com/api/download/custom/{category}/{time}?api_token=YOUR_ACCOUNT_TOKEN&score=40
Notice the -L to follow redirects.

Custom Format and Enriched List Exports

You may add threat intelligence enrichment to any list requested above by using the custom URL slug. The custom API also allows limiting the list by score, you may optionally add an &score=X parameter to the query string to only return results with a score higher than X.
The available enriched data options are: country|city|country_iso|continent|latitude|longitude|isp|organization|hosted_by|category|pro_http|probe_ssh|probe_powered|probe_hostname|probe_http|score

You may also request any list from above in JSON, CSV or XML format by adding &format=X and changing to the customFormat URL slug.

For example
curl -L https://novasense-threats.com/api/download/customFormat/{category}/{time}?api_token=YOUR_ACCOUNT_TOKEN&score=40&format=csv&fields=country|city
Notice the -L to follow redirects.