NovaSense Threat Feeds

NovaSense Light Feeds are freely provided by Snapt. You may download the raw IP list, or the gz compressed list. These are typically used to block bad IP addresses on a firewall or ADC. Hosts are broken down into 4 primary categories (with additional categories for certain use cases), which are explained on the Threat Categories page.

Remember that an address can be a single IP, or a subnet, potentially blocking hundreds or thousands of systems.

Threat Feeds

Name Addresses Time period Type Action
novaSense-abusers-7d 35,470 7 days abusers
novaSense-bitcoin-nodes-7d 8,171 7 days
novaSense-botnets-7d 646 7 days botnets
novaSense-crypto-7d 8,709 7 days crypto
novaSense-malware-7d 839 7 days malware
novaSense-proxy-7d 10,526 7 days proxy
novaSense-threats-7d 96,658 7 days threats
novaSense-tor-7d 1,204 7 days tor
novaSense-abusers-1d 14,991 1 day abusers
novaSense-bitcoin-nodes-1d 6,684 1 day
novaSense-botnets-1d 559 1 day botnets
novaSense-crypto-1d 8,709 1 day crypto
novaSense-malware-1d 834 1 day malware
novaSense-proxy-1d 8,640 1 day proxy
novaSense-threats-1d 59,532 1 day threats
novaSense-tor-1d 1,204 1 day tor

Paid Threats

To select lists based on threat score, custom times, and to receive the latest updates and/or full list of threats you must have a subscription. Paid feeds can also be exported as CSV files with data for SIEM platforms like RSA Netwitness.