Access NetWatch Data

Our mission is to make the internet a safer place. We provide several ways to consume our attack data, ranging from automated blocklists for firewalls to deep-dive research access.

Automated Blocklists

Designed for easy integration into firewalls, SIEMs, or local blocklists. These lists contain IP addresses identified as attack sources within specific time windows.

24 Hours
48 Hours
96 Hours

Community API

For power users and sensor hosts. The Community API allows you to pull granular data reported by your own sensors as well as broader aggregated global statistics.

API Documentation

Research & Collaboration

Are you a security researcher or a university student looking for large-scale attack datasets? We support the academic community by providing access to raw data for non-commercial research purposes.

To request access, please reach out to us with a brief description of your project.

Contact Research Team