Intelligence / External Corroboration

External Corroboration

Per-feed coverage statistics: how many threat actors each external OSINT source has corroborated, and the total provenance records tracked.

Each threat actor is checked against independent external feeds. When a feed confirms an IP we've observed, that match is recorded as a corroboration — a citable, timestamped link between our observation and an external source with its own collection methodology.

Tracking 8 active feeds corroborating against 48,211 observed threat actors
Blocklist.de All IPs
blocklist.de
TLP:CLEAR
License: Free (as-is)
Actors matched: 26,847
Corroboration records: 26,847
Last sync: 30 minutes ago
CINS Army Bad Reputation IP List
Sentinel IPS / CINS
TLP:CLEAR
License: Free (community)
Actors matched: 8,687
Corroboration records: 8,687
Last sync: 30 minutes ago
DShield Top Attackers (SANS ISC)
SANS Technology Institute, Internet Storm Center
TLP:CLEAR
License: Free w/ attribution (no resale)
Actors matched: 20,976
Corroboration records: 20,976
Last sync: 11 hours ago
Feodo Tracker Botnet C2 IP Blocklist
abuse.ch
TLP:CLEAR
License: CC0
Actors matched: 0
Corroboration records: 0
Last sync: 31 minutes ago
Spamhaus ASN Don't Route Or Peer List
The Spamhaus Project
TLP:CLEAR
License: Free w/ attribution
Actors matched: 1,533
Corroboration records: 1,756
Last sync: 11 hours ago
Spamhaus Don't Route Or Peer List
The Spamhaus Project
TLP:CLEAR
License: Free w/ attribution
Actors matched: 1,404
Corroboration records: 1,404
Last sync: 31 minutes ago
Tor Exit Relay Addresses
The Tor Project
TLP:CLEAR
License: CC0
Actors matched: 187
Corroboration records: 187
Last sync: 31 minutes ago
X4BNet VPN/Proxy IP List
X4BNet
TLP:CLEAR
License: MIT
Actors matched: 321
Corroboration records: 335
Last sync: 11 hours ago
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}