Data Partners

Emerging Threats Compromised IPs

This open source block list consists of hosts that are known to be compromised by bots, phishing sites, etc, or known to be spewing hostile traffic. These are significantly infected and hostile hosts. Learn More

Google Integration with ThreatBlockr

An automated allowed list consisting of known good IPs for Google services like G Suite. Learn More

ThreatSTOP

Our ThreatSTOP integration enables mutual customers to automatically integrate IP and domain indicators from ThreatSTOP into the ThreatBlockr platform. Learn More

Feodo Tracker

Feodo Tracker is an open source block list representing botnet C&C servers associated with the Feodo malware family (Dridex, Emotet/Heodo). Learn More

Mailchimp Integration with ThreatBlockr

An automated allowed list consisting of known good IPs for Mailchimp’s marketing platform service. Learn More

TruStar

Our ThreatSTOP integration enables mutual customers to automatically integrate IP and domain indicators from ThreatSTOP into the ThreatBlockr platform. Learn More

Bambenek Consulting

Well-Fed Threat Intelligence is produced by Bambenek Consulting, LTD. Bambenek is a leading cybersecurity threat intelligence and data science firm led by industry veteran John Bambenek. Bambenek’s Well-Fed Intelligence products are used by thousands of organizations all over the world to better protect themselves from cyber threats. Learn More

Open DBL Tor List

This list consists of IPs designated as Tor exit nodes. While the Tor network is not malicious itself, bad actors can use it for malicious activities. Learn More

Microsoft Integration with ThreatBlockr

An automated allowed list consisting of known good IPs for Microsoft services. This includes four service areas: Common, Exchange, SharePoint, and Skype. Learn More

Gravwell

ThreatBlockr and Gravwell collaborated to develop the ThreatBlockr Kit for Gravwell. The ThreatBlockr Kit for Gravwell automates the process of integrating ThreatBlockr log data into the Gravwell platform and provides pre-built dashboards that visualize log activity from one or more ThreatBlockr appliances. Learn More

Cyjax

Cyjax’s mission is to be the preeminent supplier of threat intelligence for enterprises, SMEs and governments around the world. Established in 2012, Cyjax has built a reputation for producing world-class cyber threat intelligence across a broad range of sectors. Learn More

Talos

Provided by Cisco Talos Intelligence Group, the IP Blacklist is automatically updated every 15 minutes and contains a list of known malicious network threats that are flagged on all Cisco Security Products. Learn More