In reply to @bushidotoken

When sharing CTI on IPs, Context is Key 🔑 - First/Last Seen (Timestamps!) - Observables (like VPN brand / proxy network) - Hosting Provider (ASN) - DNS Records (relevant domains on the IP) - Purpose and/or Type (C2, Payload Host, Proxy, etc) 🫳🎤