Included
- Observes when IPs or prefixes appear in publicly available blocklists or reputation datasets.
- Tracks coarse routing signals such as origin changes and publicly visible RPKI/ROA status.
- Presents events as a record of observations, without claiming causality.
Not included
- No enforcement, blocking, or remediation actions.
- No guarantee of completeness, correctness, or timeliness.
- No attribution of intent, abuse, or ownership beyond public records.