ElastiFlow NetIntel is a threat intelligence feed and IP enrichment service that provides contextual information about malicious and suspicious network actors. It allows users to search IP addresses to retrieve associated threat data, including threat types, autonomous system (AS) information, domains, and geographic attribution. The service aggregates and surfaces threat intelligence categorized by country of origin, covering entities such as the United States, China, Germany, India, and others. It currently tracks over 58,000 IP addresses across 43+ threat types. NetIntel is designed to complement network traffic visibility by enriching observed traffic with threat context, helping security and network teams distinguish actual threats from noise. The tool supports three primary use cases: - Network protection: identifying malicious actors communicating with internal infrastructure - Threat detection: surfacing relevant, contextual threats based on actual network traffic - Security incident response: providing enriched data to support faster and more informed response actions NetIntel is positioned as a companion to ElastiFlow's broader network observability platform, which is used by network and security teams for traffic analysis and visibility.