Skip to content

IP reputation seen by many servers, without exposing any of them.

When several organizations see the same IP attacking, it earns a reputation. Yours only takes part if the account owner agrees, and can leave whenever they want.

opted-in organizations

  • Organization Acontributed
  • Organization Bcontributed
  • Organization Ccontributed
  • Organization Dcontributed
  • atalince sensors

lookup

203.0.113.42

No network data

Below the threshold, the answer is the same whether an indicator exists or not.

High confidence

Sources: 3 to 9 · last seen on Nov 10, 2026

What goes into the network, and what never leaves.

Shared, after opting in

  • Attack source IP
  • Scenario (for example, SSH brute force)
  • Severity
  • Detection time

Events from before opting in are not sent.

Never leaves the organization

  • Log lines
  • Users
  • Hostnames
  • Your servers' names and IPs
  • The organization's identity
  • Port scans, floods and integrity events

Rules designed so nothing leaks sideways.

Owner opt-in
Off by default. Acceptance records the text version, who accepted and when.
Threshold of 3
A lookup only shows network data when at least three other organizations contributed. Sources appear in ranges (3 to 9, 10 or more) and dates only by day.
Revoking
Leaving deletes, in the same transaction, your organization's signals and aggregated contributions.
Granularity
IPv4 is evaluated per /32 and IPv6 per /64. Signals are kept for 90 days.
False positive
An IP marked as a false positive or allowed stops counting your contribution.
Lookups
50 reputation lookups per day on Dev and 500 on Pro.

Platform honeypots on three continents.

Sincro8 runs sensors in Europe, the United States and Brazil. They feed the network, but on their own they never give High confidence: an independent organization must have seen the same IP.

Platform sensor · Illustration with fictional data. Natural Earth.

Preventive blocking based on reputation doesn't exist yet. When it comes, it will be a separate opt-in, after weeks of observation.

Founders program

Use atalince from the start.

Pro features for up to 3 servers, free of charge, for 12 months. Every application is reviewed by the team.