Skip to main content
Question

Need a complete list of TOR IP's which are being used in GCTI

  • July 6, 2026
  • 2 replies
  • 33 views

fazilfa
Forum|alt.badge.img+2


I am looking for complete list of TOR IP’s from GCTI feed.

when i try to run a search for gloabl_context it is giving me only 50 for any time period
 

 

2 replies

kentphelps
Community Manager
Forum|alt.badge.img+12
  • Community Manager
  • July 6, 2026

You are running into the 50 row limit here.  According to the Google Security Operations documentation on Conduct entity context searches, specifically the Limitations section:

  • "Global context data: There's a limit of 50 rows for sensitive global context data, such as UPPERCASE_VT_PROTECTED, MANDIANT_ACTIVE_BREACH_IOC, MANDIANT_FUSION_IOC, and VIRUS_TOTAL_CONNECTIONS."

Rob_P
Staff
Forum|alt.badge.img+10
  • Staff
  • July 6, 2026

This post here may help you, but as Kent pointed out, we don't allow customers to pull this entire list from SecOps, there is a limit in the platform that we will only show you 50.