SOC.OS clusters are made up of entities, which have attributes. This adds extra contextual information about the entity - all entities have a category attribute, which can either be internal or external.
To identify internal entities for your organisation, SOC.OS maintains a list of domains and IP address ranges to match against. During onboarding, we will ask for these organisation-specific identifiers to be applied alongside a number of default IP ranges, listed below. This set of internal identifiers can be updated as appropriate by contacting the SOC.OS support team.
Domains listed must be valid and externally routable, i.e. end with a valid top-level domain
| Identifier | Reason |
10.0.0.0/8 |
Private use IPv4 block |
172.16.0.0/12 |
Private use IPv4 block |
192.168.0.0/16 |
Private use IPv4 block |
127.0.0.1/32 |
Reserved for Loopback |
fc00::/7 |
Reserved for Unique Local Address IPv6 |
fe80::/10 |
Reserved for link-local addressing IPv6 |
169.254.0.0/16 |
Reserved for link-local addressing IPv4 |