Nodes specified in https://www.talosintelligence.com/documents/ip-blacklist will be marked as Potentially Malicious Nodes. These nodes have a red blur (refer to the graphical Pureinsight Doc).
...
Upon hover, the node
ipin the tooltip pop up will say it’s a “Potentially Malicious Node”, which will link to the Talos lookup for that particular node.In the Packet List, the Malicious node IP column field will display as a link, and clicking the IP will open to the Talos lookup for that node.
...