The Emerging Threat List (ETL) includes IP addresses of mail servers involved in active ransomware, malware, or other email threat campaigns.