#ipreputation — Public Fediverse posts

legitimate Russian entities taking over prefixes previously used by poor-reputation hosting providers (and inheriting the reputation baggage that comes with them).

📣 Takeaway: Always check the blocklist status of an IP range before leasing or buying it (use 👉 https://check.spamhaus.org). Be wary of IP brokers with a high amount of live SBL listings.

#Threatintel #IPv4 #IPReputation

2/2

💭 Did you know? ⟶ CrowdSec's CTI database holds detailed behavior profiles for over 50 million IPs.

💡 It goes beyond simple reputation feeds and gives your SOC team real context like attack methods, frequency, targets, and geolocation.

You can explore the behavior profiles here: https://app.crowdsec.net/cti

#CTI #IPreputation #cybersecurity #infosec

Thanks to everyone who voted in my "Should I Stop Caring and Let IP Address Reputation Sort Them Out?" https://nxdomain.no/~peter/should_i_stop_caring_and_let_ip_reputation_sort_them_out.html poll.

I have since added the *seriously, folks* note to the exported files and told anybody who wanted out of the big list that I will remove them *on condition that they track down the morons who use that list as anything other than a historical artifact* and *LART* them.

#blocklist #pop3gropers #passwordgropers #cybercrime #ipreputation #security

Should I Stop Caring and Let IP Address Reputation Sort Them Out? https://nxdomain.no/~peter/should_i_stop_caring_and_let_ip_reputation_sort_them_out.html

How long does data on misbehaving hosts on the Internet stay relevant in an IP Address Reputation context?

Link to poll within (on for a week, 4 days left, please *do* vote).

#security #passwordguessing #antispam #sshgropers #pop3gropers #blacklists #blocklists #bruteforcers #spam #cybercrime #ipreputation

(repost for the CET-ish crowd, some still in holiday mode, and with graphics of sorts added)

? hours left to vote:

I was recently contacted by somebody who claimed to have had their traffic blocked because one or more IP addresses in their range was in the "big list" of #pop3gropers mentioned in https://nxdomain.no/~peter/badness_enumerated_by_robots.html, with the entry dating to before they took over that particular range. That, my friends, is *not* the intended use (that's what the sixweeks list is for).

Also see https://nxdomain.no/~peter/should_i_stop_caring_and_let_ip_reputation_sort_them_out.html

#passwordgroping #cybercrime #ipreputation #honeypot

But what to do? Should I

📢 The IP and Domain Reputation Checker has increased functionality.

Following your requests we have added some further features:

✅ Most recent historical listing information - if your IP address is only listed on the Policy Blocklist, or isn't listed on any dataset, you will now be able to see the latest historical listing relating to it.

✅ Additional information requested - where your IP address has been associated with a proxy, we will be requesting additional information to ensure we can resolve your issue as quickly as possible.

✅ Easy to share results page URL, which will return the latest listing information, even if the results have changed.

Visit the checker here 👉 https://check.spamhaus.org/

#NEWFeatures #ReputationChecker #IPReputation #DomainReputation

Reprising two old articles of mine to remind you that scanning for wordpress admin interfaces may hurt your IP reputation - https://bsdly.blogspot.com/2017/04/forcing-password-gropers-through.html https://bsdly.blogspot.com/2018/08/badness-enumerated-by-robots.html #ipreputation #wordpress #openbsd #PF