Live data from Hacker News

Check Your IP Reputation Score

ipdata.co

21–30 of 78 posts

Re: Check Your IP Reputation Score

#21

Earlier quoted context omitted.

If you wanted to send spam, or run an attack, you’d want to run your traffico via tor or a vpn to hide your home or office IP. Not sure why iCloud relay would be a problem.

isn't icloud relay just a vpn?

It’s an HTTP proxy. Two layers of proxy.

I was just assuming that paying iCloud users might be less likely to launch bot attacks. But on reflection I guess that is just bias.

Re: Check Your IP Reputation Score

#23
post #3

Why are "tor", "vpn", "iCloud relay", and "datacenter" considered threats?

I've just been running through my own website logs for the week, and the majority of hacking attacks (mostly attempts at stealing AWS & Git credentials, but also outright hacking, vulnerability scans, exploit attempts & brute forcing attempts) have all been via VPN, Tor exit nodes, and relays. Legit website users just never use VPN or Tor for anything.

Datacenter is not necessarily a "threat", but if a datacenter is trying to post to your website comment form, it's certainly posting some kind of spam or SQL injection attempt, and it's not a message from a legitimate customer. (Datacenter is actually a highly effective flag for detecting spam.)

Re: Check Your IP Reputation Score

#24
post #7

Is this ipinfo [0] repackaging their product? [0] https://ipinfo.io/

no. Source: I work for IPinfo. We don't do "IP Reputation Score". We provide the attributes/insights related to an IP address, the user makes the decision of how to use that information.

I thought IPinfo was just sourced from Maxmind, am I wrong? Is there any way to know who are the original sources of info in this space and who are reselling?

Re: Check Your IP Reputation Score

#25
post #9

I don’t understand what this is or what the reputation really is. The site talks about threat intelligence and other marketing phrases. I hope I didn’t just give my IP to the site to just add to their database to show to their investors or worse data mine me somehow.

For context, a few months ago we launched our Blocklists [0] feature which allows users to query 100+ blocklists and find all the ones where an IP address has been listed.

Blocklists based threat detection is however limited since they cannot contain every possible bad IP which leads to a lot of false negatives.

To fix this we created an IP Reputation scoring model [1] and currently provide 4 scores.

- Trust Score - VPN Score - Proxy Score - Threat Score

The Trust Score simply aggregates the other 3 scores and is a value from 0 - 100, with 100 being a very high reputation IP address.

[0] https://docs.ipdata.co/docs/ip-reputation-scores [1] https://docs.ipdata.co/docs/ip-reputation-scores

Re: Check Your IP Reputation Score

#27
Humph. My home IP address which is shared by thousands of random people behind two layers of NAT, in Brazil, gets a score of "63, low risk". My mail server, on Linode in the US, which has had the same IP# for about 20 years and sends mail to GMail and Microsoft without problems (and only from a small group of people who never send spam) gets a score of "0, high risk". This is useless garbage, and dangerous to boot. The last thing we need is more arbitrary and unaccountable "reputation scores" being propagated by self-appointed and unqualified reputation judges.

Re: Check Your IP Reputation Score

#29
post #27

Humph. My home IP address which is shared by thousands of random people behind two layers of NAT, in Brazil, gets a score of "63, low risk". My mail server, on Linode in the US, which has had the same IP# for about 20 years and sends mail to GMail and Microsoft without problems (and only from a small group of people who never send spam) gets a score of "0, high risk". This is useless garbage, and dangerous to boot. T…

This is actually proof that it works as intended. Our scores are made to be consumed by web applications.

In that context it makes sense that a cloud IP that's used to send mail would be treated with suspicion if it's seen trying to make a purchase on an e-commerce site.

Re: Check Your IP Reputation Score

#30
post #27

Humph. My home IP address which is shared by thousands of random people behind two layers of NAT, in Brazil, gets a score of "63, low risk". My mail server, on Linode in the US, which has had the same IP# for about 20 years and sends mail to GMail and Microsoft without problems (and only from a small group of people who never send spam) gets a score of "0, high risk". This is useless garbage, and dangerous to boot. T…

It’s correctly distinguished between your home internet and a server. That’s the intention here, to discriminate against VPN users and bots.
Post reply on HN