Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A vulnerability rating of your IP address

securityrating.io

Post reply on HN
Print view View original

41–50 of 50 posts

Re: A vulnerability rating of your IP address

#41

Post by fweespeech »

balgan wrote: post #35
scierama wrote: post #33

I report any scanning done against my IP's. I do not know what the intentions of the scanner are. People trying to make money making a product that scans my IP's and wastes bandwidth and computing resources that I have to pay for should be jailed in my humble opinion.

We respect a blacklist, just drop us an email on info@binaryedge.io and we can add your ips to the blacklist and we will never touch them again!

Please just set up some sort of robots.txt related thing.

E-mailing every single company that does this is ridiculous.

Re: A vulnerability rating of your IP address

#42

Post by dom0 »

filipacsr wrote: post #27
dom0 wrote: post #25

The numbers don't add up. For example, I get 14 out of 100. Encryption are all 0, yet "Overall" is 3 out of 6. The only other non-zero value is "Number of open ports" (2). 2+3 != 14. Σ0 = 0 != 3. Obviously, I have no idea what those 12 risk points are. The three encryption points are not explained at all, neither are the remaining nine.

The overall value of each category is truncated to the maximum value of that category - for example, if you have 10 open ports, you will get an overall score in "Attack Surface" category of 2, because it's the maximum value (vulnerability importance) that we attributed to that category. The final score is the sum of the overall values of all categories, and then it's normalized between 0 and 100. If you have all 0 in…

Here's a screenshot http://i.imgur.com/TMXbdpv.png

Re: A vulnerability rating of your IP address

#43

Post by kalleboo »

scierama wrote: post #33

I report any scanning done against my IP's. I do not know what the intentions of the scanner are. People trying to make money making a product that scans my IP's and wastes bandwidth and computing resources that I have to pay for should be jailed in my humble opinion.

Wow you must be busy

Re: A vulnerability rating of your IP address

#44

Post by _ea1k »

v4n4d1s wrote: post #22

This tool does not provide enough information about the scan and the detected "problems". 1. It's only scanning for default ports. 2. It told me about having a CVE-Score "3/3", please provide me with the exact CVEs, so I can patch my system accordingly. 3. Running a webserver on Port 80 is not insecure per se, it's just not encrypted. 4. No feature to rescan, provided information is probably old. While I like the ove…

Yeah, the CVE scan was really strange to me. I don't see the benefit if I can't see the CVEs themselves.

Re: A vulnerability rating of your IP address

#47

Post by sli »

_ea1k wrote: post #44
v4n4d1s wrote: post #22

This tool does not provide enough information about the scan and the detected "problems". 1. It's only scanning for default ports. 2. It told me about having a CVE-Score "3/3", please provide me with the exact CVEs, so I can patch my system accordingly. 3. Running a webserver on Port 80 is not insecure per se, it's just not encrypted. 4. No feature to rescan, provided information is probably old. While I like the ove…

Yeah, the CVE scan was really strange to me. I don't see the benefit if I can't see the CVEs themselves.

That's how I felt about all of the ratings. Just arbitrary numbers. I have one out of two ports open? Or do two or more open ports automatically go red? No clue, it doesn't say.

6/6 on HTTP with SSL. Again, six what? Total open HTTP connections? Couldn't I have more than six, and wouldn't that data be important? No clue, it doesn't say.

Trying the site with my VPN connection enabled is amusing.

Re: A vulnerability rating of your IP address

#48

Post by yellowapple »

deedubaya wrote: post #37
helb wrote: post #3

> Torrent Downloads: If an IP address detected downloading torrents, the risk level is considered extreme. Why? There is some more info in the README at Github ( https://github.com/binaryedge/ratemyip-openframework ), but nothing about why torrents induce extreme risk level .

I don't necessarily agree with the risk level, but if analyzing a traditional business network, torrenting probably isn't being used for legitimate uses. Thusly, it's likely it either being used by malware or maybe a ignorant/malicious user.

The problem is that not all business networks are "traditional". Some might be pulling OS install media from a torrent (a lot of FOSS operating systems are distributed this way). Some might even be mirroring/seeding said media.

Re: A vulnerability rating of your IP address

#49

Post by nikkettt »

fny wrote: post #36
mediumdeviation wrote: post #17

On a side note, if your fan started spinning up when you opened this, it's because of the particle simulation in the header. I know because I reviewed this library ( https://github.com/VincentGarreau/particles.js ) when a colleague wanted to add something similar to our site. The problem is it uses a naive O(n^2) algorithm for linking up particles when they get near each other, which wastes a lot of CPU cycles. Runni…

Wow... I was about to use this on a landing page I'm building. Thanks for the tip!

I just did! Annoying the I had to reduce the number of particles significantly in order not to force CPU to spark. Does anyone have suggestions for an alternative library? (I really don't want to have to write something like this myself for a landing page, talk about overkill)
Post reply on HN