DOWNLOAD ALIENVAULT IP REPUTATION DATABASE

Some lists focus only on specific regions of the world. Does it have a consistent size through time? In the chart below we show the exact age of the IPs currently listed. We will examine its retention below in the sections below. The list maintainers may re-create the IP list file frequently, but we re-process it only when the actual contents of the IP list changed. Is it updated frequently and regularly?

Uploader:	Meziran
Date Added:	26 August 2008
File Size:	37.48 Mb
Operating Systems:	Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads:	35238
Price:	Free* [*Free Regsitration Required]

The following map illustrates this.

Sudden increases or decreases is generally an indication of poor maintainance. The following chart attempts to visualize this. If the chart contains more than one "stair steps", the list has many different retention policies.

FireHOL solves this by automatically reducing the number of unique subnets on all datanase In the chart below we show the exact age of the Rephtation currently listed. The time shown is calculated in realtime; it will be refreshed as time passes, even if the list is not updated. To my understanding Threat Intelligence cannot be effective when it is treated as Intellectual Property.

Unfortunatelly, the InfoSec industry still considers as a standard industry practice the trade of Threat Intelligence for money.

Malicious and abuse ALIENVAULT-REPUTATION blacklist

To unlist an IP, once it is in the aggregation log, you will either have to whitelist it using your own means, or wait for the aggregation period to expire so that reputayion will be unlisted automatically. Is it updated frequently and regularly? Using this information we can detect what the list maintainers do, get an idea of the list trend and its maintainers habbits. Using the maps below we attempt to answer these questions: These two percentages show the percentage of overlap this list has with other IP lists.

The ideal reputatoin chart of a well maintained IP list should a straight line from the bottom left corner, to the upper right corner of the chart.

Hopefully, many security companies and professionals agree and openly distribute the result of their hard work. Which countries does it currently match? The list maintainers may re-create the IP list file frequently, but we re-process it only when the actual contents of the IP list changed. The retention policy of the list shows the duration IPs were listed, when they were listed.

AlienVault - Open Threat Exchange

Using the chart below we attempt to answer these questions: Normally, longer ages should only be a small part of the list's size. The IPs in this list are aggregated by us. Overlaps of with other IP lists Using the chart below we attempt to answer these questions: The chart below shows the change history of the IP list, i.

Many will argue that collecting threat intel is expensive. Of course it is! The age of each IP in the list is shown below. reputafion

ALIENVAULT-REPUTATION blacklist

Fewer unique IPs means fewer possible false positives. Your computer clock seems wrong! Of course, security is achieved with a lot more than IP lists.

How much of this IP list is changed on every update? Long horizontal lines indicate either sustaining attacks, or unreasonably high listing policies. Help us make it better.

Where do the attackers or the abusers come from? In other cases, similar IP lists have minimal incremental updates. The chart below shows the retention policy detected, since we started monitoring the list it is not limited to a certain timeframe.

Many don't and almost all lists have exceptions that do not follow the announced rules.