IP categories and risk scores

Edit online

IP addresses are grouped into the following categories.

  • Anonymization Services

    This category contains IP addresses of web proxies (websites that allow the user to anonymously view websites). Furthermore, IP addresses are listed that can be used directly to surf anonymously (for example, by adding them to the browser configuration).

  • Botnet Command and Control Server

    This category contains IP addresses that host a botnet command and control server.

  • Bots

    IP addresses known for botnet-member activity. Devices that use these IP addresses are infected and take part in DDoS-attacks, port-scanning, spam-sending, and so on.

  • Cryptocurrency Mining

    This category contains IP addresses that are used for cryptocurrency mining.

  • Dynamic IPs

    This category contains IP addresses of dialup hosts and DSL lines.

  • Malware

    This category lists IPs of malicious websites or malware hosting websites.

  • Scanning IPs

    These IPs are identified as illegally scanning networks for vulnerabilities.

  • Spam

    This category lists IP addresses that were seen sending out spam.