IP categories and risk scores
IP addresses are grouped into the following categories.
- Anonymization Services
This category contains IP addresses of web proxies (websites that allow the user to anonymously view websites). Furthermore, IP addresses are listed that can be used directly to surf anonymously (for example, by adding them to the browser configuration).
- Botnet Command and Control Server
This category contains IP addresses that host a botnet command and control server.
IP addresses known for botnet-member activity. Devices that use these IP addresses are infected and take part in DDoS-attacks, port-scanning, spam-sending, and so on.
- Cryptocurrency Mining
This category contains IP addresses that are used for cryptocurrency mining.
- Dynamic IPs
This category contains IP addresses of dialup hosts and DSL lines.
This category lists IPs of malicious websites or malware hosting websites.
- Scanning IPs
These IPs are identified as illegally scanning networks for vulnerabilities.
This category lists IP addresses that were seen sending out spam.