How to Block a Malicious IP List

When a malicious IP list is confirmed to be connected to domains that host phishing sites, drop malware, scan systems for vulnerabilities or engage in other potentially harmful activity, its reputation suffers. Its status as a “bad” IP can also be determined by its history of behavior and relationships, including whether it has been associated with spyware sources or is part of the TOR anonymous user network.

These connections can then be blocked or filtered using an IP block list in your firewall, htaccess or iptables configuration. This reduces malicious attacks and helps protect your site or app users from fraud, spam and other security risks without disrupting legitimate traffic.

Malicious IP List: Protecting Your Network from Threats

Blocking suspicious users prevents them from registering on your website, making payments or contributing to your community. This can cut down on fraud and abuse by eliminating 90% of abusive connections, including proxies, residential addresses that allow tunneling, TOR, botnets, phishing, scraping and command and control (C2) servers.

As anyone who has maintained a website or server knows, the entire Internet is continually scanned and attacked by hackers, spammers and bad actors from all over the world. Many of these attackers use dynamic or constantly changing IP addresses to avoid detection. However, the minFraud Reputation service provides visibility into the riskiness of any given IP address, allowing you to take action quickly. In addition to blocking a specific IP address, naming and shaming an attacker through social media can have a much greater impact than filing a standard email report and encourages the attacker to change its practices.

…