Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Direct Lookups for IP Reputation Classifications

To ensure that your IP reputation classifications are using the most recent classification information that is available, create rules and queries that use direct X-Force IP reputation lookups.

You can use the following X-Force IP categorizations:

  • Anonymization Services

  • Botnet Command and Control Server

  • Bots

  • Cryptocurrency Mining

  • Dynamic IPs

  • Malware

  • Scanning IPs

  • Spam

For example, a rule that uses the Anonymization Services categorization might use the following building block:

In Ariel Query Language (AQL), you can use the XFORCE_IP_CATEGORY function instead.