4 ms·

Worth noting that most IP blocks are going to be transferrable in some form, and thus most IP blocks can be sold on this site. IPXO is of course different since

Worth noting that most IP blocks are going to be transferrable in some form, and thus most IP blocks can be sold on this site. IPXO is of course different since it's temporary leasing, but you couldn't really build a list of IPs that could be transferred, or you'd block most of the internet.

derefr 4y ago
That’s what I figured was at the root of there not already being a DNSRBL-alike list of these IP ranges, yeah. Maybe the closest thing would be an ASN reputation score, where one of the factors is the ASN’s newness, and another is the average recency of their acquisition of the IP blocks they own.
- duskwuff 4y ago
  I don't think you have a good sense of what actually plays into IP reputation. Some of the sketchiest ASNs I know of have been assigned for many years, and perfectly reputable ISPs have to acquire new IP space occasionally.
  - derefr 4y ago
    > Some of the sketchiest ASNs I know of have been assigned for many years ...which can be addressed perfectly fine with a static, human-audited blacklist, because the old bad actors don't change. The goal of a reputation score would be to complement such a static blacklist, by recognizing the fly-by-night operations that constantly crop up and disappear for what they are; or, conversely, by rewarding the ASNs who manage to stick around long enough without ever doing anything to land them on the static blacklist. In other words, just like how mail domain reputation works. If your domain sticks around long enough without ending up on a DNSRBL, then it builds up a positive reputation, which acts as a counterweight in spam-filtering algorithms. If you sell the domain, though, then its reputation resets. > perfectly reputable ISPs have to acquire new IP space occasionally. Yeah, but the average age "by volume" of all their IPs would still be pretty old, as the new acquisitions would be marginal compared to their existing holdings.

derefr 4y ago

That’s what I figured was at the root of there not already being a DNSRBL-alike list of these IP ranges, yeah. Maybe the closest thing would be an ASN reputation score, where one of the factors is the ASN’s newness, and another is the average recency of their acquisition of the IP blocks they own.

duskwuff 4y ago
I don't think you have a good sense of what actually plays into IP reputation. Some of the sketchiest ASNs I know of have been assigned for many years, and perfectly reputable ISPs have to acquire new IP space occasionally.
- derefr 4y ago
  > Some of the sketchiest ASNs I know of have been assigned for many years ...which can be addressed perfectly fine with a static, human-audited blacklist, because the old bad actors don't change. The goal of a reputation score would be to complement such a static blacklist, by recognizing the fly-by-night operations that constantly crop up and disappear for what they are; or, conversely, by rewarding the ASNs who manage to stick around long enough without ever doing anything to land them on the static blacklist. In other words, just like how mail domain reputation works. If your domain sticks around long enough without ending up on a DNSRBL, then it builds up a positive reputation, which acts as a counterweight in spam-filtering algorithms. If you sell the domain, though, then its reputation resets. > perfectly reputable ISPs have to acquire new IP space occasionally. Yeah, but the average age "by volume" of all their IPs would still be pretty old, as the new acquisitions would be marginal compared to their existing holdings.