3 ms·
I don't think you have a good sense of what actually plays into IP reputation. Some of the sketchiest ASNs I know of have been assigned for many years, and per
by duskwuff 4y ago
I don't think you have a good sense of what actually plays into IP reputation.
Some of the sketchiest ASNs I know of have been assigned for many years, and perfectly reputable ISPs have to acquire new IP space occasionally.
- derefr 4y ago> Some of the sketchiest ASNs I know of have been assigned for many years ...which can be addressed perfectly fine with a static, human-audited blacklist, because the old bad actors don't change. The goal of a reputation score would be to complement such a static blacklist, by recognizing the fly-by-night operations that constantly crop up and disappear for what they are; or, conversely, by rewarding the ASNs who manage to stick around long enough without ever doing anything to land them on the static blacklist. In other words, just like how mail domain reputation works. If your domain sticks around long enough without ending up on a DNSRBL, then it builds up a positive reputation, which acts as a counterweight in spam-filtering algorithms. If you sell the domain, though, then its reputation resets. > perfectly reputable ISPs have to acquire new IP space occasionally. Yeah, but the average age "by volume" of all their IPs would still be pretty old, as the new acquisitions would be marginal compared to their existing holdings.