# IP reputation

**CloudFilt** offers a complete **AI-powered IP reputation monitoring and blocking system**, helping businesses detect, block, and manage risky or malicious IP addresses in real time, before they can harm your website, application, or API.

## What is IP reputation ?

**IP reputation** measures the trustworthiness or risk level of a specific IP address based on its past and current online behavior.

* **Good IPs** : Belong to real users, search engines (e.g., GoogleBot), or trusted businesses
* **Bad IPs** : Used by bots, attackers, or compromised servers to perform harmful actions such as spam, DDoS attacks, scraping, or brute-force logins

IPs involved in malicious activities are often listed in **public or proprietary blacklists**.

## Why block IPs with bad reputation ?

IPs with poor reputations are typically involved in :

* DDoS attacks
* Brute-force login attempts
* SQL injection or vulnerability scanning
* Web scraping or spam form submissions
* Malware distribution and phishing

**Blocking bad IPs helps you** :

* Reduce attack surface
* Improve server performance
* Minimize financial losses and downtime
* Maintain brand reputation and customer trust

## How cloudFilt detects malicious IPs

1. **AI-Based Traffic Behavior Analysis :**
   * Detects abnormal HTTP/TCP requests
   * Flags high-frequency or pattern-based requests
   * Blocks risky port scans and unusual sessions
2. **IP Blacklist Integration :**
   * Synchronizes with global threat databases and blacklists
   * Instantly blocks IPs known for fraud, malware, scraping, and abuse
3. **Reputation Score System :**
   * Assigns every IP a real-time reputation score
   * Admins can whitelist trusted IPs or auto-block low-reputation traffic

## Use cases for blocking bad IPs with cloudFilt

* **eCommerce** : Reduce fraud from high-risk countries or datacenters
* **Government & Legal** : Block illegal distribution IPs
* **Financial Institutions** : Prevent credential stuffing and account takeover (ATO) attempts
* **SaaS & APIs** : Protect backend endpoints from scraping and abuse

## Risk of not blocking bad IPs

* Data leakage
* Resource exhaustion (CPU, RAM, bandwidth)
* SEO drops due to content scraping
* Downtime from DDoS or high bot traffic
* Increased risk of phishing or fake account creation

<figure><img src="/files/1pmHHoPzouJrQmSexNs4" alt="" width="375"><figcaption></figcaption></figure>

## Ready to secure your site ?

**CloudFilt** makes managing IP reputation easy :

* Block threats automatically
* Ensure only legitimate users access your digital properties
* Full dashboard with **IP stats, geolocation, threat type, and blocking logs**
* Free trial available – no credit card required


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudfilt.com/solutions/ip-reputation.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.