> For the complete documentation index, see [llms.txt](https://docs.cloudfilt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudfilt.com/solutions/ip-reputation.md).

# IP reputation

**CloudFilt** offers a complete **AI-powered IP reputation monitoring and blocking system**, helping businesses detect, block, and manage risky or malicious IP addresses in real time, before they can harm your website, application, or API.

## What is IP reputation ?

**IP reputation** measures the trustworthiness or risk level of a specific IP address based on its past and current online behavior.

* **Good IPs** : Belong to real users, search engines (e.g., GoogleBot), or trusted businesses
* **Bad IPs** : Used by bots, attackers, or compromised servers to perform harmful actions such as spam, DDoS attacks, scraping, or brute-force logins

IPs involved in malicious activities are often listed in **public or proprietary blacklists**.

## Why block IPs with bad reputation ?

IPs with poor reputations are typically involved in :

* DDoS attacks
* Brute-force login attempts
* SQL injection or vulnerability scanning
* Web scraping or spam form submissions
* Malware distribution and phishing

**Blocking bad IPs helps you** :

* Reduce attack surface
* Improve server performance
* Minimize financial losses and downtime
* Maintain brand reputation and customer trust

## How cloudFilt detects malicious IPs

1. **AI-Based Traffic Behavior Analysis :**
   * Detects abnormal HTTP/TCP requests
   * Flags high-frequency or pattern-based requests
   * Blocks risky port scans and unusual sessions
2. **IP Blacklist Integration :**
   * Synchronizes with global threat databases and blacklists
   * Instantly blocks IPs known for fraud, malware, scraping, and abuse
3. **Reputation Score System :**
   * Assigns every IP a real-time reputation score
   * Admins can whitelist trusted IPs or auto-block low-reputation traffic

## Use cases for blocking bad IPs with cloudFilt

* **eCommerce** : Reduce fraud from high-risk countries or datacenters
* **Government & Legal** : Block illegal distribution IPs
* **Financial Institutions** : Prevent credential stuffing and account takeover (ATO) attempts
* **SaaS & APIs** : Protect backend endpoints from scraping and abuse

## Risk of not blocking bad IPs

* Data leakage
* Resource exhaustion (CPU, RAM, bandwidth)
* SEO drops due to content scraping
* Downtime from DDoS or high bot traffic
* Increased risk of phishing or fake account creation

<figure><img src="/files/1pmHHoPzouJrQmSexNs4" alt="" width="375"><figcaption></figcaption></figure>

## Ready to secure your site ?

**CloudFilt** makes managing IP reputation easy :

* Block threats automatically
* Ensure only legitimate users access your digital properties
* Full dashboard with **IP stats, geolocation, threat type, and blocking logs**
* Free trial available – no credit card required


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cloudfilt.com/solutions/ip-reputation.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.