IP Reputation Feed by Team Cymru is a near-real-time monitoring service that provides a lightweight feed of controller and victim IP addresses. IP Reputation Feed is updated hourly and contains an aggregate of the last 24 hours of activity. It offers visibility into botnets that evade monitoring and includes categories of potentially compromised devices such as routers, darknet visitors, and abused proxies. Every IP in the feed receives an individual reputation score using several different categories of patterns observed over the past 30 days. The key used to calculate the score is included in the feed and can be used to reconstruct the behavior patterns observed for each individual IP.
