Forum
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Ray Baron
  2. Sunday, June 25, 2017
  3.  Subscribe via email
Another forum thread included this response from Cloudlinux:

"As of the current version, we do not let users adding graylist entries manually (only removing is possible)."

Two questions:

Where do you get the IPs in the greylist? Herd immunity implies there is a master source of abuse IPs. I use a couple of the lists in csf.blocklists and do not want to duplicate.

Is there a place I can submit abuse IPs (something like abuseip.com) where they will get picked up by the Imunify360 greylist?
Rate this post:
  1. 26.06.2017 13:06:05
  2. # 1
Alexandre Accepted Answer
Posts: 19
Joined: 31.01.2017
0
Votes
Undo
We collect information about attackers on Imunify360 correlation server. Sophisticated machine learning techniques are used to add entries to the global graylist - parts of this list are sent to Imunify360 agents on customers' servers to stop attackers before they've started their activity with them. Populating global graylist is an automatic process - we actually designed it to work without human intervention.
  1. 26.06.2017 14:06:41
  2. # 2
Ray Baron Accepted Answer
Posts: 29
Joined: 01.04.2013
0
Votes
Undo
OK, thanks for that.

Might be nice to have a place to submit IPs since the correlation server (honeypot?) won't see every miscreant IP. This can also be automated, e.g., X number of reports gets an IP added to the greylist.
  1. 26.06.2017 14:06:03
  2. # 3
Alexandre Accepted Answer
Posts: 19
Joined: 31.01.2017
0
Votes
Undo
This information is actually collected form customers' servers (not only from honeypots). So that, decisions are made based on number of incidents caused by the IP address, number of servers which were attacked, country of origin etc.
  1. 26.06.2017 14:06:25
  2. # 4
Ray Baron Accepted Answer
Posts: 29
Joined: 01.04.2013
0
Votes
Undo
Excellent!
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Remove Upload Files (Maximum File Size: 2 MB)
You may insert polls into your post. The poll would then appear in the post.
Vote Options
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.