API providing threat analysis of any given IP address

Re:API providing threat analysis of any given IP address by sword_master on Saturday August 06, 2016 @02:27PM (#12239244)

"Our Team of Engineers track public IPs across a wide scope of popular botnet networks."

How do you track botnets (along with the other collection you do) with a team of three? How many botnets are being tracked and which malware families? This is an especially dubious claim when coupled with another statement you made: "We do not rely on external sources at this time".

[ Parent | on HN ]

Re:API providing threat analysis of any given IP address by nexact on Saturday August 06, 2016 @02:37PM (#12239293)

I bet he is using maltrail and firehol.

[ Parent | on HN ]

Re:API providing threat analysis of any given IP address by fragfester on Saturday August 06, 2016 @02:49PM (#12239349)

We do use Maltrail along with a whole lot else. You don't have experience with it perhaps? Are you currently employed or angry at your employer?

[ Parent | on HN ]

Re:API providing threat analysis of any given IP address by nexact on Saturday August 06, 2016 @02:56PM (#12239373)

:-) I built my own API and it is automatically updated every 2 hours. I'm using threatminer to do cross-validation on sampled values.

[ Parent | on HN ]