While we are working on our zifsoft website, we use this blog site to publish our findings.
These IPs that are published comprise of spammers and hackers from 6 domains running wordpress.While 6 domains doesn’t seem like a significant install base, the statistics are compelling. The current top 5 firewall plugins don’t capture the attacks to compromise websites. These attacks are unorthodox. However if we use the set of Aggresor Algorithm lens, a pattern emerges.These IPs combine paint a picture of a few groups behind the spams and bruteforce hacking. We classify an attack as any spam or hack to your domain.
Almost 400000 IPs collected and 97% of them have attacked all our customer sites.
42% of the attacks are bruteforce related. Especially the rise of the LOXI botnet.
We’ve been able to correlate the spammers and hackers. In the chart, where you see the label spam-hack, these are IPs that conduct spamming and hacking. Invariably the same group of players crops up for both activities is the subject of another article.
How to use these IPs?
You can plug these IPs in any IP blocker and it will rid at least 99% of your headaches.
black IP list: Blackcloud 201909 edition
About Zifsoft.
Zifsoft is self funded startup designing algorithms to profile a person. The Aggressor program is an application of the AI that we’re designing to profile hackers and spammers.
