Threat Intelligence
IP/Domain Blacklist
A blacklist is a database of IP addresses, domains, or email addresses known to be associated with malicious activity such as spam, malware, phishing, or hacking. Security systems use blacklists to block connections from known bad actors. Investigators query blacklists to assess the reputation of network infrastructure and identify potentially compromised or malicious resources.
Related OSINT terms
- IP ReputationIP reputation is a score or classification assigned to an IP address based on its historical behavior and associations. IPs…
- AbuseIPDBAbuseIPDB is a community-driven threat intelligence database where users report IP addresses engaged in malicious activities like hacking, spamming, and…
- Threat IntelligenceThreat intelligence is evidence-based knowledge about existing or emerging threats to cybersecurity, including context, mechanisms, indicators, implications, and actionable advice.…
Related Skills
Investigative Skills in Nexus that apply IP/Domain Blacklist to a live case.
