Evaluation of the Reliability Index of IP Addresses in Reputation Lists

IP address reputation lists are a collection of IP addresses that have been associated with malicious practices. Therefore, it is essential to evaluate the addresses' reliability in this list to avoid false positives, regardless of the metrics that have been classified as malicious. Reliability is defined as the probability that such IP addresses are a significant threat due to their appearance on different reputation lists. Generating an evaluation index to evaluate the reliability of the elements in a global way allows us to evaluate IP addresses. Thus, a defined metric will be used based on appearances in external reputation lists, the dates they were added and last seen, and other variables such as severity and repetition in the list itself. The proposed system presents an IP address evaluation module composed of a series of asynchronous processes to evaluate the reliability of the elements.