WEB ATTACKS

There are two main types of cyberattacks: targeted attacks and automated botnet attacks. In the case of a botnet attack, hackers exploit well-known vulnerabilities on hundreds or even thousands of servers and make them “zombie” machines in their botnet. Once infected, they use these zombie machines as part of their botnet to automatically carry out their attacks, infecting and controlling more and more devices. On a vulnerable server, botnets are responsible for 50% of the web traffic on average.

Symptoms

“After extensive testing and evaluation, we came to the conclusion that the BitNinja product is very mature and provides all the tools we wanted to build our infrastructure. Joining the BitNinja eco-system gave us access to the shared “knowledge” of tens of thousands servers worldwide so we can proactively block malicious traffic before even reaching our clients’ websites – simply impressive”
Dimitar Petkov
FastComet

THE POWER OF BITNINJA REALTIME IP REPUTATION

The revolutionary power of BitNinja is our database containing information on 70,000,000 IP addresses worldwide. Every server protected by BitNinja receives the latest updates on which IPs are safe and which are malicious. With each new server added, the defense shield grows stronger. If an attack occurs on a server protected by BitNinja and the IP gets blocked, it will be not only blocked on that server but on every BitNinja protected server worldwide. This breakthrough technology is a BitNinja exclusive feature called a Defense Network.

In addition to the power of the global lists generated by our Defense Network, you can also manage your own user-level IP lists by adding single IPs, IP ranges, countries and even ASNs to them.

We also designed an industry-first IP reputation list that goes beyond typical black- and whitelists. Our greylist makes the IP management more flexible and provides a more convenient way to handle false positives, while still blocking potentially malicious requests. Greylisted IPs can be delisted by valid human visitors simply by completing a CAPTCHA or the BitNinja Browser Integrity Check (BIC).

How is it different against other IP Reputation solutions?

CONTINUOUS UPDATES

Our IP Reputation list is continuously updated. When any BitNinja protected server is attacked, the malicious IP is immediately added to our blacklist.

DEFENSE NETWORK

The Power of the Ninja Community is a global network of BitNinja protected servers sharing information about the latest attacks. With every new server, our Defense Network grows stronger.

GREYLIST

Instead of immediately blacklisting a malicious IP, we invented a new technology called a greylist. This blocks suspicious activity while still making it easy for people to validate genuine requests.

USER AND GLOBAL LEVEL

The global grey-, black- and whitelists are shared on all BitNinja protected servers. In addition, you can manage your own user-level lists for all of your servers in one place.

WHY DO OUR USERS LOVE THIS MODULE?

“After extensive testing and evaluation, we came to the conclusion that the BitNinja product is very mature and provides all the tools we wanted to build our infrastructure. Joining the BitNinja eco-system gave us access to the shared “knowledge” of tens of thousands servers worldwide so we can proactively block malicious traffic before even reaching our clients’ websites – simply impressive”
Dimitar Petkov
FastComet
“BitNinja is being used by many different hosting companies, and swapping intelligence gathered from thousands of servers, hosting tens of thousands of domains worldwide. It allows us to tell the Good Guys from the Bad guys. With its “IP Reputation” we can see what an IP has been doing historically. Using BitNinja we can make better security decisions”
Andrew Shaw
UnixGuru
“Our clients need to ensure their websites are secure from attacks and BitNinja is an integral part of this. It provides fantastic features and the ability for us to manage everything from a single pane of glass. Being part of the many thousands of servers that share attack info helps us ensure our customers’ reputations are not damaged by a compromised website. Now we have it, we would not be without it.”
Andy Starr
Just Technology Group

FREQUENTLY ASKED QUESTIONS

You can read more about the IP Reputation module and the grey/black/whitelists on our documentation site.
Our Defense Network refers to the information about malicious IPs that is shared by all BitNinja protected servers worldwide. With each new server added to the Ninja Community, the protection for every server protected by BitNinja grows stronger.
The BitNinja greylist is a flexible approach to differentiating valid human visitors from malicious bots. Our CAPTCHA page or Browser Integrity Check (BIC) will be shown for greylisted Ips. By successfully completing it, genuine visitors can continue browsing without a problem, while bots will be blocked from reaching your servers.
When an IP address sends a suspicious request to a BitNinja protected server, the IP is first greylisted. If a valid human visitor then tries to connect to the server from the greylisted IP on HTTP, HTTPS, SMTP or FTP protocol, they can delist the IP with the help of the BitNinja CAPTCHA or Browser Integrity Check. These are used to make it easy for people to confirm it is a genuine request and continue browsing.

You can read more about the IP Reputation module and the grey/black/whitelists on our documentation site.

Using the BitNinja Dashboard, you can see the history of IP addresses and search for any IPs to check the attack information about them. However, some details (such as the server name, affected domain, etc.) can be obfuscated for security reasons. Each BitNinja user can decide on how much identifying information about their server is shown in those logs.

You can read more about the IP Reputation module and the grey/black/whitelists on our documentation site.

We have information on 70 million IP addresses worldwide. Currently, there are more than 3 million suspicious and malicious IP addresses on our global grey- and blacklists.

We have information on 70 million IP addresses worldwide. Currently, there are more than 3 million suspicious and malicious IP addresses on our global grey- and blacklists.

We have information on 70 million IP addresses worldwide. Currently, there are more than 3 million suspicious and malicious IP addresses on our global grey- and blacklists.

When you add or remove an IP on a list, changes are automatically applied to all the servers managed under that particular account.

When you add or remove an IP on a list, changes are automatically applied to all the servers managed under that particular account.

BUILD YOUR SECURITY

START THE 7-DAY FREE TRIAL WITH FULL FUNCTIONALITY
WITHOUT SPENDING A CENT.