Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Careers

Contact Us

IP Address Cards

IP Address Intelligence Cards (aka IP Address Cards) provide an on-demand summary
 of essential information related to a specific IP Address or CIDR (an IP Address
 range). IP Address Cards are updated in real time as Recorded Future collects
 new information. You can use IP Address Cards as a starting point when assessing
 whether observation of this IP in a specific context is an Indicator of Compromise,
 and further can be used in security control rules to block or detect incidents.
 IP Address Cards are also pivot points during investigations that start with
 another indicator, a malware tool, a vulnerability, or a threat actor. 
 
 Descriptions of several common components of the IP Address Card are available
 elsewhere, depending on your subscription type:

<ul>
 <li>
 Advanced and Core License users can review this
 <a href="https://support.recordedfuture.com/hc/en-us/articles/115001398928" target="_blank" rel="noopener">Overview of Intelligence Cards</a>&nbsp;
 </li>
 <li>
 SecOps Intelligence users can review this
 <a href="https://support.recordedfuture.com/hc/en-us/articles/360046987874" target="_blank" rel="noopener">Overview of Intelligence Cards</a>
 </li>
</ul>
Below are details specific to the IP Address Card:

 Risk Scoring


 IP Address Risk Scores help to identify potentially malicious IP Addresses. The
 risk rules for IP Addresses currently age out after a period of time, if we no
 longer see evidence that an individual rule matches. More information can be
 found by looking at the
 <a href="https://support.recordedfuture.com/hc/en-us/articles/115000894448" target="_blank" rel="noopener">IP Address Risk Rules</a>.

<img src="https://cms.recordedfuture.com/uploads/ip_address_cards_image1_5eaf7c7586.png" alt="ip-address-cards-image1.png" />




 Risks in the /24 Subnet


 IP Address&nbsp;Cards include a summary of other IP addresses in the same /24
 Subnet (historically known as a Class C block) with current risk scores. This
 subnet summary provides quick context of the network neighborhood around the
 individual IP address.

<img src="https://cms.recordedfuture.com/uploads/ip_address_cards_image2_7b7a9bba7e.png" alt="ip-address-cards-image2.png" />




 Technical Profile


 IP Address Cards includes GeoIP information (courtesy of MaxMind GeoLite) such
 as AS Number, names of organizations which administer the enclosing IP range,
 and geographic location.


 Intelligence Partner Extensions


 Extensions are&nbsp;integrations that enhance&nbsp;IP Address Cards with content
 from our&nbsp;Intelligence Partners.&nbsp;<a href="https://support.recordedfuture.com/hc/en-us/articles/115001398448" target="_blank" rel="noopener">Click here</a>
 to learn more. &nbsp;We also have a
 <a href="https://support.recordedfuture.com/hc/en-us/articles/115001351467" target="_blank" rel="noopener">training page</a>
 specific to the extensions available on an IP Address Card.

Refine your search

We could not find any results for your search, so why not start with the articles listed below?

IP 주소 카드