01 // BLOCK
IP blocking
Add IP addresses to a blocklist, allowlist or challenge list from the Dashboard, CLI or API. Changes apply immediately. The same controls cover IP ranges, countries and ASNs, including time-limited blocks.
Take control →BitNinja · IPREP
BitNinja real-time IP reputation
The BitNinja Defense Network uses a database of 100M+ IP addresses to identify malicious and suspicious IP traffic in real time. Hosting providers and server administrators can block or challenge known bad actors before they reach Linux servers.
Start free trial
[ no credit card · 7-day full arsenal ]
sys://ip-reputation
The power of real-time IP reputation
Stop known-bad IPs early, keep list control, and challenge suspicious traffic instead of over-blocking.
01
Load reduction
Known bad actors can be stopped early, reducing unnecessary server load and CPU usage.
02
Flexibility and control
User-level IP management for specific IPs, ranges, countries and ASNs.
03
Low false positives
Challenge lists sit between block and allow, so suspicious traffic is not treated the same as confirmed malicious IPs.
sys://definition
What is IP reputation?
IP reputation evaluates IP addresses based on signals associated with their previous or observed behavior, and can be used to make decisions about incoming traffic. Hosting providers and server administrators use it to identify malicious or suspicious IPs before that traffic reaches web server infrastructure. BitNinja applies this as real-time IP reputation on protected Linux servers and hosting infrastructure.
sys://ip-pipeline
How does BitNinja IP Reputation work?
BitNinja IP Reputation checks incoming connections against its real-time IP reputation database, then blocks, challenges or allows the traffic.
01
Incoming connection
A connection or request arrives at a BitNinja-protected server.
02
IP reputation check
BitNinja looks up the source IP in its real-time IP reputation database.
03
Reputation-based decision
Available reputation information determines whether the IP should be allowed, challenged or blocked.
04
Block, challenge or allow
Malicious IPs can be dropped, suspicious IPs challenged, and trusted or unlisted traffic allowed through.
05
Immediate protection
Protected servers apply the decision in real time. Incident information can also update how that IP is treated.
sys://ip-depth
IP blocking and traffic control
Control malicious IP traffic, and give legitimate visitors a way back.
02 // CAPTCHA
Challenge lists, CAPTCHA and BIC
Challenge lists provide an intermediate response between allowing and blocking traffic, so legitimate visitors can regain access where applicable. You can brand the CAPTCHA and BIC pages with your own design or copy.
Customize security →sys://hosting
Real-time IP reputation for hosting providers
BitNinja real-time IP reputation helps hosting providers stop malicious IP traffic early and control remaining traffic across Linux servers.
01
Reduced unnecessary server load
Stopping known malicious actors early reduces resources spent processing unwanted traffic, so CPU stays available for customer sites.
Shared hosting security →02
Scalable traffic control
Apply IP reputation across the servers in your account so malicious traffic is handled at the server layer.
03
Flexible protection
Block, allow and challenge controls work with IP, range, country and ASN management, so operators can tune protection without an all-or-nothing blocklist.
sys://user-signal
“We saved an enormous amount of server resources that we can now use for legitimate customer activity.”
sys://faq
IP reputation FAQ
IP reputation, traffic control, country and ASN rules, and false-positive handling.
What is IP reputation?
IP reputation evaluates an IP address from signals associated with its previous or observed behavior. That evaluation is used to decide whether incoming traffic should be blocked, challenged or allowed. BitNinja uses this as real-time IP reputation on Linux servers.
How does IP reputation work?
IP reputation works by checking a connecting IP against known behavior, then applying a security action. Malicious IPs can be blocked, suspicious IPs challenged, and trusted traffic allowed. BitNinja runs that check in real time when a connection arrives.
How does BitNinja use IP reputation to protect servers?
BitNinja checks incoming connections against its IP reputation database and then blocks, challenges or allows the traffic. Known malicious IPs can be dropped before they consume server resources. You can also maintain your own blocklists, allowlists and challenge lists.
Can I block or allow specific IP addresses with BitNinja?
Yes. You can add specific IP addresses to a blocklist, allowlist or challenge list. Management is available through the Dashboard, CLI and API, and changes apply immediately.
Can BitNinja manage traffic by country or ASN?
Yes. BitNinja can manage or block traffic by country and ASN, including for set periods. Those controls sit alongside specific IP and IP range management.
How does BitNinja reduce false positives when managing suspicious IP traffic?
It uses a challenge list between allow and block, instead of only a hard blocklist. Legitimate visitors can regain access via CAPTCHA or BIC where applicable. IPs that should never be filtered can be allowlisted.
[ full arsenal · no limitations ]
Enjoy a full 7-day trial accessing all our features without limitations
Don't worry. The installation process is quick and straightforward.
[ No credit card required ]