11.1.2. IP Reputation Format¶
Description of IP Reputation file formats. For the configuration see IP Reputation Config and IP Reputation Keyword for the rule format.
220.127.116.11. Categories file¶
The categories file provides a mapping between a category number, short name, and long description. It’s a simple CSV file:
1,BadHosts,Known bad hosts 2,Google,Known google host
The maximum value for the category id is hard coded at 60 currently.
18.104.22.168. Reputation file¶
The reputation file lists a reputation score for hosts in the categories. It’s a simple CSV file:
The IP is an IPv4 address in the quad-dotted notation or an IPv6 address. Both IP types support networks in CIDR notation. The category is the number as defined in the categories file. The reputation score is the confidence that this IP is in the specified category, represented by a number between 1 and 127 (0 means no data).
If an IP address has a score in multiple categories it should be listed in the file multiple times.
This lists 22.214.171.124 in categories 1 and 2, each with a score of 10.