IP Reputation
Track and score sender IPs based on their behavior over time.
How It Works
SecZim maintains a reputation score for each IP address that sends email to your server. Scores range from 0 (worst) to 100 (best) and are updated based on observed behavior.
Score Ranges
| Score | Rating | Action |
|---|---|---|
| 80-100 | Excellent | Allow with minimal checks |
| 60-79 | Good | Normal processing |
| 40-59 | Neutral | Standard security checks |
| 20-39 | Poor | Enhanced scrutiny |
| 0-19 | Bad | Block or heavy restrictions |
Factors Affecting Score
- Spam sent: Large negative impact
- Failed authentication: Negative impact
- RBL listings: Negative impact
- Good email delivered: Positive impact
- Time without incidents: Gradual recovery
View IP Reputation
In the dashboard, go to Intelligence → IP Reputation to see:
- Current scores for all tracked IPs
- Score history and trends
- Recent events affecting score
Manual Adjustments
You can manually adjust IP reputation:
- Reset: Return to neutral score (50)
- Whitelist: Set to 100 (always trusted)
- Blacklist: Set to 0 (always blocked)
Auto-Recovery
IP scores gradually recover over time if no negative behavior is observed. This allows previously blocked senders to regain access.
Configure Thresholds
In Settings → IP Reputation:
- Set minimum score for automatic acceptance
- Set score below which IPs are blocked
- Configure score decay rate