Blog
Notes from the engine.
How fraud detection actually works, what our signals mean, and how to use the free API and open data.
July 3, 20265 min read
fail2ban, but every ban helps everyone
fail2ban only knows the IPs that already attacked you. Wire it to a shared, free abuse database and block attackers before they ever reach you.
ReadJuly 2, 20265 min read
Anatomy of a command-and-control IP
What a fraud score of 95 actually means. We walk one real C2 server through every signal ffraud saw, and why the score landed where it did.
ReadJuly 2, 20264 min read
Block disposable email signups in one request
Throwaway inboxes are the cheapest way to fake an account. Here are two free ways to stop them: one API call, or a local list you never have to call at all.
Read