Bans

Events may include Recommendations of type BAN_IP, BAN_ACTION, or BAN_DEVICE. In these cases, you should enforce the ban according to your best judgment and using the tools you have available.

Expiration

Ban objects on Recommendations may contain an expiration time on the until property. This gives you a recommended time limit on the ban.

Configure

Coming soon.

You can set your preferences on how bans are handled and what type of ban recommendations you receive in your Dashboard.

Handling false positives

Rarely, a user undergoing normal activity might be operating on an IP that was previously identified as a threat. We are expanding our API to support IP whitelisting, and this functionality is coming soon.