Bad Neighborhoods Predict Which Computers Turn To Crime, Also

Recorded Future describes an SVM-based predictive intelligence approach that analyzes OSINT and CIDR neighborhood proximity to assign risk scores to IPv4 addresses likely to become involved in botnets or act as command-and-control nodes; the system reportedly flagged some IPs days before they appeared on public malicious lists (example: an IP later used by DarkComet), suggesting neighborhood "contagion" effects and potential use for SOCs to proactively block or monitor high-risk addresses.