Many companies use a prefabricated blacklist of IP addresses to ‘teach’ their firewall which IPs are trustworthy. However, a 2015 study from Recorded Future found that 92% of all suspicious IPs in existence are not currently blacklisted.