Suspicious ASNs and Registrars

Enrich your detections and alerts with additional metadata related to ASNs and Domain Registrar we have found to be associated with malicious and/or suspicious activity. This dataset is powered by our ML models that help us rate from 0 - 100 either a Domain Registrar or ASN. It should be noted that the ASNs and Registrars in this dataset also host benign traffic as well, and this information is best put to use to better contextualizing/enriching your existing security alerts.

Sample Table:
DERIVATIVES

Fields Included:
- Type: ASN or Registrar
- Value: The name of the domain registrar or ASN number
- Location: Country Code associated to the findings
- Description: Long form description of our observations in our dataset, this contributes to the rating and confidence
- Rating: 0 - 100, higher means more suspicious
- Confidence: Low, Medium, High
- Last Updated: Timestamp of when we last updated the associated record

Disclaimer:
Many of these listings are associated with benign traffic, please refer to the description values for more context as to why we arrived as a Rating and Confidence.