Suspicious ASNs and Registrars

Enrich your detections and alerts with additional metadata related to ASNs and Domain Registrar we have found to be associated with malicious and/or suspicious activity. This dataset is powered by our ML models that help us rate from 0 - 100 either a Domain Registrar or ASN. It should be noted that the ASNs and Registrars in this dataset also host benign traffic as well, and this information is best put to use to better contextualizing/enriching your existing security alerts. Sample Table: DERIVATIVES Fields Included: - Type: ASN or Registrar - Value: The name of the domain registrar or ASN number - Location: Country Code associated to the findings - Description: Long form description of our observations in our dataset, this contributes to the rating and confidence - Rating: 0 - 100, higher means more suspicious - Confidence: Low, Medium, High - Last Updated: Timestamp of when we last updated the associated record Disclaimer: Many of these listings are associated with benign traffic, please refer to the description values for more context as to why we arrived as a Rating and Confidence.

搜集汇总

背景与挑战

背景概述

该数据集提供与恶意或可疑活动相关的ASNs和域名注册商的元数据，通过0-100的评分和置信度等级来辅助安全警报的上下文分析。数据集包含类型、值、位置等字段，并强调这些信息主要用于丰富现有安全检测，而非直接标识恶意实体。