Use our IPv6 enrichment categories

Article summary

Did you find this summary helpful?

Thank you for your feedback

Enriching an IPv6 address helps your security teams to understand the origin, function and risk level of the observable.

Enriched IPv6 data is spread out across 12 categories and sub-categories, including:

Element	Description
`Date`	-
`Density`	The amount of domains pointing to an IP address
`Subnet`	The IPs subnet
`SP Risk Score`	A final score that based on all data and scores from each enriched attribute

Element	Description
`ASN`	A score that includes recency, frequency, and the number of NS changes.
`AS Name`	The name of the AS.
`AS Rank`	A ranking of ASNs associated with threats listed on feeds, calculated using a weighted formula based on the type of threat observed.
`ASN Takedown Reputation`	A reputation score based on the time it takes for the ASN owner to react to takedown requests related to malicious URLs - a higher reputation score indicates the ASN owner is slow to react to takedown requests. Scores are based on the following variables: `IPs in ASN`, `IP's with URL listed`, `Number of URLs listed` and `Listing Max Age`.
`ASN Allocation Age`	The age of an AS number in days.
`ASN Allocation Date`	The date an AS Number was assigned by IANA.
`ASN Reputation`	The ratio of blacklisted IPs, taken from from the total number of IPs that have been observed as being active within an ASN, in the last 30 days. Scores are based on the following variables: `IPs in ASN`, `Active IPs`, `IPs Listed`.

This category contains a list of the most recent DNS records found, with an option to pivot through passive DNS data for each record type.

The total amount of records is displayed at the bottom of the table.

Was this article helpful?