Reputation queries enable security teams to assess the trustworthiness of network elements—Autonomous System Numbers (ASNs), IPv4 addresses, subnets, nameservers, and ASN takedown responsiveness—to prioritize threat intelligence and mitigate cyber risks. These tools provide reputation scores and takedown metrics, helping identify potentially malicious infrastructure such as phishing or malware distribution networks.
Obtain an ASN Reputation Score
ASN reputation scores measure the trustworthiness of networks associated with an ASN, based on factors like historical malicious activity, the number of associated IPs involved in threats, and network security practices.
From the left navigation menu, select Advanced Query Builder > Reputation Queries > ASN Reputation.
Specify an ASN.
(Optional) Select explain to show details of the data used to calculate the score.
Click Search.
Use Case: Prioritize monitoring of IPs and domains linked to low-reputation ASNs to reduce attack risks.
Obtain an ASN Takedown Reputation
ASN takedown reputation evaluates a service provider’s responsiveness and effectiveness in mitigating cyber threats, based on their history of addressing abuse reports.
From the left navigation menu, select Advanced Query Builder > PADNS Queries > ASN Takedown Reputation.
Specify an ASN.
(Optional) Select explain to show details of the data used to calculate the score.
Click Search.
Use Case: Identify networks likely to act swiftly against malicious activity or those requiring closer monitoring due to poor takedown performance.
Obtain an IPv4 Reputation Score
IPv4 reputation scores evaluate the trustworthiness of an IPv4 address (or range) based on its connections to threat infrastructure through DNS records, hosting services, or malicious traffic.
From the left navigation menu, select Advanced Query Builder > PADNS Queries > IPv4 Reputation.
Specify an IPv4 address.
(Optional) Select explain to show details of the data used to calculate the score.
Click Search.
Use Case: Block or monitor low-reputation IPs to prevent attacks like phishing or malware distribution.
Obtain a Subnet Reputation Score
Subnet reputation scores measure the trustworthiness of a specific subnet or range of IP addresses within a larger network, based on factors like associated malicious activity and security practices. These scores serve as an early warning system for potential threats.
Navigate to Advanced Query Builder > PADNS Queries > Subnet Reputation.
Specify a subnet and netmask.
(Optional) Select explain to show details of the data used to calculate the score.
Click Search.
Use Case: Focus resources on high-risk subnets to efficiently mitigate threats while avoiding unnecessary monitoring of low-risk subnets.
Obtain a Nameserver Reputation Score
Nameserver reputation scores assess the trustworthiness of nameservers associated with a domain, based on their historical activity, the number of malicious domains linked to them, and their security practices.
From the left navigation menu, select Advanced Query Builder > PADNS Queries > Nameserver Reputation.
Specify a nameserver.
(Optional) Select explain to show details of the data used to calculate the score.
Click Search.
Use Case: Identify domains using low-reputation nameservers to detect phishing or malware distribution.
Save Queries
Organizational users can save queries for future use or sharing.
Specify query parameters.
Click Save Query.
Provide a Name and Description for context.
Click Save. The query appears in Private Queries.