Enriching an ASN provides a wealth of additional data that allows security teams to understand an ASNs risk level, the role it plays in hosting and propagating malicious activity, and the underlying nature of the IP infrastructure hosted on it.

ASN enrichment categories

ASN enrichment data is provided across the following categories and sub-categories, for each enriched ASN:

• ASN Information
  • AS Number
  • ASN size
  • AS Name
  • Average Density
  • Max Density
  • Active IPs
  • Active Subnets
• WHOIS RDAP data
  • Copyright Notice
  • Description
  • Handle
  • Expiration Date
  • Last Changed Date
  • Registration Date
  • URL
  • WHOIS Server
• ASN Takedown Reputation
  • ASN Takedown Reputation Score
  • ASN Allocation Age
  • ASN Allocation Date
  • IPs active
  • IPs in ASN
  • IPs with URLS Listed
  • Number of URLs listed
  • Lifetime Avg
  • Lifetime Max
  • Lifetime Total
• ASN Reputation Score
• Subnets
  • Subnet Size
  • Active IPs
  • Active Density
  • Max Density
  • Density Deviation

ASN risk scores

Silent Push provides two risk scores related to each ASN.

ASN Takedown Reputation (0-100)

An ASNs Takedown Reputation Score is based on the time it takes for the ASN owner to react to takedown requests related to malicious URLs.

A higher reputation score indicates the ASN owner is slow to react to takedown requests.

ASN Reputation (0-100)

An ASN's Reputation Score (as distinct from a Takedown Reputation Score) is based on the ratio of blacklisted IPs, taken from from the total number of IPs that have been observed as being active within an ASN, in the last 30 days.

A higher reputation score indicates a higer amount of blacklisted IPs.