Skip to content

Comments

Add domain and IP reputation command with ASN modeling#9

Merged
aaron-stephens merged 1 commit intomainfrom
reputation
Feb 5, 2026
Merged

Add domain and IP reputation command with ASN modeling#9
aaron-stephens merged 1 commit intomainfrom
reputation

Conversation

@tgats1
Copy link
Contributor

@tgats1 tgats1 commented Feb 5, 2026

Adds s1.validin.reputation command for domain and IP reputation checks with comprehensive data modeling.

Features

New Command:

  • s1.validin.reputation - supports inet:fqdn, inet:ipv4, inet:ipv6
  • Optic UI integration

Data Model:

  • Domain: verdict, score, ranking properties (Majestic, Tranco, Umbrella, Anchors)
  • IP: verdict, score, pivot count, top addresses rank
  • Automatic ASN and geolocation parsing for IPs
  • Enhanced ASN modeling with inet:asnet4/inet:asnet6 for CIDR relationships

Implementation:

  • New s1.validin.ingest.reputation module
  • API endpoints for domain and IP reputation
  • Helper functions for ASN extraction and node creation
  • Comprehensive test coverage

Version

3.4.0

@tgats1 tgats1 requested a review from aaron-stephens February 5, 2026 14:04
@aaron-stephens aaron-stephens merged commit 045b977 into main Feb 5, 2026
2 checks passed
@aaron-stephens aaron-stephens deleted the reputation branch February 5, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants