Skip to content

Add domain and IP reputation command with ASN modeling - #9

Merged
aaron-stephens merged 1 commit into
mainfrom
reputation
Feb 5, 2026
Merged

Add domain and IP reputation command with ASN modeling#9
aaron-stephens merged 1 commit into
mainfrom
reputation

Conversation

@tgats1

@tgats1 tgats1 commented Feb 5, 2026

Copy link
Copy Markdown
Contributor

Adds s1.validin.reputation command for domain and IP reputation checks with comprehensive data modeling.

Features

New Command:

  • s1.validin.reputation - supports inet:fqdn, inet:ipv4, inet:ipv6
  • Optic UI integration

Data Model:

  • Domain: verdict, score, ranking properties (Majestic, Tranco, Umbrella, Anchors)
  • IP: verdict, score, pivot count, top addresses rank
  • Automatic ASN and geolocation parsing for IPs
  • Enhanced ASN modeling with inet:asnet4/inet:asnet6 for CIDR relationships

Implementation:

  • New s1.validin.ingest.reputation module
  • API endpoints for domain and IP reputation
  • Helper functions for ASN extraction and node creation
  • Comprehensive test coverage

Version

3.4.0

@tgats1
tgats1 requested a review from aaron-stephens February 5, 2026 14:04
@aaron-stephens
aaron-stephens merged commit 045b977 into main Feb 5, 2026
2 checks passed
@aaron-stephens
aaron-stephens deleted the reputation branch February 5, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants