Introduction
The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.
There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.
Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.
Explanation
These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:
- Number - The total number of C&C's hosted within that ASN
- Closed - What percent of the C&C's that are now inactive
- CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
- CC Scans - The number of scans into other networks the C&C's issues from that ASN
- CC CHosts - The number of successful compromises completed by that C&C's within that ASN
- TGT DDOS - The number of DDOS attacks that were targeted to this ASN
- TGT Scans - The number of scans that were targeted to this ASN
- TGT CHosts - The number of hosts compromised within this ASN
Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.
Updates
These reports are updated once a day.
By Number
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3265 | 1291 | XS4ALL - NL XS4ALL | 15% | 0 | 0 | 0 | 174 | 2509 | 784 | 2837 |
| 16276 | 564 | OVH - OVH | 31% | 2206 | 4993 | 1239 | 9475 | 1338 | 219 | 31859 |
| 23522 | 540 | IPNAP-ES - Ecomdevel, LLC | 91% | 14023 | 47661 | 207543 | 14539 | 310 | 0 | 419 |
| 30058 | 528 | ACTIVO-SYSTEMS - AS30058 ACTIVO-SYSTEMS-AS30058 | 73% | 35229 | 16963 | 344 | 17230 | 1001 | 0 | 39486 |
| 25761 | 519 | STAMINUS-COMM - Staminus Communications | 10% | 1295 | 46879 | 1165 | 39218 | 757 | 0 | 17539 |
| 36666 | 497 | GTCOMM - GloboTech Communications | 75% | 53 | 1 | 324259 | 1852 | 17 | 0 | 5052 |
| 41075 | 496 | ATW - AS ATW Internet Kft. | 2% | 7 | 700 | 4 | 24 | 10 | 0 | 456 |
| 174 | 493 | COGENT - Cogent/PSI | 16% | 355 | 6169 | 1888 | 2524 | 21529 | 111 | 60012 |
| 790 | 443 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 284 |
| 46844 | 401 | ST-BGP - SHARKTECH INTERNET SERVICES | 37% | 1058 | 2103 | 1305 | 45888 | 0 | 0 | 4649 |
| 25700 | 388 | 25700 - SWIFT VENTURES Inc | 9% | 5 | 7064 | 0 | 719 | 662 | 1 | 15550 |
| 12989 | 355 | HWNG - Highwinds Network Group, Inc. | 0% | 0 | 0 | 0 | 119 | 234 | 0 | 4775 |
| 3292 | 347 | TDC - TDC Data Networks | 0% | 12 | 2 | 0 | 3117 | 11765 | 657 | 27428 |
| 1653 | 344 | SUNET - SUNET Swedish University Network | 1% | 0 | 0 | 0 | 22 | 1577 | 11 | 221 |
| 14037 | 330 | AS-RVB-1 - RackVibe LLC | 12% | 177 | 2842 | 1171 | 3480 | 0 | 0 | 642 |
| 13301 | 324 | UNITEDCOLO - AS Autonomous System of unitedcolo.de | 67% | 51554 | 5972271 | 23818 | 602 | 367 | 6 | 6628 |
| 31669 | 322 | ITSS - AS IT - SOLID SOLUTIONS | 0% | 0 | 0 | 0 | 2 | 47 | 0 | 2 |
| 31800 | 320 | DALNET - DALnet | 0% | 0 | 0 | 0 | 1719 | 12 | 0 | 3 |
| 17048 | 308 | AWKNET - Awknet Communications, LLC | 34% | 1175 | 31418 | 10846 | 14717 | 0 | 0 | 1583 |
| 23352 | 296 | SERVERCENTRAL - Server Central Network | 12% | 691 | 154 | 0 | 1493 | 1896 | 0 | 766065 |
| 16265 | 281 | LEASEWEB - LEASEWEB AS | 47% | 23019 | 872 | 2960 | 24937 | 2607 | 9 | 73255 |
| 33569 | 267 | ALLHOSTSHOP - ALLHOSTSHOP.COM | 1% | 14 | 0 | 0 | 203 | 298 | 0 | 2554 |
| 5 | 261 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 35908 | 255 | VPLSNET - VPLS Inc. d/b/a Krypt Technologies | 12% | 978 | 1 | 0 | 35384 | 1727 | 0 | 13006 |
| 30217 | 242 | DESYNC - Desync Networks | 1% | 6 | 237 | 0 | 300 | 1529 | 34 | 1405 |
| 13213 | 238 | UK2NET - AS UK-2 Ltd Autonomous System | 44% | 593 | 6104 | 79 | 776 | 6068 | 3 | 1055 |
| 28753 | 235 | NETDIRECT - AS NETDIRECT Frankfurt, DE | 45% | 49819 | 42646 | 6 | 21500 | 993 | 13 | 485832 |
By Highest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 5 | 261 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 12832 | 101 | LYCOS - EUROPE Lycos Europe GmbH | 100% | 3103 | 1565 | 4444 | 351 | 930 | 0 | 7993 |
| 24989 | 84 | IXEUROPE-DE-FRANKFUR - ASN IX Europe Germany AS | 100% | 915 | 47406 | 902 | 171 | 529 | 1 | 907 |
| 8376 | 68 | GO - JOR Autonomous System | 100% | 3 | 9887 | 0 | 388 | 233 | 136 | 176 |
| 25232 | 49 | VZD - Valsts Zemes Diensts | 100% | 87 | 278 | 0 | 42 | 30449 | 0 | 84 |
| 19048 | 47 | CORIO - Corio, Inc. | 100% | 0 | 0 | 0 | 6 | 766 | 482 | 0 |
| 20228 | 47 | PACNET-MX - Pacnet, S.A. de C.V. | 100% | 0 | 0 | 0 | 0 | 33 | 0 | 2275 |
| 4686 | 46 | BEKKOAME - BEKKOAME INTERNET INC. | 100% | 0 | 2 | 0 | 0 | 559 | 0 | 132 |
| 26496 | 45 | PAH-INC - GoDaddy.com, Inc. | 100% | 10 | 0 | 0 | 16772 | 4516 | 39 | 19714 |
| 5603 | 33 | SIOL - NET Telekom Slovenije d.d. | 100% | 288 | 2266 | 3030 | 917 | 507 | 423 | 234 |
| 37898 | 31 | BARTOK - NET digitiminimi, inc. | 100% | 13 | 7183 | 0 | 0 | 18 | 0 | 0 |
| 17506 | 29 | UCOM - UCOM Corp. | 100% | 661 | 25846 | 13107 | 38 | 3061 | 436 | 14100 |
| 3561 | 25 | SAVVIS - Savvis | 100% | 3149 | 28055 | 55490 | 3940 | 10225 | 6 | 83535 |
| 9155 | 22 | QNET - QualityNet AS number | 100% | 190 | 72 | 0 | 2007 | 755 | 217 | 112 |
| 1785 | 21 | AS-PAETEC-NET - PaeTec Communications, Inc. | 100% | 208 | 4598 | 0 | 297 | 9635 | 139 | 15588 |
| 209 | 21 | ASN-QWEST - Qwest Communications Company, LLC | 100% | 59 | 0 | 0 | 860 | 47389 | 308 | 64892 |
| 38356 | 19 | TIMENET - BeiJing Sincerity-times Network Technology Project Ltd. | 100% | 23679 | 0 | 0 | 450 | 0 | 28 | 2089 |
| 21050 | 19 | FAST - TELCO Fast Telecommunications Company W.L.L. | 100% | 20 | 488 | 1 | 871 | 6130 | 50 | 1016 |
| 13601 | 17 | ASN-INNERHOST - Peer 1 Dedicated Hosting | 100% | 7 | 57924 | 278 | 783 | 783 | 0 | 242 |
| 25229 | 16 | VOLIA - AS Kyivski Telekomunikatsiyni Merezhi LLC | 100% | 9772 | 41 | 0 | 2006 | 291 | 29 | 2157 |
| 22439 | 16 | VRTSERVERS - Vrtservers, Inc | 100% | 0 | 0 | 0 | 176 | 21 | 11 | 3115 |
| 31530 | 16 | SERVERCREW - AS Autonomes System | 100% | 85 | 2 | 0 | 114 | 3830 | 0 | 28 |
| 9498 | 16 | BBIL - AP BHARTI Airtel Ltd. | 100% | 0 | 0 | 0 | 692 | 102277 | 1095 | 2318 |
| 9394 | 15 | CRNET - CHINA RAILWAY Internet(CRNET) | 100% | 88870 | 4 | 0 | 198 | 13869 | 2622 | 4668 |
| 29737 | 15 | WOW-INTERNET - WideOpenWest Finance LLC | 100% | 721 | 365031 | 0 | 78 | 14026 | 20 | 45 |
| 16629 | 14 | CTC. - CORP S.A. (TELEFONICA EMPRESAS) | 100% | 0 | 0 | 0 | 10 | 25945 | 26 | 32 |
| 6855 | 14 | SK - SLOVAK TELECOM, AS6855 | 100% | 0 | 3 | 0 | 7 | 2107 | 1437 | 2586 |
By Lowest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3292 | 474 | TDC - TDC Data Networks | 0% | 12 | 2 | 0 | 3117 | 11765 | 657 | 27428 |
| 790 | 443 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 284 |
| 12989 | 355 | HWNG - Highwinds Network Group, Inc. | 0% | 0 | 0 | 0 | 119 | 234 | 0 | 4776 |
| 31669 | 322 | ITSS - AS IT - SOLID SOLUTIONS | 0% | 0 | 0 | 0 | 2 | 47 | 0 | 2 |
| 31800 | 320 | DALNET - DALnet | 0% | 0 | 0 | 0 | 1719 | 12 | 0 | 3 |
| 22653 | 219 | GLOBALCOMPASS - Cyber Wurx LLC | 0% | 0 | 0 | 0 | 156 | 299 | 10742 | 1955 |
| 25176 | 216 | AC - NET LaNet Vasterbotten Data och Tele AB | 0% | 0 | 0 | 0 | 67 | 2191 | 21 | 107 |
| 35028 | 196 | MULTIPLAY - Multiplay AS Number | 0% | 0 | 0 | 0 | 11 | 26 | 0 | 0 |
| 39369 | 196 | PORT80 - Phonera Networks AB | 0% | 0 | 0 | 0 | 15 | 5082 | 43 | 2502 |
| 41164 | 193 | GET - NO GET Norway | 0% | 0 | 0 | 0 | 55 | 3125 | 3 | 4 |
| 224 | 160 | UNINETT - UNINETT, The Norwegian University & Research Network | 0% | 0 | 0 | 0 | 17 | 549 | 132 | 14 |
| 40395 | 69 | VIRTBIZ-DALLAS - VIRTBIZ Internet Services | 0% | 0 | 0 | 0 | 32 | 0 | 0 | 31 |
| 32787 | 64 | PROLEXIC - Prolexic Technologies, Inc. | 0% | 0 | 0 | 0 | 11969 | 978 | 23 | 4868 |
| 3701 | 60 | NERONET - Oregon Joint Graduate Schools of Engineering | 0% | 0 | 0 | 0 | 0 | 17 | 10 | 4786 |
| 17019 | 59 | JCHOST-NET - JCHost Internet Services, LLC | 0% | 0 | 0 | 0 | 0 | 7 | 0 | 0 |
| 35425 | 51 | BYTEMARK - AS Bytemark Computer Consulting Ltd | 0% | 0 | 0 | 0 | 823 | 67 | 2 | 18 |
| 2833 | 50 | SUNET - UMU Umea Universitet | 0% | 0 | 0 | 0 | 0 | 262 | 6 | 24 |
| 16557 | 48 | COLOSOLUTIONS - Colo Solutions, Inc. | 0% | 0 | 0 | 0 | 83 | 1513 | 0 | 826 |
| 13049 | 46 | FRONTIER - Frontier Online Autonomous System | 0% | 0 | 0 | 0 | 0 | 47 | 0 | 57 |
| 23028 | 46 | TEAM-CYMRU - Team Cymru Inc. | 0% | 0 | 0 | 0 | 0 | 497 | 7 | 35 |
| 9 | 45 | CMU-ROUTER - Carnegie Mellon University | 0% | 0 | 0 | 0 | 0 | 1353 | 43 | 61 |
| 39605 | 45 | IGUANESTUDIO - Iguane Studio SARL | 0% | 0 | 0 | 0 | 0 | 10 | 0 | 23 |
| 16186 | 45 | ASN-SSC - NO IP Group | 0% | 0 | 0 | 0 | 1 | 129 | 0 | 4 |
| 36375 | 42 | UMICH-AS-5 - University of Michigan | 0% | 0 | 73 | 2 | 17 | 104 | 58 | 9 |
| 29117 | 39 | IRC - HISPANO http://www.irc-hispano.es/ | 0% | 0 | 0 | 0 | 0 | 8 | 0 | 0 |
| 9192 | 33 | LLEIDANET - Lleida - Catalonia - Spain | 0% | 0 | 4 | 0 | 0 | 0 | 0 | 27 |
| 9153 | 29 | BURSTFIRE - EU Burstfire Networks Limited | 0% | 0 | 0 | 0 | 27 | 510 | 0 | 3 |
<< | Statistics | Bots >>
