ASN

Introduction

The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.

There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.

Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.

Explanation

These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:

  • Number - The total number of C&C's hosted within that ASN
  • Closed - What percent of the C&C's that are now inactive
  • CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
  • CC Scans - The number of scans into other networks the C&C's issues from that ASN
  • CC CHosts - The number of successful compromises completed by that C&C's within that ASN
  • TGT DDOS - The number of DDOS attacks that were targeted to this ASN
  • TGT Scans - The number of scans that were targeted to this ASN
  • TGT CHosts - The number of hosts compromised within this ASN

Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.

↑ Contents

Updates

These reports are updated once a day.

↑ Contents

By Number

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
3265 1271 XS4ALL - NL XS4ALL 14% 0 0 0 169 2509 784 1603
23522 1261 IPNAP-ES - Ecomdevel, LLC 46% 14023 47661 207543 14011 310 0 455
30058 597 FDCSERVERS - FDCservers.net 56% 25501 16949 339 9085 1001 0 23385
174 482 COGENT - Cogent/PSI 15% 355 6169 1888 2358 21529 111 53371
790 438 EUNETFI - EUnet Finland 0% 0 0 0 105 4487 15 264
25700 430 25700 - SWIFT VENTURES Inc 9% 5 7064 0 592 662 1 15939
25761 419 STAMINUS-COMM - Staminus Communications 10% 1295 46853 1165 31406 757 0 14274
41075 410 ATW - AS ATW Internet Kft. 2% 7 700 4 24 10 0 100
31800 398 DALNET - DALnet 1% 0 0 0 1669 12 0 0
16276 367 OVH - OVH 33% 761 4872 1100 8859 1338 219 25607
46844 366 ST-BGP - SHARKTECH INTERNET SERVICES 30% 1038 2004 1296 40783 0 0 1089
12989 351 HWNG - Highwinds Network Group, Inc. 0% 0 0 0 93 234 0 4007
13768 338 PEER1 - Peer 1 Network Inc. 15% 6715 328 0 4535 11509 46 237575
1653 329 SUNET - SUNET Swedish University Network 1% 0 0 0 22 1577 10 167
14037 325 AS-RVB-1 - RackVibe LLC 11% 177 2842 1171 3372 0 0 488
31669 317 ITSS - AS IT - SOLID SOLUTIONS 0% 0 0 0 2 47 0 2
13301 307 UNITEDCOLO - AS Autonomous System of unitedcolo.de 67% 35706 5972271 23818 602 367 6 5559
5 287 SYMBOLICS - Symbolics, Inc. 100% 0 0 0 0 0 0 0
17048 285 AWKNET - Awknet Communications, LLC 19% 1175 31418 10846 11379 0 0 1473
33569 272 ALLHOSTSHOP - ALLHOSTSHOP.COM 2% 14 0 0 118 298 0 101
16265 256 LEASEWEB - LEASEWEB AS 50% 20809 872 2960 16211 2607 9 59667
23352 252 SERVERCENTRAL - Server Central Network 7% 691 154 0 1112 1896 0 476284
21844 245 THEPLANET-AS - ThePlanet.com Internet Services, Inc. 46% 6183 1599 239 34971 746 19 358604
35908 238 VPLSNET - VPLS Inc. d/b/a Krypt Technologies 10% 978 1 0 22906 1727 0 9325
30217 232 DESYNC - Desync Networks 1% 6 237 0 200 1529 34 1332
13213 227 UK2NET - AS UK-2 Ltd Autonomous System 48% 593 6104 79 776 6068 3 641
22653 211 GLOBALCOMPASS - Cyber Wurx LLC 0% 0 0 0 81 299 10742 906

↑ Contents

By Highest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
5 287 SYMBOLICS - Symbolics, Inc. 100% 0 0 0 0 0 0 0
12832 104 LYCOS - EUROPE Lycos Europe GmbH 100% 3103 1565 4444 351 930 0 7995
24989 84 IXEUROPE-DE-FRANKFUR - ASN IX Europe Germany AS 100% 915 47406 902 171 529 1 688
8376 71 GO - JOR Autonomous System 100% 3 9887 0 366 233 136 3202
25232 49 VZD - LR Valsts Zemes Dienests 100% 87 278 0 42 30449 0 84
19048 47 CORIO - Corio, Inc. 100% 0 0 0 6 766 482 0
20228 47 PACNET-MX - Pacnet, S.A. de C.V. 100% 0 0 0 0 33 0 2250
4686 46 BEKKOAME - BEKKOAME INTERNET INC. 100% 0 2 0 0 559 0 132
26496 44 PAH-INC - GoDaddy.com, Inc. 100% 10 0 0 12907 4516 26 15365
20773 39 HOSTEUROPE - AS AS of Hosteurope Germany / Cologne 100% 15708 32097 532 8259 734 80 1337
26228 32 SERVEPATH - ServePath, LLC 100% 1143 6 0 1252 472 25 4770
5603 31 SIOL - NET Telekom Slovenije d.d. 100% 288 2266 3030 917 507 423 77
31365 29 SGSTELEKOM - SGS Telekom Autonomous System 100% 175 1 0 181 60 0 383
3561 25 SAVVIS - Savvis 100% 3149 28055 55490 3885 10225 6 78587
9155 24 QualityNet - AS number 100% 190 72 0 2000 755 217 112
21050 19 FAST - TELCO Fast Telecommunications Company W.L.L. 100% 20 488 1 869 6130 50 1019
22439 18 VRTSERVERS - Vrtservers, Inc 100% 0 0 0 80 21 11 2755
13601 17 ASN-INNERHOST - Peer 1 Dedicated Hosting 100% 7 57924 278 673 783 0 186
48587 17 NET-0X2A - AS Private Entrepreneur Zharkov Mukola Mukolayovuch 100% 0 0 0 0 0 0 126500
25229 16 VOLIA - AS Kyivski Telekomunikatsiyni Merezhi LLC 100% 5832 41 0 905 291 29 38
31530 16 SERVERCREW - AS Autonomes System 100% 85 2 0 114 3830 0 28
29737 16 WOW-INTERNET - WideOpenWest Finance LLC 100% 721 365031 0 76 14026 17 43
9848 16 GNGAS - Enterprise Networks 100% 205 195 0 7 3782 26 4977
9498 16 BBIL - AP BHARTI Airtel Ltd. 100% 0 0 0 692 102277 1095 2392
9394 15 CRNET - CHINA RAILWAY Internet(CRNET) 100% 53585 4 0 168 13869 2600 4042
16629 14 CTC. - CORP S.A. (TELEFONICA EMPRESAS) 100% 0 0 0 10 25945 26 30
6855 14 SK - SLOVAK TELECOM, AS6855 100% 0 3 0 7 2107 1436 1575

↑ Contents

By Lowest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
790 438 EUNETFI - EUnet Finland 0% 0 0 0 105 4487 15 264
12989 351 HWNG - Highwinds Network Group, Inc. 0% 0 0 0 93 234 0 4007
31669 317 ITSS - AS IT - SOLID SOLUTIONS 0% 0 0 0 2 47 0 2
22653 211 GLOBALCOMPASS - Cyber Wurx LLC 0% 0 0 0 81 299 10742 906
25176 207 AC - NET LaNet Vasterbotten Data och Tele AB 0% 0 0 0 7 2191 21 107
41164 186 GET - NO GET Norway 0% 0 0 0 25 3125 3 4
39369 185 PORT80 - Port80 AB, Sweden 0% 0 0 0 15 5082 40 1306
35028 184 MULTIPLAY - Multiplay AS Number 0% 0 0 0 11 26 0 0
224 130 UNINETT - UNINETT, The Norwegian University & Research Network 0% 0 0 0 17 549 132 14
15694 75 ATMAN - ATMAN Autonomous System 0% 0 0 0 11 164 76 879
40431 66 TRAVAIL-SYSTEMS - Travail Systems, INC 0% 0 0 0 0 0 0 30
40395 62 VIRTBIZ-DALLAS - VIRTBIZ Internet Services 0% 0 0 0 32 0 0 2
35366 58 ISPPRO - AS ISPpro Internet KG 0% 6 443 2 83 69 1 7
39546 53 MG - AS ISP MG 0% 7062 0 0 4 6 0 0
32787 50 PROLEXIC - Prolexic Technologies, Inc. 0% 0 0 0 7526 978 23 4628
16557 48 COLOSOLUTIONS - Colo Solutions, Inc. 0% 0 0 0 83 1513 0 544
4436 47 AS-NLAYER - nLayer Communications, Inc. 0% 0 0 0 73 797 0 29963
3701 46 NERONET - Oregon Joint Graduate Schools of Engineering 0% 0 0 0 0 17 10 1119
36375 42 UMICH-AS-5 - University of Michigan 0% 0 73 2 17 104 58 9
7678 41 PROX - Prox System Design Inc. 0% 0 0 0 0 44 1 57
29117 38 IRC - HISPANO http://www.irc-hispano.es/ 0% 0 0 0 0 8 0 0
2833 36 SUNET - UMU SUNET-UMU 0% 0 0 0 0 262 6 2
35425 36 BYTEMARK - AS Bytemark Computer Consulting Ltd 0% 0 0 0 195 67 2 12
13049 33 FRONTIER - Frontier Online Autonomous System 0% 0 0 0 0 47 0 11
23028 33 TEAM-CYMRU - Team Cymru Inc. 0% 0 0 0 0 497 7 0
9192 32 LLEIDANET - Lleida - Catalonia - Spain 0% 0 4 0 0 0 0 27
9 32 CMU-ROUTER - Carnegie Mellon University 0% 0 0 0 0 1353 43 8

↑ Contents

<< | Statistics | Bots >>