Introduction
The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.
There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.
Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.
Explanation
These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:
- Number - The total number of C&C's hosted within that ASN
- Closed - What percent of the C&C's that are now inactive
- CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
- CC Scans - The number of scans into other networks the C&C's issues from that ASN
- CC CHosts - The number of successful compromises completed by that C&C's within that ASN
- TGT DDOS - The number of DDOS attacks that were targeted to this ASN
- TGT Scans - The number of scans that were targeted to this ASN
- TGT CHosts - The number of hosts compromised within this ASN
Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.
Updates
These reports are updated once a day.
By Number
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3265 | 998 | XS4ALL - NL XS4ALL | 19% | 0 | 0 | 0 | 174 | 2509 | 784 | 3262 |
| 30058 | 557 | ACTIVO-SYSTEMS - AS30058 ACTIVO-SYSTEMS-AS30058 | 69% | 35229 | 16963 | 344 | 17717 | 1001 | 0 | 45459 |
| 23522 | 525 | IPNAP-ES - Ecomdevel, LLC | 91% | 14023 | 47661 | 207543 | 14539 | 310 | 0 | 430 |
| 41075 | 522 | ATW - AS ATW Internet Kft. | 2% | 7 | 700 | 4 | 24 | 10 | 0 | 637 |
| 3292 | 511 | TDC - TDC Data Networks | 1% | 12 | 2 | 0 | 3708 | 11765 | 657 | 27458 |
| 174 | 503 | COGENT - Cogent/PSI | 15% | 355 | 6169 | 1888 | 2874 | 21529 | 111 | 62189 |
| 25761 | 497 | STAMINUS-COMM - Staminus Communications | 16% | 1296 | 46879 | 1165 | 40602 | 757 | 0 | 11662 |
| 16276 | 486 | OVH - OVH | 37% | 3461 | 5162 | 1239 | 9530 | 1338 | 219 | 34613 |
| 36666 | 472 | GTCOMM - GloboTech Communications | 75% | 53 | 1 | 324259 | 2230 | 17 | 0 | 5072 |
| 790 | 460 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 295 |
| 46844 | 450 | ST-BGP - SHARKTECH INTERNET SERVICES | 36% | 2862 | 4002 | 1329 | 46679 | 0 | 0 | 7067 |
| 25700 | 410 | 25700 - SWIFT VENTURES Inc | 9% | 66 | 7071 | 0 | 873 | 662 | 1 | 15835 |
| 1653 | 364 | SUNET - SUNET Swedish University Network | 1% | 0 | 0 | 0 | 22 | 1577 | 11 | 221 |
| 13301 | 334 | UNITEDCOLO - AS Autonomous System of unitedcolo.de | 65% | 51554 | 5972271 | 23818 | 602 | 367 | 6 | 7318 |
| 31800 | 322 | DALNET - DALnet | 0% | 0 | 0 | 0 | 1769 | 12 | 0 | 3 |
| 23352 | 316 | SERVERCENTRAL - Server Central Network | 12% | 691 | 154 | 0 | 1497 | 1896 | 0 | 820258 |
| 33569 | 299 | ALLHOSTSHOP - ALLHOSTSHOP.COM | 1% | 14 | 0 | 0 | 300 | 298 | 0 | 2579 |
| 16265 | 293 | LEASEWEB - LEASEWEB AS | 46% | 23020 | 872 | 2960 | 25475 | 2607 | 9 | 80109 |
| 17048 | 285 | AWKNET - Awknet Communications, LLC | 44% | 1175 | 31418 | 10846 | 14878 | 0 | 0 | 1601 |
| 33926 | 271 | EUROTRANSIT - EuroTransit GmbH, 20354 Hamburg | 0% | 0 | 0 | 0 | 0 | 12 | 0 | 8 |
| 28753 | 265 | NETDIRECT - AS NETDIRECT Frankfurt, DE | 55% | 49967 | 42646 | 6 | 23342 | 993 | 13 | 483562 |
| 5 | 253 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 30217 | 244 | DESYNC - Desync Networks | 1% | 6 | 237 | 0 | 300 | 1529 | 34 | 1417 |
| 21844 | 238 | THEPLANET-AS - ThePlanet.com Internet Services, Inc. | 51% | 13711 | 1610 | 239 | 47558 | 746 | 19 | 599799 |
| 13213 | 233 | UK2NET - AS UK-2 Ltd Autonomous System | 45% | 593 | 6104 | 79 | 812 | 6068 | 3 | 1322 |
| 35908 | 229 | VPLSNET - VPLS Inc. d/b/a Krypt Technologies | 13% | 978 | 1 | 0 | 35453 | 1727 | 0 | 14152 |
| 22653 | 222 | GLOBALCOMPASS - Cyber Wurx LLC | 0% | 0 | 0 | 0 | 170 | 299 | 10742 | 1995 |
By Highest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 5 | 253 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 12832 | 101 | LYCOS - EUROPE Lycos Europe GmbH | 100% | 3103 | 1565 | 4444 | 351 | 930 | 0 | 7993 |
| 24989 | 84 | IXEUROPE-DE-FRANKFUR - ASN IX Europe Germany AS | 100% | 915 | 47406 | 902 | 171 | 529 | 1 | 993 |
| 8376 | 68 | GO - JOR Autonomous System | 100% | 3 | 9887 | 0 | 388 | 233 | 136 | 88 |
| 25232 | 49 | VZD - Valsts Zemes Diensts | 100% | 87 | 278 | 0 | 42 | 30449 | 0 | 84 |
| 19048 | 47 | CORIO - Corio, Inc. | 100% | 0 | 0 | 0 | 6 | 766 | 482 | 0 |
| 20228 | 47 | PACNET-MX - Pacnet, S.A. de C.V. | 100% | 0 | 0 | 0 | 0 | 33 | 0 | 2275 |
| 4686 | 46 | BEKKOAME - BEKKOAME INTERNET INC. | 100% | 0 | 2 | 0 | 0 | 559 | 0 | 132 |
| 26496 | 45 | PAH-INC - GoDaddy.com, Inc. | 100% | 10 | 0 | 0 | 17054 | 4516 | 39 | 21849 |
| 31365 | 31 | SGSTELEKOM - SGS Telekom Autonomous System | 100% | 175 | 1 | 0 | 181 | 60 | 0 | 564 |
| 37898 | 28 | BARTOK - NET digitiminimi, inc. | 100% | 13 | 7183 | 0 | 0 | 18 | 0 | 0 |
| 48587 | 26 | NET-0X2A - AS Private Entrepreneur Zharkov Mukola Mukolayovuch | 100% | 0 | 0 | 0 | 1639 | 0 | 0 | 127432 |
| 35916 | 26 | MULTA-ASN1 - MULTACOM CORPORATION | 100% | 310 | 6401 | 1730 | 223 | 622 | 0 | 797 |
| 3561 | 25 | SAVVIS - Savvis | 100% | 3149 | 28055 | 55490 | 3940 | 10225 | 6 | 90080 |
| 13522 | 22 | Pontificia - Universidade Catolica do Parana | 100% | 0 | 0 | 0 | 2 | 5764 | 20 | 0 |
| 9155 | 22 | QNET - QualityNet AS number | 100% | 190 | 72 | 0 | 2013 | 755 | 217 | 112 |
| 21050 | 19 | FAST - TELCO Fast Telecommunications Company W.L.L. | 100% | 20 | 488 | 1 | 871 | 6130 | 50 | 1016 |
| 13601 | 17 | ASN-INNERHOST - Peer 1 Dedicated Hosting | 100% | 7 | 57924 | 278 | 783 | 783 | 0 | 283 |
| 25229 | 16 | VOLIA - AS Kyivski Telekomunikatsiyni Merezhi LLC | 100% | 15280 | 41 | 0 | 2021 | 291 | 29 | 5567 |
| 22439 | 16 | VRTSERVERS - Vrtservers, Inc | 100% | 0 | 0 | 0 | 384 | 21 | 11 | 3181 |
| 31530 | 16 | SERVERCREW - AS Autonomes System | 100% | 85 | 2 | 0 | 114 | 3830 | 0 | 28 |
| 9498 | 16 | BBIL - AP BHARTI Airtel Ltd. | 100% | 0 | 0 | 0 | 692 | 102277 | 1095 | 2318 |
| 22927 | 15 | Telefonica - de Argentina | 100% | 0 | 0 | 0 | 152 | 72875 | 8008 | 2078 |
| 9394 | 15 | CRNET - CHINA RAILWAY Internet(CRNET) | 100% | 88870 | 4 | 0 | 198 | 13869 | 2622 | 4814 |
| 16629 | 14 | CTC. - CORP S.A. (TELEFONICA EMPRESAS) | 100% | 0 | 0 | 0 | 10 | 25945 | 26 | 32 |
| 6855 | 14 | SK - SLOVAK TELECOM, AS6855 | 100% | 0 | 3 | 0 | 7 | 2107 | 1437 | 2586 |
| 16814 | 14 | NSS - S.A. | 100% | 0 | 309 | 0 | 424 | 635713 | 116 | 1406 |
By Lowest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 790 | 460 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 295 |
| 31800 | 322 | DALNET - DALnet | 0% | 0 | 0 | 0 | 1769 | 12 | 0 | 3 |
| 33926 | 271 | EUROTRANSIT - EuroTransit GmbH, 20354 Hamburg | 0% | 0 | 0 | 0 | 0 | 12 | 0 | 8 |
| 22653 | 222 | GLOBALCOMPASS - Cyber Wurx LLC | 0% | 0 | 0 | 0 | 170 | 299 | 10742 | 1995 |
| 25176 | 218 | AC - NET LaNet Vasterbotten Data och Tele AB | 0% | 0 | 0 | 0 | 67 | 2191 | 21 | 107 |
| 39369 | 203 | PORT80 - Phonera Networks AB | 0% | 0 | 0 | 0 | 15 | 5082 | 43 | 2517 |
| 35028 | 202 | MULTIPLAY - Multiplay AS Number | 0% | 0 | 0 | 0 | 11 | 26 | 0 | 0 |
| 41164 | 196 | GET - NO GET Norway | 0% | 0 | 0 | 0 | 121 | 3125 | 3 | 4 |
| 224 | 167 | UNINETT - UNINETT, The Norwegian University & Research Network | 0% | 0 | 0 | 0 | 17 | 549 | 132 | 14 |
| 35366 | 80 | ISPPRO - AS ISPpro Internet KG | 0% | 6 | 443 | 2 | 83 | 69 | 1 | 26 |
| 17019 | 73 | JCHOST-NET - JCHost Internet Services, LLC | 0% | 0 | 0 | 0 | 0 | 7 | 0 | 0 |
| 40395 | 67 | VIRTBIZ-DALLAS - VIRTBIZ Internet Services | 0% | 0 | 0 | 0 | 32 | 0 | 0 | 31 |
| 32787 | 67 | PROLEXIC - Prolexic Technologies, Inc. | 0% | 0 | 0 | 0 | 12320 | 978 | 23 | 4938 |
| 3701 | 63 | NERONET - Oregon Joint Graduate Schools of Engineering | 0% | 0 | 0 | 0 | 0 | 17 | 10 | 4786 |
| 2833 | 53 | SUNET - UMU Umea Universitet | 0% | 0 | 0 | 0 | 0 | 262 | 6 | 27 |
| 16557 | 51 | COLOSOLUTIONS - Colo Solutions, Inc. | 0% | 0 | 0 | 0 | 88 | 1513 | 0 | 845 |
| 13049 | 49 | FRONTIER - Frontier Online Autonomous System | 0% | 0 | 0 | 0 | 0 | 47 | 0 | 58 |
| 9 | 48 | CMU-ROUTER - Carnegie Mellon University | 0% | 0 | 0 | 0 | 0 | 1353 | 43 | 61 |
| 39605 | 48 | IGUANESTUDIO - Iguane Studio SARL | 0% | 0 | 0 | 0 | 0 | 10 | 0 | 23 |
| 16186 | 47 | ASN-SSC - NO IP Group | 0% | 0 | 0 | 0 | 1 | 129 | 0 | 4 |
| 36375 | 45 | UMICH-AS-5 - University of Michigan | 0% | 0 | 73 | 2 | 17 | 104 | 58 | 9 |
| 29117 | 39 | IRC - HISPANO http://www.irc-hispano.es/ | 0% | 0 | 0 | 0 | 0 | 8 | 0 | 0 |
| 20857 | 37 | TRANSIP - AS TransIP BV | 0% | 0 | 0 | 0 | 8 | 469 | 7 | 177 |
| 9192 | 33 | LLEIDANET - Lleida - Catalonia - Spain | 0% | 0 | 4 | 0 | 0 | 0 | 0 | 27 |
| 9153 | 30 | BURSTFIRE - EU Burstfire Networks Limited | 0% | 0 | 0 | 0 | 27 | 510 | 0 | 3 |
| 8239 | 28 | Landsraad - Autonomous System | 0% | 0 | 0 | 0 | 9 | 2817 | 14 | 377 |
| 32751 | 28 | NUCLEARFALLOUT-SEA - Nuclearfallout Enterprises, Inc. | 0% | 0 | 0 | 0 | 1 | 12 | 0 | 3 |
<< Statistics | Statistics | Bots >>
