ASN

Introduction

The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.

There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.

Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.

Explanation

These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:

  • Number - The total number of C&C's hosted within that ASN
  • Closed - What percent of the C&C's that are now inactive
  • CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
  • CC Scans - The number of scans into other networks the C&C's issues from that ASN
  • CC CHosts - The number of successful compromises completed by that C&C's within that ASN
  • TGT DDOS - The number of DDOS attacks that were targeted to this ASN
  • TGT Scans - The number of scans that were targeted to this ASN
  • TGT CHosts - The number of hosts compromised within this ASN

Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.

↑ Contents

Updates

These reports are updated once a day.

↑ Contents

By Number

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
3265 1322 XS4ALL - NL Amsterdam, NL 100% 2 0 0 215 2509 789 4005
16276 1223 OVH - , FR 82% 44552 5533 1654 27193 1339 273 1888256
41075 922 ATW - AS , HU 95% 364 700 4 40 10 0 879
14987 782 RETHEMHOSTING - Rethem Hosting LLC, US 91% 0 0 0 234 33 0 1270
3292 745 TDC - TDC A/S, DK 99% 12 2 0 4348 11765 703 29623
20473 658 AS-CHOOPA - Choopa, LLC, US 93% 769 0 0 231117 347 0 247477
174 627 COGENT-174 - Cogent Communications, US 94% 2220 6172 1888 3600 21533 112 157784
25761 607 STAMINUS-COMM - Staminus Communications, US 95% 7140 47034 1165 78971 757 0 34220
23352 583 SERVERCENTRAL - Server Central Network, US 98% 1435 154 0 3205 1896 0 933242
46844 573 ST-BGP - Sharktech, US 89% 165716 5570 1397 54710 0 0 69020
36666 571 GTCOMM - GloboTech Communications, CA 98% 76 56 324259 4206 17 0 20643
42708 527 PORTLANE - www.portlane.com, SE 90% 2490 0 0 664 0 5 9166
30058 481 FDCSERVERS - FDCservers.net,US 99% 40318 16967 393 21301 1001 0 101699
39369 449 PORT80 - , SE 98% 0 0 0 416 5082 43 5166
24940 439 HETZNER - AS , DE 87% 81375 12164 1 99878 136 420 2158760
23522 410 ASN-HRNET - GigeNET, US 100% 14023 47661 207543 15626 310 0 2511
1653 384 SUNET - SUNET Swedish University Network, SE 100% 0 0 0 22 1577 12 780
31800 381 DALNET - DALnet, US 79% 0 0 0 1776 12 0 14
16265 375 LEASEWEB - NETWORK Amsterdam, Netherlands, NL 97% 47108 1023 2960 40166 2607 39 3121742
17048 374 AWKNET - Awknet Communications, LLC, US 96% 1177 31427 10846 16992 0 0 5394
35908 337 VPLSNET - Krypt Technologies, US 97% 3966 1 0 46626 1727 0 115497
30217 319 DESYNC - Desync Networks, US 100% 6 237 0 477 1529 34 2432
8560 309 ONEANDONE - AS Brauerstrasse 48, DE 97% 6996 42646 400 19756 1025 69 359633
28753 303 LEASEWEB - DE , DE 95% 58671 42653 6 40981 993 13 579321
29182 300 ISPSYSTEM - AS ISPsystem Autonomous System, LU 98% 135163 233 91 26039 501 1 27516
6461 291 ZAYO-6461 - Zayo Bandwidth Inc, US 95% 7550 9869 4255 12719 51981 2 18702
22822 270 LLNW - Limelight Networks, Inc., US 100% 825 24 0 429 1910 5 449999

↑ Contents

By Highest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
3265 1322 XS4ALL - NL Amsterdam, NL 100% 2 0 0 215 2509 789 4005
23522 410 ASN-HRNET - GigeNET, US 100% 14023 47661 207543 15626 310 0 2511
1653 384 SUNET - SUNET Swedish University Network, SE 100% 0 0 0 22 1577 12 780
30217 319 DESYNC - Desync Networks, US 100% 6 237 0 477 1529 34 2432
22822 270 LLNW - Limelight Networks, Inc., US 100% 825 24 0 429 1910 5 449999
1668 253 AOL-ATDN - AOL Transit Data Network, US 100% 7 7753 220 457 5285 71 83990
26769 229 BANDCON - Bandcon, US 100% 0 0 0 93 49 2 6180
15694 216 ATMAN-ISP - AS ATMAN's ISP Autonomous System, PL 100% 0 0 0 11 164 77 1448
13301 214 UNITEDCOLO - AS , DE 100% 57052 5972271 23818 614 367 6 57633
13213 201 UK2NET - AS , GB 100% 593 6104 79 3623 6068 4 727628
35028 195 MULTIPLAY - , GB 100% 27 0 0 11 26 0 17
9121 190 TTNET - , TR 100% 14305 18874 100 14950 4529 3093 27097
5 189 SYMBOLICS - Symbolics, Inc., US 100% 0 0 0 0 0 0 0
36375 183 UMICH-AS-5 - University of Michigan, US 100% 0 73 2 21 104 58 465
32787 168 PROLEXIC-TECHNOLOGIE - Akamai Technologies, Inc., US 100% 0 0 0 14327 978 23 22653
4436 160 AS-GTT-4436 - nLayer Communications, Inc., US 100% 0 0 0 1068 797 2 887880
33926 157 KAIAGLOBAL - AS Kaia Global Networks Ltd. 100% 0 0 0 63 12 0 932
30083 145 SERVER4YOU - server4you Inc., US 100% 1131 58876 43 1323 109 0 42344
4134 131 CHINANET - BACKBONE No.31,Jin-rong Street, CN 100% 2937860 2128 3746 2667448 114147 68380 2372788
4766 122 KIXS-AS - KR Korea Telecom, KR 100% 1390 17247 919 3652 49128 6035 256333
25700 116 25700 - SWIFT VENTURES Inc, US 100% 66 7071 0 1037 662 1 15883
30475 113 WEHOSTWEBSITES-COM - Handy Networks, LLC, US 100% 0 0 0 539 31 0 3101
14037 110 AS-DZ-14037 - Dedicated Zone Inc, US 100% 177 2842 1171 3480 0 0 646
35425 94 BYTEMARK - AS , GB 100% 0 0 0 861 67 2 2292
24989 93 IXEUROPE-DE-FRANKFUR - ASN Equinix Germany (Previously IX Europe Germany AS), DE 100% 915 47406 902 603 529 1 2236
10316 93 CODERO-AS - Codero, US 100% 26 39 0 9177 319 6 21021
3701 92 NERONET - Network for Education and Research in Oregon (NERO), US 100% 0 0 0 0 17 10 5099

↑ Contents

By Lowest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
7175 23 ERX - AUSSIE aussie.net Pty Limited, AU 0% 0 0 0 0 0 0 0
32335 10 N-T-TECHNOLOGY - N.T. Technology, Inc., US 0% 0 0 0 1 7 0 383
33154 7 DQECOM - DQE Communications Network Services, LLC, US 0% 0 0 0 0 26 0 2
63473 7 HOSTHATCH-ASN - HostHatch, Inc, US 0% 0 0 0 0 0 0 0
13789 7 INTERNAP-BLK3 - Internap Network Services Corporation, US 0% 0 0 0 198 768 0 3676
202109 7 DIGITALOCEAN-ASN - 2 , GB 0% 0 0 0 0 0 0 0
10105 6 OMNI - OMNIconnect Pty Ltd, AU 0% 0 0 0 0 857 0 30
52173 6 MAKONIX - , LV 0% 0 0 0 0 0 0 416
34482 5 CIRQUE - Danish Internet Service Provider, DK 0% 0 0 0 2 50 1 0
40430 5 COLO4JAX-AS - colo4jax, LLC, US 0% 0 0 0 4 0 0 121
19531 5 NODESDIRECT - Nodes Direct, US 0% 0 0 0 0 0 0 453
62282 5 RACKRAY - , LT 0% 0 0 0 0 0 0 0
12843 5 TELEMAXX - , DE 0% 0 0 0 494 364 104 581
42363 5 PHPNET - AS , FR 0% 0 0 0 0 0 0 404
39741 5 ZRA - AS , RU 0% 2 0 0 4 26 15 23
54290 5 HOSTWINDS - Hostwinds LLC., US 0% 0 0 0 0 0 0 206
5522 4 OMNITEL - , LT 0% 0 0 0 0 481 0 5
8267 4 CYFRONET - AS Metropolitan Area Network Autonomous System, PL 0% 0 250 21 3 268 20 114
34145 4 TOMTEL - , RU 0% 0 0 0 3 2292 1 101
55053 4 COLOWAREHOUSEONTARIO - 2267921 ONTARIO LTD, CA 0% 0 0 0 0 0 0 4
28917 4 FIORD - AS Fiord is an ISP in Moscow and Moscow region, offering, RU 0% 534 0 0 747 338 0 4499
394362 3 DIGITALOCEAN-ASN-CA1 - Digital Ocean, Inc., US 0% 0 0 0 0 0 0 0
4058 3 CITICTEL-CPC - AS4058 CITIC Telecom International CPC Limited, HK 0% 0 0 0 87 5585 16 1430
51191 3 XIRRA - , DE 0% 0 0 0 0 0 0 198
15072 3 NETRIPLEX-CORPORATIO - Netriplex Corporation, US 0% 0 0 0 0 0 0 159
42678 3 MEGANET - AS , RU 0% 0 0 0 0 0 2 0
50245 3 SERVEREL - , CZ 0% 163 0 0 23 0 0 32993

↑ Contents

<< Statistics | Statistics | Bots >>