ASN

Introduction

The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.

There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.

Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.

Explanation

These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:

  • Number - The total number of C&C's hosted within that ASN
  • Closed - What percent of the C&C's that are now inactive
  • CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
  • CC Scans - The number of scans into other networks the C&C's issues from that ASN
  • CC CHosts - The number of successful compromises completed by that C&C's within that ASN
  • TGT DDOS - The number of DDOS attacks that were targeted to this ASN
  • TGT Scans - The number of scans that were targeted to this ASN
  • TGT CHosts - The number of hosts compromised within this ASN

Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.

↑ Contents

Updates

These reports are updated once a day.

↑ Contents

By Number

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
3265 1310 XS4ALL - NL Amsterdam, NL 100% 2 0 0 215 2509 789 4005
16276 1235 OVH - , FR 81% 44552 5533 1654 27193 1339 273 1888256
41075 931 ATW - AS , HU 95% 364 700 4 40 10 0 879
14987 786 RETHEMHOSTING - Rethem Hosting LLC, US 94% 0 0 0 234 33 0 1270
3292 743 TDC - TDC A/S, DK 99% 12 2 0 4348 11765 703 29623
20473 673 AS-CHOOPA - Choopa, LLC, US 92% 769 0 0 231117 347 0 247477
174 629 COGENT-174 - Cogent Communications, US 95% 2220 6172 1888 3600 21533 112 157784
25761 603 STAMINUS-COMM - Staminus Communications, US 95% 7140 47034 1165 78971 757 0 34220
46844 575 ST-BGP - Sharktech, US 87% 165716 5570 1397 54710 0 0 69020
36666 568 GTCOMM - GloboTech Communications, CA 98% 76 56 324259 4206 17 0 20643
23352 561 SERVERCENTRAL - Server Central Network, US 99% 1435 154 0 3205 1896 0 933242
42708 545 PORTLANE - www.portlane.com, SE 90% 2490 0 0 664 0 5 9166
30058 479 FDCSERVERS - FDCservers.net,US 99% 40318 16967 393 21301 1001 0 101699
39369 456 PORT80 - , SE 99% 0 0 0 416 5082 43 5166
24940 438 HETZNER - AS , DE 86% 81375 12164 1 99878 136 420 2158760
23522 410 ASN-HRNET - GigeNET, US 100% 14023 47661 207543 15626 310 0 2511
31800 399 DALNET - DALnet, US 100% 0 0 0 1776 12 0 14
1653 377 SUNET - SUNET Swedish University Network, SE 100% 0 0 0 22 1577 12 780
16265 371 LEASEWEB - NETWORK Amsterdam, Netherlands, NL 97% 47108 1023 2960 40166 2607 39 3121742
17048 370 AWKNET - Awknet Communications, LLC, US 97% 1177 31427 10846 16992 0 0 5394
35908 336 VPLSNET - Krypt Technologies, US 97% 3966 1 0 46626 1727 0 115497
30217 318 DESYNC - Desync Networks, US 100% 6 237 0 477 1529 34 2432
8560 305 ONEANDONE - AS Brauerstrasse 48, DE 96% 6996 42646 400 19756 1025 69 359633
28753 301 LEASEWEB - DE , DE 95% 58671 42653 6 40981 993 13 579321
29182 291 ISPSYSTEM - AS ISPsystem Autonomous System, LU 98% 135163 233 91 26039 501 1 27516
6461 291 ZAYO-6461 - Zayo Bandwidth Inc, US 95% 7550 9869 4255 12719 51981 2 18702
224 273 UNINETT - UNINETT, The Norwegian University & Research Network, NO 99% 0 0 0 17 549 132 144

↑ Contents

By Highest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
3265 1310 XS4ALL - NL Amsterdam, NL 100% 2 0 0 215 2509 789 4005
23522 410 ASN-HRNET - GigeNET, US 100% 14023 47661 207543 15626 310 0 2511
31800 399 DALNET - DALnet, US 100% 0 0 0 1776 12 0 14
1653 377 SUNET - SUNET Swedish University Network, SE 100% 0 0 0 22 1577 12 780
30217 318 DESYNC - Desync Networks, US 100% 6 237 0 477 1529 34 2432
22822 264 LLNW - Limelight Networks, Inc., US 100% 825 24 0 429 1910 5 449999
1668 252 AOL-ATDN - AOL Transit Data Network, US 100% 7 7753 220 457 5285 71 83990
26769 228 BANDCON - Bandcon, US 100% 0 0 0 93 49 2 6180
15694 215 ATMAN-ISP - AS ATMAN's ISP Autonomous System, PL 100% 0 0 0 11 164 77 1448
13213 199 UK2NET - AS , GB 100% 593 6104 79 3623 6068 4 727628
35028 191 MULTIPLAY - , GB 100% 27 0 0 11 26 0 17
9121 190 TTNET - , TR 100% 14305 18874 100 14950 4529 3093 27097
5 186 SYMBOLICS - Symbolics, Inc., US 100% 0 0 0 0 0 0 0
36375 182 UMICH-AS-5 - University of Michigan, US 100% 0 73 2 21 104 58 465
32787 167 PROLEXIC-TECHNOLOGIE - Akamai Technologies, Inc., US 100% 0 0 0 14327 978 23 22653
4436 159 AS-GTT-4436 - nLayer Communications, Inc., US 100% 0 0 0 1068 797 2 887880
33926 154 KAIAGLOBAL - AS Kaia Global Networks Ltd. 100% 0 0 0 63 12 0 932
30083 145 SERVER4YOU - server4you Inc., US 100% 1131 58876 43 1323 109 0 42344
4766 121 KIXS-AS - KR Korea Telecom, KR 100% 1390 17247 919 3652 49128 6035 256333
25700 116 25700 - SWIFT VENTURES Inc, US 100% 66 7071 0 1037 662 1 15883
14037 107 AS-DZ-14037 - Dedicated Zone Inc, US 100% 177 2842 1171 3480 0 0 646
24989 93 IXEUROPE-DE-FRANKFUR - ASN Equinix Germany (Previously IX Europe Germany AS), DE 100% 915 47406 902 603 529 1 2236
10316 92 CODERO-AS - Codero, US 100% 26 39 0 9177 319 6 21021
12832 90 LYCOS - EUROPE Lycos Europe GmbH 100% 3103 1565 4444 351 930 0 7993
35425 90 BYTEMARK - AS , GB 100% 0 0 0 861 67 2 2292
9 86 CMU-ROUTER - Carnegie Mellon University, US 100% 0 0 0 0 1353 43 66
3313 86 INET - AS , IT 100% 8 135 0 232 1043 48 5986

↑ Contents

By Lowest Closed

ASN Number Details Closed CC DDoS CC Scans CC CHosts TGT DDoS TGT Scans TGT CHosts URLs
32335 10 N-T-TECHNOLOGY - N.T. Technology, Inc., US 0% 0 0 0 1 7 0 383
13789 10 INTERNAP-BLK3 - Internap Network Services Corporation, US 0% 0 0 0 198 768 0 3676
33154 7 DQECOM - DQE Communications Network Services, LLC, US 0% 0 0 0 0 26 0 2
63473 7 HOSTHATCH-ASN - HostHatch, Inc, US 0% 0 0 0 0 0 0 0
10105 6 OMNI - OMNIconnect Pty Ltd, AU 0% 0 0 0 0 857 0 30
19969 6 JOESDATACENTER - Joe's Datacenter, LLC, US 0% 0 0 0 446 0 0 10449
34482 5 CIRQUE - Danish Internet Service Provider, DK 0% 0 0 0 2 50 1 0
40430 5 COLO4JAX-AS - colo4jax, LLC, US 0% 0 0 0 4 0 0 121
50245 5 SERVEREL - , CZ 0% 163 0 0 23 0 0 32993
19531 5 NODESDIRECT - Nodes Direct, US 0% 0 0 0 0 0 0 453
12843 5 TELEMAXX - , DE 0% 0 0 0 494 364 104 581
42363 5 PHPNET - AS , FR 0% 0 0 0 0 0 0 404
39741 5 ZRA - AS , RU 0% 2 0 0 4 26 15 23
54290 5 HOSTWINDS - Hostwinds LLC., US 0% 0 0 0 0 0 0 206
8267 4 CYFRONET - AS Metropolitan Area Network Autonomous System, PL 0% 0 250 21 3 268 20 114
34145 4 TOMTEL - , RU 0% 0 0 0 3 2292 1 101
42678 4 MEGANET - AS , RU 0% 0 0 0 0 0 2 0
48666 4 AS - MAROSNET Moscow, Russia, RU 0% 0 0 0 0 0 0 20
5580 4 HIBERNIA - , NL 0% 0 0 0 0 0 0 46226
28917 4 FIORD - AS Fiord is an ISP in Moscow and Moscow region, offering, RU 0% 534 0 0 747 338 0 4499
15072 3 NETRIPLEX-CORPORATIO - Netriplex Corporation, US 0% 0 0 0 0 0 0 159
2878 3 ULRT - AS PJSC Rostelecom, RU 0% 1 0 0 22 24 102 81
44546 3 ALFATELECOM - , CZ 0% 332 0 0 388 0 0 1272
7175 3 ERX - AUSSIE aussie.net Pty Limited, AU 0% 0 0 0 0 0 0 0
39287 2 FLATTR - AS , SE 0% 0 0 0 0 8 0 179
47066 2 PRGMR - prgmr.com, Inc., US 0% 0 0 0 0 0 0 5
2386 2 INS-AS - AT&T Data Communications Services, US 0% 44 0 0 70 17333 25 285

↑ Contents

<< Statistics | Statistics | Bots >>