Introduction
The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.
There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.
Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.
Explanation
These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:
- Number - The total number of C&C's hosted within that ASN
- Closed - What percent of the C&C's that are now inactive
- CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
- CC Scans - The number of scans into other networks the C&C's issues from that ASN
- CC CHosts - The number of successful compromises completed by that C&C's within that ASN
- TGT DDOS - The number of DDOS attacks that were targeted to this ASN
- TGT Scans - The number of scans that were targeted to this ASN
- TGT CHosts - The number of hosts compromised within this ASN
Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.
Updates
These reports are updated once a day.
By Number
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3265 | 1271 | XS4ALL - NL XS4ALL | 14% | 0 | 0 | 0 | 169 | 2509 | 784 | 1603 |
| 23522 | 1261 | IPNAP-ES - Ecomdevel, LLC | 46% | 14023 | 47661 | 207543 | 14011 | 310 | 0 | 455 |
| 30058 | 597 | FDCSERVERS - FDCservers.net | 56% | 25501 | 16949 | 339 | 9085 | 1001 | 0 | 23385 |
| 174 | 482 | COGENT - Cogent/PSI | 15% | 355 | 6169 | 1888 | 2358 | 21529 | 111 | 53371 |
| 790 | 438 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 264 |
| 25700 | 430 | 25700 - SWIFT VENTURES Inc | 9% | 5 | 7064 | 0 | 592 | 662 | 1 | 15939 |
| 25761 | 419 | STAMINUS-COMM - Staminus Communications | 10% | 1295 | 46853 | 1165 | 31406 | 757 | 0 | 14274 |
| 41075 | 410 | ATW - AS ATW Internet Kft. | 2% | 7 | 700 | 4 | 24 | 10 | 0 | 100 |
| 31800 | 398 | DALNET - DALnet | 1% | 0 | 0 | 0 | 1669 | 12 | 0 | 0 |
| 16276 | 367 | OVH - OVH | 33% | 761 | 4872 | 1100 | 8859 | 1338 | 219 | 25607 |
| 46844 | 366 | ST-BGP - SHARKTECH INTERNET SERVICES | 30% | 1038 | 2004 | 1296 | 40783 | 0 | 0 | 1089 |
| 12989 | 351 | HWNG - Highwinds Network Group, Inc. | 0% | 0 | 0 | 0 | 93 | 234 | 0 | 4007 |
| 13768 | 338 | PEER1 - Peer 1 Network Inc. | 15% | 6715 | 328 | 0 | 4535 | 11509 | 46 | 237575 |
| 1653 | 329 | SUNET - SUNET Swedish University Network | 1% | 0 | 0 | 0 | 22 | 1577 | 10 | 167 |
| 14037 | 325 | AS-RVB-1 - RackVibe LLC | 11% | 177 | 2842 | 1171 | 3372 | 0 | 0 | 488 |
| 31669 | 317 | ITSS - AS IT - SOLID SOLUTIONS | 0% | 0 | 0 | 0 | 2 | 47 | 0 | 2 |
| 13301 | 307 | UNITEDCOLO - AS Autonomous System of unitedcolo.de | 67% | 35706 | 5972271 | 23818 | 602 | 367 | 6 | 5559 |
| 5 | 287 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 17048 | 285 | AWKNET - Awknet Communications, LLC | 19% | 1175 | 31418 | 10846 | 11379 | 0 | 0 | 1473 |
| 33569 | 272 | ALLHOSTSHOP - ALLHOSTSHOP.COM | 2% | 14 | 0 | 0 | 118 | 298 | 0 | 101 |
| 16265 | 256 | LEASEWEB - LEASEWEB AS | 50% | 20809 | 872 | 2960 | 16211 | 2607 | 9 | 59667 |
| 23352 | 252 | SERVERCENTRAL - Server Central Network | 7% | 691 | 154 | 0 | 1112 | 1896 | 0 | 476284 |
| 21844 | 245 | THEPLANET-AS - ThePlanet.com Internet Services, Inc. | 46% | 6183 | 1599 | 239 | 34971 | 746 | 19 | 358604 |
| 35908 | 238 | VPLSNET - VPLS Inc. d/b/a Krypt Technologies | 10% | 978 | 1 | 0 | 22906 | 1727 | 0 | 9325 |
| 30217 | 232 | DESYNC - Desync Networks | 1% | 6 | 237 | 0 | 200 | 1529 | 34 | 1332 |
| 13213 | 227 | UK2NET - AS UK-2 Ltd Autonomous System | 48% | 593 | 6104 | 79 | 776 | 6068 | 3 | 641 |
| 22653 | 211 | GLOBALCOMPASS - Cyber Wurx LLC | 0% | 0 | 0 | 0 | 81 | 299 | 10742 | 906 |
By Highest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 5 | 287 | SYMBOLICS - Symbolics, Inc. | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 12832 | 104 | LYCOS - EUROPE Lycos Europe GmbH | 100% | 3103 | 1565 | 4444 | 351 | 930 | 0 | 7995 |
| 24989 | 84 | IXEUROPE-DE-FRANKFUR - ASN IX Europe Germany AS | 100% | 915 | 47406 | 902 | 171 | 529 | 1 | 688 |
| 8376 | 71 | GO - JOR Autonomous System | 100% | 3 | 9887 | 0 | 366 | 233 | 136 | 3202 |
| 25232 | 49 | VZD - LR Valsts Zemes Dienests | 100% | 87 | 278 | 0 | 42 | 30449 | 0 | 84 |
| 19048 | 47 | CORIO - Corio, Inc. | 100% | 0 | 0 | 0 | 6 | 766 | 482 | 0 |
| 20228 | 47 | PACNET-MX - Pacnet, S.A. de C.V. | 100% | 0 | 0 | 0 | 0 | 33 | 0 | 2250 |
| 4686 | 46 | BEKKOAME - BEKKOAME INTERNET INC. | 100% | 0 | 2 | 0 | 0 | 559 | 0 | 132 |
| 26496 | 44 | PAH-INC - GoDaddy.com, Inc. | 100% | 10 | 0 | 0 | 12907 | 4516 | 26 | 15365 |
| 20773 | 39 | HOSTEUROPE - AS AS of Hosteurope Germany / Cologne | 100% | 15708 | 32097 | 532 | 8259 | 734 | 80 | 1337 |
| 26228 | 32 | SERVEPATH - ServePath, LLC | 100% | 1143 | 6 | 0 | 1252 | 472 | 25 | 4770 |
| 5603 | 31 | SIOL - NET Telekom Slovenije d.d. | 100% | 288 | 2266 | 3030 | 917 | 507 | 423 | 77 |
| 31365 | 29 | SGSTELEKOM - SGS Telekom Autonomous System | 100% | 175 | 1 | 0 | 181 | 60 | 0 | 383 |
| 3561 | 25 | SAVVIS - Savvis | 100% | 3149 | 28055 | 55490 | 3885 | 10225 | 6 | 78587 |
| 9155 | 24 | QualityNet - AS number | 100% | 190 | 72 | 0 | 2000 | 755 | 217 | 112 |
| 21050 | 19 | FAST - TELCO Fast Telecommunications Company W.L.L. | 100% | 20 | 488 | 1 | 869 | 6130 | 50 | 1019 |
| 22439 | 18 | VRTSERVERS - Vrtservers, Inc | 100% | 0 | 0 | 0 | 80 | 21 | 11 | 2755 |
| 13601 | 17 | ASN-INNERHOST - Peer 1 Dedicated Hosting | 100% | 7 | 57924 | 278 | 673 | 783 | 0 | 186 |
| 48587 | 17 | NET-0X2A - AS Private Entrepreneur Zharkov Mukola Mukolayovuch | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 126500 |
| 25229 | 16 | VOLIA - AS Kyivski Telekomunikatsiyni Merezhi LLC | 100% | 5832 | 41 | 0 | 905 | 291 | 29 | 38 |
| 31530 | 16 | SERVERCREW - AS Autonomes System | 100% | 85 | 2 | 0 | 114 | 3830 | 0 | 28 |
| 29737 | 16 | WOW-INTERNET - WideOpenWest Finance LLC | 100% | 721 | 365031 | 0 | 76 | 14026 | 17 | 43 |
| 9848 | 16 | GNGAS - Enterprise Networks | 100% | 205 | 195 | 0 | 7 | 3782 | 26 | 4977 |
| 9498 | 16 | BBIL - AP BHARTI Airtel Ltd. | 100% | 0 | 0 | 0 | 692 | 102277 | 1095 | 2392 |
| 9394 | 15 | CRNET - CHINA RAILWAY Internet(CRNET) | 100% | 53585 | 4 | 0 | 168 | 13869 | 2600 | 4042 |
| 16629 | 14 | CTC. - CORP S.A. (TELEFONICA EMPRESAS) | 100% | 0 | 0 | 0 | 10 | 25945 | 26 | 30 |
| 6855 | 14 | SK - SLOVAK TELECOM, AS6855 | 100% | 0 | 3 | 0 | 7 | 2107 | 1436 | 1575 |
By Lowest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 790 | 438 | EUNETFI - EUnet Finland | 0% | 0 | 0 | 0 | 105 | 4487 | 15 | 264 |
| 12989 | 351 | HWNG - Highwinds Network Group, Inc. | 0% | 0 | 0 | 0 | 93 | 234 | 0 | 4007 |
| 31669 | 317 | ITSS - AS IT - SOLID SOLUTIONS | 0% | 0 | 0 | 0 | 2 | 47 | 0 | 2 |
| 22653 | 211 | GLOBALCOMPASS - Cyber Wurx LLC | 0% | 0 | 0 | 0 | 81 | 299 | 10742 | 906 |
| 25176 | 207 | AC - NET LaNet Vasterbotten Data och Tele AB | 0% | 0 | 0 | 0 | 7 | 2191 | 21 | 107 |
| 41164 | 186 | GET - NO GET Norway | 0% | 0 | 0 | 0 | 25 | 3125 | 3 | 4 |
| 39369 | 185 | PORT80 - Port80 AB, Sweden | 0% | 0 | 0 | 0 | 15 | 5082 | 40 | 1306 |
| 35028 | 184 | MULTIPLAY - Multiplay AS Number | 0% | 0 | 0 | 0 | 11 | 26 | 0 | 0 |
| 224 | 130 | UNINETT - UNINETT, The Norwegian University & Research Network | 0% | 0 | 0 | 0 | 17 | 549 | 132 | 14 |
| 15694 | 75 | ATMAN - ATMAN Autonomous System | 0% | 0 | 0 | 0 | 11 | 164 | 76 | 879 |
| 40431 | 66 | TRAVAIL-SYSTEMS - Travail Systems, INC | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 30 |
| 40395 | 62 | VIRTBIZ-DALLAS - VIRTBIZ Internet Services | 0% | 0 | 0 | 0 | 32 | 0 | 0 | 2 |
| 35366 | 58 | ISPPRO - AS ISPpro Internet KG | 0% | 6 | 443 | 2 | 83 | 69 | 1 | 7 |
| 39546 | 53 | MG - AS ISP MG | 0% | 7062 | 0 | 0 | 4 | 6 | 0 | 0 |
| 32787 | 50 | PROLEXIC - Prolexic Technologies, Inc. | 0% | 0 | 0 | 0 | 7526 | 978 | 23 | 4628 |
| 16557 | 48 | COLOSOLUTIONS - Colo Solutions, Inc. | 0% | 0 | 0 | 0 | 83 | 1513 | 0 | 544 |
| 4436 | 47 | AS-NLAYER - nLayer Communications, Inc. | 0% | 0 | 0 | 0 | 73 | 797 | 0 | 29963 |
| 3701 | 46 | NERONET - Oregon Joint Graduate Schools of Engineering | 0% | 0 | 0 | 0 | 0 | 17 | 10 | 1119 |
| 36375 | 42 | UMICH-AS-5 - University of Michigan | 0% | 0 | 73 | 2 | 17 | 104 | 58 | 9 |
| 7678 | 41 | PROX - Prox System Design Inc. | 0% | 0 | 0 | 0 | 0 | 44 | 1 | 57 |
| 29117 | 38 | IRC - HISPANO http://www.irc-hispano.es/ | 0% | 0 | 0 | 0 | 0 | 8 | 0 | 0 |
| 2833 | 36 | SUNET - UMU SUNET-UMU | 0% | 0 | 0 | 0 | 0 | 262 | 6 | 2 |
| 35425 | 36 | BYTEMARK - AS Bytemark Computer Consulting Ltd | 0% | 0 | 0 | 0 | 195 | 67 | 2 | 12 |
| 13049 | 33 | FRONTIER - Frontier Online Autonomous System | 0% | 0 | 0 | 0 | 0 | 47 | 0 | 11 |
| 23028 | 33 | TEAM-CYMRU - Team Cymru Inc. | 0% | 0 | 0 | 0 | 0 | 497 | 7 | 0 |
| 9192 | 32 | LLEIDANET - Lleida - Catalonia - Spain | 0% | 0 | 4 | 0 | 0 | 0 | 0 | 27 |
| 9 | 32 | CMU-ROUTER - Carnegie Mellon University | 0% | 0 | 0 | 0 | 0 | 1353 | 43 | 8 |
<< | Statistics | Bots >>
