Introduction
The information and tables on this page are here for statistical and informational purposes. They are not here as a shaming point for any of the ASN owners. There are some on the list that are very diligent in pursuing and shutting down malicious and criminal behavior. This may not alway be clearly visible when some of the statistics may appear to show a poor performance in comparison to others. There are some very poor performers on the list that have excellent statistics. The difference is intent and action. The good ones shutdown what they can, but do their due diligence. The bad ones warn the criminals and many times help them move to a new location within the same network.
There are also those that host a variety of public services such as free email, web services, and even IRC. These are very frequently abused by malicious behavior and can be difficult to remediate and correct. These free services are often use as a play ground for those that are beginning their malicious and criminal career.
Our goal is to help by providing information to those that can do something, not attempt to shame anyone into an action. Because in the end, you can only attempt to embarrass the good ones, the bad ones really do not care.
Explanation
These reports are based off of all the active and inactive Command and Control (C&C) points that we have tracked and are currently tracking. The columns are defined as follows:
- Number - The total number of C&C's hosted within that ASN
- Closed - What percent of the C&C's that are now inactive
- CC DDOS - The number of DDOS attacks issued from that C&C's within that ASN
- CC Scans - The number of scans into other networks the C&C's issues from that ASN
- CC CHosts - The number of successful compromises completed by that C&C's within that ASN
- TGT DDOS - The number of DDOS attacks that were targeted to this ASN
- TGT Scans - The number of scans that were targeted to this ASN
- TGT CHosts - The number of hosts compromised within this ASN
Note: This data is only complete within the scope of what we were either able to observe or capture. It in no way represents the totality of DDOS attacks, scans, nor compromised hosts found on the Internet.
Updates
These reports are updated once a day.
By Number
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3265 | 1308 | XS4ALL - NL Amsterdam, NL | 100% | 2 | 0 | 0 | 215 | 2509 | 789 | 4005 |
| 16276 | 1263 | OVH - , FR | 80% | 44552 | 5533 | 1654 | 27193 | 1339 | 273 | 1888256 |
| 41075 | 954 | ATW - AS , HU | 93% | 364 | 700 | 4 | 40 | 10 | 0 | 879 |
| 14987 | 795 | RETHEMHOSTING - Rethem Hosting LLC, US | 92% | 0 | 0 | 0 | 234 | 33 | 0 | 1270 |
| 3292 | 745 | TDC - TDC A/S, DK | 99% | 12 | 2 | 0 | 4348 | 11765 | 703 | 29623 |
| 20473 | 690 | AS-CHOOPA - Choopa, LLC, US | 90% | 769 | 0 | 0 | 231117 | 347 | 0 | 247477 |
| 174 | 631 | COGENT-174 - Cogent Communications, US | 96% | 2220 | 6172 | 1888 | 3600 | 21533 | 112 | 157784 |
| 25761 | 601 | STAMINUS-COMM - Staminus Communications, US | 95% | 7140 | 47034 | 1165 | 78971 | 757 | 0 | 34220 |
| 46844 | 586 | ST-BGP - Sharktech, US | 84% | 165716 | 5570 | 1397 | 54710 | 0 | 0 | 69020 |
| 36666 | 568 | GTCOMM - GloboTech Communications, CA | 98% | 76 | 56 | 324259 | 4206 | 17 | 0 | 20643 |
| 23352 | 568 | SERVERCENTRAL - Server Central Network, US | 98% | 1435 | 154 | 0 | 3205 | 1896 | 0 | 933242 |
| 42708 | 557 | PORTLANE - www.portlane.com, SE | 89% | 2490 | 0 | 0 | 664 | 0 | 5 | 9166 |
| 30058 | 476 | FDCSERVERS - FDCservers.net,US | 99% | 40318 | 16967 | 393 | 21301 | 1001 | 0 | 101699 |
| 39369 | 461 | PORT80 - , SE | 98% | 0 | 0 | 0 | 416 | 5082 | 43 | 5166 |
| 24940 | 454 | HETZNER - AS , DE | 83% | 81375 | 12164 | 1 | 99878 | 136 | 420 | 2158756 |
| 23522 | 410 | ASN-HRNET - GigeNET, US | 100% | 14023 | 47661 | 207543 | 15626 | 310 | 0 | 2511 |
| 31800 | 399 | DALNET - DALnet, US | 100% | 0 | 0 | 0 | 1776 | 12 | 0 | 14 |
| 1653 | 375 | SUNET - SUNET Swedish University Network, SE | 100% | 0 | 0 | 0 | 22 | 1577 | 12 | 780 |
| 17048 | 368 | AWKNET - Awknet Communications, LLC, US | 97% | 1177 | 31427 | 10846 | 16992 | 0 | 0 | 5394 |
| 16265 | 368 | LEASEWEB - NETWORK Amsterdam, Netherlands, NL | 97% | 47108 | 1023 | 2960 | 40166 | 2607 | 39 | 3121742 |
| 35908 | 336 | VPLSNET - Krypt Technologies, US | 97% | 3966 | 1 | 0 | 46626 | 1727 | 0 | 115497 |
| 30217 | 317 | DESYNC - Desync Networks, US | 100% | 6 | 237 | 0 | 477 | 1529 | 34 | 2432 |
| 8560 | 305 | ONEANDONE - AS Brauerstrasse 48, DE | 96% | 6996 | 42646 | 400 | 19756 | 1025 | 69 | 359633 |
| 28753 | 300 | LEASEWEB - DE , DE | 94% | 58671 | 42653 | 6 | 40981 | 993 | 13 | 579321 |
| 6461 | 289 | ZAYO-6461 - Zayo Bandwidth Inc, US | 94% | 7550 | 9869 | 4255 | 12719 | 51981 | 2 | 18702 |
| 29182 | 288 | ISPSYSTEM - AS ISPsystem Autonomous System, LU | 99% | 135163 | 233 | 91 | 26039 | 501 | 1 | 27516 |
| 224 | 281 | UNINETT - UNINETT, The Norwegian University & Research Network, NO | 97% | 0 | 0 | 0 | 17 | 549 | 132 | 144 |
By Highest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 3265 | 1308 | XS4ALL - NL Amsterdam, NL | 100% | 2 | 0 | 0 | 215 | 2509 | 789 | 4005 |
| 23522 | 410 | ASN-HRNET - GigeNET, US | 100% | 14023 | 47661 | 207543 | 15626 | 310 | 0 | 2511 |
| 31800 | 399 | DALNET - DALnet, US | 100% | 0 | 0 | 0 | 1776 | 12 | 0 | 14 |
| 1653 | 375 | SUNET - SUNET Swedish University Network, SE | 100% | 0 | 0 | 0 | 22 | 1577 | 12 | 780 |
| 30217 | 317 | DESYNC - Desync Networks, US | 100% | 6 | 237 | 0 | 477 | 1529 | 34 | 2432 |
| 22822 | 262 | LLNW - Limelight Networks, Inc., US | 100% | 825 | 24 | 0 | 429 | 1910 | 5 | 449999 |
| 1668 | 253 | AOL-ATDN - AOL Transit Data Network, US | 100% | 7 | 7753 | 220 | 457 | 5285 | 71 | 83990 |
| 26769 | 228 | BANDCON - Bandcon, US | 100% | 0 | 0 | 0 | 93 | 49 | 2 | 6180 |
| 13301 | 214 | UNITEDCOLO - AS , DE | 100% | 57052 | 5972271 | 23818 | 614 | 367 | 6 | 57633 |
| 15694 | 214 | ATMAN-ISP - AS ATMAN's ISP Autonomous System, PL | 100% | 0 | 0 | 0 | 11 | 164 | 77 | 1448 |
| 13213 | 198 | UK2NET - AS , GB | 100% | 593 | 6104 | 79 | 3623 | 6068 | 4 | 727628 |
| 35028 | 191 | MULTIPLAY - , GB | 100% | 27 | 0 | 0 | 11 | 26 | 0 | 17 |
| 9121 | 190 | TTNET - , TR | 100% | 14305 | 18874 | 100 | 14950 | 4529 | 3093 | 27097 |
| 5 | 185 | SYMBOLICS - Symbolics, Inc., US | 100% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 36375 | 181 | UMICH-AS-5 - University of Michigan, US | 100% | 0 | 73 | 2 | 21 | 104 | 58 | 465 |
| 32787 | 166 | PROLEXIC-TECHNOLOGIE - Akamai Technologies, Inc., US | 100% | 0 | 0 | 0 | 14327 | 978 | 23 | 22653 |
| 4436 | 158 | AS-GTT-4436 - nLayer Communications, Inc., US | 100% | 0 | 0 | 0 | 1068 | 797 | 2 | 887880 |
| 33926 | 154 | KAIAGLOBAL - AS Kaia Global Networks Ltd. | 100% | 0 | 0 | 0 | 63 | 12 | 0 | 932 |
| 4134 | 145 | CHINANET - BACKBONE No.31,Jin-rong Street, CN | 100% | 2937860 | 2128 | 3746 | 2667448 | 114147 | 68380 | 2372788 |
| 25700 | 116 | 25700 - SWIFT VENTURES Inc, US | 100% | 66 | 7071 | 0 | 1037 | 662 | 1 | 15883 |
| 30475 | 109 | WEHOSTWEBSITES-COM - Handy Networks, LLC, US | 100% | 0 | 0 | 0 | 539 | 31 | 0 | 3101 |
| 14037 | 106 | AS-DZ-14037 - Dedicated Zone Inc, US | 100% | 177 | 2842 | 1171 | 3480 | 0 | 0 | 646 |
| 24989 | 93 | IXEUROPE-DE-FRANKFUR - ASN Equinix Germany (Previously IX Europe Germany AS), DE | 100% | 915 | 47406 | 902 | 603 | 529 | 1 | 2236 |
| 10316 | 92 | CODERO-AS - Codero, US | 100% | 26 | 39 | 0 | 9177 | 319 | 6 | 21021 |
| 12832 | 90 | LYCOS - EUROPE Lycos Europe GmbH | 100% | 3103 | 1565 | 4444 | 351 | 930 | 0 | 7993 |
| 3701 | 90 | NERONET - Network for Education and Research in Oregon (NERO), US | 100% | 0 | 0 | 0 | 0 | 17 | 10 | 5099 |
| 35425 | 89 | BYTEMARK - AS , GB | 100% | 0 | 0 | 0 | 861 | 67 | 2 | 2292 |
By Lowest Closed
| ASN | Number | Details | Closed | CC DDoS | CC Scans | CC CHosts | TGT DDoS | TGT Scans | TGT CHosts | URLs |
| 64512 | 25 | -Private - Use AS-, ZZ | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 32335 | 10 | N-T-TECHNOLOGY - N.T. Technology, Inc., US | 0% | 0 | 0 | 0 | 1 | 7 | 0 | 383 |
| 13789 | 10 | INTERNAP-BLK3 - Internap Network Services Corporation, US | 0% | 0 | 0 | 0 | 198 | 768 | 0 | 3676 |
| 63473 | 7 | HOSTHATCH-ASN - HostHatch, Inc, US | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 19969 | 6 | JOESDATACENTER - Joe's Datacenter, LLC, US | 0% | 0 | 0 | 0 | 446 | 0 | 0 | 10449 |
| 34482 | 5 | CIRQUE - Danish Internet Service Provider, DK | 0% | 0 | 0 | 0 | 2 | 50 | 1 | 0 |
| 40430 | 5 | COLO4JAX-AS - colo4jax, LLC, US | 0% | 0 | 0 | 0 | 4 | 0 | 0 | 121 |
| 50245 | 5 | SERVEREL - , CZ | 0% | 163 | 0 | 0 | 23 | 0 | 0 | 32993 |
| 19531 | 5 | NODESDIRECT - Nodes Direct, US | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 453 |
| 12843 | 5 | TELEMAXX - , DE | 0% | 0 | 0 | 0 | 494 | 364 | 104 | 581 |
| 42363 | 5 | PHPNET - AS , FR | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 404 |
| 39741 | 5 | ZRA - AS , RU | 0% | 2 | 0 | 0 | 4 | 26 | 15 | 23 |
| 54290 | 5 | HOSTWINDS - Hostwinds LLC., US | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 206 |
| 8267 | 4 | CYFRONET - AS Metropolitan Area Network Autonomous System, PL | 0% | 0 | 250 | 21 | 3 | 268 | 20 | 114 |
| 34145 | 4 | TOMTEL - , RU | 0% | 0 | 0 | 0 | 3 | 2292 | 1 | 101 |
| 42678 | 4 | MEGANET - AS , RU | 0% | 0 | 0 | 0 | 0 | 0 | 2 | 0 |
| 48666 | 4 | AS - MAROSNET Moscow, Russia, RU | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 20 |
| 201106 | 4 | SPARTANHOST - , GB | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 5580 | 4 | HIBERNIA - , NL | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 46226 |
| 28917 | 4 | FIORD - AS IP-transit operator in Russia and Ukraine, RU | 0% | 534 | 0 | 0 | 747 | 338 | 0 | 4499 |
| 133480 | 3 | INTERGRID-AS - AP Intergrid Group Pty Ltd, AU | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 45177 | 3 | LAYER2CO-AS - AP Vibe Communications LTD, NZ | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 15072 | 3 | NETRIPLEX-CORPORATIO - Netriplex Corporation, US | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 159 |
| 23387 | 3 | NONE---THIS-IS-A-NEW - Omsoft Technologies, US | 0% | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2878 | 3 | ULRT - AS PJSC Rostelecom, RU | 0% | 1 | 0 | 0 | 22 | 24 | 102 | 81 |
| 44546 | 3 | ALFATELECOM - , CZ | 0% | 332 | 0 | 0 | 388 | 0 | 0 | 1272 |
| 39287 | 2 | FLATTR - AS , SE | 0% | 0 | 0 | 0 | 0 | 8 | 0 | 179 |
<< Statistics | Statistics | Bots >>
