ASN Reputation Tracking. The good, the bad, and the ugly.

ASN traffic analysisASN reputation tracking

Examining traffic from ASN routed IP ranges, it becomes relatively clear which ASN's do little to nothing to prevent Internet abuse. Some of these ASN's have surfaced as bona fide security companies and governments, even 'reputable' big tech is guilty of conduct unbecoming.

The data as shown below is a 30 day look back rolling window of all inbound Internet traffic received at this site to date. Only the first 50 of each type are shown. A very interesting pattern appears when you look at the three queries done on the dataset. First all ASN's that only have bad and dangerous IP traffic, the second are ASN's that have no bad IP traffic at all, and the third is a where the amount of 'good' traffic is higher than 'bad' traffic.

Bad reputation ASN report

These ASN network addresses are ideal candidates for firewall DROP (Do not Route Or Peer) lists. The live BAD ASN list as seen below, the amount of bad IP traffic compared to allowed and legitimate IP traffic which in this case is zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
3315040DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com30/04/2024
1821490DCH194.180.48.0/22SPRINTLINKSprintUSstingers.io25/05/2024
532960DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com30/04/2024
482610DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com25/05/2024
289360 185.242.226.0/24SpectraIP B.V.SpectraIP B.V.NLbreezle.net30/04/2024
239330DCH79.124.58.0/23Tamatiya EOODTamatiya EOODBGlir.bg30/04/2024
236490DCH185.242.226.0/24SpectraIP B.V.SpectraIP B.V.NLbreezle.net25/05/2024
226580DCH198.235.24.0/24EXECULINKExeculink Telecom IncCAexeculink.com25/05/2024
205940DCH106.75.128.0/18CHINANET Guangdong province networkChinaNet Guangdong Province NetworkCNchinatelecom.com.cn30/04/2024
179160DCH162.142.125.0/24CENSYS-ARIN-01 US 30/04/2024
151770DCH162.142.125.0/24CENSYS-ARIN-01 US 25/05/2024
145890DCH158.255.0.0/21Hostkey B.v.Hostkey B.V.NLhostkey.ru30/04/2024
139270ISP87.246.7.0/24Internet Hosting LTD BG 25/05/2024
134180DCH80.75.212.0/24Premiere Conferencing Ireland Ltd IE 25/05/2024
118140DCH87.120.84.0/22Sharcom Ltd. BG 28/04/2024
107340DCH107.170.0.0/16DIGITALOCEAN-ASNDigitalOcean LLCUSdigitalocean.com30/04/2024
96860DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru25/05/2024
94420---122.228.112.0/21WENZHOU, ZHEJIANG ProvinceWENZHOU ZHEJIANG Province P.R.China.CNchinatelecom.com.cn25/05/2024
88530DCH176.111.174.0/24SAYDA LLC RU 25/05/2024
86350DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg30/04/2024
80380DCH80.66.83.0/24Truenetwork LLC RU 25/05/2024
77840DCH176.111.174.0/24SAYDA LLC RU 30/04/2024
75240ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com30/04/2024
74800DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg25/05/2024
71120DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com30/04/2024
70490DCH104.152.52.0/22RETHEMHOSTINGRethem Hosting LLCUSrethemhosting.net30/04/2024
66890DCH45.227.253.0/24Global Layer B.V.Global Layer B.V.NLmosnet.ru30/04/2024
64460DCH193.42.96.0/24DEDIPATH-LLCDediPathUSbhost.lv22/05/2024
64120DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru30/04/2024
63700ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com25/05/2024
62190DCH78.128.114.0/24Tamatiya EOODTamatiya EOODBGlir.bg30/04/2024
59600DCH45.227.253.0/24Global Layer B.V.Global Layer B.V.NLmosnet.ru25/05/2024
59100ISP45.93.20.0/24COGENT-174Cogent CommunicationsUSfdcservers.net25/05/2024
55890DCH141.98.4.0/22ASN-GIGENETGigeNETUSjobbuzzactiv.com25/05/2024
54860DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com25/05/2024
53810ISP87.121.69.0/24NET1 Ltd.Net1 Ltd.BGnet1.bg30/04/2024
53470COM45.155.88.0/22DCTV Cable Network Broadband Services IncDCTV Cable Network Broadband Services IncPHdctv.ph25/05/2024
49840DCH141.98.10.0/23UAB Host Baltic LT 30/04/2024
48280DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com25/05/2024
47280DCH185.161.248.0/22Virgin Media LimitedVirgin Media LimitedGBvirginmedia.com30/04/2024
47200DCH80.94.94.0/23Bunea TELECOM SRLBunea Telecom SRLRObunea.eu30/04/2024
47030ISP87.121.69.0/24NET1 Ltd.Net1 Ltd.BGnet1.bg25/05/2024
45560DCH84.54.48.0/22SPRINTLINKSprintUSstingers.io30/04/2024
44740DCH104.152.52.0/22RETHEMHOSTINGRethem Hosting LLCUSrethemhosting.net22/05/2024
41350DCH84.54.48.0/22SPRINTLINKSprintUSstingers.io25/05/2024
41320---59.47.0.0/20CHINATELECOM Liaoning Benxi MAN CN 25/05/2024
40610DCH152.32.128.0/19UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUCloud Information Technology (HK) LimitedHKzenlayer.com30/04/2024
35500DCH185.224.128.0/22SpectraIP B.V.SpectraIP B.V.NLbreezle.net25/05/2024
34880DCH78.128.114.0/24Tamatiya EOODTamatiya EOODBGlir.bg25/05/2024
34710DCH45.128.232.0/22ASN-GIGENETGigeNETUSjobbuzzactiv.com30/04/2024

NOTE: This data also includes ASN reputation banning. This means that if a certain amount of constant bad IP traffic is received by a defined number of IP addresses within the ASN range within a certain period of time. Then all IP traffic from all addresses of said ASN will will be blocked for a defined period of time.

Good reputation ASN report

The live GOOD ASN list as seen below, the amount of good IP traffic compared to unfriendly IP traffic which in this case must be zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
022622 50.200.172.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net25/05/2024
022587 50.200.128.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net25/05/2024
010391ISP50.206.212.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net25/05/2024
010369EDU128.187.0.0/16BYUBrigham Young UniversityUSbyu.edu30/04/2024
08592DCH178.237.32.0/20Schuberg Philis B.V. NL 30/04/2024
08227EDU128.187.0.0/16BYUBrigham Young UniversityUSbyu.edu25/05/2024
06907DCH178.237.32.0/20Schuberg Philis B.V. NL 25/05/2024
04596ISP172.56.0.0/14T-MOBILE-AS21928T-Mobile USA Inc.USt-mobile.com25/05/2024
04375 178.183.192.0/19T-Mobile Polska S.A.T-Mobile Polska S.A.PLt-mobile.pl25/05/2024
03649DCH18.140.0.0/14AMAZON-02Amazon.com Inc.USamazon.com20/05/2024
03239CDN172.69.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
02973CDN172.69.64.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
02845ISP195.169.0.0/16SURF B.V.Surfnet B.V.NLrug.nl30/04/2024
02697 50.205.20.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/04/2024
02286ISP195.169.0.0/16SURF B.V.Surfnet B.V.NLrug.nl25/05/2024
02281EDU198.24.192.0/19US-TELEPACIFICTPx CommunicationsUStpx.com30/04/2024
02168DCH141.0.8.0/21Opera Software ASOpera Software ASNOopera.com24/05/2024
02166ISP50.205.20.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net25/05/2024
01883CDN172.69.224.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
01829EDU198.24.192.0/19US-TELEPACIFICTPx CommunicationsUStpx.com25/05/2024
01701CDN172.69.192.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
01678CDN172.69.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com30/04/2024
01666COM209.17.48.0/22NETDYNAMICSOracle CorporationUSoracle.com30/04/2024
01531ISP62.131.0.0/16KPN B.V.KPN B.V.NLbmboxmeer.nl24/05/2024
01387COM216.40.0.0/19NITEL US 30/04/2024
01386CDN172.68.128.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
01382ISP175.176.0.0/17Smart Broadband, Inc.Smart Broadband Inc.PHsmart.com.ph25/05/2024
01371CDN172.69.32.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
01368MOB157.32.0.0/12Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com25/05/2024
01347ISP136.158.0.0/17Converge ICT Solutions Inc.Converge ICT Solutions Inc.PHconvergeict.com25/05/2024
01344DCH114.119.128.0/19HUAWEI CLOUDSHuawei CloudsHKhuawei.com25/05/2024
01201DCH152.228.128.0/17OVH SASOVH SASFRovh.com25/05/2024
01162DCH66.102.0.0/20GOOGLEGoogle LLCUSgoogle.com25/05/2024
01134COM216.40.0.0/19NITEL US 25/05/2024
01095COM103.131.68.0/22VNPT CorpVNPT CorpVNvnpt.com.vn25/05/2024
01078CDN172.68.96.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0958CDN162.158.16.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0947ISP178.192.0.0/13BluewinSwisscom (Schweiz) AGCHswisscom.ch24/05/2024
0944DCH82.145.208.0/22Opera Software ASOpera Software ASNOopera.com24/05/2024
0896COM209.17.48.0/22NETDYNAMICSOracle CorporationUSoracle.com19/05/2024
0885ISP90.145.32.0/20Eurofiber Nederland BVEurofiber Nederland BVNLeurofiber.nl25/05/2024
0853CDN172.69.192.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com30/04/2024
0768CDN162.158.96.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0762CDN162.158.136.0/21CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0748CDN162.158.8.0/21CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0741CDN162.158.56.0/21CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
0736DCH138.201.0.0/16Hetzner Online GmbHHetzner Online GmbHDEhetzner.de30/04/2024
0726CDN172.68.128.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com30/04/2024
0718ISP200.133.0.0/17Associacao Rede Nacional de Ensino e PesquisaLatin American and Caribbean IP address Regional RegistryBRufpe.br30/04/2024
0712CDN172.69.216.0/21CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024

Poor reputation ASN report

The live OK, MAYBE ASN list as seen below, the amount of good IP traffic that is larger than IP traffic aimed at ports and services clearly indicating malicious or sniffing activity. This list shows network ranges that have good and bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
1232216013SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com30/04/2024
39183987DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com30/04/2024
329316330SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com25/05/2024
21412465ISP172.56.0.0/14T-MOBILE-AS21928T-Mobile USA Inc.USt-mobile.com30/04/2024
16788697COM213.124.0.0/14Vodafone Libertel B.V.Vodafone Libertel B.V.NLziggo.nl24/05/2024
13921766DCH52.160.0.0/11MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/04/2024
11401556CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com30/04/2024
8897469COM213.124.0.0/14Vodafone Libertel B.V.Vodafone Libertel B.V.NLziggo.nl30/04/2024
828909DCH139.59.0.0/16DIGITALOCEAN-ASNDigitalOcean LLCUSdigitalocean.com30/04/2024
8242842DCH40.76.0.0/14MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com25/05/2024
7911611MOB49.32.0.0/13Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com25/05/2024
6952943CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
6702189DCH52.160.0.0/11MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com25/05/2024
5529221DCH72.14.192.0/18GOOGLEGoogle LLCUSgoogle.com25/05/2024
5401588DCH114.119.128.0/19HUAWEI CLOUDSHuawei CloudsHKhuawei.com30/04/2024
5348858DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com25/05/2024
492961ISP1.128.0.0/11Telstra Corporation LtdAsia Pacific Network Information CentreAUtelstra.com.au24/05/2024
449665ISP38.40.0.0/13COGENT-174Cogent CommunicationsUSfdcservers.net25/05/2024
447459DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com30/04/2024
4301268COM103.131.68.0/22VNPT CorpVNPT CorpVNvnpt.com.vn30/04/2024
4232124DCH40.76.0.0/14MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/04/2024
408999DCH138.197.0.0/17DIGITALOCEAN-ASNDigitalOcean LLCUSdigitalocean.com25/05/2024
388469DCH3.224.0.0/12AMAZON-AESAmazon.com Inc.USamazon.com30/04/2024
364935DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com25/05/2024
342753DCH35.80.0.0/12AMAZON-02Amazon.com Inc.USamazon.com25/05/2024
3401030DCH64.233.160.0/19GOOGLEGoogle LLCUSgoogle.com30/04/2024
338499DCH136.243.0.0/16Hetzner Online GmbHHetzner Online GmbHDEhetzner.de30/04/2024
333454DCH44.192.0.0/11AMAZON-AESAmazon.com Inc.USamazon.com25/05/2024
301548SES207.46.0.0/19MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/04/2024
233244DCH52.224.0.0/12MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com29/04/2024
231587DCH54.236.0.0/15AMAZON-AESAmazon.com Inc.USamazon.com25/05/2024
226291DCH85.208.98.0/24GOOGLE-PRIVATE-CLOUDGoogle LLCUSbluecoat.com30/04/2024
216562ISP175.176.0.0/17Smart Broadband, Inc.Smart Broadband Inc.PHsmart.com.ph30/04/2024
215387MOB157.32.0.0/12Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com30/04/2024
214386ISP73.192.0.0/10COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/04/2024
211461ISP41.82.0.0/15Autonomous SystemAutonomous SystemEUsonatel.sn30/04/2024
209423ISP223.122.0.0/15Guangdong Mobile Communication Co.Ltd.Guangdong Mobile Communication Co.Ltd.CNchinamobileltd.com30/04/2024
206324DCH81.209.176.0/23euNetworks GmbHeuNetworks GmbHDEeunetworks.com30/04/2024
199225DCH34.224.0.0/12AMAZON-AESAmazon.com Inc.USamazon.com25/05/2024
1893936CDN172.68.0.0/18CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
181303DCH146.59.0.0/16OVH SASOVH SASFRovh.com25/05/2024
181300ISP60.168.0.0/13ChinanetAsia Pacific Network Information CentreCNchinatelecom.com.cn29/04/2024
179471DCH34.208.0.0/12AMAZON-02Amazon.com Inc.USamazon.com25/05/2024
177471CDN172.69.52.0/22CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
176329MOB49.40.0.0/14Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com30/04/2024
173712CDN172.68.80.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com30/04/2024
1694571DCH35.224.0.0/12GOOGLEGoogle LLCUSgoogle.com30/04/2024
1681501CDN172.68.80.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
1681382CDN162.158.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com25/05/2024
168415DCH54.224.0.0/14AMAZON-AESAmazon.com Inc.USamazon.com24/05/2024