ASN Reputation Tracking. The good, the bad, and the ugly.

ASN traffic analysisASN reputation tracking

Examining traffic from ASN routed IP ranges, it becomes relatively clear which ASN's do little to nothing to prevent Internet abuse. Some of these ASN's have surfaced as bona fide security companies and governments, even 'reputable' big tech is guilty of conduct unbecoming.

The data as shown below is a 30 day look back rolling window of all inbound Internet traffic received at this site to date. Only the first 50 of each type are shown. A very interesting pattern appears when you look at the three queries done on the dataset. First all ASN's that only have bad and dangerous IP traffic, the second are ASN's that have no bad IP traffic at all, and the third is a where the amount of 'good' traffic is higher than 'bad' traffic.

Bad reputation ASN report

These ASN network addresses are ideal candidates for firewall DROP (Do not Route Or Peer) lists. The live BAD ASN list as seen below, the amount of bad IP traffic compared to allowed and legitimate IP traffic which in this case is zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
1106020DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com31/08/2024
586120ISP83.222.184.0/21NET1 Ltd.Net1 Ltd.BGnet1.bg31/08/2024
440370DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com31/08/2024
355820ISP185.242.84.0/22Leaseweb Deutschland GmbHLeaseWeb Deutschland GmbHDE3nt.com31/08/2024
286100DCH185.242.226.0/24SpectraIP B.V.SpectraIP B.V.NLbreezle.net31/08/2024
242300DCH194.26.29.0/24Media Land LLC RU 31/08/2024
185510DCH162.142.125.0/24CENSYS-ARIN-01 US 31/08/2024
179450DCH154.213.160.0/19DDOSING-BGP-NETWORKDDoSing NetworkUSddosing.net13/09/2024
171850DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg31/08/2024
170430DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com13/09/2024
154020ISP83.222.184.0/21NET1 Ltd.Net1 Ltd.BGnet1.bg13/09/2024
138880DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com13/09/2024
134450ISP87.246.7.0/24Internet Hosting LTD BG 16/08/2024
130760DCH185.242.226.0/24SpectraIP B.V.SpectraIP B.V.NLbreezle.net13/09/2024
119120ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com31/08/2024
118200DCH103.102.228.0/22Wireline B and G Pty Ltd AU 31/08/2024
95840DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru31/08/2024
95640DCH176.111.174.0/24SAYDA LLC RU 31/08/2024
91380DCH194.169.168.0/21SPRINTLINKSprintUSstingers.io31/08/2024
80590ISP45.93.20.0/24COGENT-174Cogent CommunicationsUSfdcservers.net31/08/2024
79630 2.189.4.0/22Information Technology Company (ITC)Information Technology Company (ITC)IRtic.ir31/08/2024
76480DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com31/08/2024
73120DCH162.142.125.0/24CENSYS-ARIN-01 US 13/09/2024
69350DCH45.227.253.0/24Global Layer B.V.Global Layer B.V.NLmosnet.ru31/08/2024
63490DCH85.209.176.0/24LLC BaxetLLC BaxetRUexpcourier.ru31/08/2024
62050DCH104.152.52.0/22RETHEMHOSTINGRethem Hosting LLCUSrethemhosting.net27/08/2024
59960DCH45.148.10.0/24Pptechnology LimitedPPTECHNOLOGY LIMITEDGBbunea.eu31/08/2024
52650DCH185.224.128.0/22SpectraIP B.V.SpectraIP B.V.NLbreezle.net13/09/2024
50560DCH103.102.228.0/22Wireline B and G Pty Ltd AU 13/09/2024
46310DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg13/09/2024
45600DCH5.188.206.0/24Krez 999 EoodKrez 999 EOODBGpinspb.ru29/08/2024
45360DCH80.66.83.0/24Truenetwork LLC RU 31/08/2024
45300 2.189.4.0/22Information Technology Company (ITC)Information Technology Company (ITC)IRtic.ir13/09/2024
44390DCH80.94.94.0/23Bunea TELECOM SRLBunea Telecom SRLRObunea.eu31/08/2024
41630ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com13/09/2024
39900DCH176.111.174.0/24SAYDA LLC RU 13/09/2024
38430DCH194.169.168.0/21SPRINTLINKSprintUSstingers.io13/09/2024
37490DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru13/09/2024
37250DCH65.49.1.0/24PDXHOSTING-01Portland Internet Hosting LLCUSpdxhosting.net31/08/2024
36750DCH154.212.140.0/22MULTA-ASN1Multacom CorporationUSmultacom.com31/08/2024
36560DCH64.62.156.0/24AXIA-CONNECT-USA CA 31/08/2024
36460DCH104.152.52.0/22RETHEMHOSTINGRethem Hosting LLCUSrethemhosting.net13/09/2024
34740ISP45.93.20.0/24COGENT-174Cogent CommunicationsUSfdcservers.net13/09/2024
34080COM45.155.88.0/22DCTV Cable Network Broadband Services IncDCTV Cable Network Broadband Services IncPHdctv.ph31/08/2024
33440DCH141.98.10.0/23UAB Host Baltic LT 31/08/2024
33170DCH47.251.0.0/16Alibaba (US) Technology Co., Ltd.Alibaba (US) Technology Co. Ltd.CNalibaba-inc.com31/08/2024
33030DCH152.32.128.0/19UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUCloud Information Technology (HK) LimitedHKzenlayer.com31/08/2024
32740DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com13/09/2024
31750DCH141.98.10.0/23UAB Host Baltic LT 13/09/2024
31140DCH47.96.0.0/12Hangzhou Alibaba Advertising Co., Ltd.Hangzhou Alibaba Advertising Co. Ltd.CNaliyun.com31/08/2024

NOTE: This data also includes ASN reputation banning. This means that if a certain amount of constant bad IP traffic is received by a defined number of IP addresses within the ASN range within a certain period of time. Then all IP traffic from all addresses of said ASN will will be blocked for a defined period of time.

Good reputation ASN report

The live GOOD ASN list as seen below, the amount of good IP traffic compared to unfriendly IP traffic which in this case must be zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
043028ISP50.200.172.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net31/08/2024
041433ISP50.200.128.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net31/08/2024
017763ISP50.200.172.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net13/09/2024
017755ISP50.200.128.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net13/09/2024
017420EDU141.39.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de31/08/2024
017267ISP50.206.212.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net31/08/2024
08895COM195.52.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag31/08/2024
08894DCH178.237.32.0/20Schuberg Philis B.V. NL 31/08/2024
08884ISP128.0.120.0/23Buchholz Digital GmbH DE 31/08/2024
08874COM62.144.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag31/08/2024
08874COM145.253.0.0/16Vodafone GmbHVodafone GmbHDEvodafone.de31/08/2024
08783COM195.185.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag31/08/2024
08717EDU149.205.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de31/08/2024
08683 195.55.168.0/22Telefonica De EspanaTelefonica de EspanaEStelefonica.com31/08/2024
08653ISP83.236.0.0/16Plusnet GmbHPlusnet GmbHDEeifel-net.net31/08/2024
08651COM212.211.128.0/17ScanPlus GmbHSCANPLUS GMBHDEswj-group.com31/08/2024
08631DCH194.29.224.0/19IPB Internet Provider in Berlin GmbHIPB Internet Provider in Berlin GmbHDEipb.de31/08/2024
08631ISP213.30.192.0/181&1 Versatel Deutschland GmbH1&1 Versatel Deutschland GmbHDEversatel.de31/08/2024
08620ISP178.183.192.0/19T-Mobile Polska S.A.T-Mobile Polska S.A.PLt-mobile.pl31/08/2024
07292EDU141.39.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de13/09/2024
07179ISP50.206.212.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net13/09/2024
05364EDU128.187.0.0/16BYUBrigham Young UniversityUSbyu.edu31/08/2024
04445EDU128.187.0.0/16BYUBrigham Young UniversityUSbyu.edu13/09/2024
03713COM213.61.0.0/16COLT Technology Services Group LimitedColt Technology Services Group LimitedGBopen-sky.it13/09/2024
03698COM145.253.0.0/16Vodafone GmbHVodafone GmbHDEvodafone.de13/09/2024
03691ISP128.0.120.0/23Buchholz Digital GmbH DE 13/09/2024
03688COM62.144.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag13/09/2024
03686COM195.52.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag13/09/2024
03684DCH178.237.32.0/20Schuberg Philis B.V. NL 13/09/2024
03655COM195.185.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag13/09/2024
03629ISP92.192.0.0/13Plusnet GmbHPlusnet GmbHDEeifel-net.net13/09/2024
03612 195.55.168.0/22Telefonica De EspanaTelefonica de EspanaEStelefonica.com13/09/2024
03603EDU149.205.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de13/09/2024
03599ISP83.236.0.0/16Plusnet GmbHPlusnet GmbHDEeifel-net.net13/09/2024
03590ISP213.30.192.0/181&1 Versatel Deutschland GmbH1&1 Versatel Deutschland GmbHDEversatel.de13/09/2024
03589COM212.211.128.0/17ScanPlus GmbHSCANPLUS GMBHDEswj-group.com13/09/2024
03589DCH62.246.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag13/09/2024
03587DCH194.29.224.0/19IPB Internet Provider in Berlin GmbHIPB Internet Provider in Berlin GmbHDEipb.de13/09/2024
03579ISP178.183.192.0/19T-Mobile Polska S.A.T-Mobile Polska S.A.PLt-mobile.pl13/09/2024
03162CDN172.69.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com31/08/2024
03015DCH23.94.128.0/17AS-COLOCROSSINGColoCrossingUSbraveway.com13/09/2024
02944ISP195.169.0.0/16SURF B.V.Surfnet B.V.NLrug.nl31/08/2024
02797 207.114.248.0/21LVLT-3549Level 3 Parent LLCUScenturylink.com13/09/2024
02788ISP50.205.20.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net31/08/2024
02765CDN172.69.64.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com31/08/2024
02419ISP175.176.0.0/17Smart Broadband, Inc.Smart Broadband Inc.PHsmart.com.ph31/08/2024
02327EDU198.24.192.0/19US-TELEPACIFICTPx CommunicationsUStpx.com31/08/2024
02024ISP62.131.0.0/16KPN B.V.KPN B.V.NLbmboxmeer.nl31/08/2024
01867DCH152.228.128.0/17OVH SASOVH SASFRovh.com31/08/2024
01715DCH192.178.0.0/15GOOGLEGoogle LLCUSgoogle.com31/08/2024

Poor reputation ASN report

The live OK, MAYBE ASN list as seen below, the amount of good IP traffic that is larger than IP traffic aimed at ports and services clearly indicating malicious or sniffing activity. This list shows network ranges that have good and bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
49046133962DCH15.184.0.0/15AMAZON-02Amazon.com Inc.USamazon.com31/08/2024
698425255SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com31/08/2024
28484732SES173.252.64.0/18FACEBOOKFacebook Inc.USlespneuschezvous.fr31/08/2024
283920131DCH72.14.192.0/18GOOGLEGoogle LLCUSgoogle.com31/08/2024
239710200SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com13/09/2024
18632883SES69.171.224.0/19FACEBOOKFacebook Inc.USlespneuschezvous.fr31/08/2024
15652019DCH35.208.0.0/13GOOGLEGoogle LLCUSgoogle.com13/09/2024
15394387CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com31/08/2024
14011421SES66.220.144.0/20FACEBOOKFacebook Inc.USlespneuschezvous.fr31/08/2024
12592053DCH194.45.196.0/23IP-Projects GmbH & Co. KGMichael Sebastian Schinzel Trading as IP-Projects GmbH & Co. KGDEip-projects.de24/08/2024
12511329DCH52.160.0.0/11MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com13/09/2024
12221627DCH35.208.0.0/13GOOGLEGoogle LLCUSgoogle.com31/08/2024
10081009DCH20.160.0.0/12MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com31/08/2024
9937643DCH72.14.192.0/18GOOGLEGoogle LLCUSgoogle.com13/09/2024
9681092DCH74.125.0.0/16GOOGLEGoogle LLCUSgoogle.com31/08/2024
90819890DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com31/08/2024
6031214DCH95.179.128.0/17AS-CHOOPAThe Constant Company LLCUSvultr.com13/09/2024
558560DCH35.80.0.0/12AMAZON-02Amazon.com Inc.USamazon.com31/08/2024
5171094DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com31/08/2024
479687DCH74.125.0.0/16GOOGLEGoogle LLCUSgoogle.com13/09/2024
4421652ISP172.56.0.0/14T-MOBILE-AS21928T-Mobile USA Inc.USt-mobile.com13/09/2024
437600DCH143.244.32.0/19Datacamp LimitedDataCamp LimitedGBsh.cz13/09/2024
432531DCH3.224.0.0/12AMAZON-AESAmazon.com Inc.USamazon.com13/09/2024
404898DCH136.243.0.0/16Hetzner Online GmbHHetzner Online GmbHDEhetzner.de31/08/2024
387640DCH174.138.0.0/17DIGITALOCEAN-ASNDigitalOcean LLCUSdigitalocean.com31/08/2024
353895MOB49.32.0.0/13Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com13/09/2024
343825ISP125.224.0.0/13Data Communication Business GroupAsia Pacific Network Information CentreTWcht.com.tw31/08/2024
336414DCH20.192.0.0/10MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com31/08/2024
329984DCH44.192.0.0/11AMAZON-AESAmazon.com Inc.USamazon.com31/08/2024
315432DCH199.247.0.0/19AS-CHOOPAThe Constant Company LLCUSvultr.com13/09/2024
3091686CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com13/09/2024
2877828DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com13/09/2024
287467MOB175.157.0.0/16Dialog Axiata PLC.Dialog Axiata PLC.LKdialog.lk31/08/2024
261466DCH217.69.0.0/20AS-CHOOPAThe Constant Company LLCUSvultr.com13/09/2024
2511495ISP196.188.0.0/14Ethiopian Telecommunication CorporationEthioNet-ASETethiotelecom.et13/09/2024
251746DCH45.76.0.0/15AS-CHOOPAThe Constant Company LLCUSvultr.com13/09/2024
245630DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com13/09/2024
241981DCH95.179.128.0/17AS-CHOOPAThe Constant Company LLCUSvultr.com29/08/2024
241316DCH140.238.0.0/16ORACLE-BMC-31898Oracle CorporationUSoracle.com31/08/2024
2292144ISP196.188.0.0/14Ethiopian Telecommunication CorporationEthioNet-ASETethiotelecom.et31/08/2024
225613ISP74.74.64.0/18TWC-11351-NORTHEASTCharter Communications IncUSspectrum.com12/09/2024
2211051DCH20.40.0.0/14MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com31/08/2024
218605DCH136.244.64.0/18AS-CHOOPAThe Constant Company LLCUSvultr.com12/09/2024
205273DCH109.200.192.0/19i3D.net B.Vi3D.net B.VNLi3d.net22/08/2024
196252DCH85.208.98.0/24GOOGLE-PRIVATE-CLOUDGoogle LLCUSbluecoat.com13/09/2024
188373DCH45.32.0.0/16AS-CHOOPAThe Constant Company LLCUSvultr.com10/09/2024
1803901CDN172.68.0.0/18CLOUDFLARENETCloudFlare IncUScloudflare.com31/08/2024
175353DCH54.36.0.0/14OVH SASOVH SASFRovh.com31/08/2024
172471DCH44.192.0.0/11AMAZON-AESAmazon.com Inc.USamazon.com13/09/2024
1681395CDN162.158.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com31/08/2024
Privacy Policy - Terms of service Cookies © 2001 - 2024 Jeroen Steeman email addresses - ZEUS (v3.5.125) DCH
Bots not welcome here