ASN Reputation Tracking. The good, the bad, and the ugly.

ASN traffic analysisASN reputation tracking

Examining traffic from ASN routed IP ranges, it becomes relatively clear which ASN's do little to nothing to prevent Internet abuse. Some of these ASN's have surfaced as bona fide security companies and governments, even 'reputable' big tech is guilty of conduct unbecoming.

The data as shown below is a 30 day look back rolling window of all inbound Internet traffic received at this site to date. Only the first 50 of each type are shown. A very interesting pattern appears when you look at the three queries done on the dataset. First all ASN's that only have bad and dangerous IP traffic, the second are ASN's that have no bad IP traffic at all, and the third is a where the amount of 'good' traffic is higher than 'bad' traffic.

Bad reputation ASN report

These ASN network addresses are ideal candidates for firewall DROP (Do not Route Or Peer) lists. The live BAD ASN list as seen below, the amount of bad IP traffic compared to allowed and legitimate IP traffic which in this case is zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
409430DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com30/06/2024
374860DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com30/06/2024
339910DCH185.242.226.0/24SpectraIP B.V.SpectraIP B.V.NLbreezle.net30/06/2024
228880DCH162.216.148.0/22GOOGLEGoogle LLCUSgoogle.com19/07/2024
200730ISP87.246.7.0/24Internet Hosting LTD BG 30/06/2024
197250ISP87.246.7.0/24Internet Hosting LTD BG 19/07/2024
175460DCH162.142.125.0/24CENSYS-ARIN-01 US 30/06/2024
163950DCH79.110.60.0/22ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com19/07/2024
144680DCH103.102.228.0/22Wireline B and G Pty Ltd AU 30/06/2024
107780DCH162.142.125.0/24CENSYS-ARIN-01 US 19/07/2024
103220DCH176.111.174.0/24SAYDA LLC RU 30/06/2024
100600ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com30/06/2024
96790DCH80.66.83.0/24Truenetwork LLC RU 30/06/2024
91260DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg30/06/2024
83550DCH78.128.113.0/24Miti 2000 EOODMITI 2000 EOODBGlir.bg18/07/2024
78330ISP183.129.178.0/23CT-HangZhou-IDCNo.288 Fu-chun RoadCNchinatelecom.com.cn26/06/2024
71770DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru30/06/2024
71570DCH91.92.240.0/23Natskovi & Sie Ltd.Zonata - Natskovi & Sie Ltd.BGthezone.bg30/06/2024
70670DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com30/06/2024
69590ISP45.93.20.0/24COGENT-174Cogent CommunicationsUSfdcservers.net30/06/2024
68880DCH45.227.253.0/24Global Layer B.V.Global Layer B.V.NLmosnet.ru30/06/2024
67530DCH176.111.174.0/24SAYDA LLC RU 19/07/2024
63710DCH141.98.10.0/23UAB Host Baltic LT 30/06/2024
61800DCH80.66.83.0/24Truenetwork LLC RU 19/07/2024
60280DCH89.248.160.0/21IP Volume incIP Volume IncSCpinspb.ru19/07/2024
59820ISP45.93.20.0/24COGENT-174Cogent CommunicationsUSfdcservers.net19/07/2024
59540COM85.209.133.0/24ASN-CXA-ALL-CCI-22773-RDCCox Communications Inc.USakamai.com19/07/2024
52770ISP94.156.64.0/21Terasyst LtdTerasyst LtdBGrozabg.com19/07/2024
51200SES213.180.192.0/19YANDEX LLC RU 30/06/2024
48760DCH80.94.94.0/23Bunea TELECOM SRLBunea Telecom SRLRObunea.eu30/06/2024
44500DCH80.75.212.0/24Premiere Conferencing Ireland Ltd IE 19/07/2024
43780DCH64.62.197.0/24HURRICANEHurricane Electric LLCUStennwireless.com19/07/2024
43140ISP87.121.69.0/24NET1 Ltd.Net1 Ltd.BGnet1.bg30/06/2024
42440DCH84.54.48.0/22SPRINTLINKSprintUSstingers.io30/06/2024
42340DCH78.128.114.0/24Tamatiya EOODTamatiya EOODBGlir.bg30/06/2024
40170DCH45.128.232.0/22ASN-GIGENETGigeNETUSjobbuzzactiv.com30/06/2024
39910DCH5.188.206.0/24Krez 999 EoodKrez 999 EOODBGpinspb.ru19/07/2024
39880DCH5.188.206.0/24Krez 999 EoodKrez 999 EOODBGpinspb.ru30/06/2024
39810---115.231.78.0/23CT-HangZhou-IDCNo.288 Fu-chun RoadCNchinatelecom.com.cn26/06/2024
39780DCH154.212.140.0/22MULTA-ASN1Multacom CorporationUSmultacom.com30/06/2024
39430SES5.255.192.0/18YANDEX LLC RU 30/06/2024
38260DCH152.32.128.0/19UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUCloud Information Technology (HK) LimitedHKzenlayer.com30/06/2024
37970DCH106.75.128.0/18CHINANET Guangdong province networkChinaNet Guangdong Province NetworkCNchinatelecom.com.cn30/06/2024
34440DCH65.49.1.0/24PDXHOSTING-01Portland Internet Hosting LLCUSpdxhosting.net30/06/2024
34230DCH64.62.156.0/24AXIA-CONNECT-USA CA 30/06/2024
34080ISP122.192.0.0/16CHINA UNICOM China169 BackboneChina UnicomCNchinaunicom.com20/06/2024
33990SES95.108.128.0/17YANDEX LLC RU 30/06/2024
33220 170.39.216.0/24Harmony Hosting SARLHarmony Hosting SarlFRharmony-hosting.com30/06/2024
31890DCH45.227.253.0/24Global Layer B.V.Global Layer B.V.NLmosnet.ru18/07/2024
31510DCH91.92.240.0/23Natskovi & Sie Ltd.Zonata - Natskovi & Sie Ltd.BGthezone.bg18/07/2024

NOTE: This data also includes ASN reputation banning. This means that if a certain amount of constant bad IP traffic is received by a defined number of IP addresses within the ASN range within a certain period of time. Then all IP traffic from all addresses of said ASN will will be blocked for a defined period of time.

Good reputation ASN report

The live GOOD ASN list as seen below, the amount of good IP traffic compared to unfriendly IP traffic which in this case must be zero. This list shows network ranges that only have bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
041393ISP50.200.172.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/06/2024
041385ISP50.200.128.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/06/2024
025396ISP50.200.128.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net19/07/2024
025381ISP50.200.172.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net19/07/2024
016554ISP50.206.212.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/06/2024
010216EDU141.39.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de19/07/2024
010158ISP50.206.212.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net19/07/2024
09805EDU128.187.0.0/16BYUBrigham Young UniversityUSbyu.edu30/06/2024
09147EDU141.39.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de30/06/2024
08523DCH178.237.32.0/20Schuberg Philis B.V. NL 30/06/2024
08263ISP178.183.192.0/19T-Mobile Polska S.A.T-Mobile Polska S.A.PLt-mobile.pl30/06/2024
05563COM195.52.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag30/06/2024
05247COM213.61.0.0/16COLT Technology Services Group LimitedColt Technology Services Group LimitedGBopen-sky.it19/07/2024
05233COM195.52.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag19/07/2024
05232ISP128.0.120.0/23Buchholz Digital GmbH DE 19/07/2024
05223COM62.144.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag19/07/2024
05219COM145.253.0.0/16Vodafone GmbHVodafone GmbHDEvodafone.de19/07/2024
05165COM195.185.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag19/07/2024
05122ISP92.192.0.0/13Plusnet GmbHPlusnet GmbHDEeifel-net.net19/07/2024
05121EDU149.205.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de19/07/2024
05096ISP83.236.0.0/16Plusnet GmbHPlusnet GmbHDEeifel-net.net19/07/2024
05086ISP213.30.192.0/181&1 Versatel Deutschland GmbH1&1 Versatel Deutschland GmbHDEversatel.de19/07/2024
05083DCH194.29.224.0/19IPB Internet Provider in Berlin GmbHIPB Internet Provider in Berlin GmbHDEipb.de19/07/2024
05075COM212.211.128.0/17ScanPlus GmbHSCANPLUS GMBHDEswj-group.com19/07/2024
05073ISP178.183.192.0/19T-Mobile Polska S.A.T-Mobile Polska S.A.PLt-mobile.pl19/07/2024
04835CDN162.158.192.0/18CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
04720COM213.61.0.0/16COLT Technology Services Group LimitedColt Technology Services Group LimitedGBopen-sky.it30/06/2024
04693COM62.144.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag30/06/2024
04676COM145.253.0.0/16Vodafone GmbHVodafone GmbHDEvodafone.de30/06/2024
04662 128.0.120.0/23Buchholz Digital GmbH DE 30/06/2024
04622COM195.185.0.0/16ecotel communication agEcotel Communication AGDEwebhoster.ag30/06/2024
04603ISP92.192.0.0/13Plusnet GmbHPlusnet GmbHDEeifel-net.net30/06/2024
04586EDU149.205.0.0/16Verein zur Foerderung eines Deutschen ForschungsneVerein zur Foerderung eines Deutschen Forschungsnetzes e.V.DEfu-berlin.de30/06/2024
04578ISP213.30.192.0/181&1 Versatel Deutschland GmbH1&1 Versatel Deutschland GmbHDEversatel.de30/06/2024
04575COM212.211.128.0/17ScanPlus GmbHSCANPLUS GMBHDEswj-group.com30/06/2024
04561DCH194.29.224.0/19IPB Internet Provider in Berlin GmbHIPB Internet Provider in Berlin GmbHDEipb.de30/06/2024
04551ISP83.236.0.0/16Plusnet GmbHPlusnet GmbHDEeifel-net.net30/06/2024
04514CDN172.69.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
04247DCH82.145.208.0/22Opera Software ASOpera Software ASNOopera.com30/06/2024
03710CDN172.69.64.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
03068MOB157.32.0.0/12Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com30/06/2024
02827ISP195.169.0.0/16SURF B.V.Surfnet B.V.NLrug.nl30/06/2024
02818CDN172.69.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com18/07/2024
02783ISP172.56.0.0/14T-MOBILE-AS21928T-Mobile USA Inc.USt-mobile.com19/07/2024
02672ISP50.205.20.0/22COMCAST-7922Comcast Cable Communications LLCUScomcastbusiness.net30/06/2024
02457 185.144.204.0/22ETN EmslandTel.Net GmbH & Co KG DE 30/06/2024
02341CDN172.69.64.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com18/07/2024
02309DCH185.192.71.0/24UK-2 LimitedUK-2 LimitedGBuk2.net24/06/2024
02285CDN172.69.192.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
02254EDU198.24.192.0/19US-TELEPACIFICTPx CommunicationsUStpx.com30/06/2024

Poor reputation ASN report

The live OK, MAYBE ASN list as seen below, the amount of good IP traffic that is larger than IP traffic aimed at ports and services clearly indicating malicious or sniffing activity. This list shows network ranges that have good and bad traffic.

blockedpasstypenetrangenamedescriptioncnturllast seen
779122800SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com30/06/2024
492513573SES66.249.64.0/19GOOGLEGoogle LLCUSgoogle.com19/07/2024
38055520COM213.124.0.0/14Vodafone Libertel B.V.Vodafone Libertel B.V.NLziggo.nl28/06/2024
292519086DCH72.14.192.0/18GOOGLEGoogle LLCUSgoogle.com30/06/2024
18905815CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
18162080DCH40.76.0.0/14MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/06/2024
110918475DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com30/06/2024
6346239ISP136.158.0.0/17Converge ICT Solutions Inc.Converge ICT Solutions Inc.PHconvergeict.com30/06/2024
6172335CDN104.16.0.0/12CLOUDFLARENETCloudFlare IncUScloudflare.com19/07/2024
593632ISP117.240.0.0/12National Internet BackboneNational Internet BackboneINbsnl.in30/06/2024
5803230MOB49.32.0.0/13Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com30/06/2024
4911035ISP99.224.0.0/11ROGERS-COMMUNICATIONSRogers Communications Canada Inc.CArogerstelecom.net30/06/2024
48711927DCH193.186.4.0/24GOOGLEGoogle LLCUSgoogle.com19/07/2024
441506DCH44.192.0.0/11AMAZON-AESAmazon.com Inc.USamazon.com30/06/2024
441487DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com30/06/2024
435846ISP182.190.192.0/19Wancom (Pvt) Ltd.Wancom (Pvt) Ltd.PKwancom.net.pk30/06/2024
4292645ISP39.40.0.0/13Pakistan Telecommunication Company LimitedPakistan Telecommunication Company LimitedPKptcl.com.pk30/06/2024
4076070ISP196.188.0.0/14Ethiopian Telecommunication CorporationEthioNet-ASETethiotelecom.et30/06/2024
40212182DCH72.14.192.0/18GOOGLEGoogle LLCUSgoogle.com19/07/2024
3841427ISP154.124.0.0/15Autonomous SystemAutonomous SystemEUsonatel.sn30/06/2024
335560DCH138.197.0.0/17DIGITALOCEAN-ASNDigitalOcean LLCUSdigitalocean.com30/06/2024
333755DCH54.236.0.0/15AMAZON-AESAmazon.com Inc.USamazon.com30/06/2024
312442DCH44.192.0.0/11AMAZON-AESAmazon.com Inc.USamazon.com19/07/2024
308398ISP113.160.0.0/11VNPT CorpVNPT CorpVNvnpt.com.vn19/07/2024
3074902CDN172.68.0.0/18CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
307393DCH34.128.0.0/11GOOGLEGoogle LLCUSgoogle.com19/07/2024
2851266 192.44.68.0/24CRASH US 23/06/2024
285287DCH20.192.0.0/10MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/06/2024
2663044MOB152.56.0.0/14Reliance Jio Infocomm LimitedReliance Jio Infocomm LimitedINakamai.com19/07/2024
2512848ISP27.34.0.0/17WorldLink Communications Pvt LtdWorldLink Communications Pvt LtdNPwlnet.com30/06/2024
250317ISP116.90.112.0/22MyNet Broadband (Pvt.) Ltd PK 30/06/2024
246596CDN172.69.52.0/22CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
242406CDN172.69.96.0/22CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
2341994CDN162.158.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
2332168ISP196.188.0.0/14Ethiopian Telecommunication CorporationEthioNet-ASETethiotelecom.et19/07/2024
2321911CDN172.68.80.0/20CLOUDFLARENETCloudFlare IncUScloudflare.com30/06/2024
2223305ISP41.82.0.0/15Autonomous SystemAutonomous SystemEUsonatel.sn30/06/2024
2171664ISP110.36.0.0/14National WiMAX/IMS environmentNational WIMAX/IMS EnvironmentPKwateen.net30/06/2024
2171044SES207.46.0.0/19MICROSOFT-CORP-MSN-AS-BLOCKMICROSOFT-CORP-MSN-AS-BLOCKUSmicrosoft.com30/06/2024
214271ISP209.198.128.0/19PRISMNET US 29/06/2024
2135130ISP172.56.0.0/14T-MOBILE-AS21928T-Mobile USA Inc.USt-mobile.com30/06/2024
196205DCH141.94.0.0/15OVH SASOVH SASFRovh.com30/06/2024
191288DCH54.36.0.0/14OVH SASOVH SASFRovh.com29/06/2024
1901029ISP41.214.0.0/17Autonomous SystemAutonomous SystemEUsonatel.sn30/06/2024
187476DCH136.226.0.0/16ZSCALER-SJC1Zscaler Inc.USzscaler.com27/06/2024
1835087ISP223.122.0.0/15Guangdong Mobile Communication Co.Ltd.Guangdong Mobile Communication Co.Ltd.CNchinamobileltd.com30/06/2024
1771361CDN162.158.160.0/19CLOUDFLARENETCloudFlare IncUScloudflare.com18/07/2024
1771016MOB182.0.0.0/12PT. Telekomunikasi SelularPT. Telekomunikasi SelularIDtelkomsel.com30/06/2024
1741373ISP124.217.0.0/17Philippine Long Distance Telephone CompanyPhilippine Long Distance Telephone CompanyPHpldt.com30/06/2024
1713591CDN172.68.0.0/18CLOUDFLARENETCloudFlare IncUScloudflare.com18/07/2024