Tosunkaya.com

Bad ASN List to Block in Your Web Firewall to Harden Against Malicious Attacks

Most of the malware bot attacts coming from these ASNs and you should block these unwanted automated malicious traffic from your web firewall:

Bad ASNs you can easily block without causing any problems

  • AS4134 Chinanet (most spam botnet IPs in the world + phishing emails)
  • AS4837 CHINA UNICOM China169 Backbone (Chinese DDoS)
  • AS9808 AS56048 China Mobile (Phishing Emails)
  • AS36352 AS-COLOCROSSING (100% FULL OF HACK BOTS!!! – Cheapest VPS for hackers)
  • AS24940 Hetzner Online GmbH (100% FULL OF HACK BOTS!!! – VPS Provider)
  • AS-26496-GO-DADDY-COM-LLC (Cheap VPS for hack bots)
  • AS55286 SERVER-MANIA (Cheap VPS Seller to hackers, immediatelly block it)
  • AS16276 OVH SAS (VPS provider)
  • AS14061 DIGITALOCEAN-ASN (VPS provider)
  • AS9009 M247 Ltd (VPN, proxy provider and mostly used for attacks)
  • AS8048 CANTV Servicios, Venezuela
  • AS28573 Claro NXT (Brasil botnet)
  • AS12389 Rostelecom (Russian botnet)
  • AS9737 TOT (Thailand bad bots)
  • AS7713 AS17974 PT Telekomunikasi Indonesia (DDoS)
  • AS8100 ASN-QUADRANET-GLOBAL (Cheap VPS Servers for Hacking + Spam)
  • AS37518 FIBERGRID (Seychelles spam)
  • AS203020 HostRoyale (Cheap VPS for hackers)
  • AS46261 QUICKPACKET (VPS provider)
  • AS17557 Pakistan Telecommunication (Paki bots)
  • AS396190 AS60781 AS15003 AS395954 AS396362 AS30633 AS205544 AS394380 AS19148 AS7203 AS27411 AS28753  AS133752 AS393886 AS59253 LEASEWEB (VPS Provider)
  • AS60068 Datacamp Limited (VPN)
  • AS199524 G-Core Labs S.A. (VPS+VPN)
  • AS57858 Inter Connects Inc (Estonia hackers)
  • AS18403 FPT Telecom (Vietnam DDoS)
  • AS132203 AS45090 Shenzhen Tencent Computer Systems Company Limited (Chinese bots of Tencent Cloud)
  • AS37963 AS45102 AS134963 Hangzhou Alibaba Advertising Alibaba US Technology Co., Ltd. Alibaba.com Singapore
  • AS48095 Xt Global Networks Ltd. (Romanian hackers)
  • AS19531 NODESDIRECT
  • AS45899 VNPT Corp (Vietnam DDoS Botnet)
  • AS31549 RASANA Aria Shatel Company Ltd (Iran Botnet)
  • AS8560 1&1 IONOS SE (Cheapest host for sending phishing emails + Known for scams)
  • AS6724 Strato AG (Cheapest domain host seller for scams+bots)
  • AS206092 Ipxo Limited SECFIREWALLAS (70% spam IP seller)
  • AS30823 combahton GmbH (Phishing Emails)

Optional (Also i shared how to block GoogleCloud and Microsoft Azure ASNs without blocking search engine crawling bots in Cloudflare):

  • AS14618 AMAZON-AES (Includes botnets but Careful with Amazon)
  • AS16509 AMAZON-02 (Mostly used by hackers for vulnerability check & botnet activities by India)
  • AS396982 AS15169 GOOGLE-CLOUD-PLATFORM (Exclude Googlebot)
  • AS8075 MICROSOFT-CORP-MSN-AS-BLOCK (Exclude Bingbot, FULL OF ATTACK BOTS)
  • AS136907 HWCLOUDS-AS-AP HUAWEI CLOUDS (Chinese/Singaporean Huawei Cloud used by malicious bot activities, may exclude PetalSearch Bot, that no one uses)

TOP 25 Bad ASN List Sorted By Spam Active IP Addresses

ASN, Organization name Country Detected IP addresses Spam active IP addresses % Spam rate
AS4134 Chinanet China 2010190 629363 31,31
AS4837 CHINA UNICOM China169 Backbone China 659691 202892 30,76
AS9808 China Mobile Communications Group Co., Ltd. China 370894 187168 50,46
AS36352 AS-COLOCROSSING United States 239467 170085 71,03
AS8048 CANTV Servicios, Venezuela Venezuela 691596 161147 23,3
AS14618 AMAZON-AES United States 1175774 125066 10,64
AS28573 Claro NXT Telecomunicacoes Ltda Brazil 243757 99148 40,67
AS12389 Rostelecom Russia 303091 78369 25,86
AS55286 SERVER-MANIA Canada 90096 71761 79,65
AS16509 AMAZON-02 United States 1970036 71737 3,64
AS9737 TOT Public Company Limited Thailand 132645 64425 48,57
AS7713 PT Telekomunikasi Indonesia Indonesia 241392 64055 26,54
AS17974 PT Telekomunikasi Indonesia Indonesia 181756 58588 32,23
AS45899 VNPT Corp Vietnam 392392 56553 14,41
AS16276 OVH SAS France 455847 50900 11,17
AS8100 ASN-QUADRANET-GLOBAL United States 92488 50089 54,16
AS20940 Akamai International B.V. Netherlands 446690 46504 10,41
AS3462 Data Communication Business Group Taiwan 154524 42851 27,73
AS14061 DIGITALOCEAN-ASN United States 464254 40796 8,79
AS5617 Orange Polska Spolka Akcyjna Poland 113165 38653 34,16
AS45629 JasTel Network International Gateway Thailand 113916 38405 33,71
AS9009 M247 Ltd Romania 86198 38121 44,22
AS61317 Ipxo Uk Limited Chile 57795 35952 62,21
AS37518 FIBERGRID Seychelles 61619 35829 58,15

Full ASN Block List (includes 2000+ records)

CSV Format: https://github.com/tosunkaya/badasnlist/blob/main/badasnlist.csv

Data source: https://cleantalk.org/blacklists/asn edited by myself.

5/53526 oy

Emre Tosunkaya

Kendini İnternete adamış bir tekno kişi. Teknoloji ve İnternet adına; WordPress, Webmaster, Android, Google, mobil, oyun, yazılım hakkında insanlara yararlı makaleler yazar.

  • Kuponla.com İndirim Kuponları
  • Uzman Diyetisyen Semiye Tosunkaya
  • Güzel Hosting, 2008'den beri kaliteli ve ekonomik paylaşımlı hosting, kiralık sunucu, sanal sunucu ve co-location hizmetleri sağlamaktadır.
  • Turhost: Türkiye'nin Lider Hosting ve Domain Servis Sağlayıcısı
  • n11.com - Alışverişin Uğurlu Adresi
  • En Trend Ürünler Türkiye'nin Online Alışveriş Sitesi Amazon'da
Kuponla.com İndirim Kuponları Binance %10 Komisyon İndirimi TRBinance %10 Komisyon İndirimi Amazon Amazon 50₺ indirim kodu Trendyol Güncel İndirim Kodları