ASN Threat Analysis

ASNs Observed

188

Malicious IPs (ASN-mapped)

546

IPs Needing ASN

534.1K

Just Resolved

Resolve ASN & Abuse Contacts

Fastest path: load the WhoisXML IP Netblocks and resolve ASN/org/country locally (millions/sec, no API). Then pull abuse contacts for every ASN from RIPEstat. 69 ASN abuse contacts cached.

▶ Resolve ASN from local data ▶ Resolve abuse contacts (RIPEstat) Resolve 50 via ipinfo (needs outbound) ↻ Recompute ranking Export abuse contacts (CSV)

Cron: */15 * * * * php /home/zaptf0zdggll/public_html/threats/resolve-local.php and 0 * * * * php /home/zaptf0zdggll/public_html/threats/resolve-asn-abuse.php

Worst ASNs by Targeting Priority

Priority = malicious IP count × average threat. High-priority ASNs concentrate the most malicious infrastructure — the best candidates for block-listing at the network level or coordinated takedown.

ASN Threat Ranking (Top 40)

Rank	ASN	Organization	Abuse Contact	Malicious IPs	Avg Threat	Dominant Activity	Action
1	`AS4134`	China Telecom	`anti-spam@chinatelecom.cn`	44	0.50	Other Malicious	IPs · Block
2	`AS16509`	Amazon	`abuse@amazonaws.com`	28	0.50	Other Malicious	IPs · Block
3	`AS61317`	—	—	19	0.50	Other Malicious	IPs · Block
4	`AS13335`	Cloudflare	`abuse@cloudflare.com`	17	0.50	Other Malicious	IPs · Block
5	`AS14618`	Amazon	`abuse@amazonaws.com`	15	0.50	Other Malicious	IPs · Block
6	`AS16276`	OVH	`abuse@ovh.net`	13	0.50	Other Malicious	IPs · Block
7	`AS29465`	—	—	13	0.50	Other Malicious	IPs · Block
8	`AS6939`	—	—	13	0.50	Other Malicious	IPs · Block
9	`AS396982`	Google	`network-abuse@google.com`	12	0.50	Other Malicious	IPs · Block
10	`AS213412`	—	—	11	0.50	Other Malicious	IPs · Block
11	`AS398324`	—	—	11	0.50	Other Malicious	IPs · Block
12	`AS396507`	—	—	10	0.50	Other Malicious	IPs · Block
13	`AS4766`	—	—	9	0.50	Other Malicious	IPs · Block
14	`AS25369`	—	—	8	0.50	Other Malicious	IPs · Block
15	`AS55286`	—	—	8	0.50	Other Malicious	IPs · Block
16	`AS60729`	—	—	8	0.50	Other Malicious	IPs · Block
17	`AS150436`	—	—	7	0.50	Other Malicious	IPs · Block
18	`AS215125`	—	—	7	0.50	Other Malicious	IPs · Block
19	`AS48090`	—	—	7	0.50	Other Malicious	IPs · Block
20	`AS9498`	—	—	7	0.50	Other Malicious	IPs · Block
21	`AS219502`	—	—	6	0.50	Other Malicious	IPs · Block
22	`AS57558`	—	—	6	0.50	Other Malicious	IPs · Block
23	`AS59651`	—	—	6	0.50	Other Malicious	IPs · Block
24	`AS8075`	Microsoft	`abuse@microsoft.com`	6	0.50	Other Malicious	IPs · Block
25	`AS135377`	—	—	5	0.50	Other Malicious	IPs · Block
26	`AS206092`	Ip Volume	`abuse@ipvolume.net`	5	0.50	Other Malicious	IPs · Block
27	`AS24309`	—	—	5	0.50	Other Malicious	IPs · Block
28	`AS38365`	—	—	5	0.50	Other Malicious	IPs · Block
29	`AS398722`	—	—	5	0.50	Other Malicious	IPs · Block
30	`AS14061`	DigitalOcean	`abuse@digitalocean.com`	4	0.50	Other Malicious	IPs · Block
31	`AS215778`	—	—	4	0.50	Other Malicious	IPs · Block
32	`AS396190`	—	—	4	0.50	Other Malicious	IPs · Block
33	`AS45271`	—	—	4	0.50	Other Malicious	IPs · Block
34	`AS47890`	—	—	4	0.50	Other Malicious	IPs · Block
35	`AS197170`	—	—	3	0.50	Other Malicious	IPs · Block
36	`AS198093`	—	—	3	0.50	Other Malicious	IPs · Block
37	`AS200651`	—	—	3	0.50	Other Malicious	IPs · Block
38	`AS209334`	—	—	3	0.50	Other Malicious	IPs · Block
39	`AS210558`	—	—	3	0.50	Other Malicious	IPs · Block
40	`AS211680`	—	—	3	0.50	Other Malicious	IPs · Block

Targeting Recommendations

■ AS4134 (China Telecom) is your #1 target — 44 malicious IPs concentrated here.
■ 12 ASNs carry 10+ malicious IPs each — network-level blocking of these gives the highest coverage-per-rule.
■ For coordinated takedown, start with high-priority ASNs whose dominant activity is Ransomware or C2 / APT — the highest-impact classes.
■ Use the Takedown Ops tool to pull abuse contacts for the network operators above.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

ASNs Observed

Malicious IPs (ASN-mapped)

IPs Needing ASN

Just Resolved

Resolve ASN & Abuse Contacts

Worst ASNs by Targeting Priority

ASN Threat Ranking (Top 40)

Targeting Recommendations

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools