Category: security

  • Enterprise Shield – ASN Blocklist – 2026 09 09

    NOTE: Always check this link for the most recent ASN Blocklist.

    Here is the updated list of blocked ASNs in my local firewall configuration. Each one of these is deployed using the currently available CIDR blocks, collapsed to the most efficient set of supernets.

    The following list of large ASNs are NOT included in the list as they are handled by distinct firewall rules that allow some traffic through as long as it does not exceed certain volumes OR the traffic from these blocks does not trip specific fail2ban jail rules.

    8075	# Microsoft Azure
    8069	# Microsoft Corporation (AS8069)
    14618	# Amazon AWS (us-east-1)
    16509	# Amazon AWS (multi-region)
    31898	# Oracle Cloud Infrastructure
    396982	# Google Cloud Platform
    13335	# Cloudflare (primary)
    132892	# Cloudflare (secondary)
    14789	# Cloudflare (secondary)
    63949	# Linode / Akamai
    207825	# Marginalia Search (Datarymden Internet AB, SE)

    A separate note — I do also have a system to block entire countries. The countries on this list are noted below.

    AZ - Azerbaijan
    BD - Bangladesh
    BY - Belarus
    CN - China
    HK - Hong Kong
    IQ - Iraq
    IR - Iran
    KP - North Korea
    KZ - Kazakhstan
    LY - Libya
    NP - Nepal
    PK - Pakistan
    RO - Romania
    RU - Russia
    SY - Syria
    TR - Turkey
    TW - Taiwan
    UA - Ukraine
    UZ - Uzbekistan
    VN - Vietnam

    As of 14:00 US/Pacific (21:00 UTC), there are 861 distinct ASNs included in the blocklist.

    # ===========================================================================
    # TRANSIT / BACKBONE
    # Large transit carriers. Review carefully β€” blocking these can cause
    # collateral damage to legitimate traffic from downstream customers.
    # ===========================================================================
    
    174       # Cogent Communications (US) β€” major transit
    1299      # Arelion Sweden AB β€” Tier 1 backbone
    3209      # Vodafone Germany
    3257      # GTT Communications Inc. (US)
    6939      # Hurricane Electric (US) β€” large transit, review if needed
    7979      # SoftLayer / IBM Cloud
    11042     # Network Transit Holdings LLC (US)
    
    
    # ===========================================================================
    # CHINESE STATE CARRIERS & TECH GIANTS
    # ===========================================================================
    
    4134      # ChinaNet β€” China Telecom backbone
    4811      # China Telecom (Group) β€” Shanghai MAN
    4831      # China Telecom (CTTNET)
    4837      # China Unicom (CNC Group)
    9808      # China Mobile Communications Group Co., Ltd.
    23724     # ChinaNet IDC Beijing (CN)
    24445     # Henan Mobile Communications Co. Ltd (CN)
    37963     # Alibaba Cloud (Aliyun) β€” mainland China
    38365     # Baidu β€” Beijing Baidu Netcom Science and Technology Co., Ltd.
    45102     # Alibaba Cloud APAC
    58461     # CT-HangZhou-IDC (CN)
    63199     # CDS Global Cloud Co., Ltd (CN/HK)
    132203    # Tencent Cloud
    136907    # Huawei Cloud
    138699    # TikTok Pte. Ltd. (SG/CN)
    200350    # YandexCloud β€” Yandex.Cloud LLC
    211443    # Sino Worldwide Trading Limited (HK)
    214669    # Starlight Tech Trading Co. Limited (HK)
    396986    # Bytedance Inc. (US/CN)
    
    17497     # liasail global hongkong limited (HK) β€” auto-classified 2026-08-21
    205369    # LI YIRAN (CN) β€” auto-classified 2026-08-21
    208525    # Airu Limited (HK) β€” auto-classified 2026-08-21
    209109    # DataSphere (H.K) Limited (HK) β€” auto-classified 2026-08-21
    214454    # PoloNetwork Limited (HK) β€” auto-classified 2026-08-21
    219300    # Yan Xiangdong (CN) β€” auto-classified 2026-08-21
    55967     # Beijing Baidu Netcom Science and Technology Co., Ltd. (CN) β€” auto-classified 2026-08-21
    138915    # Kaopu Cloud HK Limited (HK) β€” auto-classified 2026-08-21
    154177    # LIGHT NODE LIMITED (HK) β€” auto-classified 2026-08-27
    151407    # Hytron Network Services Limited (HK) β€” auto-classified 2026-08-31
    139021    # West263 International Limited (HK) β€” auto-classified 2026-09-02
    56594     # CGI GLOBAL LIMITED (HK) β€” auto-classified 2026-09-03
    152179    # GLOBAL COMMUNICATION NETWORK LIMITED (HK) β€” auto-classified 2026-09-06
    
    # ===========================================================================
    # RUSSIAN / CIS CARRIERS & HOSTING
    # ===========================================================================
    
    12389     # Rostelecom (Russia) β€” state carrier
    33993     # UFO Hosting LLC (RU)
    35048     # Biterika Group LLC (RU)
    41853     # LLC NTCOM (RU)
    44050     # Petersburg Internet Network Ltd (RU)
    45055     # Dontechsvyaz LLC (RU)
    47913     # Moshonkin Ilia Sergeevich (RU)
    48030     # Martynova Irina Nikolaevna (RU) β€” private operator
    48031     # Ivanov Vitaliy Sergeevich (RU) β€” private operator
    48043     # Ozyorsk Telecom CJSC (RU)
    48467     # Pronet LLC (RU)
    48507     # LTD SibMediaFon (RU)
    48515     # Praktika Ltd (RU)
    49505     # JSC Selectel (RU)
    197695    # REG.RU (RU)
    200328    # Bakhtin Evgenii Valerevich (RU)
    202269    # BitCommand LLC (AM)
    205196    # BIG CORE LLC (RU)
    209946    # ALINDA LLC (RU)
    210644    # AEZA GROUP LLC (RU)
    
    9123      # JSC "TIMEWEB" (RU) β€” auto-classified 2026-08-21
    211399    # KPD group OOO (RU) β€” auto-classified 2026-08-21
    199514    # ILIA KALASHNIKOV (RU) β€” auto-classified 2026-08-21
    204353    # TM226-AS (RU) β€” auto-classified 2026-08-21
    58347     # AiK LLC (RU) β€” auto-classified 2026-08-25
    42772     # Unitary enterprise A1 (BY) β€” auto-classified 2026-08-26
    214574    # Biterika Group LLC (RU) β€” auto-classified 2026-08-30
    211150    # SvyazInform LLC (RU) β€” auto-classified 2026-09-05
    39113     # Digital Solutions LLC (RU) β€” auto-classified 2026-09-09
    
    # ===========================================================================
    # CENTRAL ASIA
    # ===========================================================================
    
    8193      # Uzbektelekom Joint Stock Company (UZ)
    8200      # Uplink LLC (KZ)
    35682     # Best Internet Solution (UZ)
    48716     # PS Internet Company LLP (KZ)
    #203044    # Telepatiya Ltd (KZ)
    203087    # Fedinyak Sergey Vyacheslavovich (KZ)
    210006    # Shereverov Marat Ahmedovich (KZ)
    210976    # Timeweb LLP (KZ)
    
    203534    # Erik Omarov (KZ) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # EASTERN EUROPE / UKRAINE / BALTICS
    # ===========================================================================
    
    24651     # JSC BALTICOM (LV)
    30860     # Virtual Systems LLC (UA)
    42159     # Zemlyaniy Dmitro Leonidovich (UA) β€” private operator
    56851     # PE Skurykhin Mukola Volodumurovuch (UA)
    204957    # GREEN FLOID LLC (UA)
    209630    # LLC VASH KREDIT BANK (UA)
    211736    # FOP Dmytro Nedilskyi (UA)
    
    39845     # 2 Cloud Ltd. (LV) β€” auto-classified 2026-08-21
    219268    # Geodema Group LLC (UA) β€” auto-classified 2026-08-21
    42532     # SIA VEESP (LV) β€” auto-classified 2026-08-26
    58061     # Scalaxy B.V. (LV) β€” auto-classified 2026-08-28
    213164    # Intars Rupeiks (LV) β€” auto-classified 2026-09-09
    
    # ===========================================================================
    # MIDDLE EAST
    # ===========================================================================
    
    8697      # Jordan Telecommunications PSC (JO)
    9038      # BATELCO / Al Bahrainia al Urdunia (JO/BH)
    201771    # Arabian Internet & Communications Services Co. Ltd (SA)
    202670    # CLOUDZME FZE (UAE)
    211273    # Cloud Software FZCO (UAE)
    216154    # CLODO CLOUD SERVICE CO. L.L.C (UAE)
    44709     # O.M.C. COMPUTERS & COMMUNICATIONS LTD (IL) β€” auto-classified 2026-08-21
    200236    # Saif Mohammed Alashram trading as Privacy Cloud Service & Datacenters 
              # Providers (AE) β€” auto-classified 2026-08-21
    200851    # Bamboozle Web Services MEA FZ-LLC (AE) β€” auto-classified 2026-08-27
    
    # ---------------------------------------------------------------------------
    # Israel
    # ---------------------------------------------------------------------------
    
    206446    # CLOUD LEASE Ltd (IL)
    
    
    # ===========================================================================
    # TURKEY
    # ===========================================================================
    
    9121      # Turk Telekomunikasyon Anonim Sirketi (TR)
    12735     # TurkNet (TR)
    205733    # HOSTIFOX Bilisim Hizmetleri (TR)
    208913    # Kitsune Bilisim Sistemleri (TR)
    211557    # TAYNET TEKNOLOJI TICARET LIMITED SIRKETI (TR)
    212193    # VIVA INTERNET LIMITED SIRKETI (TR) β€” active attack detected 2026-04-07
    213407    # Uzmansoft Bilisim Web Yazilim Hizmetleri (TR)
    213488    # Inoxweb Datacenter ve Hosting (TR)
    214000    # Voxnet Bilisim Teknolojileri (TR)
    
    214584    # OSMAN ALTINTAS (TR) β€” auto-classified 2026-08-28
    215620    # Alp Furkan Kolan (TR) β€” auto-classified 2026-09-06
    
    # ===========================================================================
    # CLOUD / HYPERSCALER INFRASTRUCTURE
    # Broad blocks β€” may affect legitimate SaaS/B2B traffic.
    # ===========================================================================
    
    2639      # Zoho Corporation
    #8075      # Microsoft Azure β€” managed via hyperscalers.conf
    #14618     # Amazon AWS (us-east-1) β€” managed via hyperscalers.conf
    #16509     # Amazon AWS (multiple regions) β€” managed via hyperscalers.conf
    #31898     # Oracle Cloud Infrastructure β€” managed via hyperscalers.conf
    208172    # Proton AG (CH) β€” VPN/privacy provider
    #396982    # Google Cloud Platform (GCP) β€” NOTE: AS15169 (Google Search/crawlers)
              #   is excluded. This ASN covers GCP third-party hosted services.
              #   Block specific /cidr ranges instead of this ASN if possible.
    
    
    # ===========================================================================
    # SOCIAL MEDIA PLATFORMS
    # Blocked to prevent platform crawler / scraper traffic.
    # ===========================================================================
    
    32934     # Facebook Inc. (Meta)
    54115     # Facebook Inc. (Meta) β€” ASN 2
    63293     # Facebook Inc. (Meta) β€” ASN 3
    
    
    # ===========================================================================
    # EUROPEAN HOSTING & VPS PROVIDERS
    # ---------------------------------------------------------------------------
    # France
    # ---------------------------------------------------------------------------
    
    12876     # Scaleway SAS (FR)
    16276     # OVHcloud (FR)
    30781     # Free Pro SAS (FR)
    203476    # GANDI SAS (FR)
    #208046    # KOGLER Gabin (FR) β€” small operator
    210403    # Groupe LWS SARL (FR)
    210743    # Babbar SAS (FR) β€” SEO crawler
    211590    # Bucklog SARL (FR)
    213412    # ONYPHE SAS (FR) β€” active security scanner
    204818    # Hosteur SAS (FR) β€” auto-classified 2026-08-21
    202757    # PLT Connectic SARL (FR) β€” auto-classified 2026-08-30
    215599    # Zkillu SAS (FR) β€” auto-classified 2026-09-02
    215114    # Stevan Durand--L'Hours t/a SLBCLOUD (FR) β€” auto-classified 2026-09-02
    
    # ---------------------------------------------------------------------------
    # Germany
    # ---------------------------------------------------------------------------
    
    6724      # Strato GmbH (DE)
    8560      # IONOS SE / 1&1 (DE)
    8972      # Host Europe GmbH (DE) β€” GoDaddy EMEA
    12574     # Hosting.de GmbH (DE)
    12816     # Leibniz-Rechenzentrum (DE) β€” NOTE: university/research network, review
    21013     # eww ag (AT/DE)
    21499     # Host Europe GmbH (DE)
    24940     # Hetzner Online GmbH (DE) β€” ASN 1 of 3
    24961     # WIIT AG (DE/CH)
    28753     # Leaseweb Deutschland GmbH (DE)
    29066     # velia.net Internetdienste GmbH (DE/FR)
    29550     # Team Blue Carrier Limited (UK/DE)
    30823     # aurologic GmbH (DE)
    34081     # INCUBATEC GmbH – Srl (DE/IT)
    34549     # meerfarbig GmbH & Co. KG (DE)
    42237     # w1n ltd (DE)
    42366     # TerraTransit AG (DE)
    42525     # GlobalConnect A/S (DE) β€” see also ASN 12552 (SE), 8896 (NO)
    51167     # Contabo GmbH (DE)
    51396     # Pfcloud UG (DE)
    58212     # dataforest GmbH (DE)
    61157     # PlusServer GmbH (DE)
    141995    # Contabo Asia Private Limited
    197540    # netcup GmbH (DE)
    198139    # Lucas Vossberg (DE) β€” private operator
    200373    # 3xK Tech GmbH (DE)
    203516    # AltunHOST LTD (UK/DE)
    204646    # web2objects GmbH (DE)
    205948    # creoline GmbH (DE)
    206996    # ZAP-Hosting GmbH (DE)
    210558    # 1337 Services GmbH (DE) β€” privacy/anonymous hosting
    210785    # KAPELAN Medien GmbH (DE)
    212317    # Hetzner Online GmbH (DE) β€” ASN 3 of 3
    213230    # Hetzner Online GmbH (DE) β€” ASN 2 of 3
    215607    # dataforest GmbH (DE) β€” ASN 2
    215859    # Hetzner Online GmbH (DE) β€” ASN 4
    59437     # Northern Data AG (DE) β€” auto-classified 2026-08-21
    213250    # Dominic Scholz trading as ITP-Solutions GmbH & Co. KG (DE) β€” auto-classified 2026-08-21
    35042     # Layer7 Networks GmbH (DE) β€” auto-classified 2026-08-21
    45012     # dogado GmbH (DE) β€” auto-classified 2026-08-21
    31103     # Keyweb AG (DE) β€” auto-classified 2026-08-22
    214996    # netcup GmbH (DE) β€” auto-classified 2026-08-22
    44486     # Oliver Horscht is trading as "SYNLINQ" (DE) β€” auto-classified 2026-08-26
    58087     # Florian Kolb (DE) β€” auto-classified 2026-08-26
    48314     # Michael Sebastian Schinzel trading as IP-Projects GmbH & Co. KG (DE) β€” auto-classified 2026-08-28
    44076     # INTAC Services GmbH (DE) β€” auto-classified 2026-08-28
    25504     # Vautron Rechenzentrum AG (DE) β€” auto-classified 2026-08-28
    208988    # Buchholz Digital GmbH (DE) β€” auto-classified 2026-08-30
    48918     # Globalways GmbH (DE) β€” auto-classified 2026-08-30
    205100    # F3 Netze e.V. (DE) β€” auto-classified 2026-09-09
    211507    # Julian Achter (DE) β€” auto-classified 2026-09-09
    30083     # velia.net (DE) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # Austria
    # ---------------------------------------------------------------------------
    
    42473     # ANEXIA Internetdienstleistungs GmbH (AT)
    64457     # Matteo Fruhwald trading as PipeHost e.U. (AT)
    40994     # Hohl IT e.U. (AT) β€” auto-classified 2026-08-21
    57169     # EDIS GmbH (AT) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Switzerland
    # ---------------------------------------------------------------------------
    
    29222     # Infomaniak Network SA (CH)
    51852     # Private Layer INC (CH) β€” privacy hosting
    61098     # Akenes SA / Exoscale (CH)
    209373    # SWISSNET LLC (CH/Global)
    1836      # green.ch AG (CH) β€” auto-classified 2026-08-21
    200713    # Zettaplan AG (CH) β€” auto-classified 2026-08-27
    
    # ---------------------------------------------------------------------------
    # Sweden
    # ---------------------------------------------------------------------------
    
    12552     # GlobalConnect AB (SE) β€” see also ASN 8896 (NO), 42525 (DE)
    30893     # No ACK Group Holding AB (SE)
    39351     # 31173 Services AB (SE)
    42708     # Portlane AB (SE)
    51747     # Internet Vikings International AB (SE)
    212220    # Kepler Technologies AB (SE)
    214503    # QuxLabs AB (SE)
    13116     # Tele2 Sverige AB (SE) β€” auto-classified 2026-08-21
    207825    # Datarymden Internet AB (SE) β€” auto-classified 2026-08-21
    33837     # Fredrik Holmqvist (SE) β€” auto-classified 2026-08-21
    62395     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203297    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    202910    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    202922    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    16312     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    51913     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203191    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203192    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203193    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203194    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203213    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203240    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203241    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203295    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203298    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203300    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203552    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203605    # Synotio AB (SE) β€” auto-classified 2026-08-21
    203610    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203625    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203800    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203814    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203839    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    214640    # Hostup AB (SE) β€” auto-classified 2026-08-27
    
    # ---------------------------------------------------------------------------
    # Norway
    # ---------------------------------------------------------------------------
    
    8896      # GlobalConnect AS (NO) β€” see also ASN 12552 (SE), 42525 (DE)
    50304     # Blix Solutions AS (NO)
    56655     # Gigahost AS (NO) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Netherlands
    # ---------------------------------------------------------------------------
    
    1101      # IP-EEND BV (NL)
    20857     # TransIP BV / Signet B.V. (NL) β€” ASN 2 of 2
    35470     # Signet B.V. (NL) β€” ASN 1 of 2
    39572     # DataWeb Global Group B.V. (NL)
    39704     # CJ2 Hosting B.V. (NL)
    43350     # NForce Entertainment BV (NL)
    48137     # PI-GROUP BV (NL)
    49453     # Global Layer BV (NL)
    49532     # Eonix Corporation / ServerHub (NL)
    49981     # WorldStream B.V. (NL)
    50077     # SYN LTD (NL)
    51430     # AltusHost B.V. (NL)
    57043     # HOSTKEY B.V. (NL)
    60404     # Liteserver / The Infrastructure Group B.V. (NL)
    60781     # LeaseWeb Netherlands BV (NL)
    201176    # DUND MC2 B.V. (NL)
    207179    # WilroffReitsma B.V. (NL)
    209847    # WorkTitans B.V. (NL)
    211381    # Podaon SIA (LV/NL)
    215125    # Church of Cyberology (NL) β€” privacy/anonymity hosting
    215747    # NubaCloud B.V. (NL)
    216472    # HS-SYR High Speed For Internet Services L.L.C (NL)
    209334    # Modat B.V. (NL) β€” auto-classified 2026-08-21
    198478    # Alireza Mirzaei Fard (NL) β€” auto-classified 2026-08-21
    204729    # Xaviero Xaviel Kajafas trading as Internalhost (NL) β€” auto-classified 2026-08-21
    209675    # Jelle Hofstee trading as AxisNetworks (NL) β€” auto-classified 2026-08-21
    212953    # Bas Dierx Trading As CableHosting (NL) β€” auto-classified 2026-08-21
    34343     # Eweka Internet Services B.V. (NL) β€” auto-classified 2026-08-21
    197902    # Hostnet B.V. (NL) β€” auto-classified 2026-08-21
    24875     # NovoServe B.V. (NL) β€” auto-classified 2026-08-21
    34305     # Base IP B.V. (NL) β€” auto-classified 2026-08-21
    49870     # Alsycon B.V. (NL) β€” auto-classified 2026-08-21
    205467    # Base IP B.V. (NL) β€” auto-classified 2026-08-21
    214783    # Danny Nieuwenhuis trading as DedicatedNodes (NL) β€” auto-classified 2026-08-21
    50049     # RedSwitches Pty LTD. (NL) β€” auto-classified 2026-08-27
    50673     # Serverius Holding B.V. (NL) β€” auto-classified 2026-09-05
    6206      # Netrouting B.V. (NL) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # United Kingdom
    # ---------------------------------------------------------------------------
    
    9009      # M247 Europe (UK/EU)
    11721     # StylenTech LLC (UK)
    12488     # Krystal Hosting Ltd (UK)
    13213     # UK-2 Limited / Iomart (UK)
    14670     # WHG Hosting Services Ltd (UK) β€” ASN 4 of 4
    20738     # Heart Internet Ltd (UK)
    20860     # IOMART Cloud Services Limited (UK)
    41281     # KeFF Networks Ltd (UK)
    41564     # Orion Network Limited (UK) β€” ASN 1 of 2
    42831     # UK Dedicated Servers Limited (UK)
    43357     # Owl Limited (UK)
    46805     # Angelnet Limited (UK) β€” ASN 4 of 4
    49592     # Pipe Networks LTD (UK)
    49683     # MASSIVEGRID LTD (UK)
    50300     # CustodianDC Limited (UK)
    51713     # WHG Hosting Services Ltd (UK) β€” ASN 1 of 4
    57858     # Angelnet Limited (UK) β€” ASN 3 of 4
    58065     # Orion Network Limited (UK) β€” ASN 2 of 2
    #60223     # Netiface (UK) β€” ASN 2 of 3
    62240     # Clouvider Ltd (UK) β€” ASN 2 of 2
    62651     # Strong Technology, LLC. (UK/US)
    63119     # Angelnet Limited (UK) β€” ASN 2 of 4
    199404    # WHG Hosting Services Ltd (UK) β€” ASN 2 of 4
    201579    # HostGnome Ltd (UK)
    203446    # Smartnet Limited (UK)
    203520    # 3xK Tech GmbH (UK)
    204800    # WHG Hosting Services Ltd (UK) β€” ASN 3 of 4
    206092    # F.N.S. Holdings Limited (UK)
    206804    # EstNOC OU (EE/UK)
    207569    # I-SERVERS LTD (UK)
    207957    # Serv.Host Group Ltd (UK)
    209242    # Clouvider Ltd (UK) β€” ASN 1 of 2
    211298    # Driftnet Ltd (UK) β€” security scanner / honeypot operator
    212286    # LonConnect Ltd (UK)
    213702    # QWINS LTD (UK)
    213887    # WAIcore Ltd (UK)
    214238    # HOST TELECOM LTD (UK)
    214716    # WEYRO LTD (UK)
    #215215    # Freakhosting Ltd (UK)
    215540    # Global Connectivity Solutions LLP (UK)
    215703    # FREAKHOSTING LTD (UK)
    206134    # NEKOBYTE INTERNATIONAL LIMITED (GB) β€” auto-classified 2026-08-21
    209693    # OC NETWORKS LIMITED (GB) β€” auto-classified 2026-08-21
    205544    # Leaseweb UK Limited (GB) β€” auto-classified 2026-08-21
    203919    # LUMADOCK LTD (GB) β€” auto-classified 2026-08-21
    207096    # Link Web Solutions LLP (GB) β€” auto-classified 2026-08-21
    4785      # xTom Limited (GB) β€” auto-classified 2026-08-21
    215286    # IXROOT LTD (GB) β€” auto-classified 2026-08-21
    204044    # Packet Star Networks Limited (GB) β€” auto-classified 2026-08-21
    216014    # BestDC Limited (GB) β€” auto-classified 2026-08-21
    197595    # SEEKAHOST TECHNOLOGIES LTD (GB) β€” auto-classified 2026-08-21
    202147    # VPSUS LTD (GB) β€” auto-classified 2026-08-21
    209149    # SEEKAHOST LTD (GB) β€” auto-classified 2026-08-21
    209710    # SNRD NETWORKS LIMITED (GB) β€” auto-classified 2026-08-21
    209809    # ROCO HOST LTD (GB) β€” auto-classified 2026-08-21
    213549    # SATISFYHOST LTD (GB) β€” auto-classified 2026-08-21
    215674    # Brookplus Limited (GB) β€” auto-classified 2026-08-21
    219412    # Lewis Brown (GB) β€” auto-classified 2026-08-21
    216039    # EdgeSec Technologies Limited (GB) β€” auto-classified 2026-08-21
    60064     # HOSTPALACE DATACENTERS LTD (GB) β€” auto-classified 2026-08-21
    203363    # Kuroit Limited (GB) β€” auto-classified 2026-08-21
    61112     # AKILE LTD (GB) β€” auto-classified 2026-08-21
    209723    # EXPERT NETCLOUD LLP (GB) β€” auto-classified 2026-08-21
    215590    # DpkgSoft International Limited (GB) β€” auto-classified 2026-08-21
    203758    # EUGAMEHOST LTD (GB) β€” auto-classified 2026-08-21
    215925    # VPSVAULT.HOST LTD (GB) β€” auto-classified 2026-08-21
    207043    # DEDIK SERVICES LIMITED (GB) β€” auto-classified 2026-08-21
    209413    # DEDIK SERVICES LIMITED (GB) β€” auto-classified 2026-08-21
    61323     # ANS ACADEMY LIMITED (GB) β€” auto-classified 2026-08-21
    216180    # WHG Hosting Services Ltd (GB) β€” auto-classified 2026-08-21
    219464    # FORESTSNET LTD (GB) β€” auto-classified 2026-08-21
    36454     # WHG Hosting Services Ltd (GB) β€” auto-classified 2026-08-26
    204997    # FIRST SERVER LIMITED (GB) β€” auto-classified 2026-08-27
    210767    # Link Host Ltd. (GB) β€” auto-classified 2026-08-28
    13009     # Redcentric Solutions Ltd (GB) β€” auto-classified 2026-08-30
    36218     # WHG Hosting Services Ltd (GB) β€” auto-classified 2026-08-31
    3223      # Voxility LLP (GB) β€” auto-classified 2026-09-01
    203861    # Miteflux Technologies Ltd (GB) β€” auto-classified 2026-09-02
    209341    # WHG Hosting Services Ltd (GB) β€” auto-classified 2026-09-05
    141387    # Berkat Ltd (GB) β€” auto-classified 2026-09-06
    199741    # TransitX Ltd (GB) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # Ireland
    # ---------------------------------------------------------------------------
    
    30900     # Sternforth Ltd. trading as WebWorld (IE)
    39122     # Blacknight Internet Solutions Limited (IE)
    212353    # Crelativity Limited (IE) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Iceland
    # ---------------------------------------------------------------------------
    
    200651    # FlokiNET ehf (IS) β€” privacy hosting
    
    # ---------------------------------------------------------------------------
    # Poland
    # ---------------------------------------------------------------------------
    
    15967     # Nazwa.pl Sp.z.o.o. (PL)
    29522     # Cyber_Folks S.A. (PL) β€” ASN 1 of 2 (fka CF-KRK)
    31229     # Beyond.pl sp. z o.o. (PL)
    34360     # Cyber_Folks S.A. (PL) β€” ASN 2 of 2 (fka OGICOM)
    41079     # Cyber_Folks S.A. (PL) β€” ASN 3
    43641     # Sollutium EU Sp. z o.o. (PL)
    47544     # IQ PL Sp. z o.o. (PL)
    48047     # Krakowskie Centrum Przetwarzania Danych (PL)
    48505     # Kylos sp. z o.o. (PL)
    50599     # DATASPACE P.S.A. (PL)
    56511     # GAMP Sp. z o.o. (PL)
    201814    # MEVSPACE sp. z o.o. (PL)
    204444    # LanTech Piotr Pilek (PL)
    210100    # Adam Chodkowski (PL) β€” auto-classified 2026-08-21
    210146    # Dawid Lewandowski (PL) β€” auto-classified 2026-08-21
    207208    # MEVSPACE sp. z o.o. (PL) β€” auto-classified 2026-08-21
    42927     # S-NET Sp. z o.o. (PL) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # Lithuania
    # ---------------------------------------------------------------------------
    
    47583     # Hostinger International (LT)
    133944    # trafficforce UAB (LT) β€” ASN 2 of 2
    198651    # HOSTLINE, UAB (LT)
    201341    # trafficforce UAB (LT) β€” ASN 1 of 2
    202044    # Getechbrothers, MB (LT)
    203061    # UAB code200 (LT) β€” ASN 2 of 2
    203098    # trafficforce, UAB (LT) β€” ASN 3
    204770    # UAB Cherry Servers (LT) β€” ASN 1 of 2
    205964    # UAB code200 (LT) β€” ASN 3
    209605    # UAB Host Baltic (LT)
    209709    # UAB code200 (LT) β€” ASN 1 of 2
    210906    # UAB Bite Lietuva (LT)
    213896    # UAB Cherry Servers (LT) β€” ASN 2 of 2
    214159    # UAB Cherry Servers (LT) β€” ASN 3
    59642     # UAB "Cherry Servers" (LT) β€” auto-classified 2026-08-21
    61272     # UAB Bacloud (LT) β€” auto-classified 2026-08-21
    16125     # UAB "Cherry Servers" (LT) β€” auto-classified 2026-08-21
    212531    # UAB "Interneto vizija" (LT) β€” auto-classified 2026-08-21
    211373    # Simoresta UAB (LT) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Estonia
    # ---------------------------------------------------------------------------
    
    3920      # PUSHPKT OU (EE)
    61189     # Elkdata OU (EE)
    203273    # NetCrafters OU (EE) β€” auto-classified 2026-08-21
    62005     # BlueVPS OU (EE) β€” auto-classified 2026-08-21
    61254     # ESTOXY OU (EE) β€” auto-classified 2026-08-25
    198068    # CLOUD.DOG OU (EE) β€” auto-classified 2026-09-03
    
    # ---------------------------------------------------------------------------
    # Czech Republic
    # ---------------------------------------------------------------------------
    
    15685     # CASABLANCA INT a.s. (CZ)
    24641     # FASTER CZ spol. s r.o. (CZ)
    29278     # Rackhost Zrt. (CZ/HU)
    39392     # SH.cz s.r.o. / SuperNetwork (CZ)
    43037     # Seznam.cz a.s. (CZ) β€” search engine / scanner
    61424     # eServer s.r.o. (SK/CZ)
    197806    # Andrei Rys (CZ) β€” auto-classified 2026-08-21
    204150    # David Zakoucky (CZ) β€” auto-classified 2026-08-21
    25234     # ACTIVE 24, s.r.o. (CZ) β€” auto-classified 2026-08-21
    24806     # INTERNET CZ, a.s. (CZ) β€” auto-classified 2026-09-05
    
    # ---------------------------------------------------------------------------
    # Hungary
    # ---------------------------------------------------------------------------
    
    56322     # ServerAstra Kft. (HU)
    206892    # Rendszerinformatika Zrt. (HU)
    62214     # Rackforest Zrt. (HU) β€” auto-classified 2026-08-21
    47381     # Servergarden Kft. (HU) β€” auto-classified 2026-08-22
    
    # ---------------------------------------------------------------------------
    # Italy
    # ---------------------------------------------------------------------------
    
    31034     # Aruba S.p.A. (IT)
    60798     # Servereasy Srl (IT)
    212271    # Cinzia Tocci trading as Lumanex Srl (IT) β€” auto-classified 2026-08-21
    20836     # CDLAN SpA (IT) β€” auto-classified 2026-08-21
    202675    # Keliweb S.R.L (IT) β€” auto-classified 2026-08-28
    
    # ---------------------------------------------------------------------------
    # Spain
    # ---------------------------------------------------------------------------
    
    16371     # acens AS (ES)
    41608     # NextGenWebs S.L. (ES)
    42220     # TREVENQUE SISTEMAS DE INFORMACION S.L. (ES)
    43578     # bitNAP (ES)
    49635     # Cloudi Nextgen SL (ES)
    50926     # AXARNET Comunicaciones S.L. (ES)
    62033     # CLOUDEUS SL (ES) β€” auto-classified 2026-08-28
    44051     # Fornex Hosting S.L. (ES) β€” auto-classified 2026-09-02
    13287     # FALBOX S.L. trading as NIXVAL (ES) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # Portugal
    # ---------------------------------------------------------------------------
    
    24768     # ALMOUROLTEC Servicos de Informatica e Internet Lda (PT)
    215046    # LIMITBRAVITY - LDA (PT) β€” auto-classified 2026-09-06
    
    # ---------------------------------------------------------------------------
    # Denmark
    # ---------------------------------------------------------------------------
    
    44803     # Webdock.io ApS (DK)
    48854     # team.blue Denmark A/S (DK)
    57860     # Zencurity ApS (DK) β€” security research / scanning
    214902    # Philip Fjaera trading as PFWeb Solutions (DK)
    
    # ---------------------------------------------------------------------------
    # Romania
    # ---------------------------------------------------------------------------
    
    #206305    # SC ITNS.NET SRL (RO)
    208137    # Feo Prest SRL (RO)
    212810    # GODLIKE DIGITAL SOLUTIONS S.R.L. (RO)
    205941    # Lungu Stefan Gabriel (RO) β€” auto-classified 2026-08-21
    210622    # Kicked SRL (RO) β€” auto-classified 2026-08-21
    213590    # DIGITALRUS SRL (RO) β€” auto-classified 2026-08-21
    49468     # MAGIT'ST SRL (RO) β€” auto-classified 2026-08-21
    39287     # Materialism s.r.l. (RO) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Moldova
    # ---------------------------------------------------------------------------
    
    43289     # Trabia SRL (MD)
    #44477     # PQ Hosting Plus S.R.L. (MD) β€” Stark Industries affiliate
    200019    # ALEXHOST SRL (MD)
    
    # ---------------------------------------------------------------------------
    # Cyprus
    # ---------------------------------------------------------------------------
    
    202448    # MVPS LTD (CY)
    214504    # Hostman LTD (CY) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Belgium
    # ---------------------------------------------------------------------------
    
    59943     # Level 27 BVBA (BE)
    42160     # DC STAR nv (BE) β€” auto-classified 2026-08-30
    
    # ---------------------------------------------------------------------------
    # Luxembourg
    # ---------------------------------------------------------------------------
    
    199524    # G-Core Labs S.A. (LU)
    202422    # G-Core Labs S.A. (LU) β€” ASN 2
    
    # ---------------------------------------------------------------------------
    # North Macedonia
    # ---------------------------------------------------------------------------
    
    48057     # ITV DOOEL Skopje (MK)
    
    # ---------------------------------------------------------------------------
    # Serbia
    # ---------------------------------------------------------------------------
    
    35779     # mCloud doo (RS)
    51859     # Mainstream doo Beograd (RS)
    
    # ---------------------------------------------------------------------------
    # Multi-region / unspecified EU
    # ---------------------------------------------------------------------------
    
    14576     # Hosting Solution Ltd.
    26141     # CubePath
    #48024     # NEROCLOUD LTD
    48090     # TECHOFF SRV LIMITED β€” Team Cymru C2 confirmed
    51247     # Serverio technologijos MB (LT/NL)
    59651     # AS QualityNetwork (Global)
    60068     # CDN77 / Datacamp Limited
    64160     # NimblyNet Limited (BZ/Global)
    204240    # REXE
    206238    # Unknown β€” review recommended
    206264    # Amarutu Technology Ltd
    202412    # Omegatech LTD
    203003    # Magna Capax Finland Oy (FI/EU)
    207567    # Intezio Worldwide Limited
    210457    # Kyonix Networks Limited
    212238    # Datacamp Limited (multi-region)
    213535    # YottaSrc
    213755    # LUNORY CLOUD SOLUTIONS LTD
    213790    # Limited Network LTD
    214639    # TakeHost.Biz (EU)
    215439    # PLAY2GO INTERNATIONAL LIMITED
    215730    # H2NEXUS LTD
    216071    # SERVERS TECH FZCO (UAE/NL)
    
    50091     # Negenet shpk (AL) β€” auto-classified 2026-08-21
    209378    # Inios Oy (FI) β€” auto-classified 2026-08-21
    44901     # Belcloud LTD (BG) β€” auto-classified 2026-08-21
    59711     # HZ Hosting Ltd (BG) β€” auto-classified 2026-08-21
    203380    # DA International Group Ltd. (BG) β€” auto-classified 2026-08-21
    210250    # K Media Tech Ltd. (BG) β€” auto-classified 2026-08-21
    29210     # Internews 98 OOD (BG) β€” auto-classified 2026-08-21
    197706    # Keminet SHPK (AL) β€” auto-classified 2026-08-27
    57344     # Telehouse EAD (BG) β€” auto-classified 2026-08-28
    215508    # Dot Net Ltd (BG) β€” auto-classified 2026-08-28
    200698    # Globalhost d.o.o. (BA) β€” auto-classified 2026-08-28
    
    # ===========================================================================
    # LEASEWEB GROUP
    # Consolidated here β€” operates across multiple countries / ASNs.
    # ===========================================================================
    
    7203      # Leaseweb USA Inc. (US) β€” ASN 4 of 7
    19148     # Leaseweb USA Inc. (US) β€” ASN 5 of 7
    27411     # Leaseweb USA Inc. (US) β€” ASN 6 of 7
    30633     # Leaseweb USA (US) β€” ASN 1 of 7
    32613     # Leaseweb Canada Inc. (CA)
    393886    # Leaseweb USA Inc. (US) β€” ASN 7 of 7
    394380    # Leaseweb USA Inc. (US) β€” ASN 3 of 7
    395954    # Leaseweb USA (US) β€” ASN 2 of 7
    396190    # Leaseweb USA Inc. (US) β€” ASN 8 of 7
    396362    # Leaseweb USA (US) β€” ASN 3 of 3
    
    
    # ===========================================================================
    # GMO INTERNET GROUP / SAKURA (JAPAN)
    # ===========================================================================
    
    7506      # INTERQ β€” GMO Internet Group Inc. (JP)
    7684      # SAKURA Internet Inc. (JP) β€” ASN 2 of 2
    9370      # SAKURA Internet Inc. (JP) β€” ASN 1 of 2
    58791     # GMO Internet Group Inc. (JP) β€” ASN 2
    131921    # GMO GlobalSign Holdings K.K. (JP)
    131965    # Xserver Inc. (JP)
    
    3258      # xTom Japan Corporation (JP) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # US & NORTH AMERICAN HOSTING / VPS PROVIDERS
    # ===========================================================================
    
    7393      # CYBERCON INC. (US)
    7489      # HostUS (US)
    9115      # Internet Names for Business Inc. (CA) β€” ASN 1 of 2
    10439     # CariNet Inc. (US)
    10557     # Connect Northwest Internet Services LLC (US)
    11320     # LightEdge Solutions (US)
    11706     # TelefΓ΄nica Brasil S.A (US-registered)
    11798     # Ace Data Centers Inc. (US)
    11878     # tzulo inc. (US)
    13332     # Hype Enterprises (US)
    13627     # Ambyre LLC (US)
    13768     # Aptum Technologies (CA)
    14061     # DigitalOcean LLC (US)
    14131     # DataYard (US)
    14555     # LiquidNet US LLC (US)
    14956     # RouterHosting LLC (US)
    15003     # Nobis Technology Group (US)
    15817     # Robert Meyer trading as Mittwald CM Service GmbH & Co. KG (US/DE)
    16628     # DedFiberCo (US)
    18450     # WebNX Inc. (US)
    18501     # CyberCloud Professionals LLC (US)
    19084     # ColoUp (US)
    19318     # Interserver Inc. (US)
    20278     # Nexeon Technologies Inc. (US)
    20454     # SECURED SERVERS LLC (US)
    20473     # Vultr / AS-CHOOPA (US)
    21769     # Colocation America Corporation (US)
    21859     # Zenlayer Inc. (US) β€” ASN 1 of 2 β€” see also AS4229
    22295     # Advin Services LLC (US)
    22439     # Perfect International Inc. (US)
    22611     # InMotion Hosting Inc. (US) β€” ASN 1 of 2
    22612     # Namecheap Inc. (US)
    22363     # Powerhouse Management Inc. (US)
    23033     # Wowrack.com (US)
    23352     # DEFT.COM / ServerCentral (US)
    23470     # ReliableSite.Net LLC (US)
    25820     # IT7 Networks Inc. (CA)
    26347     # DreamHost (US)
    26464     # Joyent Inc. (US)
    26496     # GoDaddy.com LLC (US)
    26548     # PureVoltage Hosting Inc. (US)
    26658     # HENGTONG-IDC-LLC (US)
    27257     # Webair Internet Development Company Inc. (US)
    27589     # MOJOHOST (US)
    29802     # HIVELOCITY Inc. (US) β€” ASN 1 of 2
    29873     # Newfold Digital Inc. (US)
    30058     # FDCservers.net (US)
    30447     # Internet Names For Business Inc. (CA) β€” ASN 2 of 2
    32097     # WholeSale Internet Inc. (US)
    32244     # Liquid Web LLC (US)
    32489     # Amanah Tech Inc. (CA)
    33182     # HostDime.com Inc. (US)
    35916     # Multacom Corporation (US)
    36007     # Kamatera Inc. (US)
    36352     # ColoCrossing (US)
    36444     # Liquid Web / Nexcess-Net LLC (US)
    36530     # IDC Cube (US)
    36680     # Netiface LLC (US) β€” ASN 1 of 3
    40021     # Contabo Inc. (US)
    40065     # CNSERVERS LLC (US)
    40300     # DR Fortress LLC (US)
    40676     # Psychz Networks (US)
    46261     # QuickPacket LLC (US)
    46475     # Limestone Networks Inc. (US)
    46562     # Performive LLC (US)
    46606     # UNITAS Global (US)
    46844     # Sharktech (US)
    46873     # Host Color (US)
    46918     # GlobalHostingSolutions Inc. (US)
    46995     # Jump Wireless LLC (US)
    50053     # VPS Dedicated LLC (US)
    50219     # Valence Technology Co. (US)
    50245     # Serverel Inc. (US)
    53514     # UHQ Services LLC (US)
    53667     # FranTech Solutions / BuyVM (US)
    53755     # Input Output Flood LLC (US)
    54600     # PEG TECH INC (US)
    54641     # InMotion Hosting Inc. (US) β€” ASN 2 of 2
    55286     # B2 Net Solutions / ServerCheap (US)
    61317     # Hivelocity LLC (US) β€” ASN 2 of 2
    62468     # VpsQuan L.L.C. (US)
    62610     # Zenlayer Inc. (US) β€” ASN 2 of 2
    62633     # HostRush / ServerCheap (US)
    62874     # Web2Objects LLC (US)
    62904     # Eonix Corporation (US)
    63023     # GTHost (US)
    63150     # BAGE CLOUD LLC (US)
    63410     # PrivateSystems Networks (US)
    #63949     # Linode / Akamai (US) β€” managed via hyperscalers.conf
    64200     # VIVID-HOSTING LLC (US)
    64249     # Charles River Operation (US)
    64267     # Sprious LLC (US) β€” proxy / hosting
    64286     # LogicWeb Inc. (US)
    #131513    # GHOST / G-Core Labs (US arm)
    146943    # Tier 4 Cloud Services (US)
    149042    # Silicon Cloud Global (US)
    150303    # SoloRDP (IN Company β€” US Registered)
    197769    # VPS Dedicated LLC (US)
    202015    # HZ Hosting Ltd (US)
    202425    # IP Volume Inc. (US)
    205775    # NEON CORE NETWORK LLC (US)
    205759    # Ghosty Networks LLC (US)
    206715    # UXHOST LTD (US)
    209372    # WS Telecom Inc (US)
    209641    # IHOR HOSTING LTD (US)
    213954    # Global Transit Systems LLC (US)
    214036    # Ultahost Inc. (US)
    214481    # Wojciech Czapkowicz (US/PL)
    215161    # Michael Vassileiou trading as DATAHOST (US)
    215402    # Asadov Ruslan Rafaelevich (US)
    393577    # Tritan Development (US)
    394474    # WhiteLabelColo (US)
    395092    # Shock Hosting LLC (US)
    396073    # Majestic Hosting Solutions LLC (US)
    396319    # Oxylabs (LT) β€” proxy / scanner network
    396356    # Latitude.sh (US)
    396998    # Path Network Inc. (US) β€” DDoS mitigation
    397032    # SPARKED HOST LLC (US)
    397423    # Tier.Net Technologies LLC (US)
    398019    # Dynu Systems Incorporated (US)
    398256    # Ultahost Inc. (US) β€” ASN 2
    398781    # Oculus Networks Inc. (US)
    399073    # BUNNY TECHNOLOGY LLC (US) β€” CDN
    399244    # AME Hosting LLC (US)
    399275    # Solid Systems LLC (US)
    399629    # BL Networks (US)
    399804    # Hostodo (US)
    400072    # THUNDERBOX INC (US)
    400529    # Infraly LLC (US)
    400587    # Ryamer LLC (US)
    400810    # BreezeHost (US)
    400940    # Railway (US) β€” cloud PaaS
    401152    # Ace Data Centers II LLC (US)
    401243    # Komi LLC (US)
    401322    # NetO Corp (US)
    401626    # Netiface America Inc. (US) β€” ASN 3 of 3
    401696    # cognetcloud INC (US)
    402226    # OnlyScans LLC (US)
    402253    # SKN Subnet & Telecom Ltd (KN)
    394814    # ISP4Life INC (US)
    
    46516     # HostRoyale LLC (US) β€” auto-classified 2026-08-21
    1004      # Ambyre LLC (US) β€” auto-classified 2026-08-21
    401896    # MISIU LLC (US) β€” auto-classified 2026-08-21
    29889     # Fast Serv Networks, LLC (US) β€” auto-classified 2026-08-21
    63018     # Dedicated.com (US) β€” auto-classified 2026-08-21
    23532     # IOVZ NETWORKS INC (US) β€” auto-classified 2026-08-21
    397373    # H4Y Technologies LLC (US) β€” auto-classified 2026-08-21
    200598    # Lunarnaut, LLC (US) β€” auto-classified 2026-08-21
    36137     # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398823    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398478    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398993    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    62744     # Quintex Alliance Consulting (US) β€” auto-classified 2026-08-21
    54548     # IONOS Cloud Inc. (US) β€” auto-classified 2026-08-21
    47007     # Colocation America Corporation (US) β€” auto-classified 2026-08-21
    26383     # Baxet Group Inc. (US) β€” auto-classified 2026-08-21
    27176     # DataWagon LLC (US) β€” auto-classified 2026-08-21
    46635     # AviationAI (US) β€” auto-classified 2026-08-21
    39618     # HostCram LLC (US) β€” auto-classified 2026-08-21
    61228     # BGP NETWORKS LLC (US) β€” auto-classified 2026-08-21
    203607    # 1000119767 ONTARIO INC. (CA) β€” auto-classified 2026-08-21
    203975    # Zorn Technologies LLC (US) β€” auto-classified 2026-08-21
    204874    # SaaStack LLC (US) β€” auto-classified 2026-08-21
    211673    # Mynymbox Hosting LLC (KN) β€” auto-classified 2026-08-21
    214300    # Layer 4 Group LLC (US) β€” auto-classified 2026-08-21
    214456    # ServerSP LLC (US) β€” auto-classified 2026-08-21
    215731    # Novus Labs Limited (US) β€” auto-classified 2026-08-21
    216044    # Terranode LLC (US) β€” auto-classified 2026-08-21
    152918    # Liberally Network LLC (US) β€” auto-classified 2026-08-21
    14315     # 1GSERVERS, LLC (US) β€” auto-classified 2026-08-21
    49791     # Newserverlife LLC (US) β€” auto-classified 2026-08-21
    40355     # Sundance International LLC (US) β€” auto-classified 2026-08-21
    32002     # RackGenius (US) β€” auto-classified 2026-08-21
    62164     # Heymman Servers Corporation (CA) β€” auto-classified 2026-08-21
    40861     # Paradise Networks LLC (US) β€” auto-classified 2026-08-21
    400463    # DynaNode LLC (US) β€” auto-classified 2026-08-21
    3842      # InMotion Hosting, Inc. (US) β€” auto-classified 2026-08-21
    61125     # SABOTAGE LLC (US) β€” auto-classified 2026-08-21
    207847    # CloudBlast LLC (US) β€” auto-classified 2026-08-21
    25653     # FortressITX (US) β€” auto-classified 2026-08-21
    208483    # WERIDATA LLC (US) β€” auto-classified 2026-08-21
    63473     # HostHatch, LLC (US) β€” auto-classified 2026-08-21
    13649     # Flexential Colorado Corp. (US) β€” auto-classified 2026-08-21
    19437     # SECURED SERVERS LLC (US) β€” auto-classified 2026-08-21
    402215    # Devology Tech LLC (US) β€” auto-classified 2026-08-21
    27640     # GIGAS HOSTING USA, LLC (US) β€” auto-classified 2026-08-22
    54103     # MOD Mission Critical, LLC (US) β€” auto-classified 2026-08-26
    19871     # Network Solutions, LLC (US) β€” auto-classified 2026-08-26
    140952    # Strong Technology, LLC (US) β€” auto-classified 2026-08-26
    54643     # Idigital Internet Inc. (CA) β€” auto-classified 2026-08-27
    61138     # Zappie Host LLC (US) β€” auto-classified 2026-08-27
    7040      # Netminders Server Hosting (CA) β€” auto-classified 2026-08-28
    18747     # IFX Corporation (US) β€” auto-classified 2026-08-30
    54527     # Astute Internet (CA) β€” auto-classified 2026-08-30
    55293     # A2 Hosting, Inc. (US) β€” auto-classified 2026-08-31
    136258    # BrainStorm Network, Inc (CA) β€” auto-classified 2026-08-31
    400619    # AROSSCLOUD INC. (US) β€” auto-classified 2026-09-01
    398991    # X99 (US) β€” auto-classified 2026-09-01
    36236     # NetActuate, Inc (US) β€” auto-classified 2026-09-02
    33070     # Rackspace Hosting (US) β€” auto-classified 2026-09-02
    53356     # Free Range Cloud Hosting Inc. (CA) β€” auto-classified 2026-09-02
    64236     # UnReal Servers, LLC (US) β€” auto-classified 2026-09-03
    4213      # Krypt Technologies (US) β€” auto-classified 2026-09-05
    398101    # GoDaddy.com, LLC (US) β€” auto-classified 2026-09-05
    40092     # HostPapa (US) β€” auto-classified 2026-09-06
    13739     # Datacenter IP, LLC (US) β€” auto-classified 2026-09-06
    63911     # NetActuate, Inc (US) β€” auto-classified 2026-09-09
    30475     # Handy Networks, LLC (US) β€” auto-classified 2026-09-09
    
    # ===========================================================================
    # LATIN AMERICAN CARRIERS & HOSTING
    # ---------------------------------------------------------------------------
    # Brazil
    # ---------------------------------------------------------------------------
    
    1916      # Rede Nacional de Ensino e Pesquisa (BR) β€” NOTE: academic/research network
    17222     # Mundivox do Brasil Ltda (BR)
    26599     # TelefΓ΄nica Brasil S.A. (BR)
    28573     # Claro NXT Telecomunicacoes Ltda (BR)
    52368     # ZAM LTDA. (BR)
    53107     # EVEO S.A. (BR)
    53158     # Net Turbo Telecom (BR)
    206971    # BedHosting BR β€” Datacenter No Brasil
    262688    # MHNET Telecom (BR)
    266572    # WORLDNET TelecomunicaΓ§Γ΅es (BR)
    268136    # P J A Telecomunicacoes Ltda (BR)
    268372    # WISESITE Comunicacao e Tecnologia (BR)
    270716    # GOVISTA Telecomunicao Importacao Ltda (BR)
    262287    # Unknown (BR) β€” auto-classified 2026-08-22
    
    # ---------------------------------------------------------------------------
    # Mexico
    # ---------------------------------------------------------------------------
    
    8151      # UNINET S.A. de C.V. (MX)
    17072     # Total Play Telecomunicaciones S.A.P.I. de C.V. (MX)
    
    # ---------------------------------------------------------------------------
    # Caribbean
    # ---------------------------------------------------------------------------
    
    23520     # Columbus Networks USA Inc. β€” Caribbean operations (consistent abuse)
    30689     # FLOW (JM)
    197528    # Suibian Network LLC (VC) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Central America / Panama
    # ---------------------------------------------------------------------------
    
    18809     # Cable Onda (PA)
    27947     # Telconet S.A. (EC)
    48721     # Flyservers S.A. (PA β€” EU Hosted)
    52449     # My Tech BZ (BZ)
    52485     # networksdelmanana.com (HN)
    141039    # PacketHub S.A. (PA) β€” ASN 2 of 2 (APAC-registered)
    207137    # PacketHub S.A. (PA) β€” ASN 1 of 2
    209854    # Cyberzone S.A. (PA)
    263792    # IN.PLANET S.A. (EC)
    263744    # Udasha S.A. (HN)
    264750    # TELEOPERADORA DEL NORDESTE S.R.L. (DO)
    264850    # TODAS LAS REDES SA (HN)
    266827    # BOHO BEACH CLUB S.A. (HN/Global)
    271935    # AIRTIME TECHNOLOGY SRL (DO)
    263179    # Unknown (HN) β€” auto-classified 2026-08-21
    136787    # PacketHub S.A. (PA) β€” auto-classified 2026-08-25
    263829    # Unknown (HN) β€” auto-classified 2026-08-26
    147049    # PacketHub S.A. (PA) β€” auto-classified 2026-08-31
    
    # ---------------------------------------------------------------------------
    # South America
    # ---------------------------------------------------------------------------
    
    3132      # Red Cientifica Peruana (PE) β€” NOTE: academic/research network
    21826     # CorporaciΓ³n Telemic C.A. (VE)
    44382     # Fiba Cloud Operation Company LLC
    52393     # Corporacion Dana S.A. (PA)
    263735    # SOCIEDAD BUENA HOSTING, S.A. (LACNIC region)
    263740    # Corporacion Laceibanetsociety (LACNIC region)
    263753    # SERVICIOS DE DATACENTER DATANETWORKS LIMITADA (CL)
    263821    # Soluciones Favorables (LACNIC region)
    
    265831    # Unknown (CL) β€” auto-classified 2026-08-31
    
    # ===========================================================================
    # AFRICA
    # ===========================================================================
    
    37153     # xneelo (Pty) Ltd (ZA)
    37611     # Afrihost SP (Pty) Ltd (ZA)
    43444     # Fast Servers (Pty) Ltd (ZA/Global)
    204300    # D2CLOUD NETWORK SERVICES (PTY) LTD (ZA)
    204209    # Internet Magnate (Pty) Ltd (ZA)
    329184    # Host Africa (Pty) Ltd (ZA)
    
    36943     # 1 GRID (PTY) LTD (ZA) β€” auto-classified 2026-08-21
    327813    # Host Africa (Pty) Ltd (ZA) β€” auto-classified 2026-09-05
    328608    # Africa on Cloud (ZA) β€” auto-classified 2026-09-06
    
    # ===========================================================================
    # ASIA-PACIFIC HOSTING & TELECOM
    # ---------------------------------------------------------------------------
    # Japan β€” (GMO/SAKURA group consolidated above)
    # ---------------------------------------------------------------------------
    # Hong Kong
    # ---------------------------------------------------------------------------
    
    4760      # HKT Limited (HK)
    9269      # Hong Kong Broadband Network Ltd. (HK)
    38136     # Akari Networks (HK)
    45753     # Netsec Limited (HK)
    55933     # Cloudie Limited (HK)
    132056    # SCICUBE (HK)
    133380    # Layerstack Limited (HK)
    135357    # Hong Kong Kowloon Telecommunications Co., Limited (HK)
    135377    # UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
    152194    # CTG Server Limited (HK)
    153656    # OWGELS INTERNATIONAL CO., LIMITED (HK)
    153671    # Liasail Global Hongkong Limited (HK)
    212512    # Detai Prosperous Technologies Limited (HK)
    213802    # Tianfeng (Hong Kong) Communications Limited (HK)
    215929    # Data Campus Limited (HK)
    
    # ---------------------------------------------------------------------------
    # Singapore
    # ---------------------------------------------------------------------------
    
    9465      # AGOTOZ PTE. LTD. (SG)
    135354    # NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD. (SG)
    139341    # ACEVILLE PTE.LTD. (SG) β€” auto-classified 2026-08-21
    142036    # Hosteons Pte. Ltd. (SG) β€” auto-classified 2026-08-21
    59253     # LEASEWEB SINGAPORE PTE. LTD. (SG) β€” auto-classified 2026-08-21
    154373    # Singapore Data Cloud Pte Ltd (SG) β€” auto-classified 2026-08-21
    142002    # Scloud Pte Ltd (SG) β€” auto-classified 2026-08-25
    150423    # Server Galactic Private Limited (SG) β€” auto-classified 2026-08-27
    135161    # GMO-Z.COM PTE. LTD. (SG) β€” auto-classified 2026-09-02
    140666    # ANY DIGITAL PTE. LTD. (SG) β€” auto-classified 2026-09-03
    133210    # EN Technologies Pte Ltd (SG) β€” auto-classified 2026-09-05
    
    # ---------------------------------------------------------------------------
    # South Korea
    # ---------------------------------------------------------------------------
    
    5065      # Bunny Communications (KR)
    45370     # BROADBANDIDC (KR)
    212388    # Auraz Corporation Co.,Ltd. (KR) β€” auto-classified 2026-08-21
    38661     # abcle (KR) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Malaysia
    # ---------------------------------------------------------------------------
    
    149440    # Evoxt Sdn. Bhd. (MY)
    45839     # Shinjiru Technology Sdn Bhd (MY) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Vietnam
    # ---------------------------------------------------------------------------
    
    45899     # VNPT Corp (VN)
    135951    # Webico Company Limited (VN)
    
    # ---------------------------------------------------------------------------
    # Indonesia
    # ---------------------------------------------------------------------------
    
    7713      # Telekomunikasi Indonesia PT (ID)
    17451     # Biznet Networks (ID)
    58487     # Rumahweb (ID)
    141968    # PT Industri Kreatif Digital (ID)
    150493    # PT Gunung Sedayu Sentosa (ID)
    219215    # M. RIMBA ADHITYA A. (ID) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Bangladesh
    # ---------------------------------------------------------------------------
    
    23688     # Link3 Technologies Limited (BD)
    38203     # ADN Telecom Ltd. (BD)
    132817    # DZCRD Networks Ltd (BD)
    139921    # JASHORE COLO (BD)
    147053    # Bhaluka Broadband Internet Service (BD)
    153038    # Business Zone Limited (BD)
    #153168    # BengalCloud (BD)
    153568    # NEW DHAKA HARDWARE (BD)
    
    # ---------------------------------------------------------------------------
    # Nepal
    # ---------------------------------------------------------------------------
    
    142065    # Wifi Nepal Private Limited (NP)
    
    # ---------------------------------------------------------------------------
    # Sri Lanka
    # ---------------------------------------------------------------------------
    
    9329      # Sri Lanka Telecom Internet (LK)
    
    # ---------------------------------------------------------------------------
    # Cambodia
    # ---------------------------------------------------------------------------
    
    38623     # Viettel Cambodia (KH)
    
    # ---------------------------------------------------------------------------
    # Taiwan
    # ---------------------------------------------------------------------------
    
    3462      # HiNet / Data Communication Business Group (TW)
    
    # ---------------------------------------------------------------------------
    # Thailand
    # ---------------------------------------------------------------------------
    
    56309     # Siamdata Communication Co. Ltd (TH)
    134240    # Super Broadband Network Company Limited (TH)
    147176    # NZ Network Enterprise Co., Ltd. (TH) β€” auto-classified 2026-08-27
    
    # ---------------------------------------------------------------------------
    # Mongolia
    # ---------------------------------------------------------------------------
    
    45237     # Magicnet LLC (MN)
    
    # ---------------------------------------------------------------------------
    # Georgia
    # ---------------------------------------------------------------------------
    
    16010     # Magticom Ltd. (GE)
    47810     # Proservice LLC (GE)
    
    # ---------------------------------------------------------------------------
    # New Zealand
    # ---------------------------------------------------------------------------
    
    56030     # Voyager Internet Ltd. (NZ)
    45179     # SiteTech Solutions Limited (NZ) β€” auto-classified 2026-08-28
    
    # ---------------------------------------------------------------------------
    # Seychelles
    # ---------------------------------------------------------------------------
    
    213438    # ColocaTel Inc. (SC)
    197170    # TechTies Inc. (SC) β€” auto-classified 2026-08-21
    202959    # Lushu Limited (SC) β€” auto-classified 2026-08-21
    209101    # IP Vendetta Inc. (SC) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # India
    # ---------------------------------------------------------------------------
    
    24560     # Bharti Airtel Ltd. Telemedia Services (IN)
    133499    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 1 of 5
    134180    # Md. Shariful Islam T/A BRISK SYSTEMS (IN)
    134291    # TECHNO FAQ DIGITAL MEDIA (IN)
    134450    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 2 of 5
    140947    # SnTHostings (IN)
    142430    # DIGI VPS (IN)
    #143586    # AYSTOR / Yanoor Islam Khan (IN)
    203020    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 3 of 5
    #203999    # Geekyworks IT Solutions Pvt Ltd (IN/US)
    204287    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 4 of 5
    207990    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 5 of 5
    39486     # HostRoyale Technologies Pvt Ltd (IN) β€” auto-classified 2026-08-21
    200169    # Manish Pant (IN) β€” auto-classified 2026-08-21
    153393    # RACKVOLT CLOUD SOLUTIONS PRIVATE LIMITED (IN) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # Pakistan
    # ---------------------------------------------------------------------------
    
    9541      # Cyber Internet Services (Pvt) Ltd. (PK)
    
    # ---------------------------------------------------------------------------
    # Australia / APAC multi-region
    # ---------------------------------------------------------------------------
    
    45187     # Rackspace IT Hosting (AU/APAC)
    55803     # Hostopia Australia Web Pty Ltd (AU)
    56038     # RackCorp (AU/Global)
    133159    # Mammoth Media Pty Ltd (AU)
    134562    # Discovery Internet (AU)
    136557    # Host Universal Pty Ltd (AU)
    137409    # GSL Networks Pty LTD (AU/Global)
    133153    # Unknown (AU) β€” auto-classified 2026-08-21
    151592    # Indonesia Network Information Center (AU) β€” auto-classified 2026-08-21
    64080     # Unknown (AU) β€” auto-classified 2026-08-21
    133643    # EWEBGURU (AU) β€” auto-classified 2026-08-21
    135175    # Facts Online Pvt Ltd (AU) β€” auto-classified 2026-08-21
    58477     # Argon Data Communication (AU) β€” auto-classified 2026-08-21
    149948    # Indonesia Network Information Center (AU) β€” auto-classified 2026-08-25
    142478    # NIXI (AU) β€” auto-classified 2026-09-01
    149545    # NIXI (AU) β€” auto-classified 2026-09-02
    152390    # Indonesia Network Information Center (AU) β€” auto-classified 2026-09-05
    9371      # SAKURA Internet Inc. (AU) β€” auto-classified 2026-09-06
    17621     # China Unicom Shanghai network (AU) β€” auto-classified 2026-09-09
    
    # ---------------------------------------------------------------------------
    # Multi-region APAC
    # ---------------------------------------------------------------------------
    
    9597      # KDDI Web Communications Inc. (JP/APAC)
    21100     # GREEN FLOID LLC (APAC)
    45090     # Shenzhen Tencent Computer Systems Company Limited (CN/APAC)
    56971     # CGI GLOBAL LIMITED (APAC)
    64445     # NetJoin srl (IT/APAC)
    133453    # Mogul Service LLC (APAC)
    150436    # Byteplus Pte. Ltd. (SG/APAC)
    201200    # SuperHosting.BG Ltd. (BG/APAC)
    205402    # Asadov Ruslan (APAC)
    
    
    # ===========================================================================
    # SECURITY SCANNERS, RESEARCH NETWORKS & PRIVACY INFRASTRUCTURE
    # ===========================================================================
    
    16417     # Cisco Systems IronPort Division β€” email security scanner
    42969     # Alpha Strike Labs GmbH (DE) β€” active security scanner
    60729     # TORSERVERS-NET / Stiftung Erneuerbare Freiheit β€” Tor exit nodes
    200107    # Kaspersky Lab Switzerland GmbH β€” security scanner
    209366    # SEMrush CY Ltd β€” SEO crawler / scanner
    211680    # NSEC Sistemas Informaticos S.A. (PT) β€” BitSight security scanner
    

    If you can make a case as to why your ASN should not be in this list, please feel free to contact me. This will require some research as I am not going to supply my contact information in a public space.

  • Enterprise Shield — ASN Blocklist – 2026 08 25

    NOTE: Always check this link for the most recent ASN Blocklist.

    For those of you who are interested, my current list of blocked hosting ASNs is listed below. This list is current as of 23:00 UTC.

    PLEASE NOTE: This list does not include the following ASNs.

    8075	# Microsoft Azure
    8069	# Microsoft Corporation (AS8069)
    14618	# Amazon AWS (us-east-1)
    16509	# Amazon AWS (multi-region)
    31898	# Oracle Cloud Infrastructure
    396982	# Google Cloud Platform
    13335	# Cloudflare (primary)
    132892	# Cloudflare (secondary)
    14789	# Cloudflare (secondary)
    63949	# Linode / Akamai
    207825	# Marginalia Search (Datarymden Internet AB, SE)

    The above ASNs are managed by separate rulesets as some of the traffic is valid and I want it to hit the server. The ASNs in the blocklist do not have any traffic of interest and are set to DROP at the firewall.

    # ===========================================================================
    # TRANSIT / BACKBONE
    # Large transit carriers. Review carefully β€” blocking these can cause
    # collateral damage to legitimate traffic from downstream customers.
    # ===========================================================================
    
    174       # Cogent Communications (US) β€” major transit
    1299      # Arelion Sweden AB β€” Tier 1 backbone
    3209      # Vodafone Germany
    3257      # GTT Communications Inc. (US)
    6939      # Hurricane Electric (US) β€” large transit, review if needed
    7979      # SoftLayer / IBM Cloud
    11042     # Network Transit Holdings LLC (US)
    
    
    # ===========================================================================
    # CHINESE STATE CARRIERS & TECH GIANTS
    # ===========================================================================
    
    4134      # ChinaNet β€” China Telecom backbone
    4811      # China Telecom (Group) β€” Shanghai MAN
    4831      # China Telecom (CTTNET)
    4837      # China Unicom (CNC Group)
    9808      # China Mobile Communications Group Co., Ltd.
    23724     # ChinaNet IDC Beijing (CN)
    24445     # Henan Mobile Communications Co. Ltd (CN)
    37963     # Alibaba Cloud (Aliyun) β€” mainland China
    38365     # Baidu β€” Beijing Baidu Netcom Science and Technology Co., Ltd.
    45102     # Alibaba Cloud APAC
    58461     # CT-HangZhou-IDC (CN)
    63199     # CDS Global Cloud Co., Ltd (CN/HK)
    132203    # Tencent Cloud
    136907    # Huawei Cloud
    138699    # TikTok Pte. Ltd. (SG/CN)
    200350    # YandexCloud β€” Yandex.Cloud LLC
    211443    # Sino Worldwide Trading Limited (HK)
    214669    # Starlight Tech Trading Co. Limited (HK)
    396986    # Bytedance Inc. (US/CN)
    17497     # liasail global hongkong limited (HK) β€” auto-classified 2026-08-21
    205369    # LI YIRAN (CN) β€” auto-classified 2026-08-21
    208525    # Airu Limited (HK) β€” auto-classified 2026-08-21
    209109    # DataSphere (H.K) Limited (HK) β€” auto-classified 2026-08-21
    214454    # PoloNetwork Limited (HK) β€” auto-classified 2026-08-21
    219300    # Yan Xiangdong (CN) β€” auto-classified 2026-08-21
    55967     # Beijing Baidu Netcom Science and Technology Co., Ltd. (CN) β€” auto-classified 2026-08-21
    138915    # Kaopu Cloud HK Limited (HK) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # RUSSIAN / CIS CARRIERS & HOSTING
    # ===========================================================================
    
    12389     # Rostelecom (Russia) β€” state carrier
    33993     # UFO Hosting LLC (RU)
    35048     # Biterika Group LLC (RU)
    41853     # LLC NTCOM (RU)
    44050     # Petersburg Internet Network Ltd (RU)
    45055     # Dontechsvyaz LLC (RU)
    47913     # Moshonkin Ilia Sergeevich (RU)
    48030     # Martynova Irina Nikolaevna (RU) β€” private operator
    48031     # Ivanov Vitaliy Sergeevich (RU) β€” private operator
    48043     # Ozyorsk Telecom CJSC (RU)
    48467     # Pronet LLC (RU)
    48507     # LTD SibMediaFon (RU)
    48515     # Praktika Ltd (RU)
    49505     # JSC Selectel (RU)
    197695    # REG.RU (RU)
    200328    # Bakhtin Evgenii Valerevich (RU)
    202269    # BitCommand LLC (AM)
    205196    # BIG CORE LLC (RU)
    209946    # ALINDA LLC (RU)
    210644    # AEZA GROUP LLC (RU)
    9123      # JSC "TIMEWEB" (RU) β€” auto-classified 2026-08-21
    211399    # KPD group OOO (RU) β€” auto-classified 2026-08-21
    199514    # ILIA KALASHNIKOV (RU) β€” auto-classified 2026-08-21
    204353    # TM226-AS (RU) β€” auto-classified 2026-08-21
    58347     # AiK LLC (RU) β€” auto-classified 2026-08-25
    
    # ===========================================================================
    # CENTRAL ASIA
    # ===========================================================================
    
    8193      # Uzbektelekom Joint Stock Company (UZ)
    8200      # Uplink LLC (KZ)
    35682     # Best Internet Solution (UZ)
    48716     # PS Internet Company LLP (KZ)
    #203044    # Telepatiya Ltd (KZ)
    203087    # Fedinyak Sergey Vyacheslavovich (KZ)
    210006    # Shereverov Marat Ahmedovich (KZ)
    210976    # Timeweb LLP (KZ)
    
    203534    # Erik Omarov (KZ) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # EASTERN EUROPE / UKRAINE / BALTICS
    # ===========================================================================
    
    24651     # JSC BALTICOM (LV)
    30860     # Virtual Systems LLC (UA)
    42159     # Zemlyaniy Dmitro Leonidovich (UA) β€” private operator
    56851     # PE Skurykhin Mukola Volodumurovuch (UA)
    204957    # GREEN FLOID LLC (UA)
    209630    # LLC VASH KREDIT BANK (UA)
    211736    # FOP Dmytro Nedilskyi (UA)
    
    39845     # 2 Cloud Ltd. (LV) β€” auto-classified 2026-08-21
    219268    # Geodema Group LLC (UA) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # MIDDLE EAST
    # ===========================================================================
    
    8697      # Jordan Telecommunications PSC (JO)
    9038      # BATELCO / Al Bahrainia al Urdunia (JO/BH)
    201771    # Arabian Internet & Communications Services Co. Ltd (SA)
    202670    # CLOUDZME FZE (UAE)
    211273    # Cloud Software FZCO (UAE)
    216154    # CLODO CLOUD SERVICE CO. L.L.C (UAE)
    44709     # O.M.C. COMPUTERS & COMMUNICATIONS LTD (IL) β€” auto-classified 2026-08-21
    200236    # Saif Mohammed Alashram trading as Privacy Cloud Service & Datacenters Providers (AE) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Israel
    # ---------------------------------------------------------------------------
    
    206446    # CLOUD LEASE Ltd (IL)
    
    
    # ===========================================================================
    # TURKEY
    # ===========================================================================
    
    9121      # Turk Telekomunikasyon Anonim Sirketi (TR)
    12735     # TurkNet (TR)
    205733    # HOSTIFOX Bilisim Hizmetleri (TR)
    208913    # Kitsune Bilisim Sistemleri (TR)
    211557    # TAYNET TEKNOLOJI TICARET LIMITED SIRKETI (TR)
    212193    # VIVA INTERNET LIMITED SIRKETI (TR) β€” active attack detected 2026-04-07
    213407    # Uzmansoft Bilisim Web Yazilim Hizmetleri (TR)
    213488    # Inoxweb Datacenter ve Hosting (TR)
    214000    # Voxnet Bilisim Teknolojileri (TR)
    
    
    # ===========================================================================
    # CLOUD / HYPERSCALER INFRASTRUCTURE
    # Broad blocks β€” may affect legitimate SaaS/B2B traffic.
    # ===========================================================================
    
    2639      # Zoho Corporation
    #8075      # Microsoft Azure β€” managed via hyperscalers.conf
    #14618     # Amazon AWS (us-east-1) β€” managed via hyperscalers.conf
    #16509     # Amazon AWS (multiple regions) β€” managed via hyperscalers.conf
    #31898     # Oracle Cloud Infrastructure β€” managed via hyperscalers.conf
    208172    # Proton AG (CH) β€” VPN/privacy provider
    #396982    # Google Cloud Platform (GCP) β€” NOTE: AS15169 (Google Search/crawlers)
              #   is excluded. This ASN covers GCP third-party hosted services.
              #   Block specific /cidr ranges instead of this ASN if possible.
    
    
    # ===========================================================================
    # SOCIAL MEDIA PLATFORMS
    # Blocked to prevent platform crawler / scraper traffic.
    # ===========================================================================
    
    32934     # Facebook Inc. (Meta)
    54115     # Facebook Inc. (Meta) β€” ASN 2
    63293     # Facebook Inc. (Meta) β€” ASN 3
    
    
    # ===========================================================================
    # EUROPEAN HOSTING & VPS PROVIDERS
    # ---------------------------------------------------------------------------
    # France
    # ---------------------------------------------------------------------------
    
    12876     # Scaleway SAS (FR)
    16276     # OVHcloud (FR)
    30781     # Free Pro SAS (FR)
    203476    # GANDI SAS (FR)
    #208046    # KOGLER Gabin (FR) β€” small operator
    210403    # Groupe LWS SARL (FR)
    210743    # Babbar SAS (FR) β€” SEO crawler
    211590    # Bucklog SARL (FR)
    213412    # ONYPHE SAS (FR) β€” active security scanner
    204818    # Hosteur SAS (FR) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Germany
    # ---------------------------------------------------------------------------
    
    6724      # Strato GmbH (DE)
    8560      # IONOS SE / 1&1 (DE)
    8972      # Host Europe GmbH (DE) β€” GoDaddy EMEA
    12574     # Hosting.de GmbH (DE)
    12816     # Leibniz-Rechenzentrum (DE) β€” NOTE: university/research network, review
    21013     # eww ag (AT/DE)
    21499     # Host Europe GmbH (DE)
    24940     # Hetzner Online GmbH (DE) β€” ASN 1 of 3
    24961     # WIIT AG (DE/CH)
    28753     # Leaseweb Deutschland GmbH (DE)
    29066     # velia.net Internetdienste GmbH (DE/FR)
    29550     # Team Blue Carrier Limited (UK/DE)
    30823     # aurologic GmbH (DE)
    34081     # INCUBATEC GmbH – Srl (DE/IT)
    34549     # meerfarbig GmbH & Co. KG (DE)
    42237     # w1n ltd (DE)
    42366     # TerraTransit AG (DE)
    42525     # GlobalConnect A/S (DE) β€” see also ASN 12552 (SE), 8896 (NO)
    51167     # Contabo GmbH (DE)
    51396     # Pfcloud UG (DE)
    58212     # dataforest GmbH (DE)
    61157     # PlusServer GmbH (DE)
    141995    # Contabo Asia Private Limited
    197540    # netcup GmbH (DE)
    198139    # Lucas Vossberg (DE) β€” private operator
    200373    # 3xK Tech GmbH (DE)
    203516    # AltunHOST LTD (UK/DE)
    204646    # web2objects GmbH (DE)
    205948    # creoline GmbH (DE)
    206996    # ZAP-Hosting GmbH (DE)
    210558    # 1337 Services GmbH (DE) β€” privacy/anonymous hosting
    210785    # KAPELAN Medien GmbH (DE)
    212317    # Hetzner Online GmbH (DE) β€” ASN 3 of 3
    213230    # Hetzner Online GmbH (DE) β€” ASN 2 of 3
    215607    # dataforest GmbH (DE) β€” ASN 2
    215859    # Hetzner Online GmbH (DE) β€” ASN 4
    31103     # Keyweb AG (DE) β€” auto-classified 2026-08-22
    214996    # netcup GmbH (DE) β€” auto-classified 2026-08-22
    35042     # Layer7 Networks GmbH (DE) β€” auto-classified 2026-08-21
    45012     # dogado GmbH (DE) β€” auto-classified 2026-08-21
    213250    # Dominic Scholz trading as ITP-Solutions GmbH & Co. KG (DE) - 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Austria
    # ---------------------------------------------------------------------------
    
    42473     # ANEXIA Internetdienstleistungs GmbH (AT)
    64457     # Matteo Fruhwald trading as PipeHost e.U. (AT)
    40994     # Hohl IT e.U. (AT) β€” auto-classified 2026-08-21
    57169     # EDIS GmbH (AT) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Switzerland
    # ---------------------------------------------------------------------------
    
    29222     # Infomaniak Network SA (CH)
    51852     # Private Layer INC (CH) β€” privacy hosting
    61098     # Akenes SA / Exoscale (CH)
    209373    # SWISSNET LLC (CH/Global)
    1836      # green.ch AG (CH) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Sweden
    # ---------------------------------------------------------------------------
    
    12552     # GlobalConnect AB (SE) β€” see also ASN 8896 (NO), 42525 (DE)
    30893     # No ACK Group Holding AB (SE)
    39351     # 31173 Services AB (SE)
    42708     # Portlane AB (SE)
    51747     # Internet Vikings International AB (SE)
    212220    # Kepler Technologies AB (SE)
    214503    # QuxLabs AB (SE)
    59437     # Northern Data AG (DE) β€” auto-classified 2026-08-21
    13116     # Tele2 Sverige AB (SE) β€” auto-classified 2026-08-21
    207825    # Datarymden Internet AB (SE) β€” auto-classified 2026-08-21
    33837     # Fredrik Holmqvist (SE) β€” auto-classified 2026-08-21
    62395     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203297    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    202910    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    202922    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    16312     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    51913     # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203191    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203192    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203193    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203194    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203213    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203240    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203241    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203295    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203298    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203300    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203552    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203605    # Synotio AB (SE) β€” auto-classified 2026-08-21
    203610    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203625    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203800    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203814    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    203839    # Internet Vikings International AB (SE) β€” auto-classified 2026-08-21
    
    
    # ---------------------------------------------------------------------------
    # Norway
    # ---------------------------------------------------------------------------
    
    8896      # GlobalConnect AS (NO) β€” see also ASN 12552 (SE), 42525 (DE)
    50304     # Blix Solutions AS (NO)
    56655     # Gigahost AS (NO) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Netherlands
    # ---------------------------------------------------------------------------
    
    1101      # IP-EEND BV (NL)
    20857     # TransIP BV / Signet B.V. (NL) β€” ASN 2 of 2
    35470     # Signet B.V. (NL) β€” ASN 1 of 2
    39572     # DataWeb Global Group B.V. (NL)
    39704     # CJ2 Hosting B.V. (NL)
    43350     # NForce Entertainment BV (NL)
    48137     # PI-GROUP BV (NL)
    49453     # Global Layer BV (NL)
    49532     # Eonix Corporation / ServerHub (NL)
    49981     # WorldStream B.V. (NL)
    50077     # SYN LTD (NL)
    51430     # AltusHost B.V. (NL)
    57043     # HOSTKEY B.V. (NL)
    60404     # Liteserver / The Infrastructure Group B.V. (NL)
    60781     # LeaseWeb Netherlands BV (NL)
    201176    # DUND MC2 B.V. (NL)
    207179    # WilroffReitsma B.V. (NL)
    209847    # WorkTitans B.V. (NL)
    211381    # Podaon SIA (LV/NL)
    215125    # Church of Cyberology (NL) β€” privacy/anonymity hosting
    215747    # NubaCloud B.V. (NL)
    216472    # HS-SYR High Speed For Internet Services L.L.C (NL)
    209334    # Modat B.V. (NL) β€” auto-classified 2026-08-21
    198478    # Alireza Mirzaei Fard (NL) β€” auto-classified 2026-08-21
    204729    # Xaviero Xaviel Kajafas trading as Internalhost (NL) β€” 2026-08-21
    209675    # Jelle Hofstee trading as AxisNetworks (NL) β€” auto-classified 2026-08-21
    212953    # Bas Dierx Trading As CableHosting (NL) β€” auto-classified 2026-08-21
    34343     # Eweka Internet Services B.V. (NL) β€” auto-classified 2026-08-21
    197902    # Hostnet B.V. (NL) β€” auto-classified 2026-08-21
    24875     # NovoServe B.V. (NL) β€” auto-classified 2026-08-21
    34305     # Base IP B.V. (NL) β€” auto-classified 2026-08-21
    49870     # Alsycon B.V. (NL) β€” auto-classified 2026-08-21
    205467    # Base IP B.V. (NL) β€” auto-classified 2026-08-21
    214783    # Danny Nieuwenhuis trading as DedicatedNodes (NL) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # United Kingdom
    # ---------------------------------------------------------------------------
    
    9009      # M247 Europe (UK/EU)
    11721     # StylenTech LLC (UK)
    12488     # Krystal Hosting Ltd (UK)
    13213     # UK-2 Limited / Iomart (UK)
    14670     # WHG Hosting Services Ltd (UK) β€” ASN 4 of 4
    20738     # Heart Internet Ltd (UK)
    20860     # IOMART Cloud Services Limited (UK)
    41281     # KeFF Networks Ltd (UK)
    41564     # Orion Network Limited (UK) β€” ASN 1 of 2
    42831     # UK Dedicated Servers Limited (UK)
    43357     # Owl Limited (UK)
    46805     # Angelnet Limited (UK) β€” ASN 4 of 4
    49592     # Pipe Networks LTD (UK)
    49683     # MASSIVEGRID LTD (UK)
    50300     # CustodianDC Limited (UK)
    51713     # WHG Hosting Services Ltd (UK) β€” ASN 1 of 4
    57858     # Angelnet Limited (UK) β€” ASN 3 of 4
    58065     # Orion Network Limited (UK) β€” ASN 2 of 2
    62240     # Clouvider Ltd (UK) β€” ASN 2 of 2
    62651     # Strong Technology, LLC. (UK/US)
    63119     # Angelnet Limited (UK) β€” ASN 2 of 4
    199404    # WHG Hosting Services Ltd (UK) β€” ASN 2 of 4
    201579    # HostGnome Ltd (UK)
    203446    # Smartnet Limited (UK)
    203520    # 3xK Tech GmbH (UK)
    204800    # WHG Hosting Services Ltd (UK) β€” ASN 3 of 4
    206092    # F.N.S. Holdings Limited (UK)
    206804    # EstNOC OU (EE/UK)
    207569    # I-SERVERS LTD (UK)
    207957    # Serv.Host Group Ltd (UK)
    209242    # Clouvider Ltd (UK) β€” ASN 1 of 2
    211298    # Driftnet Ltd (UK) β€” security scanner / honeypot operator
    212286    # LonConnect Ltd (UK)
    213702    # QWINS LTD (UK)
    213887    # WAIcore Ltd (UK)
    214238    # HOST TELECOM LTD (UK)
    214716    # WEYRO LTD (UK)
    #215215    # Freakhosting Ltd (UK)
    215540    # Global Connectivity Solutions LLP (UK)
    215703    # FREAKHOSTING LTD (UK)
    206134    # NEKOBYTE INTERNATIONAL LIMITED (GB) β€” auto-classified 2026-08-21
    209693    # OC NETWORKS LIMITED (GB) β€” auto-classified 2026-08-21
    205544    # Leaseweb UK Limited (GB) β€” auto-classified 2026-08-21
    203919    # LUMADOCK LTD (GB) β€” auto-classified 2026-08-21
    207096    # Link Web Solutions LLP (GB) β€” auto-classified 2026-08-21
    4785      # xTom Limited (GB) β€” auto-classified 2026-08-21
    215286    # IXROOT LTD (GB) β€” auto-classified 2026-08-21
    204044    # Packet Star Networks Limited (GB) β€” auto-classified 2026-08-21
    216014    # BestDC Limited (GB) β€” auto-classified 2026-08-21
    197595    # SEEKAHOST TECHNOLOGIES LTD (GB) β€” auto-classified 2026-08-21
    202147    # VPSUS LTD (GB) β€” auto-classified 2026-08-21
    209149    # SEEKAHOST LTD (GB) β€” auto-classified 2026-08-21
    209710    # SNRD NETWORKS LIMITED (GB) β€” auto-classified 2026-08-21
    209809    # ROCO HOST LTD (GB) β€” auto-classified 2026-08-21
    213549    # SATISFYHOST LTD (GB) β€” auto-classified 2026-08-21
    215674    # Brookplus Limited (GB) β€” auto-classified 2026-08-21
    219412    # Lewis Brown (GB) β€” auto-classified 2026-08-21
    216039    # EdgeSec Technologies Limited (GB) β€” auto-classified 2026-08-21
    60064     # HOSTPALACE DATACENTERS LTD (GB) β€” auto-classified 2026-08-21
    203363    # Kuroit Limited (GB) β€” auto-classified 2026-08-21
    61112     # AKILE LTD (GB) β€” auto-classified 2026-08-21
    209723    # EXPERT NETCLOUD LLP (GB) β€” auto-classified 2026-08-21
    215590    # DpkgSoft International Limited (GB) β€” auto-classified 2026-08-21
    203758    # EUGAMEHOST LTD (GB) β€” auto-classified 2026-08-21
    215925    # VPSVAULT.HOST LTD (GB) β€” auto-classified 2026-08-21
    207043    # DEDIK SERVICES LIMITED (GB) β€” auto-classified 2026-08-21
    209413    # DEDIK SERVICES LIMITED (GB) β€” auto-classified 2026-08-21
    61323     # ANS ACADEMY LIMITED (GB) β€” auto-classified 2026-08-21
    216180    # WHG Hosting Services Ltd (GB) β€” auto-classified 2026-08-21
    219464    # FORESTSNET LTD (GB) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Ireland
    # ---------------------------------------------------------------------------
    
    30900     # Sternforth Ltd. trading as WebWorld (IE)
    39122     # Blacknight Internet Solutions Limited (IE)
    212353    # Crelativity Limited (IE) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Iceland
    # ---------------------------------------------------------------------------
    
    200651    # FlokiNET ehf (IS) β€” privacy hosting
    
    # ---------------------------------------------------------------------------
    # Poland
    # ---------------------------------------------------------------------------
    
    15967     # Nazwa.pl Sp.z.o.o. (PL)
    29522     # Cyber_Folks S.A. (PL) β€” ASN 1 of 2 (fka CF-KRK)
    31229     # Beyond.pl sp. z o.o. (PL)
    34360     # Cyber_Folks S.A. (PL) β€” ASN 2 of 2 (fka OGICOM)
    41079     # Cyber_Folks S.A. (PL) β€” ASN 3
    43641     # Sollutium EU Sp. z o.o. (PL)
    47544     # IQ PL Sp. z o.o. (PL)
    48047     # Krakowskie Centrum Przetwarzania Danych (PL)
    48505     # Kylos sp. z o.o. (PL)
    50599     # DATASPACE P.S.A. (PL)
    56511     # GAMP Sp. z o.o. (PL)
    201814    # MEVSPACE sp. z o.o. (PL)
    204444    # LanTech Piotr Pilek (PL)
    210100    # Adam Chodkowski (PL) β€” auto-classified 2026-08-21
    210146    # Dawid Lewandowski (PL) β€” auto-classified 2026-08-21
    207208    # MEVSPACE sp. z o.o. (PL) β€” auto-classified 2026-08-21
    42927     # S-NET Sp. z o.o. (PL) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # Lithuania
    # ---------------------------------------------------------------------------
    
    47583     # Hostinger International (LT)
    133944    # trafficforce UAB (LT) β€” ASN 2 of 2
    198651    # HOSTLINE, UAB (LT)
    201341    # trafficforce UAB (LT) β€” ASN 1 of 2
    202044    # Getechbrothers, MB (LT)
    203061    # UAB code200 (LT) β€” ASN 2 of 2
    203098    # trafficforce, UAB (LT) β€” ASN 3
    204770    # UAB Cherry Servers (LT) β€” ASN 1 of 2
    205964    # UAB code200 (LT) β€” ASN 3
    209605    # UAB Host Baltic (LT)
    209709    # UAB code200 (LT) β€” ASN 1 of 2
    210906    # UAB Bite Lietuva (LT)
    213896    # UAB Cherry Servers (LT) β€” ASN 2 of 2
    214159    # UAB Cherry Servers (LT) β€” ASN 3
    59642     # UAB "Cherry Servers" (LT) β€” auto-classified 2026-08-21
    61272     # UAB Bacloud (LT) β€” auto-classified 2026-08-21
    16125     # UAB "Cherry Servers" (LT) β€” auto-classified 2026-08-21
    212531    # UAB "Interneto vizija" (LT) β€” auto-classified 2026-08-21
    211373    # Simoresta UAB (LT) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Estonia
    # ---------------------------------------------------------------------------
    
    3920      # PUSHPKT OU (EE)
    61189     # Elkdata OU (EE)
    203273    # NetCrafters OU (EE) β€” auto-classified 2026-08-21
    62005     # BlueVPS OU (EE) β€” auto-classified 2026-08-21
    61254     # ESTOXY OU (EE) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # Czech Republic
    # ---------------------------------------------------------------------------
    
    15685     # CASABLANCA INT a.s. (CZ)
    24641     # FASTER CZ spol. s r.o. (CZ)
    29278     # Rackhost Zrt. (CZ/HU)
    39392     # SH.cz s.r.o. / SuperNetwork (CZ)
    43037     # Seznam.cz a.s. (CZ) β€” search engine / scanner
    61424     # eServer s.r.o. (SK/CZ)
    197806    # Andrei Rys (CZ) β€” auto-classified 2026-08-21
    204150    # David Zakoucky (CZ) β€” auto-classified 2026-08-21
    25234     # ACTIVE 24, s.r.o. (CZ) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Hungary
    # ---------------------------------------------------------------------------
    
    56322     # ServerAstra Kft. (HU)
    206892    # Rendszerinformatika Zrt. (HU)
    62214     # Rackforest Zrt. (HU) β€” auto-classified 2026-08-21
    47381     # Servergarden Kft. (HU) β€” auto-classified 2026-08-22
    
    # ---------------------------------------------------------------------------
    # Italy
    # ---------------------------------------------------------------------------
    
    31034     # Aruba S.p.A. (IT)
    60798     # Servereasy Srl (IT)
    212271    # Cinzia Tocci trading as Lumanex Srl (IT) β€” auto-classified 2026-08-21
    20836     # CDLAN SpA (IT) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Spain
    # ---------------------------------------------------------------------------
    
    16371     # acens AS (ES)
    41608     # NextGenWebs S.L. (ES)
    42220     # TREVENQUE SISTEMAS DE INFORMACION S.L. (ES)
    43578     # bitNAP (ES)
    49635     # Cloudi Nextgen SL (ES)
    50926     # AXARNET Comunicaciones S.L. (ES)
    
    # ---------------------------------------------------------------------------
    # Portugal
    # ---------------------------------------------------------------------------
    
    24768     # ALMOUROLTEC Servicos de Informatica e Internet Lda (PT)
    
    # ---------------------------------------------------------------------------
    # Denmark
    # ---------------------------------------------------------------------------
    
    44803     # Webdock.io ApS (DK)
    48854     # team.blue Denmark A/S (DK)
    57860     # Zencurity ApS (DK) β€” security research / scanning
    214902    # Philip Fjaera trading as PFWeb Solutions (DK)
    
    # ---------------------------------------------------------------------------
    # Romania
    # ---------------------------------------------------------------------------
    
    #206305    # SC ITNS.NET SRL (RO)
    208137    # Feo Prest SRL (RO)
    212810    # GODLIKE DIGITAL SOLUTIONS S.R.L. (RO)
    205941    # Lungu Stefan Gabriel (RO) β€” auto-classified 2026-08-21
    210622    # Kicked SRL (RO) β€” auto-classified 2026-08-21
    213590    # DIGITALRUS SRL (RO) β€” auto-classified 2026-08-21
    49468     # MAGIT'ST SRL (RO) β€” auto-classified 2026-08-21
    39287     # Materialism s.r.l. (RO) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Moldova
    # ---------------------------------------------------------------------------
    
    43289     # Trabia SRL (MD)
    #44477     # PQ Hosting Plus S.R.L. (MD) β€” Stark Industries affiliate
    200019    # ALEXHOST SRL (MD)
    
    # ---------------------------------------------------------------------------
    # Cyprus
    # ---------------------------------------------------------------------------
    
    202448    # MVPS LTD (CY)
    214504    # Hostman LTD (CY) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Belgium
    # ---------------------------------------------------------------------------
    
    59943     # Level 27 BVBA (BE)
    
    # ---------------------------------------------------------------------------
    # Luxembourg
    # ---------------------------------------------------------------------------
    
    199524    # G-Core Labs S.A. (LU)
    202422    # G-Core Labs S.A. (LU) β€” ASN 2
    
    # ---------------------------------------------------------------------------
    # North Macedonia
    # ---------------------------------------------------------------------------
    
    48057     # ITV DOOEL Skopje (MK)
    
    # ---------------------------------------------------------------------------
    # Serbia
    # ---------------------------------------------------------------------------
    
    35779     # mCloud doo (RS)
    51859     # Mainstream doo Beograd (RS)
    
    # ---------------------------------------------------------------------------
    # Multi-region / unspecified EU
    # ---------------------------------------------------------------------------
    
    14576     # Hosting Solution Ltd.
    26141     # CubePath
    #48024     # NEROCLOUD LTD
    48090     # TECHOFF SRV LIMITED β€” Team Cymru C2 confirmed
    51247     # Serverio technologijos MB (LT/NL)
    59651     # AS QualityNetwork (Global)
    60068     # CDN77 / Datacamp Limited
    64160     # NimblyNet Limited (BZ/Global)
    204240    # REXE
    206238    # Unknown β€” review recommended
    206264    # Amarutu Technology Ltd
    202412    # Omegatech LTD
    203003    # Magna Capax Finland Oy (FI/EU)
    207567    # Intezio Worldwide Limited
    210457    # Kyonix Networks Limited
    212238    # Datacamp Limited (multi-region)
    213535    # YottaSrc
    213755    # LUNORY CLOUD SOLUTIONS LTD
    213790    # Limited Network LTD
    214639    # TakeHost.Biz (EU)
    215439    # PLAY2GO INTERNATIONAL LIMITED
    215730    # H2NEXUS LTD
    216071    # SERVERS TECH FZCO (UAE/NL)
    
    50091     # Negenet shpk (AL) β€” auto-classified 2026-08-21
    209378    # Inios Oy (FI) β€” auto-classified 2026-08-21
    44901     # Belcloud LTD (BG) β€” auto-classified 2026-08-21
    59711     # HZ Hosting Ltd (BG) β€” auto-classified 2026-08-21
    203380    # DA International Group Ltd. (BG) β€” auto-classified 2026-08-21
    210250    # K Media Tech Ltd. (BG) β€” auto-classified 2026-08-21
    29210     # Internews 98 OOD (BG) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # LEASEWEB GROUP
    # Consolidated here β€” operates across multiple countries / ASNs.
    # ===========================================================================
    
    7203      # Leaseweb USA Inc. (US) β€” ASN 4 of 7
    19148     # Leaseweb USA Inc. (US) β€” ASN 5 of 7
    27411     # Leaseweb USA Inc. (US) β€” ASN 6 of 7
    30633     # Leaseweb USA (US) β€” ASN 1 of 7
    32613     # Leaseweb Canada Inc. (CA)
    393886    # Leaseweb USA Inc. (US) β€” ASN 7 of 7
    394380    # Leaseweb USA Inc. (US) β€” ASN 3 of 7
    395954    # Leaseweb USA (US) β€” ASN 2 of 7
    396190    # Leaseweb USA Inc. (US) β€” ASN 8 of 7
    396362    # Leaseweb USA (US) β€” ASN 3 of 3
    
    
    # ===========================================================================
    # GMO INTERNET GROUP / SAKURA (JAPAN)
    # ===========================================================================
    
    7506      # INTERQ β€” GMO Internet Group Inc. (JP)
    7684      # SAKURA Internet Inc. (JP) β€” ASN 2 of 2
    9370      # SAKURA Internet Inc. (JP) β€” ASN 1 of 2
    58791     # GMO Internet Group Inc. (JP) β€” ASN 2
    131921    # GMO GlobalSign Holdings K.K. (JP)
    131965    # Xserver Inc. (JP)
    
    3258      # xTom Japan Corporation (JP) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # US & NORTH AMERICAN HOSTING / VPS PROVIDERS
    # ===========================================================================
    
    7393      # CYBERCON INC. (US)
    7489      # HostUS (US)
    9115      # Internet Names for Business Inc. (CA) β€” ASN 1 of 2
    10439     # CariNet Inc. (US)
    10557     # Connect Northwest Internet Services LLC (US)
    11320     # LightEdge Solutions (US)
    11706     # TelefΓ΄nica Brasil S.A (US-registered)
    11798     # Ace Data Centers Inc. (US)
    11878     # tzulo inc. (US)
    13332     # Hype Enterprises (US)
    13627     # Ambyre LLC (US)
    13768     # Aptum Technologies (CA)
    14061     # DigitalOcean LLC (US)
    14131     # DataYard (US)
    14555     # LiquidNet US LLC (US)
    14956     # RouterHosting LLC (US)
    15003     # Nobis Technology Group (US)
    15817     # Robert Meyer trading as Mittwald CM Service GmbH & Co. KG (US/DE)
    16628     # DedFiberCo (US)
    18450     # WebNX Inc. (US)
    18501     # CyberCloud Professionals LLC (US)
    19084     # ColoUp (US)
    19318     # Interserver Inc. (US)
    20278     # Nexeon Technologies Inc. (US)
    20454     # SECURED SERVERS LLC (US)
    20473     # Vultr / AS-CHOOPA (US)
    21769     # Colocation America Corporation (US)
    21859     # Zenlayer Inc. (US) β€” ASN 1 of 2 β€” see also AS4229
    22295     # Advin Services LLC (US)
    22439     # Perfect International Inc. (US)
    22611     # InMotion Hosting Inc. (US) β€” ASN 1 of 2
    22612     # Namecheap Inc. (US)
    22363     # Powerhouse Management Inc. (US)
    23033     # Wowrack.com (US)
    23352     # DEFT.COM / ServerCentral (US)
    23470     # ReliableSite.Net LLC (US)
    25820     # IT7 Networks Inc. (CA)
    26347     # DreamHost (US)
    26464     # Joyent Inc. (US)
    26496     # GoDaddy.com LLC (US)
    26548     # PureVoltage Hosting Inc. (US)
    26658     # HENGTONG-IDC-LLC (US)
    27257     # Webair Internet Development Company Inc. (US)
    27589     # MOJOHOST (US)
    29802     # HIVELOCITY Inc. (US) β€” ASN 1 of 2
    29873     # Newfold Digital Inc. (US)
    30058     # FDCservers.net (US)
    30447     # Internet Names For Business Inc. (CA) β€” ASN 2 of 2
    32097     # WholeSale Internet Inc. (US)
    32244     # Liquid Web LLC (US)
    32489     # Amanah Tech Inc. (CA)
    33182     # HostDime.com Inc. (US)
    35916     # Multacom Corporation (US)
    36007     # Kamatera Inc. (US)
    36352     # ColoCrossing (US)
    36444     # Liquid Web / Nexcess-Net LLC (US)
    36530     # IDC Cube (US)
    36680     # Netiface LLC (US) β€” ASN 1 of 3
    40021     # Contabo Inc. (US)
    40065     # CNSERVERS LLC (US)
    40300     # DR Fortress LLC (US)
    40676     # Psychz Networks (US)
    46261     # QuickPacket LLC (US)
    46475     # Limestone Networks Inc. (US)
    46562     # Performive LLC (US)
    46606     # UNITAS Global (US)
    46844     # Sharktech (US)
    46873     # Host Color (US)
    46918     # GlobalHostingSolutions Inc. (US)
    46995     # Jump Wireless LLC (US)
    50053     # VPS Dedicated LLC (US)
    50219     # Valence Technology Co. (US)
    50245     # Serverel Inc. (US)
    53514     # UHQ Services LLC (US)
    53667     # FranTech Solutions / BuyVM (US)
    53755     # Input Output Flood LLC (US)
    54600     # PEG TECH INC (US)
    54641     # InMotion Hosting Inc. (US) β€” ASN 2 of 2
    55286     # B2 Net Solutions / ServerCheap (US)
    61317     # Hivelocity LLC (US) β€” ASN 2 of 2
    62468     # VpsQuan L.L.C. (US)
    62610     # Zenlayer Inc. (US) β€” ASN 2 of 2
    62633     # HostRush / ServerCheap (US)
    62874     # Web2Objects LLC (US)
    62904     # Eonix Corporation (US)
    63023     # GTHost (US)
    63150     # BAGE CLOUD LLC (US)
    63410     # PrivateSystems Networks (US)
    #63949     # Linode / Akamai (US) β€” managed via hyperscalers.conf
    64200     # VIVID-HOSTING LLC (US)
    64249     # Charles River Operation (US)
    64267     # Sprious LLC (US) β€” proxy / hosting
    64286     # LogicWeb Inc. (US)
    146943    # Tier 4 Cloud Services (US)
    149042    # Silicon Cloud Global (US)
    150303    # SoloRDP (IN Company β€” US Registered)
    197769    # VPS Dedicated LLC (US)
    202015    # HZ Hosting Ltd (US)
    202425    # IP Volume Inc. (US)
    205775    # NEON CORE NETWORK LLC (US)
    205759    # Ghosty Networks LLC (US)
    206715    # UXHOST LTD (US)
    209372    # WS Telecom Inc (US)
    209641    # IHOR HOSTING LTD (US)
    213954    # Global Transit Systems LLC (US)
    214036    # Ultahost Inc. (US)
    214481    # Wojciech Czapkowicz (US/PL)
    215161    # Michael Vassileiou trading as DATAHOST (US)
    215402    # Asadov Ruslan Rafaelevich (US)
    393577    # Tritan Development (US)
    394474    # WhiteLabelColo (US)
    395092    # Shock Hosting LLC (US)
    396073    # Majestic Hosting Solutions LLC (US)
    396319    # Oxylabs (LT) β€” proxy / scanner network
    396356    # Latitude.sh (US)
    396998    # Path Network Inc. (US) β€” DDoS mitigation
    397032    # SPARKED HOST LLC (US)
    397423    # Tier.Net Technologies LLC (US)
    398019    # Dynu Systems Incorporated (US)
    398256    # Ultahost Inc. (US) β€” ASN 2
    398781    # Oculus Networks Inc. (US)
    399073    # BUNNY TECHNOLOGY LLC (US) β€” CDN
    399244    # AME Hosting LLC (US)
    399275    # Solid Systems LLC (US)
    399629    # BL Networks (US)
    399804    # Hostodo (US)
    400072    # THUNDERBOX INC (US)
    400529    # Infraly LLC (US)
    400587    # Ryamer LLC (US)
    400810    # BreezeHost (US)
    400940    # Railway (US) β€” cloud PaaS
    401152    # Ace Data Centers II LLC (US)
    401243    # Komi LLC (US)
    401322    # NetO Corp (US)
    401626    # Netiface America Inc. (US) β€” ASN 3 of 3
    401696    # cognetcloud INC (US)
    402226    # OnlyScans LLC (US)
    402253    # SKN Subnet & Telecom Ltd (KN)
    394814    # ISP4Life INC (US)
    46516     # HostRoyale LLC (US) β€” auto-classified 2026-08-21
    1004      # Ambyre LLC (US) β€” auto-classified 2026-08-21
    401896    # MISIU LLC (US) β€” auto-classified 2026-08-21
    29889     # Fast Serv Networks, LLC (US) β€” auto-classified 2026-08-21
    63018     # Dedicated.com (US) β€” auto-classified 2026-08-21
    23532     # IOVZ NETWORKS INC (US) β€” auto-classified 2026-08-21
    397373    # H4Y Technologies LLC (US) β€” auto-classified 2026-08-21
    200598    # Lunarnaut, LLC (US) β€” auto-classified 2026-08-21
    36137     # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398823    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398478    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    398993    # PEG TECH INC (US) β€” auto-classified 2026-08-21
    62744     # Quintex Alliance Consulting (US) β€” auto-classified 2026-08-21
    54548     # IONOS Cloud Inc. (US) β€” auto-classified 2026-08-21
    47007     # Colocation America Corporation (US) β€” auto-classified 2026-08-21
    26383     # Baxet Group Inc. (US) β€” auto-classified 2026-08-21
    27176     # DataWagon LLC (US) β€” auto-classified 2026-08-21
    46635     # AviationAI (US) β€” auto-classified 2026-08-21
    39618     # HostCram LLC (US) β€” auto-classified 2026-08-21
    61228     # BGP NETWORKS LLC (US) β€” auto-classified 2026-08-21
    203607    # 1000119767 ONTARIO INC. (CA) β€” auto-classified 2026-08-21
    203975    # Zorn Technologies LLC (US) β€” auto-classified 2026-08-21
    204874    # SaaStack LLC (US) β€” auto-classified 2026-08-21
    211673    # Mynymbox Hosting LLC (KN) β€” auto-classified 2026-08-21
    214300    # Layer 4 Group LLC (US) β€” auto-classified 2026-08-21
    214456    # ServerSP LLC (US) β€” auto-classified 2026-08-21
    215731    # Novus Labs Limited (US) β€” auto-classified 2026-08-21
    216044    # Terranode LLC (US) β€” auto-classified 2026-08-21
    152918    # Liberally Network LLC (US) β€” auto-classified 2026-08-21
    14315     # 1GSERVERS, LLC (US) β€” auto-classified 2026-08-21
    49791     # Newserverlife LLC (US) β€” auto-classified 2026-08-21
    40355     # Sundance International LLC (US) β€” auto-classified 2026-08-21
    32002     # RackGenius (US) β€” auto-classified 2026-08-21
    62164     # Heymman Servers Corporation (CA) β€” auto-classified 2026-08-21
    40861     # Paradise Networks LLC (US) β€” auto-classified 2026-08-21
    400463    # DynaNode LLC (US) β€” auto-classified 2026-08-21
    3842      # InMotion Hosting, Inc. (US) β€” auto-classified 2026-08-21
    61125     # SABOTAGE LLC (US) β€” auto-classified 2026-08-21
    207847    # CloudBlast LLC (US) β€” auto-classified 2026-08-21
    25653     # FortressITX (US) β€” auto-classified 2026-08-21
    208483    # WERIDATA LLC (US) β€” auto-classified 2026-08-21
    63473     # HostHatch, LLC (US) β€” auto-classified 2026-08-21
    13649     # Flexential Colorado Corp. (US) β€” auto-classified 2026-08-21
    19437     # SECURED SERVERS LLC (US) β€” auto-classified 2026-08-21
    402215    # Devology Tech LLC (US) β€” auto-classified 2026-08-21
    27640     # GIGAS HOSTING USA, LLC (US) β€” auto-classified 2026-08-22
    
    # ===========================================================================
    # LATIN AMERICAN CARRIERS & HOSTING
    # ---------------------------------------------------------------------------
    # Brazil
    # ---------------------------------------------------------------------------
    
    1916      # Rede Nacional de Ensino e Pesquisa (BR) β€” NOTE: academic/research network
    17222     # Mundivox do Brasil Ltda (BR)
    26599     # TelefΓ΄nica Brasil S.A. (BR)
    28573     # Claro NXT Telecomunicacoes Ltda (BR)
    52368     # ZAM LTDA. (BR)
    53107     # EVEO S.A. (BR)
    53158     # Net Turbo Telecom (BR)
    206971    # BedHosting BR β€” Datacenter No Brasil
    262688    # MHNET Telecom (BR)
    266572    # WORLDNET TelecomunicaΓ§Γ΅es (BR)
    268136    # P J A Telecomunicacoes Ltda (BR)
    268372    # WISESITE Comunicacao e Tecnologia (BR)
    270716    # GOVISTA Telecomunicao Importacao Ltda (BR)
    262287    # Unknown (BR) β€” auto-classified 2026-08-22
    
    # ---------------------------------------------------------------------------
    # Mexico
    # ---------------------------------------------------------------------------
    
    8151      # UNINET S.A. de C.V. (MX)
    17072     # Total Play Telecomunicaciones S.A.P.I. de C.V. (MX)
    
    # ---------------------------------------------------------------------------
    # Caribbean
    # ---------------------------------------------------------------------------
    
    23520     # Columbus Networks USA Inc. β€” Caribbean operations (consistent abuse)
    30689     # FLOW (JM)
    197528    # Suibian Network LLC (VC) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Central America / Panama
    # ---------------------------------------------------------------------------
    
    18809     # Cable Onda (PA)
    27947     # Telconet S.A. (EC)
    48721     # Flyservers S.A. (PA β€” EU Hosted)
    52449     # My Tech BZ (BZ)
    52485     # networksdelmanana.com (HN)
    141039    # PacketHub S.A. (PA) β€” ASN 2 of 2 (APAC-registered)
    207137    # PacketHub S.A. (PA) β€” ASN 1 of 2
    209854    # Cyberzone S.A. (PA)
    263792    # IN.PLANET S.A. (EC)
    263744    # Udasha S.A. (HN)
    264750    # TELEOPERADORA DEL NORDESTE S.R.L. (DO)
    264850    # TODAS LAS REDES SA (HN)
    266827    # BOHO BEACH CLUB S.A. (HN/Global)
    271935    # AIRTIME TECHNOLOGY SRL (DO)
    263179    # Unknown (HN) β€” auto-classified 2026-08-21
    136787    # PacketHub S.A. (PA) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # South America
    # ---------------------------------------------------------------------------
    
    3132      # Red Cientifica Peruana (PE) β€” NOTE: academic/research network
    21826     # CorporaciΓ³n Telemic C.A. (VE)
    44382     # Fiba Cloud Operation Company LLC
    52393     # Corporacion Dana S.A. (PA)
    263735    # SOCIEDAD BUENA HOSTING, S.A. (LACNIC region)
    263740    # Corporacion Laceibanetsociety (LACNIC region)
    263753    # SERVICIOS DE DATACENTER DATANETWORKS LIMITADA (CL)
    263821    # Soluciones Favorables (LACNIC region)
    
    
    # ===========================================================================
    # AFRICA
    # ===========================================================================
    
    37153     # xneelo (Pty) Ltd (ZA)
    37611     # Afrihost SP (Pty) Ltd (ZA)
    43444     # Fast Servers (Pty) Ltd (ZA/Global)
    204300    # D2CLOUD NETWORK SERVICES (PTY) LTD (ZA)
    204209    # Internet Magnate (Pty) Ltd (ZA)
    329184    # Host Africa (Pty) Ltd (ZA)
    
    36943     # 1 GRID (PTY) LTD (ZA) β€” auto-classified 2026-08-21
    
    # ===========================================================================
    # ASIA-PACIFIC HOSTING & TELECOM
    # ---------------------------------------------------------------------------
    # Japan β€” (GMO/SAKURA group consolidated above)
    # ---------------------------------------------------------------------------
    # Hong Kong
    # ---------------------------------------------------------------------------
    
    4760      # HKT Limited (HK)
    9269      # Hong Kong Broadband Network Ltd. (HK)
    38136     # Akari Networks (HK)
    45753     # Netsec Limited (HK)
    55933     # Cloudie Limited (HK)
    132056    # SCICUBE (HK)
    133380    # Layerstack Limited (HK)
    135357    # Hong Kong Kowloon Telecommunications Co., Limited (HK)
    135377    # UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
    152194    # CTG Server Limited (HK)
    153656    # OWGELS INTERNATIONAL CO., LIMITED (HK)
    153671    # Liasail Global Hongkong Limited (HK)
    212512    # Detai Prosperous Technologies Limited (HK)
    213802    # Tianfeng (Hong Kong) Communications Limited (HK)
    215929    # Data Campus Limited (HK)
    
    # ---------------------------------------------------------------------------
    # Singapore
    # ---------------------------------------------------------------------------
    
    9465      # AGOTOZ PTE. LTD. (SG)
    135354    # NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD. (SG)
    139341    # ACEVILLE PTE.LTD. (SG) β€” auto-classified 2026-08-21
    142036    # Hosteons Pte. Ltd. (SG) β€” auto-classified 2026-08-21
    59253     # LEASEWEB SINGAPORE PTE. LTD. (SG) β€” auto-classified 2026-08-21
    154373    # Singapore Data Cloud Pte Ltd (SG) β€” auto-classified 2026-08-21
    142002    # Scloud Pte Ltd (SG) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # South Korea
    # ---------------------------------------------------------------------------
    
    5065      # Bunny Communications (KR)
    45370     # BROADBANDIDC (KR)
    212388    # Auraz Corporation Co.,Ltd. (KR) β€” auto-classified 2026-08-21
    38661     # abcle (KR) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Malaysia
    # ---------------------------------------------------------------------------
    
    149440    # Evoxt Sdn. Bhd. (MY)
    45839     # Shinjiru Technology Sdn Bhd (MY) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Vietnam
    # ---------------------------------------------------------------------------
    
    45899     # VNPT Corp (VN)
    135951    # Webico Company Limited (VN)
    
    # ---------------------------------------------------------------------------
    # Indonesia
    # ---------------------------------------------------------------------------
    
    7713      # Telekomunikasi Indonesia PT (ID)
    17451     # Biznet Networks (ID)
    58487     # Rumahweb (ID)
    141968    # PT Industri Kreatif Digital (ID)
    150493    # PT Gunung Sedayu Sentosa (ID)
    219215    # M. RIMBA ADHITYA A. (ID) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Bangladesh
    # ---------------------------------------------------------------------------
    
    23688     # Link3 Technologies Limited (BD)
    38203     # ADN Telecom Ltd. (BD)
    132817    # DZCRD Networks Ltd (BD)
    139921    # JASHORE COLO (BD)
    147053    # Bhaluka Broadband Internet Service (BD)
    153038    # Business Zone Limited (BD)
    #153168    # BengalCloud (BD)
    153568    # NEW DHAKA HARDWARE (BD)
    
    # ---------------------------------------------------------------------------
    # Nepal
    # ---------------------------------------------------------------------------
    
    142065    # Wifi Nepal Private Limited (NP)
    
    # ---------------------------------------------------------------------------
    # Sri Lanka
    # ---------------------------------------------------------------------------
    
    9329      # Sri Lanka Telecom Internet (LK)
    
    # ---------------------------------------------------------------------------
    # Cambodia
    # ---------------------------------------------------------------------------
    
    38623     # Viettel Cambodia (KH)
    
    # ---------------------------------------------------------------------------
    # Taiwan
    # ---------------------------------------------------------------------------
    
    3462      # HiNet / Data Communication Business Group (TW)
    
    # ---------------------------------------------------------------------------
    # Thailand
    # ---------------------------------------------------------------------------
    
    56309     # Siamdata Communication Co. Ltd (TH)
    134240    # Super Broadband Network Company Limited (TH)
    
    # ---------------------------------------------------------------------------
    # Mongolia
    # ---------------------------------------------------------------------------
    
    45237     # Magicnet LLC (MN)
    
    # ---------------------------------------------------------------------------
    # Georgia
    # ---------------------------------------------------------------------------
    
    16010     # Magticom Ltd. (GE)
    47810     # Proservice LLC (GE)
    
    # ---------------------------------------------------------------------------
    # New Zealand
    # ---------------------------------------------------------------------------
    
    56030     # Voyager Internet Ltd. (NZ)
    
    # ---------------------------------------------------------------------------
    # Seychelles
    # ---------------------------------------------------------------------------
    
    213438    # ColocaTel Inc. (SC)
    197170    # TechTies Inc. (SC) β€” auto-classified 2026-08-21
    202959    # Lushu Limited (SC) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # India
    # ---------------------------------------------------------------------------
    
    24560     # Bharti Airtel Ltd. Telemedia Services (IN)
    133499    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 1 of 5
    134180    # Md. Shariful Islam T/A BRISK SYSTEMS (IN)
    134291    # TECHNO FAQ DIGITAL MEDIA (IN)
    134450    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 2 of 5
    140947    # SnTHostings (IN)
    142430    # DIGI VPS (IN)
    #143586    # AYSTOR / Yanoor Islam Khan (IN)
    203020    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 3 of 5
    #203999    # Geekyworks IT Solutions Pvt Ltd (IN/US)
    204287    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 4 of 5
    207990    # HostRoyale Technologies Pvt Ltd (IN) β€” ASN 5 of 5
    39486     # HostRoyale Technologies Pvt Ltd (IN) β€” auto-classified 2026-08-21
    200169    # Manish Pant (IN) β€” auto-classified 2026-08-21
    
    # ---------------------------------------------------------------------------
    # Pakistan
    # ---------------------------------------------------------------------------
    
    9541      # Cyber Internet Services (Pvt) Ltd. (PK)
    
    # ---------------------------------------------------------------------------
    # Australia / APAC multi-region
    # ---------------------------------------------------------------------------
    
    45187     # Rackspace IT Hosting (AU/APAC)
    55803     # Hostopia Australia Web Pty Ltd (AU)
    56038     # RackCorp (AU/Global)
    133159    # Mammoth Media Pty Ltd (AU)
    134562    # Discovery Internet (AU)
    136557    # Host Universal Pty Ltd (AU)
    137409    # GSL Networks Pty LTD (AU/Global)
    133153    # Unknown (AU) β€” auto-classified 2026-08-21
    151592    # Indonesia Network Information Center (AU) β€” auto-classified 2026-08-21
    64080     # Unknown (AU) β€” auto-classified 2026-08-21
    133643    # EWEBGURU (AU) β€” auto-classified 2026-08-21
    135175    # Facts Online Pvt Ltd (AU) β€” auto-classified 2026-08-21
    58477     # Argon Data Communication (AU) β€” auto-classified 2026-08-21
    149948    # Indonesia Network Information Center (AU) β€” auto-classified 2026-08-25
    
    # ---------------------------------------------------------------------------
    # Multi-region APAC
    # ---------------------------------------------------------------------------
    
    9597      # KDDI Web Communications Inc. (JP/APAC)
    21100     # GREEN FLOID LLC (APAC)
    45090     # Shenzhen Tencent Computer Systems Company Limited (CN/APAC)
    56971     # CGI GLOBAL LIMITED (APAC)
    64445     # NetJoin srl (IT/APAC)
    133453    # Mogul Service LLC (APAC)
    150436    # Byteplus Pte. Ltd. (SG/APAC)
    201200    # SuperHosting.BG Ltd. (BG/APAC)
    205402    # Asadov Ruslan (APAC)
    
    
    # ===========================================================================
    # SECURITY SCANNERS, RESEARCH NETWORKS & PRIVACY INFRASTRUCTURE
    # ===========================================================================
    
    16417     # Cisco Systems IronPort Division β€” email security scanner
    42969     # Alpha Strike Labs GmbH (DE) β€” active security scanner
    60729     # TORSERVERS-NET / Stiftung Erneuerbare Freiheit β€” Tor exit nodes
    200107    # Kaspersky Lab Switzerland GmbH β€” security scanner
    209366    # SEMrush CY Ltd β€” SEO crawler / scanner
    211680    # NSEC Sistemas Informaticos S.A. (PT) β€” BitSight security scanner
    
  • Enterprise Shield: Automated Penalty Box

    The Enterprise Shield firewall system that I have implemented on my home server has a Penalty Box feature that allows me to add priority blocking rules to the system for IPs or CIDRs that manage to evade the other rulesets or are particularly annoying (I’m looking at you,Cloudflare WARP).

    However, this required me to watch the logs of my web server for these abusive systems and add them, as I noted, manually. With the number of attacks or floods that even a home server like mine gets, this can become a full-time analysis job.

    I had been considering fail2ban for a while, and finally implemented it with a number of jails designed to detect WordPress and general web attacks. The positives are really easy to document.

    • Automatic Blocking of 403 Floods: I have a number of rules in my web server config that redirect unwanted traffic directly to a 403 page. Things such as old browsers, blank UA strings, undesired bots, and attempts to access pages that should not be accessed immediately redirect a visitor to the 403 page. After five (5) 403 responses in a minute or less, immediate 24-hour ban. There is a separate low-and-slow 403 jail that looks at the same IP and if it generates a number of 403s over a 1-hour period, it also gets the 24-hour ban.
    • General WordPress Attack Patterns: Thes patterns are well-documented, and have their own jail. These are even less permissive — one strike and your out for 24 hours.
    • General Web Attack Patterns: A one stike rule also applies to visits that try general web attack patterns, credential-sniffing, or environment file requests. Again, immediate 24 hour ban

    The setup is obviously more complex than this under the hood, but it removed the need for me to add Penalty Box rules except in very specific cases.

    Silently alongside this I implemented a special ruleset for Cloudflare IPs. As these have been particularly egregious in sending attack traffic my way, I have created a special bucket using Cloudflare’s published CIDR blocks that begins to block traffic if large volumes of traffic begin to originate in total from these ranges. THis alone removed the need to have a very large number of Penalty Box rules specific to dealing with this group of “visitors”.

    On the whole, the new automated Penalty Box maintains a constant 25-50 rules that automatically cycle in an out after 24 hours. This prevents me from:

    • Adding unecessary rules for one-time attacks/floods from IPs or CIDRs that will never visit again
    • Blocking traffic for “real” bot traffic that may inherit an IP or CIDR I have blocked due to a previous attack/flood
    • Constamtly monitor web log files for potential new attacks and ranges that could cause load or security issues on the server.

    For those that chose to build their own security system for Home Servers rather than relying on paid services or CDNs, I definitely recommend integrating fail2ban into the automation path.

  • Enterprise Shield – Top Offenders – 2026-07-22

    Ah, Cloudflare. You claim to be security focused and help customers block threats to their sites, including unwanted bots. So, when are you going to clean your own house?

    This week, like last week, the single largest source of traffic captured by my firewall was, again, AS13335 – Cloudflare WARP. The firewall blocked nearly 4x the amount of hits when compared to the next closest ASN; and that was from just one of their ASNs.

    When the data is sorted by the number of unique IPs hitting the server, Cloudflare comes first and second, with AS14789 contributing a smaller number of hits.

    Top ASNs – By Hits – Last 7 Days
    Top ASNs – By Unique IPs – Last 7 Days

    You can see the scope of the unwanted traffic from Cloudflare WARP even more clearly when it is charted.

    Top ASNs – By Hits – Last 7 Days

    Since the last update, I have had to add a large number of Cloudflare CIDR blocks to my penalty_box list that is before the shield_hyperscaler rules in my firewall rules. The Penalty Box is a complete drop rule, with a time limit. Unfortunately, pretty much all the CIDR blocks in the penalty_box qualify for permanent blocks, and I will likely move them their in the near future.

    You can see when I migrated the Cloudflare CIDR Blocks to the penalty_box ruleset in these time charts — the red items are shield_hyperscaler while the purple is penalty_box (I apologize to my brethren who have red/green color blindness).

    Hits by Ruleset – Last 7 Days
    Unique IPs by Ruleset – Last 7 Days

    I will continue to watch this over the next few weeks; if Cloudflare WARP continues to be this aggressive, they will end up in the permanent block ruleset.

  • Enterprise Shield – Top Offenders – 2026-07-13

    In this week’s edition of the Top Offenders list, there is a new leader in the abuse list: AS13335 – Cloudflare WARP. They have been hitting the site in large bursts for a couple of weeks now, using the anonymity afforded by hiding behind the open VPN Cloudflare provides.

    Top ASNs – 7 Days

    All of the largest surges seen over the last 7 days originate from this single ASN.

    Firewall Hits by Hour – Last 7 Days
    Distinct IPs by Hour – Last 7 Days

    Clouflare is in the shield_hyperscaler ruleset that was discussed in the previous Top Offenders post. This traffic is forced into a rate-limiting situation where a flood of traffic automatically triggers a DROP once a set volume is reached. However, even this is challenging as the Cloudflare surges have the largest amount of IP diversity of all those tracked at the firewall.

    In order to be more flexible, the shield_hyperscaler ruleset is applied on a /24 network basis. So even if the attacker tries to hide behind a set of IPs, if they come from a small number of /24 networks, they will end up in the DROP bucket.

  • Enterprise Shield – Top Offenders – 2026-06-19

    Here is your weekly list of top offenders for your own security reading pleasure.

    Big change this week with Google EU West taking the top spot and Techoff SRV Limited, everyone’s favority Andorra-based Bulletproof Hosting Provider (despite company registration listing it as being from the UK and/or the Netherlands depending on how it is examined) taking the number 2 spot. Techoff is also the source of a number of the largest surges against the firewall this week.

    Top ASNs – 7 Days

    Cloudflare Warp is still a major source of attacks, providing the single source of attackers hiding behind the VPN/Proxy services in this ASN.

    This week was much quieter for Surge events, with most surge events originating from ASNs and CIDR blocks that already exist in the Hyperscaler or Block ASN/CIDR rule lists. Multi-IP surges completely originated from the Hyperscalers while the Block ASN/CIDR surges coming from only a small number of IPs.

    Hour by Hits – 7 Days
    Hours by IPs – 7 Days

    A note on the difference between the firewall rulesets. The Block ASN/CIDR rulesets do exactly as advertised — completely block the traffic that reaches them. The Hyperscaler ruleset is rate-limiting and only starts to DROP traffic if the number of connections or number of requests becomes aggressive.

    There is also a separate set of ratelimiting for Azure, as Microsoft doesn’t seem to have as much control on bad actors as the other Hyperscalers do.

    The current rulesets are:

    shield_allow       β†’ ACCEPT
    shield_abuseipdb β†’ DROP
    shield_penalty β†’ DROP
    shield_azure β†’ AZURE-RATELIMIT (3/min per IP)
    shield_hyperscaler β†’ CLOUD-RATELIMIT (10/min per /24)
    shield_block β†’ DROP

    As with everything, the ordering is important. For example, if there is a really aggressive AS8075 (Microsoft) IP that has been flagged by AbuseIPDB to the extent that it appears in the top 10K list that they provide, it gets immediately blocked. If I have found an aggressive IP that appears in none of the lists, I can add it (or the approporate CIDR block) to the Penalty Box ruleset for a set period of time to discourage that traffic.

    Another week of interesting learning around what is and isn’t traffic worth completely blocking. Learning that not all traffic can be blocked is one of the the twelve steps of learning to exist within the modern internet.

    As a final note, the Spamhaus list of offensive IPV4 addresses (available here) was added as yet another data source that is automatically added into the firewall rules on a daily basis. I will try and provide a sense of how effective this ruleset is next week.

  • Enterprise Shield – Top Offenders – 2026-06-12

    With the visualization system built to capture the data from the Enterprise Shield firewall system, I get to see exactly who the top Offenders are. This is the start of a series that allows me to share with the larger community who exactly has been trying to bring my tiny home web server to its knees.

    Top ASNs – 7 Days

    Using the Campaign naming schema, you can see many of the same providers showing up and being classified based on timing and attack pattern.

    Top Capmpaigns – 7 Days

    This has been a busy 7 days for surges in traffic.

    Hour by Hits – 7 Days
    Hours by Unique IPs – 7 Days

    The various surges are made up traffic from small numbers of IPs (SoloRDP – AS150303 with 2 IPs for 11,517 firewall hits) to large distributed attacks with huge blocks of IPs (Cloudflare WARP – AS13335 & AS14789; 3xK Tech GmbH – AS200373; etc.).

    Overall, it’s been a good learning experience to be able to see a full 7 days of traffic that was previously invisible to me.

  • Enterprise Shield – Surge Analysis

    When the Enterprise Shield firewall system was re-written, one of the things I worked on with Claude was the creation of an HTML dashboard that could share details on what and who was hitting the system.

    One of the items I iterated through on this was a Surge Analysis, a view into hours when traffic against the firewall was completely off the charts. Well that is starting to bear fruit.

    The system has been absolutely hammered today from a number of sources, but most notably slamming into the Hyperscaler ruleset which is more permissive than Azure (that’s a separate nightmare).

    These hours are completely out of spec for the system since the reporting system fired up. Taking only the most recent example, the system is designed to show when and where the attacks are coming from and how this traffic relates to traffic for +/- 3h on either side.

    But it is also critical to see who is slamming their head into the firewall. In this instance, the surge is completely driven by visitors hiding behind the Cloudflare Warp VPN service. Cloudflare is a part of the Hyperscaler ruleset that begins dropping traffic once a limit for connections per minute is reached.

    One thing that you will notice is that there is no single Cloudflare Warp IP in the top IP list; this attack is so distributed that it would fall below the detection of individual CIDR block level monitoring.

    Another surge shows a completely different source: The AbuseIPDB ruleset. This is based on the top 10K IPs available for adding to rulesets from the AbuseIPDB API.

    While smaller in volume, it is very interesting to see that the firewall is able to segment this. This example also shows a mega bot server that drove all of the traffic from a single IP.

    It should also be pointed out that this was caught by the AbuseIPDB rules, not the Hyperscaler rules. AbuseIPDB rules precede the Hyperscaler rules for this very purpose: Abusive IPs, regardless of the source, should be blocked.

    Overall, this is a very interesting dataset to watch, observing all the attempts to scan, exploit, or attack a single home-hosted web server without a CDN. At this scale for a single server, I appreciate the work that bot mitigation and protection services do for the customers I work with daily.

  • Enterprise Shield – The Evolution – Part 1: What & Why

    Over the years, I have tried to limit the amount of spurious or aggressive traffic against my small, yet mighty web server environment. It started with a list of UFW rules, but that became very unwieldy once the list hit over 25,000 unique CIDR blocks.

    A few months ago, working alongside some AI partners, I asked how this system could be made more efficient and manage even larger rulesets without making the server scream in pain every time a large burst of traffic hit it.

    That’s when the Enterprise Shield approach was born.

    What Is Enterprise Shield?

    Enterprise Shield is a custom Linux firewall management system protecting creaky2, a vintage 2008 MacBook Pro repurposed as a personal Ubuntu Server hosting performancezen.com. It is not a product β€” it is a purpose-built system, grown organically over years of dealing with real-world attacks against a small but publicly visible WordPress blog.

    At its core, Enterprise Shield does three things:

    1. Blocks hostile IP space β€” autonomous systems (ASNs), country CIDR ranges, and individually flagged IPs β€” before they ever reach the web server.
    2. Rate-limits legitimate but noisy infrastructure β€” Microsoft Azure, AWS, Google Cloud, Oracle Cloud, Cloudflare β€” so they can’t hammer the server but aren’t outright blocked.
    3. Logs, enriches, and reports on everything that hits the firewall so you can understand the threat landscape over time.

    The system wraps Linux’s ipset and iptables primitives with custom tooling to make them manageable: automating blocklist maintenance, surviving reboots, and providing a real-time terminal dashboard and HTML threat analysis reports.


    A Brief History: How We Got Here

    The Early Days: Hand-Crafted BASH (v11.x)

    Enterprise Shield started as a BASH script. Over time it grew significantly:

    • ASN blocking via RADB WHOIS lookups, parallelised across threads
    • Country blocking via the ipverse/country-ip-blocks
      GitHub feed (43 countries)
    • AbuseIPDB integration β€” a penalty box of individually-flagged malicious IPs, refreshed 5Γ— daily (constrained by the free API tier)
    • Azure and hyperscaler separation β€” Azure (AS8075) given its own rate-limit chain distinct from AWS/GCP/Oracle/Cloudflare
    • Atomic ipset swaps β€” the live blocklist is never empty during an update
    • Delta safety abort β€” if the new CIDR count drops >5% from the previous run, the script aborts rather than switching to a degraded ruleset
    • Systemd boot persistence β€” two services that restore ipsets and iptables chains after every reboot

    By version 11.25-MT, the script was around 500 lines, handled parallel WHOIS with a 4-thread batch model, and managed a blocklist of over 500,000 CIDR entries.

    It worked. But it had accumulated significant technical debt.


    Why We Rewrote It

    Problem 1: Every Run Was a Full Rebuild

    The BASH system had no memory between runs. Every night at 2AM:

    • All ASN WHOIS data was re-fetched β€” 447 ASNs Γ— a RADB query each, regardless of whether anything had changed
    • All 43 country CIDR files were re-downloaded from GitHub
    • All 500,000+ CIDR entries were re-inserted from scratch into a staging ipset

    This wasn’t just slow β€” it was wasteful. ASN CIDR allocations change rarely. The ipverse country files change weekly at most. But the system had no way to say “I already know what AS3209 owns β€” skip it.”

    BASH nightly run cost (approximate):
      447 ASN WHOIS lookups        ~35 minutes
      43 GitHub downloads          ~2 minutes
      ipset full rebuild            ~1 minute
      Total rebuild time:          ~38 minutes
      Total per week:              ~4.5 hours of server time

    Problem 2: State Was Scattered Across Flat Files

    Runtime state was stored in flat files:

    • /etc/ipset.conf β€” the full ipset dump (502,575 lines)
    • /etc/shield-iptables.rules β€” the iptables chain rules
    • /var/lib/shield/last_entry_count β€” just a number, for the delta check
    • /var/lib/shield/last_public_ip β€” the server’s external IP at last run

    There was no audit trail, no history, no way to answer “what changed between last Tuesday and today?” The last_entry_count file was a single integer β€” useful for
    the delta abort check, useless for anything else.

    Problem 3: No Hit Data

    The BASH system blocked things β€” but didn’t know what it blocked. There was no structured record of which IPs hit the firewall, when, or how many times. The iptables -L packet counters reset on every rebuild. A threat analysis report
    was impossible.

    Problem 4: AbuseIPDB Was Bolted On

    The AbuseIPDB penalty box was a separate script (abuseipdb_penaltybox.sh) that maintained its own ipset (SHIELD_PENALTY), with its own boot persistence service,
    its own log file, and completely separate state from the main system. It worked, but it was an island.

    Problem 5: Boot Persistence Was Fragile

    The two-service boot sequence (ipsets before UFW, chains after UFW) worked correctly but relied on /etc/ipset.conf β€” a 502,575-line flat file. If that file was corrupt or missing, the server came up with no firewall. There was no crash recovery, no verification that the restored state was sane.


    The Solution: Python + SQLite

    The rewrite was designed around a single guiding principle:

    The database is the system. Everything else derives from it.

    What Changed

    β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€-─────────┐
    β”‚                    BASH v11.25-MT β†’ Python v12                       β”‚
    β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€-───────────
    β”‚ State storage            β”‚ Flat files β†’ SQLite database              β”‚
    β”‚ Rebuild strategy         β”‚ Full re-fetch β†’ Delta (only changed data) β”‚
    β”‚ WHOIS cadence            β”‚ Every night for all ASNs β†’ Only stale     β”‚
    β”‚ Country blocks           β”‚ Re-download always β†’ ETag conditional GET β”‚
    β”‚ AbuseIPDB                β”‚ Separate script/ipset β†’ Integrated table  β”‚
    β”‚ Hit logging              β”‚ None β†’ rsyslog β†’ hits_parser β†’ SQLite     β”‚
    β”‚ Boot persistence         β”‚ Flat file restore β†’ DB-driven restore.py  β”‚
    β”‚ Crash recovery           β”‚ None β†’ rebuild_in_progress flag in DB     β”‚
    β”‚ Config change detection  β”‚ None β†’ SHA-256 hash of config files       β”‚
    β”‚ Penalty box              β”‚ Separate ipset/service β†’ shield_penalty   β”‚
    β”‚ Allowlist                β”‚ Hardcoded in script β†’ shield_allow ipset  β”‚
    β”‚ Dashboard                β”‚ BASH/iptables poll β†’ Python delta packets β”‚
    β”‚ Reports                  β”‚ None β†’ HTML threat analysis reports       β”‚
    └──────────────────────────┴─────────────────────────────────-β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

    The Delta Rebuild Advantage

    The most impactful change. Instead of re-fetching everything nightly, the Python system tracks the last successful WHOIS lookup for every ASN and the ETag of every country block file:

    Python nightly run cost (approximate):
      ASN WHOIS lookups (only stale, 14-day TTL)    ~2-5 per night
      Country file downloads (only changed, ETag)   0-3 per night (usually 0)
      DB diff computation                           ~5 seconds
      ipset delta apply                             ~10 seconds
      Total rebuild time:                           ~30 seconds typical
      Total per week:                               ~3.5 minutes

    That’s roughly a 700Γ— reduction in rebuild time under normal conditions.


    The Migration Process

    The migration was executed in four phases with no loss of protection at any point.

    Phase 1: Database Seeding
        ↓
        Python DB populated while BASH system continues running
        Both systems coexist. Python touches no live ipsets.
    
    Phase 2: Shadow Mode (7+ days)
        ↓
        Python rebuild runs with --dry-run flag
        Logs all changes it WOULD make, modifies nothing
        Compared against BASH output each morning
    
    Phase 3: Cutover
        ↓
        BASH cron entries commented out (not deleted)
        Python cron entries go live
        New systemd boot services enabled
        72-hour intensive monitoring period
    
    Phase 4: Cleanup (30 days later)
        ↓
        BASH scripts archived to tar.gz
        Old flat files removed
        502,575-line /etc/ipset.conf deleted
        Orphan ipsets destroyed
        Old systemd services masked

    What Was Decommissioned

    The cutover removed a significant amount of legacy infrastructure:

    • /usr/local/bin/enterprise_shield.sh (the main BASH script)
    • /usr/local/bin/block_asn.sh (the injection tool)
    • /usr/local/bin/abuseipdb_penaltybox.sh
    • /usr/local/bin/shield-stat.sh and shield_display.sh
    • /etc/ipset.conf β€” 502,575 lines, gone
    • shield-ipset-restore.service (BASH-era)
    • shield-iptables-restore.service (BASH-era)
    • The orphan SHIELD_PENALTY ipset that had survived via netfilter-persistent

    The new Python system replaced all of this with a clean installation under /usr/local/lib/enterprise_shield/, state in /var/lib/enterprise_shield/shield.db,
    and configuration in /etc/enterprise_shield/.


    Key Decisions Made Along the Way

    Several non-obvious architectural choices shaped the Python system. These are worth documenting because they affected behaviour:

    Hard DELETEs over soft deletes β€” Earlier design drafts used a soft-delete pattern (marking rows inactive rather than removing them). This was rejected: it causes the database to grow indefinitely, and there’s no useful recovery scenario where you’d
    want to un-delete a stale CIDR entry. The Python system uses hard DELETEs.

    AbuseIPDB gets its own table β€” The initial design merged AbuseIPDB IPs into the main cidr_blocks table. This was wrong: AbuseIPDB operates on a completely different lifecycle (5Γ— daily refresh, IP-level not CIDR-level, confidence threshold filtering).
    It got its own abuseipdb_entries table with independent process ownership.

    ip-api.com not BGPView β€” Report enrichment (ASN name, country, city for attacker IPs) originally used BGPView. This was replaced with ip-api.com: 45 req/min free tier, no auth, returns ASN + org + country + city in a single call. Shodan’s InternetDB
    (internetdb.shodan.io/{ip}) was added for open port data and threat tags β€” also no auth.

    All runtime state in the database β€” No flat files for parser position, public IP cache, or rebuild flags. The system_state table in SQLite holds everything. This means the database backup is the complete system backup.

    SHA-256 config change detection β€” The rebuild checks a SHA-256 hash of the config files at startup. If anything changed since the last run, a full re-import of config is triggered automatically. No manual --import step needed.


    The Result

    Enterprise Shield v12 reached verified production status on 2026-05-27, after extensive testing including multiple reboot verification cycles. All 16 items on the post-reboot checklist pass cleanly.

    The system now:

    • Rebuilds in ~30 seconds instead of ~38 minutes
    • Has a complete history of every CIDR change
    • Logs every firewall hit to a structured database
    • Produces HTML threat analysis reports
    • Survives reboots with a DB-driven restore rather than a flat-file restore
    • Has crash recovery via the rebuild_in_progress flag
    • Provides a real-time terminal dashboard (shield_stat.py) with delta-based packet rate bars

    The database contains ~500,000 active CIDR entries across 7 ipsets, ~10,000 AbuseIPDB entries, and growing hit log data as the rsyslog pipeline feeds it.

    The next post will go into the architecture of the system so that if you’re considering implementing something similar, you can see how to configure the entire flow.

  • Current ASN Block List

    NOTE: Always check this link for the most recent ASN Blocklist.

    For those who are interested, here is the current the ASN Block List that is used in my local server firewall setup. Let me know if you think of some that should be added; or if you are on the list and you don’t think you should be!

    ===========================================================================
    ENTERPRISE SHIELD: AUTONOMOUS SYSTEM NUMBER (ASN) INTEL PROFILE
    ===========================================================================

    [STATUS KEY]
    [BLOCK] Active Firewall Mitigation (Traffic dropped at edge)
    [REVIEW] Deactivated/Bypassed (High collateral damage risk, requires audit)

    ---------------------------------------------------------------------------
    1. TRANSIT / BACKBONE NETWORKS (High Risk of Downstream Collateral Damage)
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    174 [BLOCK] US Cogent Communications - Major transit backbone
    1299 [BLOCK] SE Arelion Sweden AB - Tier 1 backbone
    3209 [BLOCK] DE Vodafone Germany - Regional infrastructure
    3257 [BLOCK] US GTT Communications Inc. - Global carrier
    6939 [BLOCK] US Hurricane Electric - Large transit network
    7979 [BLOCK] Global SoftLayer / IBM Cloud
    11042 [BLOCK] US Network Transit Holdings LLC

    ---------------------------------------------------------------------------
    2. CHINESE STATE CARRIERS & EAST ASIAN TECH GIANTS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    4134 [BLOCK] CN ChinaNet - China Telecom primary backbone
    4811 [BLOCK] CN China Telecom (Group) - Shanghai MAN
    4831 [BLOCK] CN China Telecom (CTTNET) - Core state carrier
    4837 [BLOCK] CN China Unicom (CNC Group) - Industrial state line
    9808 [BLOCK] CN China Mobile Communications Group Co., Ltd.
    24445 [BLOCK] CN Henan Mobile Communications Co. Ltd
    37963 [BLOCK] CN Alibaba Cloud (Aliyun) - Mainland China clusters
    38365 [BLOCK] CN Baidu - Beijing Netcom Science & Tech
    45102 [BLOCK] APAC Alibaba Cloud APAC infrastructure node
    58461 [BLOCK] CN CT-HangZhou-IDC
    63199 [BLOCK] CN/HK CDS Global Cloud Co., Ltd
    132203 [BLOCK] CN Tencent Cloud compute infrastructure
    135354 [BLOCK] SG NAVER Business Platform Asia Pacific Pte. Ltd.
    136907 [BLOCK] CN Huawei Cloud computing platforms
    138699 [BLOCK] SG/CN TikTok Pte. Ltd. application edge ingestion
    211443 [BLOCK] HK Sino Worldwide Trading Limited proxy ingress
    213802 [BLOCK] HK TF - Tianfeng Communications Limited
    214669 [BLOCK] HK Starlight Tech Trading Co. Limited
    396986 [BLOCK] US/CN Bytedance Inc. platforms crawler edge
    55933 [BLOCK] HK CLOUDIE-AS-AP - Cloudie Limited

    ---------------------------------------------------------------------------
    3. RUSSIAN / CIS CARRIERS & HOSTING NODES
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    12389 [BLOCK] RU Rostelecom - Russian state carrier
    33993 [BLOCK] RU UFO Hosting LLC - Unregulated VPS space
    35048 [BLOCK] RU BITERIKA-AS - Biterika Group LLC
    41853 [BLOCK] RU LLC NTCOM corporate hosting & transit
    44050 [BLOCK] RU Petersburg Internet Network Ltd cloud node
    45055 [BLOCK] RU Dontechsvyaz LLC commercial communications
    47913 [BLOCK] RU Moshonkin Ilia Sergeevich - Private operator
    48030 [BLOCK] RU Martynova Irina Nikolaevna - Private register
    48031 [BLOCK] RU Ivanov Vitaliy Sergeevich - Private register
    48043 [BLOCK] RU Ozyorsk Telecom CJSC regional industrial node
    48467 [BLOCK] RU Pronet LLC standard commercial broadband
    48507 [BLOCK] RU LTD SibMediaFon multi-service network
    48515 [BLOCK] RU Praktika Ltd business infrastructure
    49505 [BLOCK] RU JSC Selectel - Bare-metal hosting provider
    197695 [BLOCK] RU REG.RU - Domestic web host & registrar
    200328 [BLOCK] RU Bakhtin Evgenii Valerevich private network
    200350 [BLOCK] RU YandexCloud - Yandex.Cloud LLC enterprise core
    202269 [BLOCK] AM BitCommand LLC proxy-friendly hosting
    205196 [BLOCK] RU BIG CORE LLC budget cloud infrastructure
    210644 [BLOCK] RU AEZA GROUP LLC high frequency scanning vector

    ---------------------------------------------------------------------------
    4. CENTRAL ASIA INFRASTRUCTURE
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    8193 [BLOCK] UZ Uzbektelekom Joint Stock Company state carrier
    8200 [BLOCK] KZ Uplink LLC commercial broadband backbone
    35682 [BLOCK] UZ Best Internet Solution alternative host
    48716 [BLOCK] KZ PS Internet Company LLP web & cloud host
    203044 [BLOCK] KZ Telepatiya Ltd virtualization platform
    210006 [BLOCK] KZ Shereverov Marat Ahmedovich private register
    210976 [BLOCK] KZ Timeweb LLP shared hosting/VPS cluster

    ---------------------------------------------------------------------------
    5. EASTERN EUROPE / UKRAINE / BALTICS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    24651 [BLOCK] LV JSC BALTICOM regional internet provider
    30860 [BLOCK] UA Virtual Systems LLC high-privacy offshore VPS
    42159 [BLOCK] UA Zemlyaniy Dmitro Leonidovich private operator
    61424 [BLOCK] SK ESERVER-SK-AS - eServer s.r.o. professional host
    204957 [BLOCK] UA GREEN FLOID LLC corporate cloud cluster
    211736 [BLOCK] UA FOP Dmytro Nedilskyi commercial network

    ---------------------------------------------------------------------------
    6. MIDDLE EAST & LEVANT
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    8697 [BLOCK] JO Jordan Telecommunications PSC routing core
    9038 [BLOCK] JO/BH BATELCO / Al Bahrainia al Urdunia multi-transit
    202670 [BLOCK] UAE CLOUDZME FZE free-zone hosting arrays
    206446 [BLOCK] IL CLOUD LEASE Ltd specialized provisioning
    211273 [BLOCK] UAE csoft - Cloud Software FZCO (US footprint)

    ---------------------------------------------------------------------------
    7. TURKEY (REGIONAL BACKBONES & DATACENTERS)
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    9121 [BLOCK] TR TTNet - Turk Telekomunikasyon Anonim Sirketi
    12735 [BLOCK] TR TurkNet major independent high-speed ISP
    205733 [BLOCK] TR HOSTIFOX Bilisim Hizmetleri game server VPS
    208913 [BLOCK] TR Kitsune Bilisim Sistemleri platform space
    211557 [BLOCK] TR TAYNET TEKNOLOJI TICARET LTD server housing
    212193 [BLOCK] TR VIVA INTERNET LIMITED SIRKETI (Active attack)
    213407 [BLOCK] TR Uzmansoft Bilisim Web Yazilim Hizmetleri
    213488 [BLOCK] TR Inoxweb Datacenter ve Hosting colocation center
    214000 [BLOCK] TR Voxnet Bilisim Teknolojileri delivery platform

    ---------------------------------------------------------------------------
    8. CLOUD / HYPERSCALER INFRASTRUCTURE (B2B Integrations Impact Risk)
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    2639 [BLOCK] Global Zoho Corporation business CRM/mail endpoints
    8075 [REVIEW] Global Added to AZURE-RATELIMIT rule List
    14618 [REVIEW] US Added to CLOUD-RATELIMIT rule List
    16509 [REVIEW] Global Added to CLOUD-RATELIMIT rule List
    31898 [REVIEW] Global Added to CLOUD-RATELIMIT rule List
    63949 [REVIEW] US Added to CLOUD-RATELIMIT rule List
    208172 [BLOCK] CH Proton AG privacy email/VPN endpoint
    395747 [REVIEW] US Added to CLOUD-RATELIMIT rule List
    396982 [REVIEW] Global Added to CLOUD-RATELIMIT rule List

    **Note:** Main Google Search crawler (AS15169) is fully whitelisted.

    ---------------------------------------------------------------------------
    9. SOCIAL MEDIA PLATFORMS CRAWLER INGRESS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    32934 [BLOCK] US Facebook Inc. (Meta) crawler asset block 1
    54115 [BLOCK] US Facebook Inc. (Meta) crawler asset block 2
    63293 [BLOCK] US Facebook Inc. (Meta) crawler asset block 3

    ---------------------------------------------------------------------------
    10. EUROPEAN HOSTING & VPS PROVIDERS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    1101 [BLOCK] NL IP-EEND BV commercial cloud block
    3920 [BLOCK] EE PUSHPKT OU (Note: Mislabeled as RIPE NCC)
    6724 [BLOCK] DE Strato GmbH consumer web host & storage
    8560 [BLOCK] DE IONOS SE / 1&1 European business host cloud
    8896 [BLOCK] NO GlobalConnect AS strategic transport core
    9009 [BLOCK] UK/EU M247 Europe low-cost multi-region nodes
    12488 [BLOCK] UK Krystal Hosting Ltd green cloud shared app
    12552 [BLOCK] SE GlobalConnect AB high capacity transit
    12574 [BLOCK] DE Hosting.de GmbH regional cloud infrastructure
    12816 [BLOCK] DE Leibniz-Rechenzentrum university research node
    12876 [BLOCK] FR Scaleway SAS cloud developer instances
    13213 [BLOCK] UK UK-2 Limited / Iomart corporate web clusters
    14576 [BLOCK] EU Hosting Solution Ltd. general multi-tenant host
    14670 [BLOCK] UK WHG Hosting Services Ltd engine (4 of 4)
    15967 [BLOCK] PL Nazwa.pl Sp.z.o.o. domestic enterprise cloud
    16276 [BLOCK] FR OVHcloud largest European host (high bot density)
    20738 [BLOCK] UK Heart Internet Ltd legacy reseller platform
    20857 [BLOCK] NL TransIP BV / Signet B.V. cloud cluster (2 of 2)
    20860 [BLOCK] UK IOMART Cloud Services Limited business servers
    21499 [BLOCK] DE Host Europe GmbH managed web node matrix
    24768 [BLOCK] PT ALMOUROLTEC Servicos informatics management node
    24940 [BLOCK] DE Hetzner Online GmbH core machine node (1 of 3)
    24961 [BLOCK] DE/CH WIIT AG premium enterprise cloud engine
    26141 [BLOCK] EU CubePath unmapped cloud network pathways
    28753 [BLOCK] DE Leaseweb Deutschland GmbH throughput host
    29066 [BLOCK] DE/FR velia.net Internetdienste GmbH unmanaged iron
    29222 [BLOCK] CH Infomaniak Network SA eco-friendly cloud core
    29522 [BLOCK] PL Cyber_Folks S.A. hosting group array (CF-KRK)
    29550 [BLOCK] UK SIMPLYTRANSIT Team Blue Carrier transit
    30781 [BLOCK] FR Free Pro SAS corporate broadband hosting
    30823 [BLOCK] DE aurologic GmbH specialized colocation housing
    30893 [BLOCK] SE No ACK Group Holding AB dense dev clusters
    31034 [BLOCK] IT Aruba S.p.A. dominant consumer & enterprise host
    31229 [BLOCK] PL Beyond.pl sp. z o.o. Tier III datacenter
    34081 [BLOCK] DE/IT INCUBATEC GmbH - Srl corporate app host
    34360 [BLOCK] PL Cyber_Folks S.A. hosting group array (OGICOM)
    34549 [BLOCK] DE meerfarbig GmbH & Co. KG agile testing staging
    35470 [BLOCK] NL Signet B.V. Dutch cloud cluster (1 of 2)
    35779 [BLOCK] RS mCloud doo dynamic SSD virtual systems
    39122 [BLOCK] IE Blacknight Internet Solutions registrar host
    39351 [BLOCK] SE 31173 Services AB commercial VPN exit routes
    39392 [BLOCK] CZ SH.cz s.r.o. / SuperNetwork aggregation node
    39572 [BLOCK] NL DataWeb Global Group B.V. SLA enterprise fiber
    39704 [BLOCK] NL CJ2 Hosting B.V. regional multi-server housing
    41564 [BLOCK] UK Orion Network Limited computing node (1 of 2)
    41608 [BLOCK] ES NextGenWebs S.L. consumer web host server
    42525 [BLOCK] DE GlobalConnect A/S northern European fiber
    42708 [BLOCK] SE Portlane AB unmanaged raw data transport
    42831 [BLOCK] UK UK Dedicated Servers Limited bare-metal systems
    43037 [BLOCK] CZ Seznam.cz a.s. domestic search engine crawler
    43289 [BLOCK] MD Trabia SRL offshore datacenter proxy target
    43350 [BLOCK] NL NForce Entertainment BV high-bandwidth stream
    43357 [BLOCK] UK Owl Limited corporate platform route block
    43578 [BLOCK] ES bitNAP carrier neutral colocation facility
    43641 [BLOCK] PL Sollutium EU Sp. z o.o. custom network assets
    44477 [BLOCK] MD PQ Hosting Plus S.R.L. Stark Industries affiliate
    44803 [BLOCK] DK Webdock.io ApS lightweight developer VPS frame
    46805 [BLOCK] UK Angelnet Limited cloud infrastructure (4 of 4)
    47544 [BLOCK] PL IQ PL Sp. z o.o. transaction performance host
    47583 [BLOCK] LT Hostinger International global shared host matrix
    48024 [BLOCK] EU NEROCLOUD LTD privacy-centric hosting arrays
    48047 [BLOCK] PL Krakowskie Centrum Przetwarzania regional node
    48057 [BLOCK] MK ITV DOOEL Skopje multi-tenant infrastructure
    48090 [BLOCK] EU TECHOFF SRV LIMITED offshore cloud compute
    48137 [BLOCK] NL PI-GROUP BV network infrastructure system
    48505 [BLOCK] PL Kylos sp. z o.o. localized development spaces
    48854 [BLOCK] DK team.blue Denmark A/S application cloud space
    49453 [BLOCK] NL Global Layer BV mass raw bandwidth platform
    49592 [BLOCK] UK Pipe Networks LTD datacenter transport links
    49635 [BLOCK] ES Cloudi Nextgen SL automated virtualization
    49683 [BLOCK] UK MASSIVEGRID LTD high availability platform
    49981 [BLOCK] NL WorldStream B.V. low-cost commodity iron housing
    50300 [BLOCK] UK CustodianDC Limited eco-efficient server space
    50304 [BLOCK] NO Blix Solutions AS customized server housing
    50599 [BLOCK] PL DATASPACE P.S.A. scalable compute clusters
    50926 [BLOCK] ES AXARNET Comunicaciones S.L. managed systems
    51167 [BLOCK] DE Contabo GmbH high density developer VMs provider
    51396 [BLOCK] DE Pfcloud UG boutique private cloud frames
    51430 [BLOCK] NL AltusHost B.V. managed business host arrays
    51852 [BLOCK] CH Private Layer INC offshore bulletproof net
    51859 [BLOCK] RS Mainstream doo Beograd corporate hosting grid
    56322 [BLOCK] HU ServerAstra Kft. privacy cloud servers ecosystem
    57043 [BLOCK] NL HOSTKEY B.V. scraping automation compute block
    57858 [BLOCK] UK Angelnet Limited cloud infrastructure (3 of 4)
    58065 [BLOCK] UK Orion Network Limited computing node (2 of 2)
    59651 [BLOCK] Global AS QualityNetwork global transport pathways
    59943 [BLOCK] BE Level 27 BVBA managed app staging clouds
    60068 [BLOCK] Global CDN77 / Datacamp Limited massive distribution CDN
    60223 [BLOCK] UK Netiface international deployment grid (2 of 3)
    60404 [BLOCK] NL Liteserver NVMe high performance virtual environments
    60781 [BLOCK] NL LeaseWeb Netherlands BV data distribution core
    60798 [BLOCK] IT Servereasy Srl agile Linux hosting frames
    62240 [BLOCK] UK Clouvider Ltd colocation host space (2 of 2)
    63119 [BLOCK] UK Angelnet Limited cloud infrastructure (2 of 4)
    133944 [BLOCK] LT trafficforce UAB high-volume traffic node (2 of 2)
    141995 [BLOCK] APAC Contabo Asia Private Limited developer clouds
    197540 [BLOCK] DE netcup GmbH consumer cloud systems platform
    198139 [BLOCK] DE Lucas Vossberg private independent routing
    199524 [BLOCK] LU G-Core Labs S.A. global edge CDN infrastructure
    199404 [BLOCK] UK WHG Hosting Services Ltd engine (2 of 4)
    200019 [BLOCK] MD ALEXHOST SRL anonymous bulletproof web host
    201341 [BLOCK] LT trafficforce UAB high-volume traffic node (1 of 2)
    201579 [BLOCK] UK HostGnome Ltd budget Windows/Linux NVMe VPS
    201814 [BLOCK] PL MEVSPACE sp. z o.o. efficient bare metal iron
    203446 [BLOCK] UK Smartnet Limited business production host
    203476 [BLOCK] FR GANDI SAS web registrar and cluster workspace
    203516 [BLOCK] UK/DE AltunHOST LTD distributed game server system
    204240 [BLOCK] EU REXE localized system virtualization endpoint
    204646 [BLOCK] DE web2objects GmbH e-commerce dev sandboxes
    204770 [BLOCK] LT UAB Cherry Servers cloud developer host (1 of 2)
    204800 [BLOCK] UK WHG Hosting Services Ltd engine (3 of 4)
    205948 [BLOCK] DE creoline GmbH premium SSD cluster arrays
    206092 [BLOCK] UK F.N.S. Holdings Limited infrastructure assets
    206238 [BLOCK] EU Unknown European Provider - Direct audit recommended
    206264 [BLOCK] EU Amarutu Technology Ltd offshore routing profile
    206305 [BLOCK] RO SC ITNS.NET SRL regional datacenter pathways
    206892 [BLOCK] HU Rendszerinformatika Zrt. corporate applications
    206996 [BLOCK] DE ZAP-Hosting GmbH automated rental game cloud
    207179 [BLOCK] NL WilroffReitsma B.V. managed IT workspace cloud
    207567 [BLOCK] EU Intezio Worldwide Limited proxy provisioning
    207569 [BLOCK] UK I-SERVERS LTD direct-access environment hosting
    207957 [BLOCK] UK Serv.Host Group Ltd wholesale virtual machines
    208046 [BLOCK] FR KOGLER Gabin private boutique developer lab
    208137 [BLOCK] RO Feo Prest SRL localized routing nodes network
    209242 [BLOCK] UK Clouvider Ltd colocation host space (1 of 2)
    209373 [BLOCK] CH/Global SWISSNET LLC secure corporate cloud network
    209605 [BLOCK] LT UAB Host Baltic regional server configurations
    209709 [BLOCK] LT UAB code200 dynamic testbeds framework (1 of 2)
    209847 [BLOCK] NL WorkTitans B.V. SaaS developer sandbox iron
    210403 [BLOCK] FR Groupe LWS SARL consumer web & shared compute
    210457 [BLOCK] EU Kyonix Networks Limited server array optimizations
    210558 [BLOCK] DE 1337 Services GmbH privacy anonymous proxy node
    210743 [BLOCK] FR BABBAR-AS - Babbar SAS framework systems
    210785 [BLOCK] DE KAPELAN Medien GmbH digital media crawlers
    210906 [BLOCK] LT UAB Bite Lietuva domestic broadband carrier
    211298 [BLOCK] UK Driftnet Ltd active security honey-scanner
    211381 [BLOCK] LV/NL Podaon SIA cross-border virtual computing
    211590 [BLOCK] FR Bucklog SARL micro-node VPS structures
    212220 [BLOCK] SE Kepler Technologies AB automated virtual arrays
    212238 [BLOCK] Global Datacamp Limited multi-region CDN delivery
    212286 [BLOCK] UK LonConnect Ltd metropolitan interconnection
    212317 [BLOCK] DE Hetzner Online GmbH performance engine (3 of 3)
    213230 [BLOCK] DE Hetzner Online GmbH performance engine (2 of 3)
    213535 [BLOCK] EU YottaSrc dynamic on-demand system hosting
    213702 [BLOCK] UK QWINS LTD web automation staging nodes
    213755 [BLOCK] EU LUNORY CLOUD SOLUTIONS LTD flexible structures
    213790 [BLOCK] EU Limited Network LTD virtual testing ranges
    213887 [BLOCK] UK WAIcore Ltd AI-oriented acceleration clusters
    213896 [BLOCK] LT UAB Cherry Servers cloud developer host (2 of 2)
    214238 [BLOCK] UK HOST TELECOM LTD enterprise cloud engine
    214503 [BLOCK] SE QuxLabs AB advanced networking lab systems
    214716 [BLOCK] UK WEYRO LTD corporate computing platforms
    214902 [BLOCK] DK Philip Fjaera PFWeb Solutions micro hosting
    215125 [BLOCK] NL Church of Cyberology high privacy proxy nodes
    215439 [BLOCK] EU PLAY2GO INTERNATIONAL LTD app environments
    215540 [BLOCK] UK Global Connectivity Solutions multi-transit
    215730 [BLOCK] EU H2NEXUS LTD technical system virtualization
    215747 [BLOCK] NL NubaCloud B.V. emerging platform architecture
    202412 [BLOCK] EU Omegatech LTD high density framework grids

    ---------------------------------------------------------------------------
    11. LEASEWEB GROUP CONSOLIDATED INFRASTRUCTURE
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    7203 [BLOCK] US Leaseweb USA Inc. enterprise compute (4 of 7)
    19148 [BLOCK] US Leaseweb USA Inc. enterprise compute (5 of 7)
    27411 [BLOCK] US Leaseweb USA Inc. enterprise compute (6 of 7)
    30633 [BLOCK] US Leaseweb USA enterprise compute (1 of 7)
    32613 [BLOCK] CA Leaseweb Canada Inc. regional distribution hub
    393886 [BLOCK] US Leaseweb USA Inc. enterprise compute (7 of 7)
    394380 [BLOCK] US Leaseweb USA Inc. enterprise compute (3 of 7)
    395954 [BLOCK] US Leaseweb USA enterprise compute (2 of 7)
    396190 [BLOCK] US Leaseweb USA Inc. enterprise compute (8 of 7)
    396362 [BLOCK] US Leaseweb USA enterprise compute (3 of 3)

    ---------------------------------------------------------------------------
    12. GMO INTERNET GROUP / SAKURA (JAPAN)
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    7506 [BLOCK] JP INTERQ - GMO Internet Group Inc. flagship hub
    7684 [BLOCK] JP SAKURA Internet Inc. cloud clusters (2 of 2)
    9370 [BLOCK] JP SAKURA Internet Inc. cloud clusters (1 of 2)
    58791 [BLOCK] JP GMO Internet Group Inc. regional infrastructure
    131921 [BLOCK] JP GMO GlobalSign Holdings K.K. identity routing
    131965 [BLOCK] JP Xserver Inc. high density shared web hosting

    ---------------------------------------------------------------------------
    13. US & NORTH AMERICAN HOSTING / VPS PROVIDERS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    7393 [BLOCK] US CYBERCON INC. industrial colocation server yard
    7489 [BLOCK] US HostUS virtual machine provisioning clusters
    9115 [BLOCK] CA Internet Names for Business Inc. (1 of 2)
    10439 [BLOCK] US CariNet Inc. unmanaged bare-metal iron tracks
    10557 [BLOCK] US Connect Northwest Internet Services LLC
    11320 [BLOCK] US LightEdge Solutions compliant continuity center
    11706 [BLOCK] US TelefΓ΄nica Brasil S.A (US asset structures)
    11878 [BLOCK] US tzulo inc. high bandwidth dedicated server fields
    13332 [BLOCK] US Hype Enterprises software hosting frameworks
    13768 [BLOCK] CA Aptum Technologies hybrid cloud systems
    14061 [BLOCK] US DigitalOcean LLC developer cloud droplets
    14131 [BLOCK] US DataYard managed enterprise network hosting
    14555 [BLOCK] US LiquidNet US LLC reseller app hosting frames
    14956 [BLOCK] US RouterHosting LLC custom VPS provisioning
    15003 [BLOCK] US Nobis Technology Group high performance nodes
    16628 [BLOCK] US DedFiberCo point-to-point data links
    18450 [BLOCK] US WebNX Inc. extreme performance high cooling host
    18501 [BLOCK] US CyberCloud Professionals LLC corporate staging
    18779 [BLOCK] US EGIHosting wholesale unmanaged server arrays
    19084 [BLOCK] US ColoUp regional colocation & rack operations
    19318 [BLOCK] US Interserver Inc. standard low-cost shared cloud
    20278 [BLOCK] US Nexeon Technologies Inc. internet transit node
    20473 [BLOCK] US Vultr / AS-CHOOPA on-demand global hardware
    21769 [BLOCK] US Colocation America Corporation secure data rooms
    21859 [BLOCK] US Zenlayer Inc. boundary acceleration cloud (1 of 2)
    22295 [BLOCK] US Advin Services LLC lightweight virtual arrays
    22611 [BLOCK] US InMotion Hosting Inc. web optimized core (1 of 2)
    22612 [BLOCK] US Namecheap Inc. shared hosting & infrastructure
    23033 [BLOCK] US Wowrack.com global managed cloud systems
    23470 [BLOCK] US ReliableSite.Net LLC dedicated DDoS limited iron
    25820 [BLOCK] CA IT7 Networks Inc. systems automation endpoints
    26347 [BLOCK] US DreamHost mainstream web properties space
    26464 [BLOCK] US Joyent Inc. container-native computing environments
    26496 [BLOCK] US GoDaddy.com LLC retail consumer web hosts core
    26548 [BLOCK] US PureVoltage Hosting Inc. customized server racks
    27257 [BLOCK] US Webair Internet Development medical cloud grids
    27589 [BLOCK] US MOJOHOST high throughput media streaming engine
    29802 [BLOCK] US HIVELOCITY Inc. bare metal compute spaces (1 of 2)
    29873 [BLOCK] US Newfold Digital Inc. parent host brand pool
    30058 [BLOCK] US FDCservers.net cheap unmetered bandwidth lines
    30447 [BLOCK] CA Internet Names For Business Inc. (2 of 2)
    32244 [BLOCK] US Liquid Web LLC managed premium corporate host
    32489 [BLOCK] CA Amanah Tech Inc. secure offshore Canadian vault
    33182 [BLOCK] US HostDime.com Inc. global edge execution clusters
    35916 [BLOCK] US Multacom Corporation advanced engineering hosts
    36007 [BLOCK] US Kamatera Inc. modular hourly billed global cloud
    36352 [BLOCK] US ColoCrossing high density unmanaged budget cells
    36680 [BLOCK] US Netiface LLC international deployment grid (1 of 3)
    40021 [BLOCK] US Contabo Inc. North American arm of Contabo cloud
    40065 [BLOCK] US CNSERVERS LLC intelligent data delivery tracks
    40300 [BLOCK] US DR Fortress LLC mid-Pacific Hawaiian transit hub
    40676 [BLOCK] US Psychz Networks active line filtering nodes
    46261 [BLOCK] US QuickPacket LLC budget hardware deployment arrays
    46475 [BLOCK] US Limestone Networks Inc. solid-state cloud iron
    46562 [BLOCK] US Performive LLC mid-market operational environments
    46606 [BLOCK] US UNITAS Global software defined access routes
    46844 [BLOCK] US Sharktech original heavy scrubbing DDoS limits
    46918 [BLOCK] US GlobalHostingSolutions Inc. safe compute environments
    46995 [BLOCK] US Jump Wireless LLC wireless data edge cells
    50219 [BLOCK] US Valence Technology Co. software testbeds
    53667 [BLOCK] US FranTech Solutions / BuyVM budget storage slabs
    53755 [BLOCK] US Input Output Flood LLC raw compute engine iron
    54600 [BLOCK] US PEG TECH INC broad distribution network spaces
    54641 [BLOCK] US InMotion Hosting Inc. web optimized core (2 of 2)
    55286 [BLOCK] US B2 Net Solutions / ServerCheap budget VMs set
    51317 [BLOCK] US Hivelocity LLC bare metal compute spaces (2 of 2)
    62468 [BLOCK] US VpsQuan L.L.C. offshore-facing virtualization
    62610 [BLOCK] US Zenlayer Inc. boundary acceleration cloud (2 of 2)
    62874 [BLOCK] US Web2Objects LLC corporate app deployment fields
    62904 [BLOCK] US Eonix Corporation efficient distributed system pods
    63023 [BLOCK] US GTHost instant bare metal hardware nodes
    63150 [BLOCK] US BAGE CLOUD LLC developer micro testing nodes
    63410 [BLOCK] US PrivateSystems Networks isolation security grids
    64200 [BLOCK] US VIVID-HOSTING LLC performance customized grids
    64249 [BLOCK] US Charles River Operation private computing segments
    64267 [BLOCK] US Sprious LLC automated scraping residential proxy
    64286 [BLOCK] US LogicWeb Inc. integrated security host platform
    149042 [BLOCK] US Silicon Cloud Global trans-Pacific business paths
    150303 [BLOCK] US SoloRDP Indian firm - US registered desktop host
    202425 [BLOCK] US IP Volume Inc. bulk asset allocation blocks
    209372 [BLOCK] US WS Telecom Inc enterprise carrier alternative
    214036 [BLOCK] US Ultahost Inc. fast virtual machine chains
    399275 [BLOCK] US Solid Systems LLC industrial infrastructure maps
    394474 [BLOCK] US WhiteLabelColo unbranded data room leasing blocks
    396073 [BLOCK] US Majestic Hosting Solutions LLC cloud instances
    396356 [BLOCK] US Latitude.sh API-driven metal automation provider
    396998 [BLOCK] US Path Network Inc. Anycast DDoS scrubbing line
    397423 [BLOCK] US Tier.Net Technologies LLC storage room arrays
    398019 [BLOCK] US Dynu Systems Incorporated dynamic infrastructure
    398781 [BLOCK] US Oculus Networks Inc. VR heavy compute sandboxes
    399073 [BLOCK] US BUNNY TECHNOLOGY LLC fast static asset CDN
    399629 [BLOCK] US BL Networks fast transaction environments
    399804 [BLOCK] US Hostodo low-end storage proxy nodes
    400587 [BLOCK] US Ryamer LLC script execution automation cells
    400940 [BLOCK] US Railway container-native cloud PaaS structures
    401152 [BLOCK] US Ace Data Centers II LLC high density yards
    401626 [BLOCK] US Netiface America Inc. deployment grid (3 of 3)
    401696 [BLOCK] US cognetcloud INC enterprise application space

    ---------------------------------------------------------------------------
    14. LATIN AMERICAN CARRIERS & HOSTING INFRASTRUCTURE
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    1916 [BLOCK] BR Rede Nacional de Ensino e Pesquisa academic net
    17222 [BLOCK] BR Mundivox do Brasil Ltda corporate fiber fields
    26599 [BLOCK] BR TelefΓ΄nica Brasil S.A. national broadband lines
    28573 [BLOCK] BR Claro NXT Telecomunicacoes Ltda mobile data switching
    53107 [BLOCK] BR EVEO S.A. premium domestic bare metal cloud
    53158 [BLOCK] BR Net Turbo Telecom regional consumer broadband
    8151 [BLOCK] MX UNINET S.A. de C.V. Telmex core routing layer
    17072 [BLOCK] MX Total Play Telecomunicaciones FTTH fiber paths
    18809 [BLOCK] PA Cable Onda principal Panamanian consumer grid
    23520 [BLOCK] Caribbean Columbus Networks USA Inc. automated scan risk
    27947 [BLOCK] EC Telconet S.A. major corporate industrial fiber
    30689 [BLOCK] JM FLOW domestic consumer broadband routing
    48721 [BLOCK] PA Flyservers S.A. Panama corp; hosted inside EU
    52485 [BLOCK] HN networksdelmanana.com enterprise communications
    141039 [BLOCK] PA PacketHub S.A. global deployment (2 of 2 / APAC)
    206971 [BLOCK] BR BedHosting BR data center server fields
    207137 [BLOCK] PA PacketHub S.A. global deployment (1 of 2)
    209854 [BLOCK] PA Cyberzone S.A. protected offshore arrays
    262688 [BLOCK] BR MHNET Telecom rural internet transport grids
    263792 [BLOCK] EC IN.PLANET S.A. Andean carrier data lines
    264750 [BLOCK] DO TELEOPERADORA DEL NORDESTE S.R.L. regional block
    264850 [BLOCK] HN TODAS LAS REDES SA Central American transit
    266572 [BLOCK] BR WORLDNET TelecomunicaΓ§Γ΅es regional routing links
    266827 [BLOCK] HN/Global BOHO BEACH CLUB S.A. distributed leisure network
    268136 [BLOCK] BR P J A Telecomunicacoes Ltda private business net
    268372 [BLOCK] BR WISESITE Comunicacao e Tecnologia application arrays
    270716 [BLOCK] BR GOVISTA Telecomunicao Importacao transport logistics
    271935 [BLOCK] DO AIRTIME TECHNOLOGY SRL West Indies localized systems
    3132 [BLOCK] PE Red Cientifica Peruana academic/research core
    21826 [BLOCK] VE CorporaciΓ³n Telemic C.A. commercial broadband
    44382 [BLOCK] LACNIC Fiba Cloud Operation Company virtual host clusters
    52393 [BLOCK] PA Corporacion Dana S.A. business app staging
    263735 [BLOCK] LACNIC SOCIEDAD BUENA HOSTING, S.A. shared frameworks
    263740 [BLOCK] LACNIC Corporacion Laceibanetsociety operations facility
    263821 [BLOCK] LACNIC Soluciones Favorables system provisioning targets

    ---------------------------------------------------------------------------
    15. AFRICAN TELECOMMUNICATIONS & HOSTING
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    37153 [BLOCK] ZA xneelo (Pty) Ltd major domestic web host core
    37611 [BLOCK] ZA Afrihost SP (Pty) Ltd consumer broadband systems
    43444 [BLOCK] ZA/Global Fast Servers (Pty) Ltd agile deployment clouds
    204300 [BLOCK] ZA D2CLOUD NETWORK SERVICES automated framework
    329184 [BLOCK] ZA Host Africa (Pty) Ltd data center group track

    ---------------------------------------------------------------------------
    16. ASIA-PACIFIC HOSTING & TELECOM
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    3462 [BLOCK] TW HiNet / Data Communication core national transit
    5065 [BLOCK] KR Bunny Communications app development clusters
    9329 [BLOCK] LK Sri Lanka Telecom Internet national state backbone
    9465 [BLOCK] SG AGOTOZ PTE. LTD. Southeast Asian hosting cells
    17451 [BLOCK] ID Biznet Networks premium corporate broadband cloud
    38136 [BLOCK] HK Akari Networks resilient developer servers
    38623 [BLOCK] KH Viettel Cambodia Metfone national carrier line
    45187 [BLOCK] AU/APAC Rackspace IT Hosting managed enterprise computing
    45237 [BLOCK] MN Magicnet LLC domestic commercial host provider
    45370 [BLOCK] KR BROADBANDIDC Seoul metropolitan data infrastructure
    45753 [BLOCK] HK Netsec Limited proxy network edge paths
    45899 [BLOCK] VN VNPT Corp national post & telecommunications core
    47810 [BLOCK] GE Proservice LLC strategic institutional data center
    56030 [BLOCK] NZ Voyager Internet Ltd. Kiwi business virtualization
    56038 [BLOCK] AU/Global RackCorp hardened high-resilience cloud arrays
    132056 [BLOCK] HK SCICUBE regional small business web host tiers
    133159 [BLOCK] AU Mammoth Media Pty Ltd cloud systems engineering
    133380 [BLOCK] HK Layerstack Limited high speed developer arrays
    133499 [BLOCK] IN HostRoyale Technologies Pvt Ltd node array (1 of 5)
    134240 [BLOCK] TH Super Broadband Network Company AIS delivery grid
    134450 [BLOCK] IN HostRoyale Technologies Pvt Ltd node array (2 of 2)
    135357 [BLOCK] HK Hong Kong Kowloon Telecom metropolitan fiber ring
    137409 [BLOCK] AU/Global GSL Networks Pty LTD content scaling pipelines
    149440 [BLOCK] MY Evoxt Sdn. Bhd. low cost global VM deployment sets
    152194 [BLOCK] HK CTG Server Limited cross boundary data nodes
    153656 [BLOCK] HK OWGELS INTERNATIONAL CO. wholesale global routing
    153671 [BLOCK] HK Liasail Global Hongkong Limited automated virtual
    203020 [BLOCK] IN HostRoyale Technologies Pvt Ltd node array (3 of 5)
    203999 [BLOCK] IN/US Geekyworks IT Solutions Pvt Ltd application sandboxes
    204287 [BLOCK] IN HostRoyale Technologies Pvt Ltd node array (4 of 5)
    207990 [BLOCK] IN HostRoyale Technologies Pvt Ltd node array (5 of 5)
    212512 [BLOCK] HK Detai Prosperous Technologies server housing
    213438 [BLOCK] SC ColocaTel Inc. offshore privacy server spaces
    215929 [BLOCK] HK Data Campus Limited virtualization testbeds
    135377 [BLOCK] HK UCLOUD INFORMATION TECHNOLOGY review recommended
    150436 [BLOCK] SG Byteplus Pte. Ltd. Bytedance corporate enterprise arm

    ---------------------------------------------------------------------------
    17. SECURITY SCANNERS, RESEARCH NETWORKS & PRIVACY INFRASTRUCTURE
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    16417 [BLOCK] US Cisco Systems IronPort Division email scanner
    42969 [BLOCK] DE Alpha Strike Labs GmbH active vulnerability probing
    57860 [BLOCK] DK Zencurity ApS academic threat mapping research
    60729 [BLOCK] Global TORSERVERS-NET Tor anonymity network exit nodes
    200107 [BLOCK] CH Kaspersky Lab Switzerland GmbH malware analyzer
    209366 [BLOCK] CY SEMrush CY Ltd commercial SEO search crawler
    211680 [BLOCK] PT NSEC Sistemas Informaticos BitSight risk tracker
    213412 [BLOCK] FR ONYPHE SAS active reconnaissance defense engine
    396319 [BLOCK] LT Oxylabs global automated scraping proxy pool
    398722 [REVIEW] US Censys Inc. continuous internet infrastructure scans

    ---------------------------------------------------------------------------
    18. CRITICAL FLAG: HIGH RISK POTENTIAL COLLATERAL DAMAGE TARGETS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    15699 [BLOCK] ES Adam EcoTech S.A. traditional technology firm
    15830 [BLOCK] NL Equinix (EMEA) / Telecity infrastructure manager
    28682 [BLOCK] SI Posta Slovenije d.o.o. national postal services
    47101 [REVIEW] US City of Yakima municipal local government link
    47661 [REVIEW] DE Deloitte GmbH financial consulting corporate core
    47861 [REVIEW] BE Peter E. J. Durieux independent routing entry
    48037 [REVIEW] NL SSC-ICT Haaglanden core Dutch government IT hub
    48059 [REVIEW] BA Konzum d.o.o. Sarajevo regional retail logistics
    48075 [REVIEW] BE S.W.I.F.T. SC global secure interbank banking wire
    48135 [BLOCK] IT Leonardo S.p.A. major national aerospace supplier
    48447 [REVIEW] UK Sectigo Limited critical global SSL auth vendor
    48451 [REVIEW] CZ Prazska energetika, a.s. metropolitan power grid
    48452 [REVIEW] BG Telco power Ltd regional electricity utility link
    48455 [BLOCK] UK Man Investments Limited corporate asset manager
    48468 [REVIEW] CH Triumph Intertrade AG commercial trade systems
    48469 [REVIEW] NO mnemonic AS strategic enterprise cybersecurity
    48512 [REVIEW] DE/FR EPEX SPOT S.E. wholesale power energy exchange
    48514 [REVIEW] SE Stiftelsen Chalmers Studenthem university housing
    48517 [BLOCK] BE Destiny N.V. domestic business broadband ISP
    48518 [BLOCK] FR ADD-ON MULTIMEDIA SAS commercial media publisher
    45562 [REVIEW] HK Hutchison International Ltd trade core arrays
    46602 [REVIEW] US PLAIN DEALER PUBLISHING CO. traditional newsprint
    395064 [REVIEW] CA Douglas College public higher education campus

    ---------------------------------------------------------------------------
    19. FRAMEWORK EXTENSIONS & UNCLASSIFIED NETWORKS
    ---------------------------------------------------------------------------
    ASN STATUS GEOGRAPHY PROVIDER / CONTEXT
    402226 [BLOCK] US OnlyScans LLC automated asset spider indexing
    64160 [BLOCK] Belize NimblyNet Limited global virtualized footprint
    202053 [BLOCK] FI UPCLOUD UpCloud Ltd enterprise cloud cluster
    402253 [BLOCK] KN SKN Subnet & Telecom Ltd Caribbean deployment
    216071 [BLOCK] UAE/NL VDSINA - SERVERS TECH FZCO hosted in Netherlands
    215607 [BLOCK] DE DF-Transit - dataforest GmbH network backbone
    206216 [BLOCK] US ADVIN-AS - Advin Services LLC virtualization
    52449 [BLOCK] Belize My Tech BZ localized commercial system blocks
    9597 [BLOCK] JP Unknown - KDDI Web Communications host layer
    400529 [BLOCK] US Infraly, LLC automated infrastructure engine
    399244 [BLOCK] US AME Hosting LLC isolated server setups
    401322 [BLOCK] US NetO Corp enterprise communication platform
    400810 [BLOCK] US BreezeHost custom virtualization architectures
    394814 [BLOCK] US ISP4Life INC high volume unmanaged transit
    263744 [BLOCK] HN Udasha S.A. infrastructure platform node
    42366 [BLOCK] DE TERRATRANSIT-AS - TerraTransit AG backbone
    132817 [BLOCK] BD DZCRD-AS-AP - DZCRD Networks Ltd
    150493 [BLOCK] ID Indonesia Network Info PT Gunung Sedayu Sentosa
    24560 [BLOCK] IN Bharti Airtel Ltd. Telemedia Services core
    56511 [BLOCK] PL GAMP-AS - GAMP Sp. z o.o. platform space
    42220 [BLOCK] ES SIAPI-AS - TREVENQUE SISTEMAS DE INFORMACION
    30900 [BLOCK] IE WEBWORLD-AS - Sternforth Ltd WebWorld
    4811 [BLOCK] CN CHINANET-SHANGHAI-MAN - China Telecom
    135951 [BLOCK] VN WEBICO-AS-VN - Webico Company Limited
    51247 [BLOCK] LT/NL serveriotechnologijos-AS Serverio MB
    203098 [BLOCK] LT tech-internet-broadband trafficforce UAB
    61098 [BLOCK] CH exoscale - Akenes SA high performance framework
    21013 [BLOCK] AT ITANDTEL-AS - eww ag infrastructure service
    263753 [BLOCK] CL SERVICIOS DE DATACENTER DATANETWORKS LIMITADA
    141968 [BLOCK] ID Indonesia Network Info PT Industri Kreatif
    22363 [BLOCK] US Powerhouse Management Inc. global footprint
    203003 [BLOCK] FI magna-capax - Magna Capax Finland Oy

    ===========================================================================
    END OF DATA PROFILE
    ===========================================================================