Network risk ranking
Networks sorted by how often our checks flagged them — hosting, CDN, VPN or Tor. Built from our own lookups over the last 60 days, not from a commercial database.
Highest flagged ratio (min. 3 checks)
| # | ASN | Network | Checks | Flagged | Ratio |
|---|---|---|---|---|---|
| 1 | AS20473 | Vultr | 21 | 21 | 100% |
| 2 | AS15169 | Google Cloud | 11 | 11 | 100% |
| 3 | AS60729 | Zwiebelfreunde | 3 | 3 | 100% |
| 4 | AS13335 | Cloudflare | 44 | 0 | 0% |
| 5 | AS7922 | Comcast | 20 | 0 | 0% |
Small samples move fast: a ratio on 3 checks means very little. Treat this as a starting point for investigation, not a verdict about the network. Method: Methodology · raw data: data report.
How to read this
- Flagged means the address was classified as hosting, CDN, VPN or Tor — not necessarily abuse.
- A high ratio on a hosting provider is expected: it is what those networks are for.
- A high ratio on a consumer ISP is more interesting: it suggests resold or proxy traffic inside that range.
- Our sample is self-selected (people check the pools they are considering), so it reflects the market, not the internet.