Post #4383459
2026-08-04 21:21 UTC
@fullywoolly@mastodon.social @syn_rst@norden.social
A few orgs maintain lists of troublesome ASNs
The @gayint@infosec.exchange team maintains this list: https://gayint.org/blocklists/numbers.txt
And @spamhaus@infosec.exchange maintain this list: https://www.spamhaus.org/drop/asndrop.json
For a good intro about ASNs, poor governance, lack of support for blocking, @jtk@infosec.exchange gave this excellent talk at FIRSTCON25:
https://youtu.be/PiNP9EDPE-I?si=h4bmMqntAgiFHqCB
If your devices support it, Geo-based IP blocks can get you reasonably far on a home network, but it's not enough for even a mid-enterprise today.
#asn
Replies (2)
-
@paul_ipv6@infosec.exchange 2026-08-05 01:18
@badsamurai@infosec.exchange @fullywoolly@mastodon.social @syn_rst@norden.social @gayint@infosec.exchange @spamhaus@infosec.exchange @jtk@infosec.exchange @jtk@infosec.exchange does solid work. doing filtering by IP prefixes is like whackamole while on crack. ASNs are much slower to shed/hide/change.
-
@miniBill@mastodon.uno 2026-08-05 02:09
@badsamurai@infosec.exchange @fullywoolly@mastodon.social @syn_rst@norden.social @gayint@infosec.exchange @spamhaus@infosec.exchange @jtk@infosec.exchange the first list includes... Oracle? Like, I agree their software is shit but blocking their ASN seems a bit excessive