AS22168 — SHADOWSERVER-FOUNDATION

AS22168 announces 27 IPv4 prefixes covering 8,960 addresses and 2 IPv6 prefixes.

About this network

The AS handle SHADOWSERVER-FOUNDATION is held by The Shadowserver Foundation.

What it's used for

• The address space carries infrastructure for a nonprofit security organization that gathers and analyzes data on malicious Internet activity, including malware and botnets.
• The AS announces 8960 IPv4 addresses across 27 prefixes and 2 IPv6 prefixes, with only 3 observed neighbours, indicating a small, specialized network rather than a transit or access provider.

Notable

• Registrants for the announced prefixes include Legaco Networks B.V., Cogent Communications, LLC, Internet Utilities, and IPXO Incident Response Team, suggesting the space is leased or aggregated from multiple upstream providers rather than owned outright by the foundation.
• The address inventory is fragmented across various /24 and /23 blocks from different registrants, consistent with a research organization acquiring specific ranges for monitoring or scanning purposes.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy.

Announced prefixes

• 45.143.160.0/24
• 50.114.88.0/24
• 108.165.44.0/24
• 146.19.20.0/24
• 154.9.2.0/23
• 154.16.223.0/24
• 154.16.230.0/24
• 154.16.240.0/24
• 154.16.250.0/24
• 162.249.64.0/21
• 166.0.195.0/24
• 179.61.168.0/24
• 181.41.192.0/24
• 181.214.62.0/24
• 181.214.90.0/24
• 181.214.234.0/24
• 181.214.245.0/24
• 181.215.138.0/24
• 181.215.145.0/24
• 181.215.208.0/24
• 185.91.204.0/24
• 185.181.1.0/24
• 191.96.20.0/24
• 191.96.22.0/24
• 191.96.127.0/24
• 191.101.103.0/24
• 199.165.159.0/24
• 2001:550:d0c::/48
• 2620:24:c040::/48

Upstream networks

• AS6939 Hurricane Electric LLC
• AS174 Cogent Communications, LLC
• AS32354 Unwired

Adjacent networks

• AS6939 Hurricane Electric LLC
• AS174 Cogent Communications, LLC
• AS32354 Unwired