3 ms·
For anyone wondering how to do this (like me from a month or two back). Here's a useful tool/site: https://bgp.tools https://bgp.tools You can feed it an ip
by bigiain 1y ago
For anyone wondering how to do this (like me from a month or two back).
Here's a useful tool/site:
https://bgp.tools https://bgp.tools
You can feed it an ip address to get an AS ("Autonomous System"), then ask it for all prefixes associated with that AS.
I fed it that first ip address from that list (43.131.0.0) and it showed my the same Tencent owned AS132203, and it gives back all the prefixes they have here:
https://bgp.tools/as/132203#prefixes https://bgp.tools/as/132203#prefixes
(Looks like roguebloodrage might have missed at least the 1.12.x.x and 1.201.x.x prefixes?)
I started searching about how to do that after reading a RachelByTheBay post where she wrote:
Enough bad behavior from a host -> filter the host.
Enough bad hosts in a netblock -> filter the netblock.
Enough bad netblocks in an AS -> filter the AS. Think of it as an "AS death penalty", if you like.
(from the last part of https://rachelbythebay.com/w/2025/06/29/feedback/ https://rachelbythebay.com/w/2025/06/29/feedback/ )
- BLKNSLVR 1y agoThis is what I've used to find ASs to block: https://hackertarget.com/as-ip-lookup/ https://hackertarget.com/as-ip-lookup/ eg. Chuck 'Tencent' into the text box and execute.
- roguebloodrage 1y agoI add re-actively. I figure there are "legitimate" IP's that companies use and I only look at IP addresses that are 'vandalizing' my servers with inappropriate scans and block them. If I saw the two you have identified, then they would have been added. I do play a balance between "might be a game CDN" or a "legit server" and an outright VPS that is being used to abuse other servers. But thanks, I will keep an eye on those two ranges.