Overview
Shadowserver operates a network identified by AS22168.
The record includes 162.249.64.0/21 as a representative IPv4 prefix. It is not the network’s complete or permanent address space.
Current services include Nonprofit security research, Internet scanning, exposure measurement, threat intelligence, and remediation reporting.
This record describes an autonomous system or publicly routed Internet network. It does not identify a physical Data Center, prove who operated an individual request, or establish that every address announced by the ASN is used for the same service.
Network prefixes
These are documented prefixes associated with this routed network. They are not necessarily the network’s complete current address space.
- Representative prefix
-
162.249.64.0/21
IPv4 · Active · RPKI Valid · checked 2026-09-02
Provider and network
- Network / Provider Name
- Shadowserver
- Registered / Operating Organization
- The Shadowserver Foundation, Inc.
- ISP / Network Operator
- The Shadowserver Foundation, Inc.
- ASN
-
AS22168 - ASN Name
- SHADOWSERVER
- Network Name
- SHADOWSERVER
- Current Services
- Nonprofit security research, Internet scanning, exposure measurement, threat intelligence, and remediation reporting
- Provider Type
- Security provider
- Network Type
- Security service network
Network scope
- Network Country
- US
Traffic and handling
- Traffic Classification
- Security Research / Scanner Traffic
- Traffic Label
- Security Research Network
- Risk Level
- Medium
- Recommended Action
- Log and identify as security-research infrastructure. Rate-limit or block only when required by local policy; do not treat the ASN alone as evidence of compromise.
- Default Rule Action
- Log
- Common Pattern
- Traffic may include Internet measurement probes, exposure scans, security research, reporting infrastructure, or related nonprofit security services.
- Detection Notes
- Match AS22168 and current routed prefixes for Shadowserver network context. Combine network origin with request behavior before deciding whether a request is an Internet measurement probe.
Relationships
- Operator
- The Shadowserver Foundation, Inc. Evidence Checked 2026-09-02