Malware Activity in Hosting Networks (ASNs)
April 1, 2021 - June, 2021
To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identif the hosting network where malware were reported.
For the period, we identified 233 with IPv4 addresses reported as serving up or distributing malware:
- 88 hosting networks had 100 or more IPv4 addresses,
- 34 hosting networks had 500 or more IPv4 addresses,
- 27 hosting networks had 1000 or more IPv4 addresses, and
- 9 hosting networks had 5000 or more reported IPv4 addresses.
In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware.
Ranking of Hosting Networks (ASNs) by Malware Records (April to June 2021)
Rank | AS Name | AS number | # Routed IPv4 Addresses |
Total Malware Records ▼ |
1 | CHINA169-BACKBONE CHINA UNICOM China169 Backbone | 4837 | 58,760,448 | 148,562 |
2 | PTK - Telekomi i Kosoves SH.A. | 8661 | 84,224 | 94,869 |
3 | BSNL-NIB National Internet Backbone | 9829 | 10,840,832 | 64,301 |
4 | CHINA169-GZ China Unicom IP network China169 Guangdong province | 17816 | 3,948,288 | 35,535 |
5 | CHINANET-BACKBONE No.31 | 4134 | 115,596,032 | 24,349 |
6 | CNCGROUP-GZ China Unicom Guangzhou network | 17622 | 1,352,960 | 12,324 |
7 | HATHWAY-NET-AP Hathway IP Over Cable Internet | 17488 | 999,680 | 9,870 |
8 | CLOUDFLARENET | 13335 | 2,353,664 | 6,176 |
9 | CNCGROUP-SZ China Unicom Shenzen network | 17623 | 953,856 | 4,557 |
10 | VNPT-AS-VN VNPT Corp | 45899 | 19,107,328 | 4,230 |
11 | UNIFIEDLAYER-AS-1 | 46606 | 1,393,664 | 4,098 |
12 | AS-COLOCROSSING | 36352 | 783,616 | 2,919 |
13 | CMNET-GD Guangdong Mobile Communication Co.Ltd. | 9808 | 62,860,800 | 2,748 |
14 | 15169 | 23,095,552 | 2,413 | |
15 | MTNL-AP Mahanagar Telephone Nigam Limited | 17813 | 2,744,320 | 2,278 |
16 | TOT-NET TOT Public Company Limited | 23969 | 5,654,272 | 2,211 |
17 | BEAMTELE-AS-AP ACTFIBERNET Pvt Ltd | 131269 | 180,480 | 1,808 |
18 | DIGITALOCEAN-ASN | 14061 | 2,553,088 | 1,739 |
19 | FPT-AS-AP The Corporation for Financing & Promoting Technology | 18403 | 5,349,888 | 1,388 |
20 | ASIANET Cable ISP in India | 17465 | 116,736 | 1,261 |
Activity in Hosting Networks (ASNs)