Malware Activity in Hosting Networks (ASNs)
April 1, 2022 – June 30, 2022

To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identify the hosting network where malware were reported.

IPv4 addresses may be reported for hosting one or more malware; for example, two or several URLs may contain the same IPv4 address but the PATHS or QUERIES may identify different malware.

In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware (“Unique Malware Addresses”). Complete lists of ASNs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of Hosting Networks (ASNs) by Number of Malware Records (April to June 2022)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses Total Malware Records ▼
1 CHINA169-BACKBONE CHINA UNICOM China169 Backbone 4837 59,112,192 57,092 99,837
2 CHINANET-BACKBONE No.31 4134 112,833,280 51,048 62,459
3 AMAZON-02 16509 43,105,536 21,039 41,912
4 DIGITALOCEAN-ASN 14061 2,720,000 23,764 25,955
5 BSNL-NIB National Internet Backbone 9829 10,896,384 13,872 19,740
6 AS-COLOCROSSING 36352 768,512 9,938 12,504
7 CHINA169-GZ China Unicom IP network China169 Guangdong province 17816 3,948,288 7,100 11,724
8 HINET Data Communication Business Group 3462 17,027,840 10,506 11,180
9 KIXS-AS-KR Korea Telecom 4766 68,274,176 10,554 10,991
10 MICROSOFT-CORP-MSN-AS-BLOCK 8075 45,117,440 10,411 10,532
11 SERVER-MANIA 55286 451,328 10,124 10,136
12 COGENT-174 174 28,857,600 9,672 9,709
13 RELIANCEJIO-IN Reliance Jio Infocomm Limited 55836 6,965,760 9,612 9,614
14 OVH - OVH SAS 16276 4,125,440 7,679 9,147
15 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd. 24560 3,715,840 8,545 8,588
16 M247 - M247 Ltd 9009 1,106,944 8,192 8,336
17 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited 45090 12,059,904 8,169 8,266
18 CLOUDFLARENET 13335 2,405,888 5,306 7,969
19 UNIFIEDLAYER-AS-1 46606 1,206,272 2,118 7,033
20 Uninet S.A. de C.V. 8151 23,884,800 6,297 6,459

Ranking of Hosting Networks (ASNs) by Number of Unique Malware Address (April to June 2022)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses ▼ Total Malware Records
1 CHINA169-BACKBONE CHINA UNICOM China169 Backbone 4837 59,112,192 57,092 99,837
2 CHINANET-BACKBONE No.31 4134 112,833,280 51,048 62,459
3 DIGITALOCEAN-ASN 14061 2,720,000 23,764 25,955
4 AMAZON-02 16509 43,105,536 21,039 41,912
5 BSNL-NIB National Internet Backbone 9829 10,896,384 13,872 19,740
6 KIXS-AS-KR Korea Telecom 4766 68,274,176 10,554 10,991
7 HINET Data Communication Business Group 3462 17,027,840 10,506 11,180
8 MICROSOFT-CORP-MSN-AS-BLOCK 8075 45,117,440 10,411 10,532
9 SERVER-MANIA 55286 451,328 10,124 10,136
10 AS-COLOCROSSING 36352 768,512 9,938 12,504
11 COGENT-174 174 28,857,600 9,672 9,709
12 RELIANCEJIO-IN Reliance Jio Infocomm Limited 55836 6,965,760 9,612 9,614
13 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd. 24560 3,715,840 8,545 8,588
14 M247 - M247 Ltd 9009 1,106,944 8,192 8,336
15 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited 45090 12,059,904 8,169 8,266
16 OVH - OVH SAS 16276 4,125,440 7,679 9,147
17 CHINA169-GZ China Unicom IP network China169 Guangdong province 17816 3,948,288 7,100 11,724
18 COMCAST-7922 7922 71,398,912 6,391 6,450
19 Uninet S.A. de C.V. 8151 23,884,800 6,297 6,459
20 ROSTELECOM-AS - PJSC Rostelecom 12389 16,516,352 6,018 6,224

Quarterly Update:
Key Statistics		 Quarterly Update:
Top Level Domains		 Quarterly Update:
Registrars		 Quarterly Update:
Hosting Networks
Quarter over Quarter:
Hosting Networks