Malware Activity in Hosting Networks (ASNs)
July 1,2022 - September 30,2022

To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identify the hosting network where malware were reported.

IPv4 addresses may be reported for hosting one or more malware; for example, two or several URLs may contain the same IPv4 address but the PATHS or QUERIES may identify different malware.

In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware (“Unique Malware Addresses”). Complete lists of ASNs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of Hosting Networks (ASNs) by Number of Malware Records (July to September 2022)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses Total Malware Records ▼
1 CHINANET-BACKBONE No.31 4134 111,800,832 51,057 58,485
2 CHINA169-BACKBONE CHINA UNICOM China169 Backbone 4837 58,780,416 26,839 46,878
3 QUANTILNETWORKS 54994 129,536 87 23,196
4 LGDACOM LG DACOM Corporation 3786 8,926,208 20,998 21,016
5 LINK3-TECH-AS-BD-AP Link3 Technologies Ltd. 23688 172,032 19,629 19,629
6 BSNL-NIB National Internet Backbone 9829 10,909,696 11,832 19,430
7 DIGITALOCEAN-ASN 14061 2,730,496 17,945 18,689
8 KIXS-AS-KR Korea Telecom 4766 68,784,128 17,236 17,514
9 AMAZON-02 16509 43,891,200 14,982 16,722
10 UNIFIEDLAYER-AS-1 46606 1,072,640 2,954 16,340
11 SMILESERV-AS-KR SMILESERV 38700 262,144 9,607 9,662
12 PHMGMT-AS1 22363 98,816 8,864 8,873
13 CLOUDFLARENET 13335 2,430,976 6,507 8,276
14 MICROSOFT-CORP-MSN-AS-BLOCK 8075 48,727,296 7,311 7,869
15 HINET Data Communication Business Group 3462 17,024,768 6,823 7,549
16 AS-COLOCROSSING 36352 768,512 4,576 6,372
17 GOOGLE-CLOUD-PLATFORM 396982 23,911,680 5,586 5,929
18 Uninet S.A. de C.V. 8151 23,904,768 4,984 5,411
19 OVH - OVH SAS 16276 4,128,000 4,221 5,371
20 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd. 24560 3,728,128 5,299 5,343

Ranking of Hosting Networks (ASNs) by Number of Unique Malware Address (July to September 2022)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses ▼ Total Malware Records
1 CHINANET-BACKBONE No.31 4134 111,800,832 51,057 58,485
2 CHINA169-BACKBONE CHINA UNICOM China169 Backbone 4837 58,780,416 26,839 46,878
3 LGDACOM LG DACOM Corporation 3786 8,926,208 20,998 21,016
4 LINK3-TECH-AS-BD-AP Link3 Technologies Ltd. 23688 172,032 19,629 19,629
5 DIGITALOCEAN-ASN 14061 2,730,496 17,945 18,689
6 KIXS-AS-KR Korea Telecom 4766 68,784,128 17,236 17,514
7 AMAZON-02 16509 43,891,200 14,982 16,722
8 BSNL-NIB National Internet Backbone 9829 10,909,696 11,832 19,430
9 SMILESERV-AS-KR SMILESERV 38700 262,144 9,607 9,662
10 PHMGMT-AS1 22363 98,816 8,864 8,873
11 MICROSOFT-CORP-MSN-AS-BLOCK 8075 48,727,296 7,311 7,869
12 HINET Data Communication Business Group 3462 17,024,768 6,823 7,549
13 CLOUDFLARENET 13335 2,430,976 6,507 8,276
14 GOOGLE-CLOUD-PLATFORM 396982 23,911,680 5,586 5,929
15 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd. 24560 3,728,128 5,299 5,343
16 VNPT-AS-VN VNPT Corp 45899 19,293,440 5,018 5,143
17 Uninet S.A. de C.V. 8151 23,904,768 4,984 5,411
18 TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited 45090 12,137,984 4,968 5,044
19 ROSTELECOM-AS - PJSC Rostelecom 12389 16,510,720 4,815 4,926
20 COMCAST-7922 7922 71,392,256 4,805 4,860

Quarterly Update:
Key Statistics		 Quarterly Update:
Top Level Domains		 Quarterly Update:
Registrars		 Quarterly Update:
Hosting Networks
Quarter over Quarter:
Hosting Networks