Malware Activity:Hosting Networks (ASNs)
Quarter over Quarter Comparison
July 1, 2021 - September 30, 2021

For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether malware activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify identify hosting networks where malware is being hosted and whether or not such activity is persistent or atypical. Investigators or policy makers may focus on these hosting networks for deeper analyses.

Ranking of Hosting Networks (ASNs) by Malware Records, Quarter over Quarter (July to September 2021)

Hosting Providers with a minimum of 50,000 addresses assigned to the ASN and 25 malware records

IPv4 Addresses Assigned Number of Malware Records
Rank Hosting Provider ASN April to June 2021 July to September 2021 April to June 2021 July to September 2021 ▼
1 CHINA169-BACKBONE CHINA UNICOM China169 Backbone 4837 58,760,448 59,102,208 (+1%) 148,562 144,373 (-3%)
2 ▲ +1* BSNL-NIB National Internet Backbone 9829 10,840,832 10,832,128 (-0%) 64,301 53,319 (-17%)
3 ▲ +1 CHINA169-GZ China Unicom IP network China169 Guangdong province 17816 3,948,288 3,948,288 (0%) 35,535 42,184 (+19%)
4 ▲ +1 CHINANET-BACKBONE No.31 4134 115,596,032 115,205,120 (-0%) 24,349 35,045 (+44%)
5 ▲ +1 CNCGROUP-GZ China Unicom Guangzhou network 17622 1,352,960 1,355,776 (0%) 12,324 12,380 (+0%)
6 ▲ +1 HATHWAY-NET-AP Hathway IP Over Cable Internet 17488 999,680 999,168 (-0%) 9,870 8,844 (-10%)
7 N/R** CNSERVERS 40065 609,024 569,600 (-6%) 12 8,152 (+67,833%)
8 ▲ +2 VNPT-AS-VN VNPT Corp 45899 19,107,328 19,169,536 (0%) 4,230 5,445 (+29%)
9 ▼ -1 CLOUDFLARENET 13335 2,353,664 2,355,968 (0%) 6,176 5,097 (-17%)
10 ▲ +21 WIND Telecom S.A. 27887 63,744 63,744 (0%) 749 4,582 (+512%)
11 ▼ -2 CNCGROUP-SZ China Unicom Shenzen network 17623 953,856 958,976 (+1%) 4,557 4,395 (-4%)
12 ▲ +2 GOOGLE 15169 23,095,552 23,095,040 (-0%) 2,413 3,276 (+36%)
13 CMNET-GD Guangdong Mobile Communication Co.Ltd. 9808 62,860,800 63,492,608 (+1%) 2,748 2,749 (+0%)
14 ▲ +4 DIGITALOCEAN-ASN 14061 2,553,088 2,599,168 (+2%) 1,739 2,404 (+38%)
15 ▲ +10 HINET Data Communication Business Group 3462 17,030,144 17,027,328 (-0%) 1,084 2,400 (+121%)
16 ▼ -4 AS-COLOCROSSING 36352 783,616 783,104 (-0%) 2,919 2,366 (-19%)
17 ▼ -1 TOT-NET TOT Public Company Limited 23969 5,654,272 5,655,808 (0%) 2,211 2,344 (+6%)
18 ▼ -3 MTNL-AP Mahanagar Telephone Nigam Limited 17813 2,744,320 2,729,984 (-1%) 2,278 2,244 (-1%)
19 ▲ +7 TELEFONICA BRASIL S.A 26599 24,354,048 23,453,184 (-4%) 1,037 1,907 (+84%)
20 ▲ +16 NAMECHEAP-NET 22612 90,368 91,392 (+1%) 449 1,854 (+313%)

* Indicates change over prior quarter

** Indicates not ranked in prior quarter; either number of addresses or number of malware records did not meet minimum threshold for ranking


Quarter over Quarter Comparisons of:

Key Statistics

Activity in TLDs

Activity in Domain Registrars

Activity in Hosting Networks (ASNs)