Malware Activity in Hosting Networks (ASNs)
January 1,2023 - March 31,2023

To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identify the hosting network where malware were reported.

IPv4 addresses may be reported for hosting one or more malware; for example, two or several URLs may contain the same IPv4 address but the PATHS or QUERIES may identify different malware.

In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware (“Unique Malware Addresses”). Complete lists of ASNs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of Hosting Networks (ASNs) by Number of Malware Records (January to March 2023)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses Total Malware Records ▼
1 CHINA UNICOM China169 Backbone 4837 58,793,728 66,947 104,592
2 Asia Pacific Network Information Centre 4134 120,877,312 87,792 94,615
3 Asia Pacific Network Information Centre 3462 13,361,920 50,052 50,245
4 Bharat Sanchar Nigam Ltd 9829 11,240,960 40,366 50,022
5 DigitalOcean, LLC 14061 2,817,792 26,497 26,965
6 Amazon.com, Inc. 16509 44,484,352 8,069 22,139
7 Amazon.com, Inc. 14618 16,428,544 16,276 16,350
8 Linode, LLC 63949 719,104 12,298 12,480
9 Google LLC 396982 22,693,120 11,211 11,766
10 PJSC Rostelecom 12389 19,245,312 11,457 11,595
11 Startup maintainer 58224 4,654,592 11,357 11,380
12 QUANTIL NETWORKS INC 54994 149,792 56 11,097
13 Korea Telecom 4766 51,948,544 10,841 10,971
14 HATHWAY CABLE AND DATACOM LIMITED 17488 1,016,832 10,683 10,795
15 Mahanagar Telephone Nigam Limited 17813 2,002,944 8,622 8,872
16 Pakistan Telecommuication company limited 17557 16,989,440 7,784 8,353
17 TE-AS 8452 25,754,368 8,018 8,029
18 Latin American and Caribbean IP address Regional Registry 8151 20,281,344 7,290 7,315
19 China Unicom IP network China169 Guangdong province 17816 6,097,920 5,677 7,243
20 CL-1379-14537 14537 112,128 6,689 6,690

Ranking of Hosting Networks (ASNs) by Number of Unique Malware Address (January to March 2023)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses ▼ Total Malware Records
1 Asia Pacific Network Information Centre 4134 120,877,312 87,792 94,615
2 CHINA UNICOM China169 Backbone 4837 58,793,728 66,947 104,592
3 Asia Pacific Network Information Centre 3462 13,361,920 50,052 50,245
4 Bharat Sanchar Nigam Ltd 9829 11,240,960 40,366 50,022
5 DigitalOcean, LLC 14061 2,817,792 26,497 26,965
6 Amazon.com, Inc. 14618 16,428,544 16,276 16,350
7 Linode, LLC 63949 719,104 12,298 12,480
8 PJSC Rostelecom 12389 19,245,312 11,457 11,595
9 Startup maintainer 58224 4,654,592 11,357 11,380
10 Google LLC 396982 22,693,120 11,211 11,766
11 Korea Telecom 4766 51,948,544 10,841 10,971
12 HATHWAY CABLE AND DATACOM LIMITED 17488 1,016,832 10,683 10,795
13 Mahanagar Telephone Nigam Limited 17813 2,002,944 8,622 8,872
14 Amazon.com, Inc. 16509 44,484,352 8,069 22,139
15 TE-AS 8452 25,754,368 8,018 8,029
16 Pakistan Telecommuication company limited 17557 16,989,440 7,784 8,353
17 Latin American and Caribbean IP address Regional Registry 8151 20,281,344 7,290 7,315
18 CL-1379-14537 14537 112,128 6,689 6,690
19 Latin American and Caribbean IP address Regional Registry 26599 24,740,608 6,248 6,339
20 Bharti Airtel Limited 24560 4,272,128 6,209 6,217

Quarterly Update:
Key Statistics		 Quarterly Update:
Top Level Domains		 Quarterly Update:
Registrars		 Quarterly Update:
Hosting Networks
Quarter over Quarter:
Hosting Networks