Malware Activity:Hosting Networks (ASNs) Quarter over Quarter Comparison
April 1,2023 - June 30,2023
For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether malware activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify identify hosting networks where malware is being hosted and whether or not such activity is persistent or atypical. Investigators or policy makers may focus on these hosting networks for deeper analyses.
Complete lists of Top-level Domains, gTLD registrars and hosting networks (ASNs) where malware was reported for the quarter can be downloaded in CSV format from the Records page.
In the table below, we compare the numbers of malware records reported for hosting malware in hosting networks (ASNs) for two consecutive quarters.
Ranking of Hosting Networks (ASNs) by Number of Malware Records, Quarter over Quarter (April to June 2023)
Hosting Providers with a minimum of 50,000 addresses assigned to the ASN and 25 malware records
| IPv4 Addresses Assigned | Unique Malware Addresses | Total Malware Records | ||||||||||
| Rank | Hosting Provider | ASN | January to March 2023 | April to June 2023 | January to March 2023 | April to June 2023 | January to March 2023 | April to June 2023 ▼ | ||||
| 1 | ▲ +1* | No.31,Jin-rong Street | 4134 | 120,877,312 | 121,029,376 | (0%) | 87,792 | 96,539 | (+10%) | 94,615 | 100,124 | (+6%) |
| 2 | ▼ -1 | CHINA UNICOM China169 Backbone | 4837 | 58,793,728 | 58,774,016 | (-0%) | 66,947 | 65,416 | (-2%) | 104,592 | 94,597 | (-10%) |
| 3 | ▲ +1 | Bharat Sanchar Nigam Ltd | 9829 | 11,240,960 | 11,322,624 | (+1%) | 40,366 | 60,069 | (+49%) | 50,022 | 63,941 | (+28%) |
| 4 | ▲ +1 | DigitalOcean, LLC | 14061 | 2,817,792 | 2,848,256 | (+1%) | 26,497 | 28,871 | (+9%) | 26,965 | 29,355 | (+9%) |
| 5 | ▲ +20 | VNPT Corp | 45899 | 16,360,192 | 16,249,088 | (-1%) | 5,814 | 21,716 | (+274%) | 5,884 | 21,727 | (+269%) |
| 6 | ▲ +6 | QUANTIL NETWORKS INC | 54994 | 149,792 | 171,008 | (+14%) | 56 | 7 | (-88%) | 11,097 | 20,142 | (+82%) |
| 7 | ▲ +14 | TELEF�NICA BRASIL S.A | 26599 | 24,740,608 | 25,655,040 | (+4%) | 6,248 | 15,451 | (+147%) | 6,339 | 15,457 | (+144%) |
| 8 | ▼ -5 | Chunghwa Telecom Co., Ltd. | 3462 | 13,361,920 | 13,361,152 | (-0%) | 50,052 | 14,872 | (-70%) | 50,245 | 14,988 | (-70%) |
| 9 | ▼ -2 | Amazon.com, Inc. | 14618 | 16,428,544 | 16,504,832 | (0%) | 16,276 | 14,682 | (-10%) | 16,350 | 14,847 | (-9%) |
| 10 | ▼ -4 | Amazon.com, Inc. | 16509 | 44,484,352 | 44,960,000 | (+1%) | 8,069 | 13,582 | (+68%) | 22,139 | 13,950 | (-37%) |
| 11 | ▼ -2 | Google LLC | 396982 | 22,693,120 | 23,200,000 | (+2%) | 11,211 | 12,631 | (+13%) | 11,766 | 13,385 | (+14%) |
| 12 | ▲ +5 | TE-AS | 8452 | 25,754,368 | 25,893,120 | (+1%) | 8,018 | 12,818 | (+60%) | 8,029 | 12,827 | (+60%) |
| 13 | ▼ -5 | Linode, LLC | 63949 | 719,104 | 797,184 | (+11%) | 12,298 | 11,333 | (-8%) | 12,480 | 11,644 | (-7%) |
| 14 | ▼ -4 | PJSC Rostelecom | 12389 | 19,245,312 | 19,412,480 | (+1%) | 11,457 | 11,560 | (+1%) | 11,595 | 11,632 | (+0%) |
| 15 | ▲ +1 | Pakistan Telecommuication company limited | 17557 | 16,989,440 | 16,282,880 | (-4%) | 7,784 | 10,851 | (+39%) | 8,353 | 11,115 | (+33%) |
| 16 | ▼ -5 | Startup maintainer | 58224 | 4,654,592 | 4,611,840 | (-1%) | 11,357 | 10,055 | (-11%) | 11,380 | 10,073 | (-11%) |
| 17 | ▼ -2 | Mahanagar Telephone Nigam Limited | 17813 | 2,002,944 | 1,929,984 | (-4%) | 8,622 | 9,973 | (+16%) | 8,872 | 10,004 | (+13%) |
| 18 | ▲ +881 | Telecomunicaciones MOVILNET | 27889 | 205,312 | 355,584 | (+73%) | 41 | 9,640 | (+23,412%) | 41 | 9,640 | (+23,412%) |
| 19 | ▼ -5 | HATHWAY CABLE AND DATACOM LIMITED | 17488 | 1,016,832 | 1,017,344 | (0%) | 10,683 | 9,265 | (-13%) | 10,795 | 9,305 | (-14%) |
| 20 | ▲ +16 | Telecom Argentina S.A. | 7303 | 9,369,344 | 9,377,536 | (0%) | 4,460 | 8,477 | (+90%) | 4,464 | 8,480 | (+90%) |
* Indicates change over prior quarter
In the table below, we compare the numbers of unique malware addresses reported for hosting malware in hosting networks (ASNs) for two consecutive quarters.
Ranking of Hosting Networks (ASNs) by Number of Unique Malware Addresses, Quarter over Quarter (April to June 2023)
Hosting Providers with a minimum of 50,000 addresses assigned to the ASN and 25 malware records
| IPv4 Addresses Assigned | Unique Malware Addresses | Total Malware Records | ||||||||||
| Rank | Hosting Provider | ASN | January to March 2023 | April to June 2023 | January to March 2023 | April to June 2023 ▼ | January to March 2023 | April to June 2023 | ||||
| 1 | — | No.31,Jin-rong Street | 4134 | 120,877,312 | 121,029,376 | (0%) | 87,792 | 96,539 | (+10%) | 94,615 | 100,124 | (+6%) |
| 2 | — | CHINA UNICOM China169 Backbone | 4837 | 58,793,728 | 58,774,016 | (-0%) | 66,947 | 65,416 | (-2%) | 104,592 | 94,597 | (-10%) |
| 3 | ▲ +1* | Bharat Sanchar Nigam Ltd | 9829 | 11,240,960 | 11,322,624 | (+1%) | 40,366 | 60,069 | (+49%) | 50,022 | 63,941 | (+28%) |
| 4 | ▲ +1 | DigitalOcean, LLC | 14061 | 2,817,792 | 2,848,256 | (+1%) | 26,497 | 28,871 | (+9%) | 26,965 | 29,355 | (+9%) |
| 5 | ▲ +18 | VNPT Corp | 45899 | 16,360,192 | 16,249,088 | (-1%) | 5,814 | 21,716 | (+274%) | 5,884 | 21,727 | (+269%) |
| 6 | ▲ +13 | TELEF�NICA BRASIL S.A | 26599 | 24,740,608 | 25,655,040 | (+4%) | 6,248 | 15,451 | (+147%) | 6,339 | 15,457 | (+144%) |
| 7 | ▼ -4 | Chunghwa Telecom Co., Ltd. | 3462 | 13,361,920 | 13,361,152 | (-0%) | 50,052 | 14,872 | (-70%) | 50,245 | 14,988 | (-70%) |
| 8 | ▼ -2 | Amazon.com, Inc. | 14618 | 16,428,544 | 16,504,832 | (0%) | 16,276 | 14,682 | (-10%) | 16,350 | 14,847 | (-9%) |
| 9 | ▲ +5 | Amazon.com, Inc. | 16509 | 44,484,352 | 44,960,000 | (+1%) | 8,069 | 13,582 | (+68%) | 22,139 | 13,950 | (-37%) |
| 10 | ▲ +5 | TE-AS | 8452 | 25,754,368 | 25,893,120 | (+1%) | 8,018 | 12,818 | (+60%) | 8,029 | 12,827 | (+60%) |
| 11 | ▼ -1 | Google LLC | 396982 | 22,693,120 | 23,200,000 | (+2%) | 11,211 | 12,631 | (+13%) | 11,766 | 13,385 | (+14%) |
| 12 | ▼ -4 | PJSC Rostelecom | 12389 | 19,245,312 | 19,412,480 | (+1%) | 11,457 | 11,560 | (+1%) | 11,595 | 11,632 | (+0%) |
| 13 | ▼ -6 | Linode, LLC | 63949 | 719,104 | 797,184 | (+11%) | 12,298 | 11,333 | (-8%) | 12,480 | 11,644 | (-7%) |
| 14 | ▲ +2 | Pakistan Telecommuication company limited | 17557 | 16,989,440 | 16,282,880 | (-4%) | 7,784 | 10,851 | (+39%) | 8,353 | 11,115 | (+33%) |
| 15 | ▼ -6 | Startup maintainer | 58224 | 4,654,592 | 4,611,840 | (-1%) | 11,357 | 10,055 | (-11%) | 11,380 | 10,073 | (-11%) |
| 16 | ▼ -3 | Mahanagar Telephone Nigam Limited | 17813 | 2,002,944 | 1,929,984 | (-4%) | 8,622 | 9,973 | (+16%) | 8,872 | 10,004 | (+13%) |
| 17 | ▲ +858 | Telecomunicaciones MOVILNET | 27889 | 205,312 | 355,584 | (+73%) | 41 | 9,640 | (+23,412%) | 41 | 9,640 | (+23,412%) |
| 18 | ▼ -6 | HATHWAY CABLE AND DATACOM LIMITED | 17488 | 1,016,832 | 1,017,344 | (0%) | 10,683 | 9,265 | (-13%) | 10,795 | 9,305 | (-14%) |
| 19 | ▲ +13 | Telecom Argentina S.A. | 7303 | 9,369,344 | 9,377,536 | (0%) | 4,460 | 8,477 | (+90%) | 4,464 | 8,480 | (+90%) |
| 20 | ▼ -3 | Uninet S.A. de C.V. | 8151 | 20,281,344 | 20,885,248 | (+3%) | 7,290 | 7,909 | (+8%) | 7,315 | 7,934 | (+8%) |
* Indicates change over prior quarter
| Quarterly Update: Hosting Networks |
|||
| Quarter over Quarter: Key Statistics |
Quarter over Quarter: Top Level Domains |
Quarter over Quarter: Registrars |
Quarter over Quarter: Hosting Networks |