Malware Activity in Hosting Networks (ASNs) July 1,2025 - September 30,2025
To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identify the hosting network where malware were reported.
IPv4 addresses may be reported for hosting one or more malware; for example, two or several URLs may contain the same IPv4 address but the PATHS or QUERIES may identify different malware.
In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware (“Unique Malware Addresses”). Complete lists of ASNs where malware was reported for the quarter can be downloaded in CSV format from the Records page.
Ranking of Hosting Networks (ASNs) by Number of Malware Records (July to September 2025)
| Rank | AS Name | AS number | # Routed IPv4 Addresses |
Unique Malware Addresses | Total Malware Records ▼ |
| 1 | CHINA UNICOM China169 Backbone | 4837 | 59,353,600 | 58,870 | 105,869 |
| 2 | DigitalOcean, LLC | 14061 | 3,023,616 | 50,052 | 50,618 |
| 3 | Bharat Sanchar Nigam Ltd | 9829 | 7,285,504 | 46,448 | 50,123 |
| 4 | No.31,Jin-rong Street | 4134 | 128,037,888 | 35,980 | 38,930 |
| 5 | Google LLC | 396982 | 53,825,536 | 35,373 | 35,838 |
| 6 | Millenicom Telekomunikasyon Hizmetleri Anonim Sirketi | 34296 | 45,312 | 33,296 | 33,296 |
| 7 | PENTECH BILISIM TEKNOLOJILERI SANAYI VE TICARET LIMITED SIRKETi | 48678 | 76,800 | 20,783 | 20,795 |
| 8 | TE-AS | 8452 | 21,058,816 | 18,266 | 18,270 |
| 9 | Amazon.com, Inc. | 16509 | 216,344,832 | 13,275 | 17,253 |
| 10 | TOT Public Company Limited | 23969 | 4,589,568 | 13,513 | 13,593 |
| 11 | Chunghwa Telecom Co., Ltd. | 3462 | 13,345,280 | 11,080 | 11,121 |
| 12 | Amazon.com, Inc. | 14618 | 19,340,544 | 8,695 | 10,475 |
| 13 | VNPT Corp | 45899 | 15,780,096 | 10,036 | 10,344 |
| 14 | Startup maintainer | 58224 | 3,860,736 | 9,990 | 10,149 |
| 15 | Microsoft Corporation | 8075 | 66,561,280 | 7,767 | 8,954 |
| 16 | Uninet S.A. de C.V. | 8151 | 20,345,344 | 8,867 | 8,923 |
| 17 | FPT Telecom Company | 18403 | 5,125,632 | 8,371 | 8,456 |
| 18 | Cloudflare, Inc. | 13335 | 1,388,288 | 3,554 | 8,161 |
| 19 | PJSC Rostelecom | 12389 | 20,732,416 | 7,893 | 8,067 |
| 20 | Viettel Group | 7552 | 21,323,264 | 7,910 | 8,040 |
Ranking of Hosting Networks (ASNs) by Number of Unique Malware Addresses (July to September 2025)
| Rank | AS Name | AS number | # Routed IPv4 Addresses |
Unique Malware Addresses ▼ | Total Malware Records |
| 1 | CHINA UNICOM China169 Backbone | 4837 | 59,353,600 | 58,870 | 105,869 |
| 2 | DigitalOcean, LLC | 14061 | 3,023,616 | 50,052 | 50,618 |
| 3 | Bharat Sanchar Nigam Ltd | 9829 | 7,285,504 | 46,448 | 50,123 |
| 4 | No.31,Jin-rong Street | 4134 | 128,037,888 | 35,980 | 38,930 |
| 5 | Google LLC | 396982 | 53,825,536 | 35,373 | 35,838 |
| 6 | Millenicom Telekomunikasyon Hizmetleri Anonim Sirketi | 34296 | 45,312 | 33,296 | 33,296 |
| 7 | PENTECH BILISIM TEKNOLOJILERI SANAYI VE TICARET LIMITED SIRKETi | 48678 | 76,800 | 20,783 | 20,795 |
| 8 | TE-AS | 8452 | 21,058,816 | 18,266 | 18,270 |
| 9 | TOT Public Company Limited | 23969 | 4,589,568 | 13,513 | 13,593 |
| 10 | Amazon.com, Inc. | 16509 | 216,344,832 | 13,275 | 17,253 |
| 11 | Chunghwa Telecom Co., Ltd. | 3462 | 13,345,280 | 11,080 | 11,121 |
| 12 | VNPT Corp | 45899 | 15,780,096 | 10,036 | 10,344 |
| 13 | Startup maintainer | 58224 | 3,860,736 | 9,990 | 10,149 |
| 14 | Uninet S.A. de C.V. | 8151 | 20,345,344 | 8,867 | 8,923 |
| 15 | Amazon.com, Inc. | 14618 | 19,340,544 | 8,695 | 10,475 |
| 16 | FPT Telecom Company | 18403 | 5,125,632 | 8,371 | 8,456 |
| 17 | Viettel Group | 7552 | 21,323,264 | 7,910 | 8,040 |
| 18 | PJSC Rostelecom | 12389 | 20,732,416 | 7,893 | 8,067 |
| 19 | Microsoft Corporation | 8075 | 66,561,280 | 7,767 | 8,954 |
| 20 | NTT Communications Corporation | 4713 | 28,713,728 | 7,073 | 7,098 |
| Quarterly Update: Key Statistics |
Quarterly Update: Top Level Domains |
Quarterly Update: Registrars |
Quarterly Update: Hosting Networks |
| Quarter over Quarter: Hosting Networks |