Malware Activity in Hosting Networks (ASNs) October 1,2025 - December 31,2025

To see where malware was being served up, or distributed among peer-to-peer hosts, we collected the IP addresses that malware domains and malware URLs were resolving to when malware activity was reported. We then identified the Autonomous System (ASN) where the IP prefix containing the IP address to identify the hosting network where malware were reported.

IPv4 addresses may be reported for hosting one or more malware; for example, two or several URLs may contain the same IPv4 address but the PATHS or QUERIES may identify different malware.

In the table below, we show the twenty hosting networks with the highest numbers of IPv4 addresses reported as serving up or distributing malware (“Unique Malware Addresses”). Complete lists of ASNs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of Hosting Networks (ASNs) by Number of Malware Records (October to December 2025)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses Total Malware Records ▼
1 CHINA UNICOM China169 Backbone 4837 59,573,504 55,998 102,985
2 No.31,Jin-rong Street 4134 123,827,200 85,110 95,048
3 DigitalOcean, LLC 14061 3,037,952 59,342 59,653
4 Cloudflare, Inc. 13335 1,409,792 7,383 28,279
5 Google LLC 396982 54,388,224 19,913 20,117
6 TE-AS 8452 22,337,792 16,648 16,663
7 Chunghwa Telecom Co., Ltd. 3462 13,345,536 14,052 14,239
8 Uninet S.A. de C.V. 8151 20,454,144 13,665 14,184
9 TOT Public Company Limited 23969 4,815,872 12,957 12,985
10 Amazon.com, Inc. 16509 206,570,240 8,635 11,177
11 TURKCELL ILETISIM HIZMETLERI A.S. 16135 1,739,520 10,648 10,694
12 Mandic S.A. 262545 19,712 3 9,950
13 Quadrant Televentures Limited 17917 216,064 9,786 9,786
14 Microsoft Corporation 8075 66,516,480 9,208 9,323
15 VNPT Corp 45899 15,799,040 8,938 9,187
16 WIND TRE S.P.A. 1267 7,971,072 8,142 9,025
17 Deutsche Telekom AG 3320 36,189,440 7,964 8,699
18 PJSC Rostelecom 12389 21,004,032 8,191 8,311
19 Bharat Sanchar Nigam Ltd 9829 7,262,976 6,090 8,086
20 cheapy.host LLC 401120 3,328 242 7,635

Ranking of Hosting Networks (ASNs) by Number of Unique Malware Addresses (October to December 2025)

Rank AS Name AS number # Routed
IPv4 Addresses		 Unique Malware Addresses ▼ Total Malware Records
1 No.31,Jin-rong Street 4134 123,827,200 85,110 95,048
2 DigitalOcean, LLC 14061 3,037,952 59,342 59,653
3 CHINA UNICOM China169 Backbone 4837 59,573,504 55,998 102,985
4 Google LLC 396982 54,388,224 19,913 20,117
5 TE-AS 8452 22,337,792 16,648 16,663
6 Chunghwa Telecom Co., Ltd. 3462 13,345,536 14,052 14,239
7 Uninet S.A. de C.V. 8151 20,454,144 13,665 14,184
8 TOT Public Company Limited 23969 4,815,872 12,957 12,985
9 TURKCELL ILETISIM HIZMETLERI A.S. 16135 1,739,520 10,648 10,694
10 Quadrant Televentures Limited 17917 216,064 9,786 9,786
11 Microsoft Corporation 8075 66,516,480 9,208 9,323
12 VNPT Corp 45899 15,799,040 8,938 9,187
13 Amazon.com, Inc. 16509 206,570,240 8,635 11,177
14 PJSC Rostelecom 12389 21,004,032 8,191 8,311
15 WIND TRE S.P.A. 1267 7,971,072 8,142 9,025
16 Deutsche Telekom AG 3320 36,189,440 7,964 8,699
17 Cloudflare, Inc. 13335 1,409,792 7,383 28,279
18 Amazon.com, Inc. 14618 19,340,032 6,642 6,882
19 NTT Communications Corporation 4713 28,648,192 6,607 6,613
20 Korea Telecom 4766 52,729,856 6,095 7,404

Quarterly Update:
Key Statistics		 Quarterly Update:
Top Level Domains		 Quarterly Update:
Registrars		 Quarterly Update:
Hosting Networks
Quarter over Quarter:
Hosting Networks