Spam Activity in Hosting Networks (ASNs)
Quarter over Quarter Comparison:
December 1,2025 - February 28,2026
To see where spammed content or spambots were being hosted, we collected the IP addresses that spam domains were resolving to when spam activity was detected and added to a threat or block list. We then identified the ASN where the IP prefix containing the IP address was allocated. This number identifies the hosting network where spammed content or a spambot was reported.
In the table below, we compare the ranking of Hosting Networks (ASNs) for the September 1, 2025 - November 30, 2025 period to the ranking for the December 1,2025 - February 28,2026 period.
Ranking of Hosting Networks (ASNs) by Hosted Spammed Content or Spambots, Quarter over Quarter (December to February 2026)
| IPv4 Addresses Assigned | # of Spammed Content or Spambot Hosts |
||||||||
| Rank | Hosting Provider | ASN | September to November 2025 | December to February 2026 | September to November 2025 | December to February 2026 ▼ | |||
| 1 | — | Cloudflare, Inc. | 13335 | 1,405,696 | 1,422,592 | (+1%) | 658,549 | 478,923 | (-27%) |
| 2 | ▲ +2* | Alibaba (US) Technology Co., Ltd. | 45102 | 7,673,600 | 7,969,024 | (+4%) | 142,756 | 128,198 | (-10%) |
| 3 | — | CTG Server Limited | 152194 | 1,041,664 | 1,032,960 | (-1%) | 152,329 | 108,858 | (-29%) |
| 4 | ▼ -2 | Amazon.com, Inc. | 16509 | 201,312,256 | 218,616,064 | (+9%) | 235,137 | 96,778 | (-59%) |
| 5 | — | CNSERVERS LLC | 40065 | 1,389,568 | 1,388,800 | (0%) | 132,143 | 85,302 | (-35%) |
| 6 | ▲ +8 | OVH SAS | 16276 | 4,715,776 | 4,765,440 | (+1%) | 49,309 | 52,088 | (+6%) |
| 7 | ▼ -1 | POWER LINE (HK) CO., LIMITED | 132839 | 1,139,200 | 847,104 | (-26%) | 106,404 | 47,913 | (-55%) |
| 8 | ▲ +1 | Cloudflare London, LLC | 209242 | 125,952 | 120,320 | (-4%) | 73,697 | 45,696 | (-38%) |
| 9 | ▼ -1 | Microsoft Corporation | 8075 | 66,551,552 | 66,529,536 | (0%) | 84,689 | 44,237 | (-48%) |
| 10 | ▼ -3 | DingFeng XinHui(HongKong) Technology Limited | 134548 | 1,467,904 | 1,437,696 | (-2%) | 91,692 | 40,027 | (-56%) |
| 11 | ▲ +4 | Google LLC | 396982 | 54,314,240 | 54,441,216 | (0%) | 47,130 | 38,416 | (-18%) |
| 12 | ▲ +16 | Antbox Networks Limited | 138995 | 75,264 | 73,984 | (-2%) | 21,074 | 37,584 | (+78%) |
| 13 | N/R** | BGPNET PTE. LTD. | 4907 | 9,984 | 9,984 | (0%) | 7,256 | 35,039 | (+383%) |
| 14 | ▲ +3 | Clayer Limited | 137951 | 413,952 | 392,448 | (-5%) | 44,826 | 31,137 | (-31%) |
| 15 | ▲ +8 | Shenzhen Tencent Computer Systems Company Limited | 132203 | 2,706,688 | 2,710,272 | (0%) | 28,976 | 27,537 | (-5%) |
| 16 | ▼ -6 | HENGDA NETWORK LIMITED | 138415 | 356,608 | 305,920 | (-14%) | 67,550 | 24,172 | (-64%) |
| 17 | ▲ +16 | STARCLOUD GLOBAL PTE., LTD. | 140224 | 227,840 | 237,056 | (+4%) | 18,380 | 20,174 | (+10%) |
| 18 | ▲ +14 | SonderCloud Limited | 133199 | 218,112 | 309,760 | (+42%) | 19,118 | 20,079 | (+5%) |
| 19 | ▲ +7 | Google LLC | 15169 | 2,550,272 | 2,553,344 | (0%) | 23,316 | 19,398 | (-17%) |
| 20 | ▲ +16 | Amazon.com, Inc. | 14618 | 19,331,584 | 19,873,024 | (+3%) | 13,738 | 18,047 | (+31%) |
* Indicates change over prior quarter
** Indicates not ranked in prior quarter; either number of addresses or number of spam attacks did not meet minimum threshold for ranking
Ranking of Hosting Networks (ASNs) by Hosted Content/Spambot Score, Quarter over Quarter (December to February 2026)
Hosting Providers with a minimum of 50,000 addresses assigned to the ASN and 25 spam attacks
| IPv4 Addresses Assigned | Spam Score | ||||||||
| Rank | Hosting Provider | ASN | September to November 2025 | December to February 2026 | September to November 2025 | December to February 2026 ▼ | |||
| 1 | ▲ +7* | Antbox Networks Limited | 138995 | 75,264 | 73,984 | (-2%) | 2,800.0 | 5,080.0 | (+81%) |
| 2 | ▼ -1 | Cloudflare London, LLC | 209242 | 125,952 | 120,320 | (-4%) | 5,851.2 | 3,797.9 | (-35%) |
| 3 | ▲ +1 | Cloudflare, Inc. | 13335 | 1,405,696 | 1,422,592 | (+1%) | 4,684.9 | 3,366.6 | (-28%) |
| 4 | ▼ -2 | cognetcloud INC | 401696 | 63,232 | 105,216 | (+66%) | 5,715.3 | 1,318.6 | (-77%) |
| 5 | ▲ +6 | Tcloudnet | 399077 | 131,712 | 130,560 | (-1%) | 1,805.7 | 1,178.4 | (-35%) |
| 6 | ▲ +8 | CTG Server Limited | 152194 | 1,041,664 | 1,032,960 | (-1%) | 1,462.4 | 1,053.9 | (-28%) |
| 7 | ▲ +22 | Namecheap, Inc. | 22612 | 136,768 | 112,256 | (-18%) | 710.6 | 1,051.7 | (+48%) |
| 8 | ▼ -3 | Netsec Limited | 45753 | 111,104 | 110,336 | (-1%) | 4,158.0 | 915.9 | (-78%) |
| 9 | ▼ -3 | PEG TECH INC | 398478 | 174,080 | 166,144 | (-5%) | 3,458.0 | 891.4 | (-74%) |
| 10 | ▲ +32 | Dream Wave Shizuoka Co. Ltd. | 18068 | 51,456 | 52,480 | (+2%) | 353.7 | 868.5 | (+146%) |
| 11 | ▲ +15 | STARCLOUD GLOBAL PTE., LTD. | 140224 | 227,840 | 237,056 | (+4%) | 806.7 | 851.0 | (+5%) |
| 12 | ▼ -5 | Forewin Telecom Group Limited | 38186 | 68,352 | 66,816 | (-2%) | 2,960.1 | 842.0 | (-72%) |
| 13 | ▼ -10 | Dimension Network & Communication Limited | 59371 | 134,656 | 134,400 | (0%) | 4,706.6 | 825.3 | (-82%) |
| 14 | ▲ +4 | Clayer Limited | 137951 | 413,952 | 392,448 | (-5%) | 1,082.9 | 793.4 | (-27%) |
| 15 | ▼ -6 | HENGDA NETWORK LIMITED | 138415 | 356,608 | 305,920 | (-14%) | 1,894.2 | 790.1 | (-58%) |
| 16 | ▲ +11 | Cloudie Limited | 55933 | 328,448 | 179,456 | (-45%) | 799.6 | 763.5 | (-5%) |
| 17 | ▲ +5 | SonderCloud Limited | 133199 | 218,112 | 309,760 | (+42%) | 876.5 | 648.2 | (-26%) |
| 18 | ▲ +17 | Kaopu Cloud HK Limited | 138915 | 178,944 | 184,064 | (+3%) | 519.5 | 643.7 | (+24%) |
| 19 | ▼ -6 | ASN block not managed by the RIPE NCC | 8796 | 203,776 | 176,384 | (-13%) | 1,638.0 | 643.1 | (-61%) |
| 20 | — | CNSERVERS LLC | 40065 | 1,389,568 | 1,388,800 | (0%) | 951.0 | 614.2 | (-35%) |
* Indicates change over prior quarter
| Quarterly Update: Hosting Networks |
|||
| Quarter over Quarter: Key Statistics |
Quarter over Quarter: Top Level Domains |
Quarter over Quarter: Registrars |
Quarter over Quarter: Hosting Networks |