6 networks carry half of all domains
232 carry ninety percent. The remaining 52,431 networks share what is left. Concentration this steep means a single operator's policy decision reaches more of the web than most governments' do.
322.6M attributable domains across 52,663 networks, as of 2026-09-24.
Networks carrying half of all attributable domains
6 of 52,663 networks observed carrying domains
Source: Datazag · as of 2026-09-24
companies carry half, once networks run by the same operator are grouped
322.6M attributable domains across 52,663 networks
Source: Datazag · as of 2026-09-24
Networks carrying ninety per cent of attributable domains
232 of 52,663 networks observed carrying domains
Source: Datazag · as of 2026-09-24
networks observed carrying at least one domain
322.6M attributable domains
Source: Datazag · as of 2026-09-24
The tail is long and carries almost nothing
232 networks reach ninety percent; the remaining 52,431 share the last tenth. Log axis — each gridline is ten times the last.
Half of everything is reached at network 6, before the curve has left the first gridline.
Ninety percent is reached at 232. The curve is nearly flat from there.
The remaining 52,431 networks divide the last tenth between them.
The top 15 networks carry 62.8% of all domains
Domains carried is not traffic, revenue or importance: a hosting network with millions of small sites outranks one carrying a handful of enormous ones. The largest are named; the rest of the curve is not.
The 15 networks carrying the most attributable domains
| # | Network | Kind of business | Country | Domains | Cumulative |
|---|---|---|---|---|---|
| 1 | AmazonAS16509 | Hosting & Cloud | US | 76.7M | 23.8% |
| 2 | CloudflareAS13335 | Cloud & CDN | US | 46.4M | 38.1% |
| 3 | IONOSAS8560 | Hosting & Cloud | DE | 10.9M | 41.5% |
| 4 | HostingerAS47583 | Hosting & Cloud | CY | 9.8M | 44.6% |
| 5 | SquarespaceAS53831 | Hosting & Cloud | US | 9.6M | 47.5% |
| 6 | NamecheapAS22612 | Domain Registrar | US | 8.0M | 50.0% |
| 7 | WixAS58182 | Hosting & Cloud | IL | 7.8M | 52.4% |
| 8 | AmazonAS14618 | Hosting & Cloud | US | 7.6M | 54.8% |
| 9 | OVHcloudAS16276 | Hosting & Cloud | FR | 5.7M | 56.5% |
| 10 | HetznerAS24940 | Hosting & Cloud | DE | 5.6M | 58.3% |
| 11 | GoogleAS396982 | Hosting & Cloud | US | 3.6M | 59.4% |
| 12 | OracleAS31898 | Hosting & Cloud | US | 2.8M | 60.3% |
| 13 | SedoAS47846 | Domain Parking | DE | 2.8M | 61.1% |
| 14 | LinodeAS63949 | Hosting & Cloud | SG | 2.7M | 62.0% |
| 15 | StratoAS6724 | Hosting & Cloud | DE | 2.7M | 62.8% |
Hosting & Cloud operators carry 68.2% of attributable domains
The next largest class, cloud & cdn, carries 16.0%. Grouping by what the operator actually is, rather than by network, is what separates a concentrated market from a merely large one.
Across 1,383 cataloged networks.
Attributable domains by the kind of business running the network
| Class | Operators | Networks | Domains | Share of corpus |
|---|---|---|---|---|
| Hosting & Cloud | 818 | 895 | 219.9M | 68.19% |
| Cloud & CDN | 9 | 14 | 51.5M | 15.96% |
| Domain Registrar | 19 | 31 | 20.3M | 6.28% |
| Network & ISP | 397 | 437 | 11.7M | 3.63% |
| Domain Parking | 5 | 6 | 9.7M | 3.01% |
Counting networks understates it
A company is not a network. 73 of the 1,325 cataloged operators run more than one, the largest of them 11 — which is why 5 companies reach half where 6 networks do.
What is ASN?What the head actually means
Two networks carry 38.1% of attributable domains between them, a hundred carry 83.5%. Domains with no corporate relationship routinely share an operator, an abuse policy, and a failure mode.
It cuts both ways: at this density a shared network on its own is weak evidence.
58.3% of prefix announcements carry no signed origin claim
41.2% are authorized by a ROA and 0.48% contradict one. The unsigned majority is not the same population as the contradicted minority, and the two are never summed.
Our own BGP collection, cross-referenced with public RPKI data. Per announced prefix, as of 2026-09-24.
Most announcements are unsigned rather than wrong
Whether a covering ROA authorizes each prefix's observed origin AS.
Reading the three states
Reported separately, never summed. Valid and not-found are both ordinary; invalid, at 0.48%, is where a published claim and an announcement disagree.
What is RPKI?The figures
Free to quote with attribution.
Distinct IPv4 prefixes observed
1,171,358 of the Datazag BGP collection
Source: Datazag · as of 2026-09-24
Networks observed announcing address space
79,192 of the Datazag BGP collection
Source: Datazag · as of 2026-09-24
Prefix announcements with a valid RPKI ROA
483,931 of 1.2M IPv4 prefix announcements in intel.prefix_intel
Source: Datazag · as of 2026-09-24
Prefix announcements with no covering ROA
685,275 of 1.2M IPv4 prefix announcements in intel.prefix_intel
Source: Datazag · as of 2026-09-24
Prefix announcements that are RPKI-invalid
5,677 of 1.2M IPv4 prefix announcements in intel.prefix_intel
Source: Datazag · as of 2026-09-24
97.41% of prefixes announced by more than one network are stable multi-homing, not hijacks
Counted naively, every prefix announced by more than one network looks suspicious: 194,872 of them in our collection. Excluding those whose multi-origin announcement has held for more than 30 days leaves 4,592 hijack candidates (0.39% of prefix announcements) — small enough to investigate rather than to headline.
MOAS prefixes that are stable multi-homing, not hijacks
189,823 of 194,872 MOAS prefixes observed
Source: Datazag · as of 2026-09-24
Prefixes flagged as hijack candidates
4,592 of 1.2M IPv4 prefix announcements in intel.prefix_intel
Source: Datazag · as of 2026-09-24
Query these statistics directly
Every figure on this page is served as Parquet. Same format as the corpus itself.
SELECT * FROM read_parquet('https://observatory.datazag.com/observatory_statistics.parquet');