Botnet Statistics for January 2017

detection period: 2017-01-01 00:00 - 2017-01-31 23:59 UTC
total number of suspected botnet IPs: 5730
number of blocked spams: 551596
recipient count of blocked spams: 2283929

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4192
2	Taiwan	520
3	United States	111
4	Brazil	100
5	Russian Federation	66
6	Italy	58
7	India	57
8	Viet Nam	50
9	Germany	38
10	Colombia	33
11	United Kingdom	30
12	Argentina	26
13	South Korea	24
14	Ukraine	22
15	Spain	22
16	Japan	20
17	Indonesia	19
18	Romania	17
19	Poland	17
20	Netherlands	17
21	Mexico	14
22	Armenia	14
23	France	13
24	Turkey	12
25	Pakistan	12

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	239181
2	China	167396
3	United States	112297
4	Poland	8544
5	Brazil	3225
6	Colombia	2519
7	India	2439
8	Russian Federation	1773
9	South Korea	1287
10	Chile	930
11	Macau	859
12	Italy	703
13	Bangladesh	620
14	Azerbaijan	578
15	Netherlands	543
16	South Africa	517
17	Cambodia	504
18	El Salvador	486
19	Ukraine	484
20	Pakistan	449
21	Kazakhstan	430
22	Bolivia	409
23	Saudi Arabia	404
24	Argentina	383
25	United Kingdom	368

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	947020
2	United States	516409
3	Taiwan	362969
4	Brazil	71599
5	Colombia	58022
6	India	40369
7	Russian Federation	38849
8	South Korea	26192
9	Chile	24940
10	Macau	23669
11	Italy	13345
12	Azerbaijan	13162
13	Saudi Arabia	11132
14	Bolivia	10850
15	South Africa	10585
16	Pakistan	10512
17	Argentina	10476
18	United Kingdom	9583
19	Germany	9529
20	Thailand	8661
21	Poland	8544
22	Kazakhstan	7069
23	Ukraine	6222
24	Canada	5980
25	Turkey	4441

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	1745
2	HINET-NET	381
3	UNICOM-GX	215
4	UNICOM-SD	205
5	CHINANET-JS	199
6	CHINANET-HB	176
7	UNICOM-BJ	133
8	CHINANET-GD	114
9	UNICOM-LN	106
10	UNICOM-GD	78
11	UNICOM-SX	74
12	CMNET	60
13	UNICOM-HE	54
14	CHINANET-CQ	54
15	CHINANET-GZ	51
16	CHINANET-ZJ	46
17	CHINANET-AH	45
18	CHINANET-YN	43
19	CHINANET-XJ	42
20	UNICOM-HA	36
21	ALISOFT	35
22	TencentCloud	33
23	UNICOM-CQ	32
24	SEEDNET-NET	32
25	CHINANET-ZJ-TZ	31

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	237393
2	CHINANET-HN	134368
3	SCN-6	89190
4	VIS-BLOCK	10827
5	PL-FUFO-7	5660
6	NETBLK-CENTURYTEL8	5243
7	NET3-INC	4212
8	EURONET-ISP	2821
9	UNICOM-GX	2766
10	UNICOM-SD	2501
11	RingLink	2400
12	CHINANET-GD	2241
13	CMNET	2232
14	CHINANET-JS	2107
15	CHINANET-ZJ	1725
16	CCCH3-4	1586
17	UNICOM-GD	1277
18	TencentCloud	1111
19	KORNET-KR	1031
20	002.558.157/0001-62	893
21	SMARTONE-MO	859
22	CHINANET-SH	840
23	CO-ACSA-LACNIC	814
24	CHINANET-TJ	788
25	CO-ETBE-LACNIC	765

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	SCN-6	445743
2	HINET-NET	314856
3	CHINANET-HN	165183
4	UNICOM-GX	74065
5	RingLink	66849
6	CHINANET-JS	60804
7	UNICOM-SD	60601
8	CHINANET-GD	60543
9	CHINANET-ZJ	47588
10	CMNET	36587
11	TencentCloud	31269
12	KORNET-KR	25589
13	002.558.157/0001-62	23935
14	SMARTONE-MO	23669
15	CHINANET-SH	23093
16	CO-ACSA-LACNIC	21356
17	NET3-INC	21191
18	CHINANET-TJ	21163
19	CO-ETBE-LACNIC	20486
20	ALISOFT	20290
21	UNICOM-LN	19206
22	UNICOM-SX	18150
23	UNICOM-GD	16591
24	033.530.486/0001-29	16313
25	CHINANET-XJ	14299