Botnet Statistics for February 2017

detection period: 2017-02-01 00:00 - 2017-02-28 23:59 UTC
total number of suspected botnet IPs: 24056
number of blocked spams: 2806870
recipient count of blocked spams: 77607050

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	11646
2	China	9164
3	Viet Nam	512
4	India	434
5	United States	218
6	Russian Federation	190
7	Brazil	150
8	Mexico	121
9	Iran	108
10	Peru	86
11	Italy	74
12	Colombia	72
13	Turkey	68
14	South Korea	60
15	Indonesia	57
16	Argentina	55
17	Ukraine	53
18	Thailand	53
19	Saudi Arabia	48
20	United Kingdom	48
21	Pakistan	40
22	Spain	38
23	Germany	36
24	Chile	27
25	Israel	24

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2472445
2	China	238477
3	United States	36642
4	Poland	15817
5	Brazil	10004
6	Colombia	6053
7	Italy	2838
8	India	2744
9	South Korea	2657
10	Macau	2486
11	Chile	2380
12	Russian Federation	2000
13	Argentina	1508
14	Ukraine	1359
15	Azerbaijan	1336
16	United Kingdom	1113
17	Saudi Arabia	1057
18	South Africa	1046
19	Bolivia	917
20	Venezuela	627
21	Germany	623
22	Pakistan	583
23	Czech Republic	424
24	Kazakhstan	377
25	Viet Nam	260

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	73139889
2	China	2887228
3	United States	332688
4	Brazil	266436
5	Colombia	179522
6	Italy	83750
7	India	80806
8	South Korea	78905
9	Macau	73629
10	Chile	70263
11	Russian Federation	59418
12	Argentina	44726
13	Azerbaijan	39640
14	Saudi Arabia	31218
15	South Africa	31100
16	Bolivia	27286
17	United Kingdom	24295
18	Ukraine	22571
19	Venezuela	18586
20	Germany	18303
21	Pakistan	17313
22	Poland	15817
23	Czech Republic	12427
24	Kazakhstan	11110
25	Viet Nam	7739

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	11325
2	CHINANET-HN	2093
3	UNICOM-ZJ	909
4	CHINANET-JS	605
5	UNICOM-SD	553
6	WASU-BB	534
7	UNICOM-GX	445
8	CHINANET-GD	309
9	VNPT-VNNIC-VN	271
10	CHINANET-CQ	211
11	UNICOM-LN	205
12	CMNET	200
13	WASU	177
14	CHINANET-AH	173
15	CHINANET-GZ	162
16	UNICOM-HA	158
17	CHINANET-YN	156
18	UNICOM-SX	155
19	CHINANET-ZJ	146
20	UNICOM-HE	144
21	UNICOM-GD	134
22	BSNLNET	105
23	UNICOM-CQ	98
24	SEEDNET-NET	98
25	CHINANET-SN	90

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	2466755
2	CHINANET-HN	153211
3	SCN-6	24539
4	EURONET-ISP	13279
5	CHINANET-JS	8133
6	UNICOM-SD	7784
7	RingLink	7226
8	CHINANET-ZJ	6320
9	UNICOM-GX	5839
10	CHEAP-WINDOWS-VPS	5413
11	002.558.157/0001-62	3781
12	CHINANET-GD	3318
13	CMNET	3199
14	CHINANET-TJ	2730
15	CO-ETBE-LACNIC	2706
16	TencentCloud	2703
17	KORNET-KR	2641
18	PL-FUFO-7	2536
19	SMARTONE-MO	2468
20	UNICOM-LN	2395
21	UNICOM-HE	2138
22	CHINANET-CQ	2126
23	UNICOM-ZJ	2081
24	CO-ACSA-LACNIC	1840
25	CC-09	1761

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	72971862
2	CHINANET-HN	368569
3	CHINANET-JS	240067
4	UNICOM-SD	229888
5	RingLink	214103
6	CHINANET-ZJ	186801
7	UNICOM-GX	172106
8	SCN-6	148081
9	002.558.157/0001-62	112229
10	CHINANET-GD	97925
11	CMNET	94421
12	CHINANET-TJ	80922
13	CO-ETBE-LACNIC	80322
14	TencentCloud	79717
15	KORNET-KR	78425
16	SMARTONE-MO	73092
17	UNICOM-LN	70622
18	CHINANET-CQ	63046
19	UNICOM-HE	62973
20	UNICOM-ZJ	61522
21	CO-ACSA-LACNIC	54583
22	SEEDNET-NET	50466
23	CHINANET-YN	49879
24	ALISOFT	49355
25	CHINANET-AH	47828