Botnet Statistics for March 2017

detection period: 2017-03-01 00:00 - 2017-03-31 23:59 UTC
total number of suspected botnet IPs: 16031
number of blocked spams: 1211856
recipient count of blocked spams: 33008055

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	7963
2	China	5025
3	Viet Nam	387
4	India	332
5	United States	254
6	Mexico	148
7	Russian Federation	140
8	Brazil	135
9	Iran	116
10	Indonesia	90
11	Peru	83
12	Pakistan	72
13	South Korea	72
14	Turkey	64
15	Colombia	61
16	Argentina	57
17	Saudi Arabia	45
18	Italy	44
19	France	38
20	Tunisia	36
21	Thailand	32
22	Ukraine	29
23	Germany	28
24	South Africa	26
25	Bangladesh	26

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1157391
2	United States	36098
3	China	8055
4	Russian Federation	1587
5	Sweden	1128
6	Netherlands	1074
7	Estonia	1060
8	Mexico	571
9	Romania	455
10	South Korea	435
11	Benin	424
12	Chile	411
13	Thailand	343
14	Colombia	332
15	Brazil	330
16	Canada	207
17	France	204
18	India	189
19	Ukraine	175
20	United Kingdom	145
21	Peru	131
22	Hong Kong	128
23	Ecuador	119
24	Italy	118
25	Macau	102

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	32603643
2	China	229711
3	United States	43387
4	Mexico	16069
5	South Korea	12376
6	Chile	11774
7	Colombia	9752
8	Brazil	9698
9	Thailand	9680
10	France	5831
11	India	5670
12	Russian Federation	4872
13	Peru	3645
14	Hong Kong	3635
15	Italy	3540
16	Ecuador	3285
17	Macau	3060
18	Argentina	2469
19	Ukraine	2466
20	Germany	2340
21	Azerbaijan	2070
22	South Africa	1890
23	United Kingdom	1740
24	Uruguay	1586
25	Pakistan	1380

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	7916
2	UNICOM-ZJ	1820
3	WASU-BB	979
4	WASU	490
5	CMNET	269
6	VNPT-VNNIC-VN	202
7	CHINANET-GD	184
8	CHINANET-JS	97
9	UNICOM-GX	86
10	BSNLNET	81
11	MSFT	80
12	CHINANET-AH	65
13	UNICOM-SD	64
14	BHARTI-IN	60
15	FPT-VN	53
16	UNICOM-HA	47
17	PTCLBB-PK	42
18	VIETEL-VN	40
19	UNICOM-GD	40
20	CHINANET-CQ	40
21	KORNET-KR	39
22	PE-TPSA-LACNIC	37
23	CHINANET-SC	35
24	CHINANET-FJ	35
25	ALISOFT	34

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1156871
2	UNKNOWN	11726
3	COLOA	6741
4	LSN-DLLSTX-2	3430
5	HSI-4	2896
6	UNIFIEDLAYER-NETWORK-14	2142
7	ALISOFT	2013
8	NET-172-93-237-0-24	1811
9	QUADRANET	1735
10	HSI-7	1302
11	S4Y1-NET	1301
12	SE-SERVERCONNECT-20090908	1128
13	UNIFIEDLAYER-NETWORK-12	1067
14	CC-14	1029
15	DSV4-4	991
16	RingLink	860
17	UNIFIEDLAYER-NETWORK-13	859
18	OC3-NETWORKS2	719
19	UNICOM-GX	659
20	MIR-TELEMATIKI	544
21	HSI-6	544
22	CHINANET-JS	527
23	Enterprise-Customer	419
24	HICHINA	381
25	LONGDONGU-CN	376

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	32588399
2	ALISOFT	55227
3	RingLink	24579
4	UNICOM-GX	19615
5	CHINANET-JS	14910
6	UNKNOWN	11726
7	LONGDONGU-CN	10131
8	HICHINA	10105
9	MX-GDUN-LACNIC	9126
10	EHOSTIDC-KR	8566
11	CL-TCSA41-LACNIC	7891
12	UNICOM-SD	7771
13	CHINANET-ZJ	7530
14	CHINANET-SH	6974
15	COLOA	6741
16	TencentCloud	6428
17	TANET-BNETA	6363
18	INET-TH	5695
19	ALIBABA-CN-NET	5426
20	UNICOM-SC	5250
21	CMNET	4831
22	MX-PPSC6-LACNIC	4771
23	CO-ETBE-LACNIC	4221
24	KORNET-KR	3810
25	FR-OVH-20100119	3640