Botnet Statistics for April 2017

detection period: 2017-04-01 00:00 - 2017-04-30 23:59 UTC
total number of suspected botnet IPs: 6465
number of blocked spams: 346245
recipient count of blocked spams: 1670097

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4132
2	Viet Nam	458
3	India	323
4	United States	185
5	Russian Federation	158
6	South Korea	120
7	Brazil	70
8	Indonesia	54
9	Ukraine	43
10	Taiwan	43
11	Thailand	40
12	Pakistan	38
13	Mexico	36
14	Iran	32
15	France	30
16	Bangladesh	29
17	Argentina	27
18	Japan	26
19	Italy	25
20	Germany	25
21	Antigua And Barbuda	24
22	Turkey	23
23	United Kingdom	22
24	Singapore	20
25	Netherlands	19

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	245766
2	Singapore	24784
3	Turkey	11557
4	Germany	10995
5	Russian Federation	8461
6	Ukraine	8403
7	Netherlands	6068
8	China	3469
9	France	2507
10	Canada	2470
11	United Kingdom	2206
12	Sweden	2188
13	Taiwan	1742
14	Czech Republic	1378
15	Thailand	1373
16	Romania	1241
17	India	1198
18	Viet Nam	1111
19	Estonia	1022
20	Tunisia	728
21	Poland	634
22	Mexico	513
23	Chile	481
24	Italy	428
25	Pakistan	340

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	United States	1037732
2	China	92334
3	France	88911
4	Taiwan	48228
5	Thailand	37471
6	India	32547
7	Viet Nam	31112
8	Singapore	25123
9	Germany	20550
10	Tunisia	19648
11	Turkey	16058
12	Canada	15186
13	Ukraine	14165
14	Mexico	13713
15	Italy	11028
16	Russian Federation	10070
17	Pakistan	9291
18	Uruguay	8724
19	Brazil	7725
20	Chile	7037
21	Poland	6781
22	Armenia	6308
23	Netherlands	6068
24	Iran	5953
25	Iraq	5195

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	1414
2	WASU	962
3	CHINANET-GD	370
4	VNPT-VNNIC-VN	235
5	CHINANET-JS	227
6	UNICOM-BJ	153
7	BSNLNET	117
8	CHINANET-AH	105
9	KORNET-KR	84
10	VIETEL-VN	49
11	FPT-VN	48
12	BHARTI-IN	46
13	VIETEL-VNNIC-VN	44
14	CHINANET-HN	40
15	UNICOM-SD	37
16	UNICOM-HA	36
17	ETC-VNNIC-VN	35
18	CHINANET-SN	35
19	WASU-BB	34
20	CHINANET-YN	33
21	UNICOM-GD	32
22	CHINANET-SC	30
23	ALISOFT	27
24	UNICOM-JS	26
25	UNICOM-JL	24

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	NET3-INC	163684
2	UNKNOWN	34890
3	PUHI-AP	24769
4	POWERUPHOSTING	13015
5	PL-TRAFFIC-DEAL	10352
6	SHARKTECH	10146
7	UA-VOLIA-20061124	7676
8	TR-SGSTELECOM-20041027	5318
9	MAROSNET-193-124-176-0	3861
10	UNIFIEDLAYER-NETWORK-14	3645
11	SHARKTECH-3	2804
12	MAROSNET-193-124-184-0	2417
13	SE-SERVERCONNECT-20090908	2185
14	WII-OAK-2	2155
15	HOPONE-MULTI-SITE-1	2152
16	MIR-TELEMATIKI	2099
17	AVANTE-6	1964
18	DSV4-4	1678
19	HSI-7	1626
20	TR-SAYFANET1-20130806	1604
21	SECUREDSERVERS	1603
22	UK-OVH	1529
23	LEASEWEB	1458
24	TR-COMNET-TR	1435
25	EXMASTERS8	1378

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	NET3-INC	862930
2	UK-OVH	76447
3	UNKNOWN	37233
4	NETBLK-CHARTER-NET	33146
5	ALISOFT	31557
6	PUHI-AP	24769
7	HICHINA	20157
8	CAT	19706
9	HINET-NET	18824
10	ATI	18566
11	VNPT-VNNIC-VN	16606
12	NETBLK-PH-CBS-24-248-0-0	15533
13	HOSHIN-MULTIMEDIA	15055
14	POWERUPHOSTING	13015
15	PL-TRAFFIC-DEAL	10352
16	SHARKTECH	10146
17	DE-UNITED-COLO-20060217	10066
18	MX-REUN-LACNIC	9100
19	TELUS-206-116-0-0	8830
20	UY-ANTA-LACNIC	8724
21	FR-OVH-20100119	8615
22	VIETEL-VNNIC-VN	7952
23	IT-FASTWEB-20080225	7721
24	UA-VOLIA-20061124	7676
25	INET-TH	7400