Botnet Statistics for July 2017

detection period: 2017-07-01 00:00 - 2017-07-31 23:59 UTC
total number of suspected botnet IPs: 14247
number of blocked spams: 1837281
recipient count of blocked spams: 47254349

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	9585
2	United States	1892
3	Viet Nam	410
4	Russian Federation	352
5	Netherlands	279
6	Hong Kong	220
7	Poland	175
8	Taiwan	153
9	United Kingdom	127
10	India	123
11	Ukraine	105
12	Germany	82
13	Brazil	62
14	Italy	58
15	Bulgaria	48
16	South Korea	36
17	Luxembourg	26
18	France	26
19	Iran	25
20	Thailand	22
21	Turkey	21
22	Japan	21
23	Indonesia	20
24	Pakistan	19
25	Romania	18

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	613754
2	United States	269711
3	South Korea	224198
4	Russian Federation	140136
5	Brazil	119112
6	Hong Kong	60609
7	India	54742
8	Poland	52136
9	South Africa	45935
10	Azerbaijan	43274
11	Venezuela	26953
12	Saint Kitts And Nevis	25631
13	Netherlands	21149
14	Ukraine	18477
15	Germany	12998
16	Thailand	12162
17	Norway	11475
18	Singapore	10578
19	Canada	8170
20	Viet Nam	7012
21	Czech Republic	5268
22	Tunisia	5254
23	France	4590
24	Romania	4017
25	Colombia	4014

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	18249482
2	South Korea	6702069
3	Russian Federation	4088357
4	Brazil	3562408
5	United States	3476819
6	Hong Kong	1814045
7	India	1634869
8	Azerbaijan	1293743
9	Venezuela	805403
10	Saint Kitts And Nevis	767654
11	Netherlands	514917
12	Ukraine	502487
13	Germany	388503
14	Thailand	359526
15	Norway	343438
16	Singapore	313217
17	Tunisia	247593
18	Canada	244143
19	Viet Nam	205148
20	Italy	170589
21	Czech Republic	156390
22	France	122177
23	Romania	120046
24	Colombia	118430
25	Iceland	117191

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	2277
2	CMNET	1574
3	WASU	1547
4	CHINANET-JS	762
5	CHINANET-HB	681
6	CHINANET-GD	484
7	UNICOM-HB	250
8	CHINANET-HN	222
9	CHINANET-AH	220
10	VNPT-VNNIC-VN	206
11	CHINANET-HA	203
12	HOST4GEEKS	189
13	SHARKTECH-3	159
14	HINET-NET	137
15	CHINANET-JX	135
16	ALISOFT	134
17	HOSTKEY-NET	132
18	SERVERCRATE-03	113
19	CHINANET-ZJ	102
20	CUBEMOTION	97
21	CLOUD-SOUTH	96
22	UNICOM-JS	94
23	CC-17	89
24	MELBICOM-DE	87
25	PL-ARTNET-20120704	85

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	KORNET-KR	213725
2	CHINANET-ZJ	126877
3	UNICOM-CN	98573
4	CMNET	82225
5	JLU-CN	65829
6	TencentCloud	63448
7	NETVIGATOR	57565
8	002.558.157/0001-62	55292
9	RSMANI-NKN-IN	53204
10	EURONET-ISP	50989
11	1AND1	45467
12	AFRINIC-20090508	45004
13	DELTA-DSL	43110
14	006.943.198/0001-23	35467
15	NET-107-161-158-0-1	32689
16	UNIFIEDLAYER-NETWORK-14	30606
17	CHINANET-AH	29175
18	VE-CSVE-LACNIC	26789
19	CHINANET-TJ	26546
20	Roskomnadzor-net	26542
21	RIALCOM-NET	25743
22	1337-NET-KN	25631
23	011.419.340/0001-78	25427
24	UNIFIEDLAYER-NETWORK-13	22523
25	216-176-186-128-27-EMERALDONION	19861

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	KORNET-KR	6393101
2	CHINANET-ZJ	3794108
3	UNICOM-CN	2949337
4	CMNET	2451979
5	JLU-CN	1969998
6	TencentCloud	1893622
7	NETVIGATOR	1724224
8	002.558.157/0001-62	1654178
9	RSMANI-NKN-IN	1591654
10	1AND1	1360501
11	DELTA-DSL	1289385
12	006.943.198/0001-23	1062995
13	CHINANET-AH	869885
14	VE-CSVE-LACNIC	800973
15	Roskomnadzor-net	795290
16	CHINANET-TJ	794176
17	RIALCOM-NET	769912
18	1337-NET-KN	767654
19	011.419.340/0001-78	760490
20	216-176-186-128-27-EMERALDONION	595163
21	CHINANET-CQ	563084
22	CHINANET-ZJ-ZX	438914
23	RT-VLD-INFRA	387848
24	BZ-FASTSERV-20080814	385251
25	UA-DATACOM-20111206	355413