Botnet Statistics for August 2017

detection period: 2017-08-01 00:00 - 2017-08-31 23:59 UTC
total number of suspected botnet IPs: 9013
number of blocked spams: 1396677
recipient count of blocked spams: 30757477

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4954
2	United States	1497
3	India	358
4	Viet Nam	283
5	Taiwan	184
6	Poland	128
7	Brazil	113
8	Hong Kong	111
9	Russian Federation	97
10	Netherlands	95
11	Czech Republic	73
12	Iran	68
13	United Kingdom	59
14	Indonesia	56
15	Bulgaria	48
16	Chile	44
17	Pakistan	41
18	Germany	40
19	Canada	38
20	Italy	37
21	Mexico	35
22	Colombia	33
23	Bangladesh	33
24	Turkey	32
25	Thailand	29

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	416753
2	United States	219893
3	South Korea	146727
4	Poland	130592
5	Brazil	128491
6	Russian Federation	66056
7	Venezuela	40183
8	United Kingdom	26491
9	South Africa	21861
10	Hong Kong	20718
11	Canada	16188
12	Netherlands	15145
13	Azerbaijan	14865
14	Czech Republic	13094
15	Saint Kitts And Nevis	12073
16	Germany	11993
17	Viet Nam	11733
18	Singapore	10211
19	Japan	8896
20	France	8158
21	Bulgaria	7076
22	Arab Emirates	6979
23	Libya	4352
24	Mexico	3705
25	Norway	3428

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	12309483
2	South Korea	4387360
3	Brazil	3762344
4	United States	2188274
5	Russian Federation	1876961
6	Venezuela	1201952
7	Hong Kong	617446
8	Azerbaijan	444732
9	Saint Kitts And Nevis	361494
10	Germany	358120
11	Czech Republic	349059
12	Viet Nam	344866
13	Canada	280792
14	Japan	263778
15	Arab Emirates	208877
16	Singapore	190794
17	Poland	138380
18	Netherlands	137148
19	Libya	130096
20	Mexico	110311
21	France	104199
22	Norway	102521
23	Iran	69468
24	United Kingdom	68787
25	Tunisia	59474

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	1178
2	WASU	921
3	CHINANET-HB	652
4	SERVERCRATE-03	417
5	CHINANET-JS	327
6	CHINANET-HN	315
7	UNICOM-HB	242
8	CHINANET-GD	214
9	UNICOM-ZJ	162
10	CHINANET-AH	147
11	HINET-NET	128
12	VNPT-VNNIC-VN	127
13	CHINANET-JX	107
14	SHARKTECH-3	98
15	HOST4GEEKS	98
16	UNIFIEDLAYER-NETWORK-14	78
17	BSNLNET	69
18	EXMASTERS8	64
19	CC-17	60
20	CC-16	54
21	SERVERCRATE-04	51
22	Baidu	50
23	BHARTI-IN	47
24	CLOUD-SOUTH	46
25	LSN-DLLSTX-2	45

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	KORNET-KR	145990
2	CHINANET-ZJ	142163
3	EURONET-ISP	122788
4	002.558.157/0001-62	66544
5	CHINANET-TJ	63531
6	UNICOM-CN	62998
7	011.419.340/0001-78	58135
8	CMNET	56649
9	ENCRYPTED-TRANSIT-IPV4	50471
10	VE-CSVE-LACNIC	40183
11	UNKNOWN	28187
12	AFRINIC-20090508	21174
13	UNIFIEDLAYER-NETWORK-11	20307
14	RIALCOM-NET	18762
15	LSN-DLLSTX-2	17642
16	NETVIGATOR	15246
17	DELTA-DSL	14865
18	CHINANET-AH	13358
19	LSN-DLLSTX-1	12986
20	UNIFIEDLAYER-NETWORK-14	12205
21	1337-NET-KN	12073
22	CZ-WHOISPROTECTION-20141231	11631
23	JLU-CN	11444
24	SOVINTEL-KIROVSKY-ZAVOD	9458
25	ODS-VNNIC-VN	9262

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	KORNET-KR	4366795
2	CHINANET-ZJ	4252746
3	002.558.157/0001-62	1990739
4	CHINANET-TJ	1901522
5	UNICOM-CN	1884475
6	011.419.340/0001-78	1739526
7	CMNET	1688160
8	ENCRYPTED-TRANSIT-IPV4	1510186
9	VE-CSVE-LACNIC	1201952
10	RIALCOM-NET	561439
11	NETVIGATOR	456220
12	DELTA-DSL	444732
13	CHINANET-AH	396870
14	1337-NET-KN	361494
15	CZ-WHOISPROTECTION-20141231	347596
16	JLU-CN	342160
17	SOVINTEL-KIROVSKY-ZAVOD	282638
18	ODS-VNNIC-VN	275424
19	BSN	263698
20	RT-VLD-INFRA	237058
21	AE-EMIRNET-990929	208067
22	Roskomnadzor-net	200390
23	NGNNET	195536
24	HO-2	195063
25	UNICOM-LN	177712