Botnet Statistics for September 2017

detection period: 2017-09-01 00:00 - 2017-09-30 23:59 UTC
total number of suspected botnet IPs: 4286
number of blocked spams: 614627
recipient count of blocked spams: 4749324

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2362
2	United States	552
3	India	221
4	Viet Nam	216
5	Brazil	72
6	Turkey	56
7	Mexico	54
8	Iran	50
9	Indonesia	45
10	South Korea	41
11	Italy	37
12	Colombia	36
13	Romania	32
14	Russian Federation	31
15	Taiwan	26
16	Pakistan	22
17	Chile	22
18	Bulgaria	21
19	Argentina	20
20	Thailand	18
21	Spain	17
22	Japan	14
23	Australia	14
24	Canada	13
25	Bolivia	13

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	270485
2	China	140539
3	United Kingdom	36928
4	Netherlands	36139
5	Brazil	14301
6	Ukraine	13128
7	Russian Federation	13123
8	Tunisia	12617
9	Canada	11729
10	Romania	8219
11	Germany	6869
12	Hong Kong	5770
13	Singapore	5265
14	Poland	4739
15	Turkey	4511
16	India	3638
17	Bulgaria	3482
18	Republic Of Moldova	3053
19	Hungary	2782
20	South Korea	2539
21	Albania	2292
22	Estonia	1990
23	Taiwan	1767
24	Saint Kitts And Nevis	1606
25	Thailand	952

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	2134927
2	Tunisia	622752
3	Brazil	426363
4	United States	349701
5	Russian Federation	230131
6	Hong Kong	171713
7	Canada	147982
8	Netherlands	76230
9	Turkey	71085
10	South Korea	70197
11	Germany	69809
12	Saint Kitts And Nevis	48180
13	Taiwan	47707
14	United Kingdom	45763
15	Thailand	25720
16	Norway	23402
17	Romania	20233
18	Ukraine	13128
19	Pakistan	12986
20	Chile	12145
21	Mexico	9392
22	India	8343
23	Indonesia	7847
24	Bulgaria	7436
25	Iceland	6600

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	508
2	WASU	425
3	MSFT	264
4	CHINANET-JS	252
5	CHINANET-GD	240
6	CHINANET-FJ	172
7	VNPT-VNNIC-VN	114
8	UNIFIEDLAYER-NETWORK-14	97
9	CHINANET-SD	73
10	CHINANET-HB	64
11	BHARTI-IN	63
12	CHINANET-AH	53
13	Baidu	52
14	CHINANET-JX	46
15	CHINANET-ZJ-NB	36
16	ALISOFT	33
17	LSN-DLLSTX-2	32
18	UNIFIEDLAYER-NETWORK-15	30
19	Turkbil-internet-hizmetleri	30
20	UNIFIEDLAYER-NETWORK-13	29
21	CHINANET-ZJ-ZX	28
22	CHINANET-ZJ	26
23	CHINANET-SN	26

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	UNKNOWN	90898
2	SHARKTECH-3	72964
3	CHINANET-ZJ	38214
4	CHINANET-JS	20064
5	PSINETA	18166
6	PSYCHZ-NETWORKS	16788
7	CHINANET-TJ	14828
8	CC-15	14342
9	002.558.157/0001-62	14210
10	CC-17	12375
11	TN-ATI-20061212	12287
12	UA-VOLIA-20080404	9900
13	UK-RAPIDSWITCH-20090225	8396
14	PRIMARY-NETWORK	8140
15	CC-16	7763
16	UNICOM-CN	7642
17	CMNET	7605
18	SNAGGED	6994
19	abstation	6913
20	WII-OAK-2	6477
21	CHINANET-GD	6051
22	IN-SHOCK-SRV-20140501	5817
23	NETVIGATOR	5402
24	NL-LEASEWEB-20080724	5204
25	dhakavoice	5008

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	1042774
2	TN-ATI-20061212	613657
3	CHINANET-TJ	444695
4	002.558.157/0001-62	426271
5	UNICOM-CN	229086
6	CMNET	219510
7	NETVIGATOR	162060
8	HO-2	129783
9	UNKNOWN	90898
10	RT-VLD-INFRA	84000
11	SHARKTECH-3	72964
12	AIRLINERES-CALPOP-COM	65940
13	Turkbil-internet-hizmetleri	63542
14	DE-ISP4P-20060126	61351
15	RU-CityLine-Static-IP-pool-NET	53400
16	WestVPS-NET	50610
17	1337-NET-KN	48180
18	ALISOFT	43323
19	ESTROWEB-01	40949
20	INFORMTEHTRANS-NET	33120
21	LGTELECOM-KR	30579
22	HINET-NET	27687
23	HICHINA	27110
24	CHINANET-JS	25048
25	NO-UPC-20050707	23401