Botnet Statistics for October 2017

detection period: 2017-10-01 00:00 - 2017-10-31 23:59 UTC
total number of suspected botnet IPs: 9754
number of blocked spams: 1862225
recipient count of blocked spams: 29017655

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3553
2	Viet Nam	1425
3	India	590
4	United States	379
5	Mexico	300
6	Brazil	273
7	Iran	271
8	Peru	227
9	Colombia	173
10	Turkey	157
11	Saudi Arabia	110
12	Argentina	108
13	Indonesia	104
14	Pakistan	90
15	Italy	88
16	Russian Federation	84
17	Thailand	83
18	Tunisia	75
19	South Korea	63
20	Poland	56
21	Taiwan	55
22	Bolivia	53
23	Ukraine	50
24	Macedonia	50
25	Bulgaria	47

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	582453
2	China	558994
3	Brazil	125398
4	Netherlands	106317
5	Russian Federation	72759
6	United Kingdom	57362
7	Ukraine	54610
8	Germany	53182
9	Hong Kong	46770
10	Venezuela	24511
11	Canada	22465
12	Romania	21294
13	South Korea	18736
14	Macau	15669
15	Poland	15362
16	Norway	14451
17	South Africa	13186
18	Belize	9788
19	Tunisia	6744
20	Singapore	6722
21	Bulgaria	3722
22	Hungary	3134
23	Iceland	2664
24	Viet Nam	2651
25	India	2627

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	15256009
2	Brazil	3743009
3	United States	1606551
4	Hong Kong	1400312
5	Russian Federation	1365869
6	Venezuela	733010
7	Romania	636113
8	Germany	588799
9	South Korea	553633
10	Macau	470012
11	Norway	433095
12	South Africa	390853
13	Tunisia	326781
14	Canada	316265
15	Belize	293466
16	Netherlands	129638
17	United Kingdom	95229
18	Iceland	79891
19	Sweden	74066
20	Bulgaria	54620
21	Ukraine	54610
22	Taiwan	52095
23	India	46843
24	Turkey	45956
25	France	35510

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	922
2	VNPT-VNNIC-VN	699
3	CHINANET-JS	606
4	WASU	433
5	CHINANET-GD	365
6	CMNET	267
7	CHINANET-HB	207
8	VIETEL-VN	175
9	FPT-VN	161
10	VIETEL-VNNIC-VN	128
11	BHARTI-IN	122
12	UNIFIEDLAYER-NETWORK-14	114
13	PE-TPSA-LACNIC	88
14	ETC-VNNIC-VN	85
15	Baidu	67
16	UNICOM-HB	66
17	IPxDSL-NET	66
18	PTCLBB-PK	56
19	MX-IPMS2-LACNIC	50
20	CHINANET-HN	50
21	CHINANET-AH	50
22	PE-PETD2-LACNIC	47
23	CO-ACSA-LACNIC	47
24	CO-CTSE-LACNIC	40
25	TN-ATI-20061212	38

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	282369
2	CHINANET-TJ	139319
3	002.558.157/0001-62	122599
4	UNKNOWN	93400
5	SHARKTECH-3	82906
6	UNICOM-CN	59333
7	UNIFIEDLAYER-NETWORK-14	58054
8	NETVIGATOR	46330
9	UA-VOLIA-20080404	40126
10	HOSTKEY-NET	34863
11	PSYCHZ-NETWORKS	33255
12	VE-CSVE-LACNIC	24441
13	PERFECT-INTERNATIONAL	24218
14	COLOA	21323
15	dhakavoice	20477
16	TZULO	19261
17	WHOLESALEINTERNET	18671
18	NL-LEASEWEB-20080724	18426
19	IN-SHOCK-SRV-20140501	17818
20	ENCRYPTED-TRANSIT-IPV4	17310
21	LSN-DLLSTX-3	17074
22	CC-16	16750
23	KORNET-KR	16696
24	SMARTONE-MO	15667
25	CC-12	15446

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	8386029
2	CHINANET-TJ	4179570
3	002.558.157/0001-62	3676333
4	UNICOM-CN	1779848
5	NETVIGATOR	1389871
6	VE-CSVE-LACNIC	732940
7	ENCRYPTED-TRANSIT-IPV4	519300
8	KORNET-KR	499129
9	SMARTONE-MO	470010
10	AIRLINERES-CALPOP-COM	459990
11	NO-UPC-20050707	433081
12	ULVT-NET	424620
13	CMNET	410418
14	SAA	387420
15	DE-ISP4P-20060126	383430
16	WestVPS-NET	380160
17	RO-ARTELECOM-20070815	340233
18	TN-ATI-20061212	322678
19	BZ-FASTSERV-20111129	293460
20	INFORMTEHTRANS-NET	281400
21	HO-2	249868
22	RT-VLD-INFRA	194100
23	CHINANET-SH	169628
24	LIVESHELLS-SRL	168060
25	CHINANET-GX	142926