Botnet Statistics for March 2018

detection period: 2018-03-01 00:00 - 2018-03-31 23:59 UTC
total number of suspected botnet IPs: 1273
number of blocked spams: 1005516
recipient count of blocked spams: 26718540

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	251
2	United States	167
3	South Korea	139
4	Viet Nam	80
5	France	60
6	Russian Federation	40
7	India	39
8	Brazil	39
9	Egypt	26
10	Germany	26
11	Indonesia	25
12	United Kingdom	25
13	Italy	21
14	Taiwan	20
15	Netherlands	20
16	Canada	17
17	Australia	15
18	Japan	13
19	Spain	13
20	Hong Kong	11
21	Argentina	11
22	Singapore	10
23	Ukraine	9
24	Thailand	9
25	Nigeria	9

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	562224
2	Czech Republic	123991
3	United States	59945
4	Venezuela	58679
5	Hong Kong	54595
6	Netherlands	48164
7	Brazil	40364
8	United Kingdom	17635
9	Ireland	12149
10	Seychelles	4735
11	Poland	4587
12	Tunisia	4256
13	Hungary	3914
14	Sweden	2348
15	Italy	1663
16	South Korea	1636
17	India	1156
18	ZZ	1121
19	France	749
20	Colombia	465
21	Pakistan	183
22	Egypt	128
23	Belgium	103
24	Saudi Arabia	94
25	Viet Nam	82

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	16866388
2	Czech Republic	3719730
3	Venezuela	1760370
4	Hong Kong	1637793
5	Brazil	1210920
6	United States	893270
7	Tunisia	212475
8	Netherlands	165737
9	United Kingdom	92332
10	South Korea	49080
11	India	34680
12	Colombia	13950
13	Ireland	12149
14	Pakistan	5490
15	Seychelles	4735
16	Poland	4587
17	Hungary	3914
18	Egypt	3840
19	Saudi Arabia	2820
20	Viet Nam	2580
21	Sweden	2348
22	Iran	2220
23	Russian Federation	1921
24	Italy	1663
25	Portugal	1560

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	54
2	VNPT-VNNIC-VN	44
3	KORNET-KR	41
4	TencentCloud	36
5	broadNnet-KR	17
6	UNICOM-LN	13
7	HINET-NET	13
8	GOOGLE-CLOUD	12
9	CHINANET-GD	12
10	MSFT	11
11	CHINANET-JS	11
12	TENCENT-CN	10
13	CMNET	10
14	ONLINE_NET_DEDICATED_SERVERS	9
15	UCLOUD-NET	8
16	ETC-VNNIC-VN	8
17	CHINANET-ZJ	8
18	AT-88-Z	8
19	Xpeed-KR	7
20	SS8	7
21	LINK-NET	7
22	KTFWING-KR	7
23	hcmccable-net	6
24	VIETEL-VN	6
25	UNICOM-SD	6

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	365026
2	CHINANET-TJ	171193
3	CZ-WHOISPROTECTION-20141231	123991
4	VE-CSVE-LACNIC	58679
5	NETVIGATOR	54565
6	NL-WORLDSTREAM-970502	45762
7	002.558.157/0001-62	40362
8	UNICOM-CN	25988
9	AIRLINERES-CALPOP-COM	17906
10	RHINO-1	12529
11	IE-NTL-20060222	12149
12	OPAL-DSL	10672
13	PSINETA	9856
14	VIS-BLOCK	8667
15	AlchemyG2	5441
16	IN-SHOCK-SRV-20140501	4735
17	WHF-NETWORK	4550
18	TN-ATI-20061212	4256
19	INFOTECHNA	3914
20	VOLUM-ARIN	3392
21	VOLUMEDRIVE	2886
22	ESTROWEB-01	2401
23	SE-CYBER-20000314	2348
24	WIMORE	1659
25	UK-GLOBAL-960916	1517

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	10950767
2	CHINANET-TJ	5135790
3	CZ-WHOISPROTECTION-20141231	3719730
4	VE-CSVE-LACNIC	1760370
5	NETVIGATOR	1636950
6	002.558.157/0001-62	1210860
7	UNICOM-CN	779640
8	AIRLINERES-CALPOP-COM	537180
9	TN-ATI-20061212	212475
10	VOLUM-ARIN	169529
11	VOLUMEDRIVE	144167
12	ESTROWEB-01	119974
13	UK-GLOBAL-960916	75837
14	NL-WORLDSTREAM-970502	45762
15	KORNET-KR	32280
16	BSNL-GSM-EastZone	18510
17	BSNLNET	14610
18	CO-ETBE-LACNIC	13950
19	RHINO-1	12529
20	IE-NTL-20060222	12149
21	OPAL-DSL	10933
22	PSINETA	9856
23	VIS-BLOCK	8667
24	LGTELECOM-KR	7710
25	BORANET-KR	6570