Botnet Statistics for January 2018

detection period: 2018-01-01 00:00 - 2018-01-31 23:59 UTC
total number of suspected botnet IPs: 757
number of blocked spams: 932566
recipient count of blocked spams: 26847830

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	540
2	United States	85
3	Germany	64
4	Netherlands	8
5	Costa Rica	6
6	Canada	4
7	Romania	3
8	Norway	3
9	South Korea	3
10	India	3
11	Hong Kong	3
12	Ukraine	2
13	Russian Federation	2
14	New Zealand	2
15	Nigeria	2
16	Mexico	2
17	Myanmar	2
18	Iceland	2
19	France	2
20	Belize	2
21	South Africa	1
22	Viet Nam	1
23	Turkey	1
24	Singapore	1
25	Poland	1

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	463697
2	Brazil	99792
3	Czech Republic	87046
4	United States	66236
5	Ukraine	34783
6	Hong Kong	32449
7	South Korea	20126
8	Macau	16021
9	Israel	14703
10	Canada	14014
11	France	13166
12	Costa Rica	10941
13	Netherlands	10394
14	Romania	10242
15	Germany	8378
16	Iceland	7890
17	Belize	6566
18	South Africa	4987
19	Norway	4310
20	Kyrgyzstan	2465
21	Singapore	1521
22	Ireland	879
23	Mexico	637
24	New Caledonia	438
25	Russian Federation	276

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	13907623
2	Brazil	2993760
3	Czech Republic	2611380
4	United States	1851306
5	Hong Kong	972920
6	South Korea	703558
7	Macau	480630
8	Israel	441090
9	Canada	420407
10	France	373377
11	Netherlands	356423
12	Costa Rica	328230
13	Romania	307247
14	Germany	251311
15	Iceland	236700
16	Belize	196980
17	South Africa	149610
18	Norway	109899
19	Kyrgyzstan	73950
20	Ukraine	37451
21	Mexico	19085
22	Russian Federation	8251
23	Denmark	6600
24	India	3210
25	New Zealand	2610

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	219
2	UNICOM-HB	129
3	CHINANET-JS	58
4	DE-ISP4P-20060126	54
5	UNICOM-JS	35
6	CMNET	33
7	UNIFIEDLAYER-NETWORK-14	24
8	CHINANET-ZJ-HZ	18
9	CC-17	18
10	CHINANET-GD	12
11	CHINANET-ZJ	7
12	LSN-DLLSTX-7	6
13	CR-RACO-LACNIC	6
14	CHINANET-ZJ-ZX	6
15	DE-ISP4P-20041207	5
16	CHINANET-HN	5
17	CHINANET-FJ	5
18	ENCRYPTED-TRANSIT-IPV4	4
19	COLOAT	4
20	UNIFIEDLAYER-NETWORK-13	3
21	UNICOM-GD	3
22	PSYCHZ-NETWORKS	3
23	KORNET-KR	3
24	ESTROWEB-01	3
25	CDC-LMB-ARIN8	3

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	228157
2	UNICOM-CN	118357
3	CHINANET-TJ	117071
4	002.558.157/0001-62	99792
5	CZ-WHOISPROTECTION-20141231	87046
6	ENCRYPTED-TRANSIT-IPV4	43672
7	OPRIA	34691
8	NETVIGATOR	32430
9	KORNET-KR	20126
10	SMARTONE-MO	16021
11	AIRLINERES-CALPOP-COM	14857
12	IL-BEZEQ-INTERNATIONAL-20001229	14703
13	HO-2	13788
14	CR-RACO-LACNIC	10941
15	IP2000-ADSL-BAS	9109
16	SC-FLOKINET-LTD-20160826	7890
17	DE-UNITED-COLO-20060217	7286
18	BZ-FASTSERV-20050113	5621
19	SAA	4987
20	BZ-FASTSERV-20080814	4728
21	LIVESHELLS-SRL	4171
22	RO-ARTELECOM-20070815	4073
23	ONLINE_NET_DEDICATED_SERVERS	4057
24	NO-UPC-20050707	3613
25	hostio	3222

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	6844697
2	UNICOM-CN	3550684
3	CHINANET-TJ	3512130
4	002.558.157/0001-62	2993760
5	CZ-WHOISPROTECTION-20141231	2611380
6	ENCRYPTED-TRANSIT-IPV4	1310160
7	NETVIGATOR	972900
8	KORNET-KR	703558
9	SMARTONE-MO	480630
10	AIRLINERES-CALPOP-COM	445710
11	IL-BEZEQ-INTERNATIONAL-20001229	441090
12	HO-2	413627
13	CR-RACO-LACNIC	328230
14	IP2000-ADSL-BAS	251667
15	SC-FLOKINET-LTD-20160826	236700
16	DE-UNITED-COLO-20060217	218580
17	BZ-FASTSERV-20050113	168630
18	SAA	149610
19	BZ-FASTSERV-20080814	141840
20	LIVESHELLS-SRL	125117
21	RO-ARTELECOM-20070815	122190
22	ONLINE_NET_DEDICATED_SERVERS	121710
23	ESTROWEB-01	112250
24	NO-UPC-20050707	108390
25	hostio	96660