Botnet Statistics for February 2018

detection period: 2018-02-01 00:00 - 2018-02-28 23:59 UTC
total number of suspected botnet IPs: 210
number of blocked spams: 1004028
recipient count of blocked spams: 23191753

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	South Korea	66
2	United States	23
3	Egypt	12
4	Nigeria	10
5	Saudi Arabia	8
6	South Africa	6
7	India	6
8	Spain	6
9	Argentina	6
10	Viet Nam	5
11	Iran	5
12	China	5
13	Thailand	4
14	Netherlands	4
15	France	4
16	Serbia	3
17	Pakistan	3
18	Hong Kong	3
19	Portugal	2
20	Indonesia	2
21	Germany	2
22	Brazil	2
23	Australia	2
24	Venezuela	1
25	Taiwan	1

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	465677
2	Czech Republic	110209
3	Brazil	108146
4	France	104255
5	Iran	65393
6	Sweden	49602
7	Hong Kong	38985
8	Seychelles	20583
9	United States	19625
10	Venezuela	12189
11	Tunisia	2578
12	South Korea	2302
13	ZZ	711
14	New Caledonia	611
15	Colombia	611
16	Netherlands	526
17	India	474
18	Nigeria	462
19	Saudi Arabia	172
20	Pakistan	160
21	Greece	109
22	Kuwait	97
23	Egypt	84
24	Australia	74
25	Serbia	51

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	13970065
2	Czech Republic	3306270
3	Brazil	3244367
4	Hong Kong	1169406
5	United States	582558
6	Venezuela	365670
7	Tunisia	128732
8	France	104843
9	South Korea	69060
10	Iran	68380
11	Sweden	49602
12	Netherlands	25068
13	Nigeria	21414
14	Seychelles	20583
15	Colombia	18330
16	India	14191
17	Saudi Arabia	5160
18	Pakistan	4800
19	Greece	3270
20	Kuwait	2910
21	Egypt	2520
22	Australia	2220
23	Serbia	1530
24	Viet Nam	1500
25	Portugal	1230

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	47
2	LINK-NET	10
3	KORNET-KR	10
4	AR-CTLI2-LACNIC	6
5	KTFWING-KR	5
6	IP2000-ADSL-BAS	4
7	AFRINIC-20090508	4
8	VNPT-VNNIC-VN	3
9	TOT-NET	3
10	TELECABLE	3
11	RRNY	3
12	BORANET-KR	3
13	TELEPAC-DSL-RES	2
14	TATANET	2
15	Spectranet-v4	2
16	SA-SAHARA-990113	2
17	IR-DCC-20020723	2
18	HOSTWINDS-17-7	2
19	ESTROWEB-01	2
20	CHINANET-ZJ	2
21	broadNnet-KR	1
22	ZOOMNIGERIA	1
23	WINDSTREAM-COMMUNICATIONS	1
24	WINDSTREAM	1
25	WEBAIRINTERNET	1

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	262196
2	CHINANET-TJ	130510
3	CZ-WHOISPROTECTION-20141231	110209
4	002.558.157/0001-62	108144
5	UNKNOWN	94973
6	UNICOM-CN	72953
7	MOBINNET	65290
8	SE-CYBER-20000314	49602
9	NETVIGATOR	38971
10	IN-SHOCK-SRV-20140501	20583
11	AIRLINERES-CALPOP-COM	16033
12	VE-CSVE-LACNIC	12189
13	IP2000-ADSL-BAS	9993
14	TN-ATI-20061212	2578
15	KORNET-KR	1918
16	VOLUMEDRIVE	1848
17	VIS-BLOCK	1170
18	CO-ETBE-LACNIC	611
19	ADSL250_2	611
20	ESTROWEB-01	498
21	BSNLNET	417
22	Spectranet-v4	406
23	RRNY	376
24	LGTELECOM-KR	288
25	SA-SAHARA-990113	142

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	7865880
2	CHINANET-TJ	3915300
3	CZ-WHOISPROTECTION-20141231	3306270
4	002.558.157/0001-62	3244307
5	UNICOM-CN	2188577
6	NETVIGATOR	1169130
7	AIRLINERES-CALPOP-COM	480990
8	VE-CSVE-LACNIC	365670
9	TN-ATI-20061212	128732
10	UNKNOWN	94973
11	VOLUMEDRIVE	92195
12	MOBINNET	65290
13	KORNET-KR	57540
14	SE-CYBER-20000314	49602
15	ESTROWEB-01	24228
16	IN-SHOCK-SRV-20140501	20583
17	Spectranet-v4	20140
18	CO-ETBE-LACNIC	18330
19	BSNLNET	12510
20	IP2000-ADSL-BAS	10581
21	LGTELECOM-KR	8640
22	SA-SAHARA-990113	4260
23	SUPERNET	3510
24	GR-EVERGY-20021126	3270
25	RRNY	3160