Botnet Statistics for May 2014

detection period: 2014-05-01 00:00 - 2014-05-31 23:59 UTC
total number of suspected botnet IPs: 19232
number of blocked spams: 1273981
recipient count of blocked spams: 41586982

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	14249
2	United States	617
3	Russian Federation	331
4	India	303
5	Brazil	266
6	Italy	236
7	Viet Nam	195
8	Taiwan	188
9	United Kingdom	163
10	Germany	149
11	South Korea	146
12	Indonesia	140
13	Ukraine	134
14	Turkey	128
15	France	125
16	Spain	125
17	Argentina	112
18	Japan	95
19	Poland	90
20	Hong Kong	88
21	Colombia	80
22	Iran	64
23	South Africa	63
24	Thailand	62
25	Singapore	58

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	440183
2	Brazil	104662
3	Russian Federation	96043
4	Indonesia	86371
5	United States	85987
6	Ukraine	49313
7	Thailand	28702
8	Saudi Arabia	28125
9	Colombia	25244
10	South Korea	24726
11	United Kingdom	23735
12	Turkey	21802
13	India	20387
14	Hong Kong	18920
15	Germany	18832
16	Iran	16544
17	Malaysia	13402
18	Ivory Coast	12038
19	Viet Nam	11247
20	Poland	8992
21	Venezuela	7914
22	Bangladesh	7910
23	Chile	7186
24	Sweden	6908
25	Zimbabwe	6728

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	14762549
2	Russian Federation	3303154
3	Indonesia	3173374
4	United States	2783669
5	Brazil	2766874
6	Ukraine	1733952
7	Saudi Arabia	965101
8	Colombia	840633
9	South Korea	833346
10	United Kingdom	719842
11	Thailand	672101
12	India	630317
13	Iran	626258
14	Germany	625321
15	Hong Kong	623175
16	Turkey	620429
17	Malaysia	519091
18	Ivory Coast	448839
19	Viet Nam	390723
20	Bangladesh	302908
21	Poland	253955
22	Spain	229945
23	Philippines	208049
24	Italy	188154
25	Venezuela	179212

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	6363
2	CTTNET	2429
3	CRTC	1868
4	CHINANET-FJ	1132
5	UNICOM-GD	353
6	UNICOM-HN	284
7	UNICOM	243
8	CHINANET-JS	231
9	UNICOM-BJ	139
10	VNPT-VNNIC-VN	128
11	HINET-NET	122
12	CHINANET-HB	122
13	CMNET	100
14	CHINANET-SH	80
15	KORNET-KR	75
16	BSNLNET	63
17	BHARTI-IN	50
18	076.535.764/0326-90	49
19	OCN	45
20	003.420.926/0002-05	43
21	UNICOM-HE	41
22	CHINANET-ZJ	41
23	HICHINA	36
24	CHINANET-HN	35
25	IP2000-ADSL-BAS	34

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-GD	32618
2	CHINANET-JS	31441
3	HICHINA	26125
4	TELKOMNET	25061
5	CHINANET-AH	22149
6	CMNET	21736
7	CHINANET-SH	20588
8	033.530.486/0001-29	20370
9	CHINANET-ZJ	16570
10	DEPKEU-ID	15868
11	YYU-NET	13984
12	003.420.926/0002-05	13900
13	CHINANET-SD	13738
14	KORNET-KR	13683
15	UNICOM-GD	12805
16	JAVA-ID	12091
17	AVISONET	12024
18	ATHEEB-NET	12019
19	UNICOM-SD	10136
20	DELTAHOST-NET2	10127
21	CHINANET-FJ	9934
22	BITNET	9933
23	CHINANET-HB	9367
24	CHINANET-SN	9145
25	UNICOM-JS	8772

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-GD	1108706
2	HICHINA	933814
3	CHINANET-AH	852939
4	TELKOMNET	846036
5	CHINANET-JS	840355
6	CMNET	833108
7	CHINANET-SH	685092
8	DEPKEU-ID	599015
9	CHINANET-ZJ	561677
10	033.530.486/0001-29	534939
11	KORNET-KR	516520
12	UNICOM-GD	475388
13	JAVA-ID	463840
14	ATHEEB-NET	449887
15	AVISONET	448419
16	CHINANET-SD	446568
17	DELTAHOST-NET2	394690
18	UNICOM-SD	383541
19	BITNET	377545
20	CHINANET-FJ	377208
21	003.420.926/0002-05	360585
22	CHINANET-HB	360083
23	CHINANET-SN	350496
24	Unit-IS	325650
25	YYU-NET	319523