Botnet Statistics for May 2015

detection period: 2015-05-01 00:00 - 2015-05-31 23:59 UTC
total number of suspected botnet IPs: 37031
number of blocked spams: 3720622
recipient count of blocked spams: 111979716

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	21975
2	China	4416
3	United States	2461
4	Turkey	600
5	Russian Federation	452
6	Viet Nam	430
7	France	425
8	India	402
9	Mexico	355
10	Germany	322
11	Spain	303
12	United Kingdom	271
13	Canada	258
14	South Korea	248
15	Italy	232
16	Argentina	192
17	South Africa	174
18	Arab Emirates	156
19	Brazil	154
20	Ukraine	141
21	Australia	127
22	Romania	118
23	Colombia	117
24	Switzerland	117
25	Singapore	113

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	3410026
2	China	125235
3	United States	40992
4	Brazil	19118
5	Indonesia	12693
6	Ivory Coast	10954
7	Saudi Arabia	10402
8	Malaysia	10389
9	Israel	7730
10	Poland	6990
11	Argentina	6321
12	United Kingdom	5827
13	Hong Kong	5403
14	Ukraine	3981
15	Mexico	3274
16	Serbia	3270
17	Thailand	2964
18	Bangladesh	2896
19	Colombia	2872
20	Viet Nam	2853
21	South Korea	2824
22	Ecuador	2367
23	South Africa	2319
24	Philippines	2218
25	Turkey	1992

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	101561821
2	China	2993066
3	United States	1643700
4	Brazil	763199
5	Indonesia	509409
6	Ivory Coast	438979
7	Malaysia	418020
8	Saudi Arabia	417385
9	Israel	309496
10	Poland	279559
11	Argentina	251349
12	United Kingdom	233281
13	Hong Kong	216554
14	Ukraine	160561
15	Serbia	131522
16	Mexico	128789
17	Thailand	119124
18	Bangladesh	116193
19	Colombia	114717
20	Viet Nam	114194
21	South Korea	113483
22	Ecuador	94469
23	South Africa	92588
24	Philippines	88666
25	Turkey	79693

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	21909
2	CHINANET-GD	991
3	CHINANET-JS	531
4	UNICOM-BJ	430
5	UNICOM-SD	323
6	VNPT-VNNIC-VN	224
7	CHINANET-HN	162
8	TR-RADORE-20110526	159
9	WORLDSITE-SAYFA	158
10	UNICOM-GD	152
11	CCCH3-4	146
12	WASU	141
13	CHINANET-SX	138
14	CHINANET-ZJ-HZ	136
15	WASU-BB	127
16	CHINANET-LN	119
17	TurkTelekom	109
18	IP2000-ADSL-BAS	104
19	MX-USCV4-LACNIC	103
20	KORNET-KR	102
21	CHINANET-YN	99
22	CBC-CM-4	98
23	CMNET	96
24	CHINANET-SN	87
25	BSNLNET	87

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	3409448
2	UNICOM-GD	51924
3	UNICOM-LN	15859
4	AVISONET	10954
5	MAXISNET-HSDPA	10161
6	IL-GOLDENLINES-20020705	7730
7	004.027.547/0001-31	7153
8	CHINANET-GD	6617
9	XOXO-BLK-3	6485
10	AR-CPOY8-LACNIC	6242
11	SA-NOURNET-990322	6125
12	DEPKEU-ID	5465
13	CHINANET-LN	5113
14	072.843.212/0001-41	4165
15	TaboukU-1	4161
16	WINDSTREAM	4143
17	ALISOFT	3122
18	MX-ALES-LACNIC	3074
19	CCS-DGI	3026
20	HICHINA	2995
21	UNICOM-NM	2972
22	HANELCOM-VNNIC-VN	2805
23	SUNINFO-MDC	2731
24	UK-NTLI-20020614	2697
25	CMNET	2646

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	101538733
2	UNICOM-LN	633109
3	AVISONET	438979
4	MAXISNET-HSDPA	408688
5	IL-GOLDENLINES-20020705	309496
6	004.027.547/0001-31	287452
7	CHINANET-GD	263274
8	XOXO-BLK-3	261855
9	AR-CPOY8-LACNIC	248224
10	SA-NOURNET-990322	246024
11	DEPKEU-ID	219274
12	CHINANET-LN	205129
13	TaboukU-1	166806
14	072.843.212/0001-41	166503
15	WINDSTREAM	166195
16	ALISOFT	125896
17	MX-ALES-LACNIC	122589
18	CCS-DGI	120945
19	HICHINA	120261
20	UNICOM-NM	119182
21	HANELCOM-VNNIC-VN	112706
22	SUNINFO-MDC	109949
23	UK-NTLI-20020614	108096
24	CMNET	105520
25	TELEPACIFIC-LA-BLK-8	100372