Botnet Statistics for May 2016

Due to a failed vps, I lost the data needed for calculating blocked spam and the associated recipient count before May 23. Please keep that in mind when interpreting the information below.

detection period: 2016-05-01 00:00 - 2016-05-31 23:59 UTC
total number of suspected botnet IPs: 58317
number of blocked spams: 32818
recipient count of blocked spams: 243103

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	15517
2	Mexico	6470
3	India	5026
4	Viet Nam	4705
5	Taiwan	3536
6	Iran	2072
7	Colombia	1654
8	Brazil	1412
9	Pakistan	1144
10	Turkey	1116
11	Indonesia	944
12	Peru	792
13	Tunisia	749
14	Ecuador	548
15	United States	546
16	Bangladesh	525
17	Bolivia	511
18	Romania	503
19	Italy	463
20	Poland	438
21	Arab Emirates	438
22	Venezuela	412
23	Macedonia	389
24	Argentina	378
25	Serbia	338

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Brazil	14022
2	Poland	11794
3	Taiwan	3571
4	China	1408
5	Germany	1049
6	Canada	233
7	Thailand	156
8	United States	128
9	Colombia	114
10	Turkey	76
11	Russian Federation	57
12	Mexico	45
13	Occupied Palestinian Territory	44
14	Argentina	38
15	Bolivia	33
16	Arab Emirates	17
17	Romania	8
18	Israel	8
19	France	5
20	Portugal	3
21	Viet Nam	2
22	Macedonia	2
23	Hong Kong	2
24	Malaysia	1
25	Italy	1

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Brazil	140355
2	Taiwan	42977
3	China	26343
4	Poland	13174
5	Thailand	4332
6	Colombia	2980
7	United States	2528
8	Turkey	2038
9	Russian Federation	1589
10	Occupied Palestinian Territory	1195
11	Mexico	1136
12	Germany	1049
13	Argentina	1000
14	Bolivia	899
15	Arab Emirates	527
16	Romania	248
17	Israel	248
18	Canada	233
19	France	150
20	Portugal	93
21	Viet Nam	2
22	Macedonia	2
23	Hong Kong	2
24	Malaysia	1
25	Italy	1

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CNCITYNET	3620
2	MX-USCV4-LACNIC	3379
3	WASU	3136
4	HINET-NET	2372
5	VNPT-VNNIC-VN	2255
6	UNICOM-ZJ	1466
7	SONET-NET	1088
8	CHINANET-JS	1014
9	PTCLBB-PK	838
10	UNICOM-JS	807
11	BSNLNET	795
12	RingLink	745
13	WASU-BB	678
14	MX-MSCV17-LACNIC	636
15	CMNET	595
16	BHARTI-IN	577
17	FPT-VN	504
18	VIETEL-VNNIC-VN	483
19	MX-IPMS2-LACNIC	461
20	CHINANET-SD	446
21	CO-CTSE-LACNIC	440
22	VIETEL-VN	437
23	ETC-VNNIC-VN	434
24	CO-ACSA-LACNIC	409
25	MX-CTSC6-LACNIC	401

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	005.200.140/0001-27	14014
2	PL-FUFO-7	11748
3	HINET-NET	1452
4	SEEDNET-NET	1076
5	SCHLUND-CUSTOMERS	1049
6	SONET-NET	850
7	CMNET	389
8	ROGERS-CAB-99	233
9	ALISOFT	188
10	WASU	175
11	CHINANET-GD	158
12	TANET-BNETA	108
13	UNICOM	80
14	CHINANET-JS	80
15	UNICOM-JS	73
16	INONU-NET	68
17	CO-ACSA-LACNIC	63
18	SEEDNET	61
19	CAT	57
20	CO-ESES-LACNIC	50
21	MULTA-NET12	48
22	RU-TI-20031118	47
23	Fiberway2	46
24	TencentCloud	44
25	COOLNET-ISP	44

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	005.200.140/0001-27	140107
2	SEEDNET-NET	33236
3	CMNET	12029
4	PL-FUFO-7	11748
5	ALISOFT	5155
6	HINET-NET	3399
7	TANET-BNETA	3149
8	CHINANET-GD	2539
9	UNICOM	2334
10	INONU-NET	1827
11	SEEDNET	1666
12	CO-ACSA-LACNIC	1566
13	CAT	1519
14	Fiberway2	1426
15	CO-ESES-LACNIC	1413
16	MULTA-NET12	1376
17	RU-TI-20031118	1309
18	TencentCloud	1200
19	COOLNET-ISP	1195
20	1AN1-NETWORK	1111
21	SCHLUND-CUSTOMERS	1049
22	csloxinfo-th	1016
23	INET-TH	1003
24	tonghnetwork	967
25	SONET-NET	850