Botnet Statistics for May 2017

detection period: 2017-05-01 00:00 - 2017-05-31 23:59 UTC
total number of suspected botnet IPs: 14571
number of blocked spams: 643100
recipient count of blocked spams: 4254342

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6404
2	Viet Nam	2010
3	United States	1789
4	Ukraine	1089
5	India	375
6	Netherlands	279
7	Russian Federation	226
8	United Kingdom	192
9	Taiwan	158
10	Brazil	122
11	Estonia	119
12	South Korea	92
13	Argentina	82
14	Turkey	80
15	Romania	78
16	Bulgaria	78
17	Indonesia	72
18	Poland	68
19	Japan	63
20	Thailand	62
21	Italy	59
22	France	55
23	Iran	50
24	Hong Kong	49
25	Lithuania	45

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	221666
2	Ukraine	98435
3	United Kingdom	49720
4	Netherlands	37318
5	China	36733
6	Poland	32928
7	Russian Federation	24025
8	Hong Kong	16047
9	Bangladesh	13834
10	Estonia	13343
11	Belgium	12617
12	Canada	11208
13	Czech Republic	10411
14	Sweden	7141
15	Romania	6995
16	Turkey	5582
17	Bulgaria	5555
18	Virgin (British) Islands	4608
19	Lithuania	3737
20	Colombia	3358
21	Viet Nam	3233
22	Taiwan	2740
23	Nigeria	2402
24	Iceland	2147
25	Australia	2120

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	United Kingdom	1336739
2	Belgium	630391
3	China	388172
4	United States	320378
5	Netherlands	236234
6	Colombia	162189
7	Nigeria	119287
8	Australia	101992
9	Ukraine	100225
10	Viet Nam	87757
11	Bangladesh	77757
12	Taiwan	76801
13	Canada	67614
14	France	61807
15	Thailand	50806
16	India	42196
17	Russian Federation	39448
18	Tunisia	36620
19	Indonesia	35746
20	Italy	34973
21	Poland	32928
22	Hong Kong	19661
23	Estonia	13343
24	Brazil	13195
25	Turkey	12761

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	1462
2	CMNET	1392
3	WASU	1353
4	VNPT-VNNIC-VN	1034
5	CHINANET-GD	930
6	UA-VOLIA-20061124	507
7	UA-VOLIA-20080404	464
8	CHINANET-JS	441
9	FPT-VN	264
10	VIETEL-VN	196
11	VIETEL-VNNIC-VN	161
12	TZULO	150
13	UNICOM-JS	141
14	ETC-VNNIC-VN	134
15	NFORCE_ENTERTAINMENT	116
16	EE-WAVECOM-20101130	111
17	LSN-DLLSTX-2	101
18	HSI-3	99
19	abstation	95
20	HINET-NET	94
21	UNICOM-BJ	78
22	CC-17	66
23	BSNLNET	66
24	SHARKTECH-3	65
25	BHARTI-IN	65

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	UA-VOLIA-20080404	49334
2	LSN-DLLSTX-2	43947
3	UA-VOLIA-20061124	40846
4	CloudVsp	28249
5	BT-MBB	26338
6	EONIX-NET-173-232-0-0-1-BLK-6	19793
7	MIHK-HK	15905
8	UNKNOWN	15704
9	NFORCE_ENTERTAINMENT	15673
10	TZULO	14583
11	EURONET-ISP	13361
12	COL-BD	13053
13	BE-SKYNET-20011108	12617
14	abstation	11322
15	EE-WAVECOM-20101130	10704
16	DIMENOC	10595
17	PL-ARTNET-20120704	10542
18	EXMASTERS16	10397
19	HO-2	9848
20	CC-15	9030
21	CC-17	8024
22	MAROSNET-193-124-176-0	7974
23	NDCHOST	7833
24	MAROSNET-194-67-196-0	7830
25	ALTUSHOST-NET	7140

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	BT-MBB	1312952
2	BE-SKYNET-20011108	630391
3	ESTROWEB-01	201655
4	CHINANET-HE	157657
5	CO-ETBE-LACNIC	156652
6	GLO-1	119286
7	VOCUS-AS-AP	97353
8	CloudVsp	95868
9	HINET-NET	63107
10	VNPT-VNNIC-VN	55303
11	ALISOFT	51488
12	UA-VOLIA-20080404	49334
13	HO-2	49196
14	COL-BD	44843
15	LSN-DLLSTX-2	43947
16	FR-OVH-20101129	42906
17	UA-VOLIA-20061124	40846
18	ATI	35690
19	SPRINT-BLKB2	31892
20	DRIK-BD	27642
21	IT-FASTWEB-20080225	26267
22	HICHINA	24702
23	INET-TH	21257
24	RRNY	19969
25	EONIX-NET-173-232-0-0-1-BLK-6	19793