Botnet Statistics for April 2018

detection period: 2018-04-01 00:00 - 2018-04-30 23:59 UTC
total number of suspected botnet IPs: 2995
number of blocked spams: 1098649
recipient count of blocked spams: 28440105

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	479
2	United States	439
3	France	219
4	Germany	155
5	South Korea	144
6	Russian Federation	134
7	Viet Nam	116
8	Brazil	116
9	India	102
10	United Kingdom	84
11	Canada	67
12	Italy	57
13	Taiwan	53
14	Colombia	50
15	Netherlands	48
16	Indonesia	44
17	Ukraine	36
18	Spain	35
19	Thailand	30
20	Poland	29
21	Mexico	29
22	Egypt	26
23	Ecuador	25
24	Singapore	24
25	Japan	24

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	706089
2	Czech Republic	68934
3	United States	68395
4	Hong Kong	61707
5	Venezuela	60462
6	Japan	35439
7	Netherlands	27995
8	Tunisia	27809
9	Germany	14925
10	Thailand	10306
11	Poland	7023
12	Ireland	4215
13	France	1649
14	ZZ	1228
15	South Korea	847
16	India	312
17	Colombia	286
18	United Kingdom	256
19	Viet Nam	224
20	Indonesia	109
21	Kuwait	82
22	Saudi Arabia	56
23	Ethiopia	42
24	Taiwan	34
25	Bangladesh	25

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	21182505
2	Czech Republic	2067994
3	Venezuela	1813847
4	United States	1289594
5	Hong Kong	1088584
6	Tunisia	830546
7	Japan	35445
8	Netherlands	28010
9	South Korea	25381
10	Germany	15041
11	Thailand	10306
12	India	9360
13	Colombia	8650
14	Poland	7023
15	Viet Nam	6687
16	Ireland	4215
17	Indonesia	3242
18	Kuwait	2458
19	France	2144
20	Saudi Arabia	1680
21	ZZ	1324
22	Bangladesh	750
23	Pakistan	600
24	Portugal	599
25	United Kingdom	575

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	73
2	VNPT-VNNIC-VN	70
3	KORNET-KR	53
4	HINET-NET	38
5	broadNnet-KR	31
6	CMNET	31
7	GO-DADDY-COM-LLC	29
8	CHINANET-GD	28
9	MSFT	27
10	LGTELECOM-KR	25
11	AT-88-Z	24
12	OVH	23
13	LINODE-US	23
14	CO-ACSA-LACNIC	20
15	CHINANET-JS	19
16	TENCENT-CN	18
17	UNICOM-LN	14
18	FR-OVH-20120320	14
19	CHINANET-ZJ	14
20	CHINANET-SH	14
21	FR-OVH-20150522	13
22	IP2000-ADSL-BAS	12
23	GOOGLE-CLOUD	12
24	FR-OVH-20060920	12
25	FR-ILIAD-ENTREPRISES-CUSTOMERS	12

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	428385
2	CHINANET-TJ	205170
3	UNICOM-CN	72519
4	CZ-WHOISPROTECTION-20141231	68933
5	VE-CSVE-LACNIC	60462
6	DIX-CL	35436
7	NETVIGATOR	35402
8	TN-ATI-20061212	27802
9	Server	26292
10	CBC-CM-4	26177
11	UNKNOWN	18434
12	AIRLINERES-CALPOP-COM	16466
13	DE-HETZNER-20050803	14918
14	ROUTIT-Colo	10792
15	INET-TH	10306
16	LVLT-GTATELEGUAM-209-164-184	9657
17	WHF-NETWORK	7007
18	RHINO-3	4975
19	IE-NTL-20060222	4215
20	RHINO-1	3334
21	LASTV4-VZO	3103
22	VIS-BLOCK	2816
23	HAR-INSTR-BLK1	1689
24	OVH	1631
25	KORNET-KR	655

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	12851498
2	CHINANET-TJ	6155074
3	UNICOM-CN	2175570
4	CZ-WHOISPROTECTION-20141231	2067990
5	VE-CSVE-LACNIC	1813847
6	NETVIGATOR	1062018
7	TN-ATI-20061212	830336
8	CBC-CM-4	767324
9	AIRLINERES-CALPOP-COM	493967
10	DIX-CL	35436
11	Server	26292
12	KORNET-KR	19621
13	UNKNOWN	18530
14	DE-HETZNER-20050803	14918
15	ROUTIT-Colo	10792
16	INET-TH	10306
17	LVLT-GTATELEGUAM-209-164-184	9657
18	CO-ETBE-LACNIC	8550
19	WHF-NETWORK	7007
20	BSNLNET	6480
21	VNPT-VNNIC-VN	6327
22	RHINO-3	4975
23	IE-NTL-20060222	4215
24	LGTELECOM-KR	4050
25	RHINO-1	3334