Botnet Statistics for May 2018

detection period: 2018-05-01 00:00 - 2018-05-31 23:59 UTC
total number of suspected botnet IPs: 5160
number of blocked spams: 737690
recipient count of blocked spams: 18694694

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	957
2	United States	680
3	France	392
4	Brazil	233
5	Germany	229
6	Russian Federation	227
7	Viet Nam	226
8	South Korea	184
9	Italy	151
10	India	145
11	United Kingdom	102
12	Thailand	91
13	Canada	91
14	Indonesia	90
15	Colombia	81
16	Netherlands	69
17	Ecuador	62
18	Taiwan	60
19	Ukraine	53
20	Mexico	53
21	Egypt	50
22	Poland	43
23	Japan	43
24	Malaysia	42
25	Hong Kong	37

The top 23 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	479412
2	Turkey	108282
3	South Korea	44618
4	United States	37363
5	Venezuela	28048
6	Tunisia	19404
7	Colombia	10990
8	Viet Nam	3101
9	Belarus	2688
10	ZZ	1493
11	Hungary	1187
12	India	681
13	Czech Republic	167
14	Netherlands	164
15	Paraguay	46
16	Fiji	20
17	France	10
18	Nigeria	5
19	Canada	4
20	Germany	3
21	Russian Federation	2
22	Hong Kong	1
23	Brazil	1

The top 23 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	14382247
2	South Korea	1338511
3	United States	897011
4	Venezuela	841440
5	Tunisia	761644
6	Colombia	329700
7	Turkey	108282
8	India	20430
9	Czech Republic	5010
10	Viet Nam	4553
11	Belarus	2688
12	ZZ	1628
13	Hungary	1187
14	Netherlands	164
15	Germany	104
16	Paraguay	46
17	Fiji	20
18	France	10
19	Nigeria	9
20	Canada	4
21	Brazil	3
22	Russian Federation	2
23	Hong Kong	1

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	123
2	TencentCloud	121
3	KORNET-KR	77
4	CHINANET-JS	65
5	CHINANET-GD	65
6	CMNET	57
7	EC-ANSA-LACNIC	45
8	CO-ACSA-LACNIC	40
9	MSFT	37
10	GO-DADDY-COM-LLC	37
11	broadNnet-KR	36
12	HINET-NET	36
13	AT-88-Z	34
14	CHINANET-SH	32
15	VIETEL-VN	29
16	TELKOMNET	29
17	GOOGLE-CLOUD	29
18	OVH	28
19	TENCENT-CN	27
20	003.420.926/0002-05	27
21	UNICOM-BJ	22
22	FR-OVH-20120320	22
23	CABLE-1	22
24	FR-OVH	21
25	UNKNOWN	20

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ	292926
2	CHINANET-TJ	136771
3	IHS-NET	102002
4	UNICOM-CN	49455
5	KORNET-KR	44617
6	AIRLINERES-CALPOP-COM	29643
7	VE-CSVE-LACNIC	28048
8	TN-ATI-20061212	19404
9	CO-ETBE-LACNIC	10990
10	AMAZON-BOM	7667
11	TR-ONLINE-NET-20171012	6280
12	FPT-VN	3023
13	MTSBY	2496
14	UNKNOWN	1493
15	IGS-NET	1187
16	BSNLNET	671
17	UNICOM-GD	247
18	TCM-BY	192
19	CZ-WHOISPROTECTION-20141231	167
20	NL-WORLDSTREAM-20090204	159
21	VNPT-VNNIC-VN	78
22	PY-NUSA-LACNIC	45
23	RACKS-8-NET-16	22
24	NET1-UNWIRED-FJ	20
25	RCSW	13

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	8787780
2	CHINANET-TJ	4103117
3	UNICOM-CN	1483637
4	KORNET-KR	1338510
5	AIRLINERES-CALPOP-COM	889290
6	VE-CSVE-LACNIC	841440
7	TN-ATI-20061212	761644
8	CO-ETBE-LACNIC	329700
9	IHS-NET	102002
10	BSNLNET	20130
11	AMAZON-BOM	7667
12	UNICOM-GD	7410
13	TR-ONLINE-NET-20171012	6280
14	CZ-WHOISPROTECTION-20141231	5010
15	FPT-VN	3023
16	MTSBY	2496
17	UNKNOWN	1628
18	VNPT-VNNIC-VN	1530
19	IGS-NET	1187
20	CHINANET-GD	302
21	BSNL-GSM-EastZone	300
22	TCM-BY	192
23	NL-WORLDSTREAM-20090204	159
24	HETZNER-RZ-BLK-ERX1	100
25	PY-NUSA-LACNIC	45