Botnet Statistics for July 2018

detection period: 2018-07-01 00:00 - 2018-07-31 23:59 UTC
total number of suspected botnet IPs: 4480
number of blocked spams: 717055
recipient count of blocked spams: 19316862

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	915
2	United States	607
3	France	303
4	Brazil	225
5	South Korea	186
6	Russian Federation	172
7	Viet Nam	155
8	India	135
9	Italy	124
10	Germany	112
11	Canada	92
12	United Kingdom	90
13	Indonesia	83
14	Netherlands	79
15	Ecuador	79
16	Egypt	70
17	Thailand	62
18	Colombia	62
19	Taiwan	56
20	Poland	46
21	Spain	46
22	Mexico	34
23	Ukraine	32
24	Singapore	32
25	Chile	32

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	579591
2	Italy	81571
3	United States	30271
4	Venezuela	14385
5	Tunisia	6009
6	South Korea	1729
7	ZZ	1268
8	Colombia	986
9	South Africa	500
10	India	383
11	Saudi Arabia	203
12	Netherlands	85
13	United Kingdom	25
14	France	13
15	Spain	10
16	Russian Federation	4
17	Brazil	4
18	Taiwan	3
19	Singapore	2
20	Sweden	2
21	Indonesia	2
22	Poland	1
23	Nigeria	1
24	Iran	1
25	Ecuador	1

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	17387657
2	United States	986034
3	Venezuela	431550
4	Tunisia	300339
5	Italy	81571
6	South Korea	51870
7	Colombia	29580
8	South Africa	24961
9	India	11490
10	Saudi Arabia	10104
11	ZZ	1455
12	Netherlands	118
13	France	39
14	United Kingdom	25
15	Russian Federation	16
16	Brazil	12
17	Spain	10
18	Sweden	6
19	Singapore	4
20	Australia	4
21	Taiwan	3
22	Nigeria	3
23	Argentina	3
24	Indonesia	2
25	Poland	1

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	132
2	VNPT-VNNIC-VN	94
3	KORNET-KR	94
4	CHINANET-JS	66
5	CMNET	59
6	AT-88-Z	55
7	CHINANET-GD	45
8	EC-ANSA-LACNIC	38
9	TENCENT-CN	37
10	HINET-NET	37
11	Baidu	32
12	MSFT	31
13	HO-2	29
14	CO-ACSA-LACNIC	25
15	ONLINE_NET_DEDICATED_SERVERS	24
16	EC-TESA-LACNIC	23
17	CHINANET-AH	22
18	TELKOMNET	21
19	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	21
20	TEDATA-20091105	20
21	DIGITALOCEAN-AP	20
22	UNICOM-JS	19
23	GO-DADDY-COM-LLC	19
24	FR-OVH-20150522	19
25	CHINANET-SH	19

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HANGZHOU-SRT-TECHNOLOGY-CO-LTD	304602
2	CHINANET-TJ	150345
3	UNICOM-CN	124631
4	IT-TECHNORAIL-20080814	27923
5	AIRLINERES-CALPOP-COM	26331
6	ARUBADE-NET	20909
7	CLOUD-DE	20421
8	VE-CSVE-LACNIC	14385
9	RO-JUMP-20051129	8322
10	TN-ATI-20061212	6009
11	ARUBAUK-NET	3994
12	OC-195	2580
13	KORNET-KR	1729
14	COLOCUBE-RPS-173-33-27	1345
15	UNKNOWN	1341
16	CO-ETBE-LACNIC	986
17	Gijima-SRD	500
18	BSNLNET	374
19	SA-ETTIHADETISALAT-20120330	203
20	UK-ENTANET-20090417	24
21	ESTROWEB-01	15
22	UNICOM-GD	10
23	ES-TELEFONICA-20020215	10
24	BSNL-GSM-EastZone	9
25	UUNET65-2	5

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HANGZHOU-SRT-TECHNOLOGY-CO-LTD	9138047
2	CHINANET-TJ	4510337
3	UNICOM-CN	3738930
4	AIRLINERES-CALPOP-COM	789917
5	VE-CSVE-LACNIC	431550
6	TN-ATI-20061212	300339
7	OC-195	128842
8	COLOCUBE-RPS-173-33-27	67249
9	KORNET-KR	51870
10	CO-ETBE-LACNIC	29580
11	IT-TECHNORAIL-20080814	27923
12	Gijima-SRD	24961
13	ARUBADE-NET	20909
14	CLOUD-DE	20421
15	BSNLNET	11220
16	SA-ETTIHADETISALAT-20120330	10104
17	RO-JUMP-20051129	8326
18	ARUBAUK-NET	3994
19	UNKNOWN	1552
20	UNICOM-GD	300
21	BSNL-GSM-EastZone	270
22	ESTROWEB-01	42
23	GSCTCM-CN	40
24	UK-ENTANET-20090417	24
25	CLOUDSTAR-02	11