Botnet Statistics for September 2018

detection period: 2018-09-01 00:00 - 2018-09-30 23:59 UTC
total number of suspected botnet IPs: 21714
number of blocked spams: 200946
recipient count of blocked spams: 5988768

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4494
2	United States	2428
3	Russian Federation	1318
4	Brazil	1236
5	Viet Nam	1136
6	Indonesia	918
7	India	843
8	Taiwan	723
9	France	456
10	South Korea	450
11	Thailand	396
12	Turkey	391
13	Ukraine	363
14	Italy	343
15	Hong Kong	305
16	United Kingdom	278
17	Mexico	269
18	Netherlands	266
19	Germany	261
20	Venezuela	259
21	Iran	230
22	Egypt	216
23	Canada	216
24	Colombia	184
25	South Africa	174

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	144897
2	South Korea	19561
3	United States	11091
4	Colombia	8564
5	Spain	6817
6	Argentina	4465
7	Russian Federation	2506
8	United Kingdom	2135
9	Poland	335
10	Estonia	298
11	India	58
12	ZZ	28
13	Pakistan	22
14	Brazil	15
15	France	13
16	Viet Nam	10
17	Netherlands	8
18	Italy	8
19	Indonesia	6
20	Portugal	5
21	Nigeria	5
22	Iraq	5
23	Tunisia	4
24	Iran	4
25	Canada	4

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	4346868
2	South Korea	586743
3	United States	480846
4	Colombia	256833
5	United Kingdom	106581
6	Russian Federation	100186
7	Argentina	44681
8	Spain	34083
9	Poland	16303
10	Estonia	14284
11	India	1044
12	Nigeria	50
13	ZZ	32
14	Brazil	27
15	Pakistan	22
16	France	15
17	Thailand	14
18	El Salvador	14
19	Netherlands	12
20	Viet Nam	10
21	Italy	8
22	Indonesia	6
23	Germany	6
24	Portugal	5
25	Iraq	5

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	582
2	HINET-NET	507
3	TencentCloud	419
4	UNKNOWN	367
5	CHINANET-GD	358
6	TELKOMNET	320
7	002.558.157/0001-62	319
8	CHINANET-JS	298
9	CMNET	258
10	TMO9	246
11	VE-CSVE-LACNIC	233
12	KORNET-KR	210
13	AT-88-Z	179
14	Baidu	165
15	TENCENT-CN	157
16	MX-USCV4-LACNIC	149
17	DIGITALOCEAN-8	140
18	UNICOM-SD	131
19	INTERNUX-NET	117
20	VIETEL-VNNIC-VN	113
21	CHINANET-SH	113
22	AMAZON-2011L	113
23	VIETEL-VN	103
24	CHINANET-SC	101
25	CHINANET-JX	100

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HANGZHOU-SRT-TECHNOLOGY-CO-LTD	93431
2	CHINANET-TJ	51456
3	KORNET-KR	19559
4	MSFT	9953
5	CO-ETBE-LACNIC	8561
6	ES-SERVIHOSTING-20120126	6815
7	UNKNOWN	4508
8	INSYS-EKB-3	2505
9	BT-INFRA	2132
10	AIRLINERES-CALPOP-COM	1110
11	PL-NETIA-20070201	327
12	CLOUDSTAR-02	295
13	BSNLNET	35
14	PTCLBB-PK	17
15	ONLINE_NET_DEDICATED_SERVERS	12
16	UNICOM-GD	10
17	AR-TAST-LACNIC	8
18	RRACI	7
19	CENTURYLINK-LEGACY-QWEST-INET-16	6
20	AR-TESA26-LACNIC	6
21	CAIU	5
22	AFRINIC-20090508	5
23	WHF-NETWORK	4
24	TRANSIP-NL-AMS4-CUST	4
25	ASHTON	4

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HANGZHOU-SRT-TECHNOLOGY-CO-LTD	2802930
2	CHINANET-TJ	1543667
3	KORNET-KR	586741
4	MSFT	447515
5	CO-ETBE-LACNIC	256830
6	BT-INFRA	106578
7	INSYS-EKB-3	100185
8	UNKNOWN	44556
9	ES-SERVIHOSTING-20120126	34081
10	AIRLINERES-CALPOP-COM	33300
11	PL-NETIA-20070201	16295
12	CLOUDSTAR-02	14272
13	BSNLNET	1021
14	UNICOM-GD	271
15	AR-TAST-LACNIC	205
16	AR-TESA26-LACNIC	26
17	PTCLBB-PK	17
18	003.420.926/0002-05	15
19	TRUENET-TH	14
20	SV-ESNS-LACNIC	14
21	ONLINE_NET_DEDICATED_SERVERS	12
22	ESTROWEB-01	12
23	TRANSIP-NL-AMS4-CUST	8
24	RRACI	7
25	DE-GINKO-20071017	6