Botnet Statistics for November 2018

detection period: 2018-11-01 00:00 - 2018-11-30 23:59 UTC
total number of suspected botnet IPs: 43610
number of blocked spams: 36866
recipient count of blocked spams: 663574

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6266
2	United States	4757
3	Viet Nam	3449
4	Brazil	2855
5	Russian Federation	2761
6	Indonesia	2204
7	India	1958
8	Taiwan	1387
9	Venezuela	932
10	Thailand	869
11	Mexico	865
12	France	831
13	Turkey	791
14	South Korea	785
15	Ukraine	709
16	Iran	674
17	Italy	666
18	United Kingdom	564
19	Germany	559
20	Hong Kong	542
21	Pakistan	501
22	Netherlands	487
23	Colombia	421
24	Egypt	412
25	Canada	360

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	18456
2	Spain	17593
3	Colombia	662
4	India	36
5	United States	34
6	ZZ	8
7	Brazil	8
8	Taiwan	6
9	Portugal	5
10	Viet Nam	4
11	Nigeria	4
12	Australia	4
13	Trinidad/Tobago	3
14	Indonesia	3
15	Germany	3
16	Ukraine	2
17	Saudi Arabia	2
18	Russian Federation	2
19	Poland	2
20	Sri Lanka	2
21	South Korea	2
22	Italy	2
23	Hungary	2
24	Croatia	2
25	Hong Kong	2

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	553680
2	Spain	88108
3	Colombia	19831
4	United States	928
5	India	862
6	Nigeria	46
7	Australia	32
8	ZZ	12
9	Brazil	8
10	Taiwan	6
11	Estonia	6
12	Portugal	5
13	Viet Nam	4
14	Trinidad/Tobago	3
15	Indonesia	3
16	France	3
17	Germany	3
18	Ukraine	2
19	Saudi Arabia	2
20	Russian Federation	2
21	Poland	2
22	Sri Lanka	2
23	South Korea	2
24	Italy	2
25	Hungary	2

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNKNOWN	3216
2	VNPT-VNNIC-VN	1765
3	TELKOMNET	1075
4	HINET-NET	955
5	VE-CSVE-LACNIC	833
6	002.558.157/0001-62	752
7	CHINANET-GD	661
8	CHINANET-JS	489
9	MX-USCV4-LACNIC	477
10	AT-88-Z	467
11	KORNET-KR	402
12	VIETEL-VNNIC-VN	367
13	TencentCloud	350
14	AMAZON-2011L	344
15	CMNET	335
16	FPT-VN	283
17	CHINANET-SC	235
18	003.420.926/0002-05	234
19	BHARTI-IN	219
20	CHINANET-ZJ	216
21	NETVIGATOR	212
22	DIGITALOCEAN-8	211
23	VIETTEL-VN	209
24	CMPak-KHI-IGW	200
25	BSNLNET	196

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	UNKNOWN	17607
2	CHINANET-ZJ	11374
3	CHINANET-TJ	7082
4	CO-ETBE-LACNIC	661
5	AIRLINERES-CALPOP-COM	30
6	BSNLNET	19
7	BSNL-GSM-EastZone	9
8	060.316.817/0001-03	6
9	TVCABO	5
10	TELSTRAINTERNET-AU	4
11	HINET-NET	4
12	AFRINIC-20090508	4
13	PREMIANET	3
14	DE-ARCOR-20050815	3
15	CABLELITE	3
16	broadNnet-KR	2
17	VNPT-VNNIC-VN	2
18	VIETEL-VN	2
19	UA-LANETNETWORKLTD	2
20	SA-STC-20080522	2
21	NCICNET-NET	2
22	HR-HPTNET-20070220	2
23	GPRS-Subscribers-in-West	2
24	ETISALATLKNET	2
25	ESTROWEB-01	2

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ	341220
2	CHINANET-TJ	212460
3	UNKNOWN	88126
4	CO-ETBE-LACNIC	19830
5	AIRLINERES-CALPOP-COM	900
6	BSNLNET	570
7	BSNL-GSM-EastZone	270
8	AFRINIC-20090508	46
9	TELSTRAINTERNET-AU	32
10	PREMIANET	24
11	CABLELITE	17
12	ESTROWEB-01	6
13	060.316.817/0001-03	6
14	TVCABO	5
15	QUADRANET	4
16	HINET-NET	4
17	FR-OVH-20120515	3
18	DE-ARCOR-20050815	3
19	broadNnet-KR	2
20	VNPT-VNNIC-VN	2
21	VIETEL-VN	2
22	UA-LANETNETWORKLTD	2
23	SA-STC-20080522	2
24	NCICNET-NET	2
25	HR-HPTNET-20070220	2