Botnet Statistics for November 2014

detection period: 2014-11-01 00:00 - 2014-11-30 23:59 UTC
total number of suspected botnet IPs: 24724
number of blocked spams: 2466035
recipient count of blocked spams: 79787888

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	16837
2	China	3589
3	United States	821
4	Viet Nam	401
5	India	344
6	Russian Federation	244
7	South Korea	197
8	United Kingdom	133
9	Indonesia	122
10	Turkey	111
11	Brazil	95
12	Argentina	85
13	Arab Emirates	82
14	Ukraine	75
15	Chile	75
16	Hong Kong	65
17	Colombia	62
18	Poland	61
19	Saudi Arabia	58
20	South Africa	57
21	Spain	57
22	Iran	56
23	Italy	51
24	Mexico	50
25	Peru	48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1734456
2	China	175983
3	United States	159998
4	Russian Federation	49604
5	Indonesia	44679
6	Brazil	28073
7	Hong Kong	27074
8	Iran	26839
9	Viet Nam	24672
10	Poland	19723
11	Saudi Arabia	17487
12	Bangladesh	13286
13	United Kingdom	12204
14	Ivory Coast	9526
15	South Korea	9063
16	India	8754
17	Malaysia	8341
18	Ukraine	8017
19	South Africa	7731
20	Iraq	7394
21	Turkey	7172
22	Germany	6282
23	Canada	6126
24	Lebanon	4549
25	Australia	3713

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	51632373
2	China	6737235
3	United States	6204190
4	Russian Federation	1909003
5	Indonesia	1717105
6	Brazil	1075456
7	Hong Kong	1042732
8	Iran	1032531
9	Viet Nam	950009
10	Poland	760406
11	Saudi Arabia	675906
12	Bangladesh	511117
13	United Kingdom	466556
14	Ivory Coast	366693
15	South Korea	349602
16	India	337001
17	Malaysia	323143
18	Ukraine	309801
19	South Africa	297952
20	Iraq	284257
21	Turkey	276039
22	Germany	244911
23	Canada	233528
24	Lebanon	174476
25	Australia	143542

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	16742
2	CHINANET-GD	1520
3	CHINANET-HB	488
4	VNPT-VNNIC-VN	247
5	CHINANET-JX	194
6	UNICOM-SD	165
7	UNICOM-FJ	145
8	UNICOM-BJ	114
9	UNICOM-HA	113
10	UNICOM-GD	111
11	KORNET-KR	100
12	BHARTI-IN	76
13	BROADRIVER	70
14	BSNLNET	54
15	VIETEL-VNNIC-VN	51
16	CHINANET-SH	49
17	MSFT-GFS	47
18	CHINANET-ZJ	47
19	CHINANET-AH	47
20	CRTC	41
21	BORANET-KR	37
22	CMNET	33
23	HICHINA	31
24	AR-TEAR7-LACNIC	31
25	UNICOM-CN	30

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1728010
2	BROADRIVER	59030
3	CHINANET-GD	24984
4	ALIBABA-US-CDN	23343
5	VPLSNET	13688
6	HICHINA	11500
7	DEPKEU-ID	11439
8	CHINANET-JS	10123
9	AVISONET	9526
10	UNICOM-HA	8648
11	UNICOM-SD	7651
12	MSFT	7426
13	CMNET	7127
14	MAXISNET-HSDPA	7101
15	ACCESSTEL2-BD	7059
16	UNICOM-ZJ	6227
17	RU-DINET-20081230	6021
18	072.843.212/0001-41	5923
19	004.027.547/0001-31	5874
20	ATHEEB-NET	5830
21	WHOLESALEINTERNET-2	5561
22	AQIDC	5449
23	BITNET	5180
24	XOXO-BLK-3	5040
25	LINTASBUANA-ID	5022

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	51383309
2	BROADRIVER	2330111
3	CHINANET-GD	960424
4	ALIBABA-US-CDN	889494
5	VPLSNET	522395
6	HICHINA	439701
7	DEPKEU-ID	439175
8	CHINANET-JS	386084
9	AVISONET	366693
10	UNICOM-HA	328635
11	UNICOM-SD	294918
12	MSFT	284628
13	CMNET	274535
14	MAXISNET-HSDPA	273815
15	ACCESSTEL2-BD	271286
16	UNICOM-ZJ	240596
17	RU-DINET-20081230	232813
18	072.843.212/0001-41	228092
19	004.027.547/0001-31	225687
20	ATHEEB-NET	225454
21	WHOLESALEINTERNET-2	213956
22	AQIDC	209518
23	BITNET	196344
24	XOXO-BLK-3	193061
25	LINTASBUANA-ID	192725