Botnet Statistics for the year of 2014

detection period: 2014-01-01 00:00 - 2014-12-31 23:59 UTC
total number of suspected botnet IPs: 476581
number of blocked spams: 26490538
recipient count of blocked spams: 847739355
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	331136
2	Taiwan	63427
3	United States	8916
4	Viet Nam	8791
5	India	5983
6	Russian Federation	5008
7	Argentina	2991
8	Italy	2559
9	South Korea	2511
10	Brazil	2506
11	United Kingdom	2464
12	Peru	2401
13	France	2220
14	Indonesia	1651
15	Spain	1609
16	Chile	1565
17	Germany	1479
18	Colombia	1464
19	Poland	1424
20	Turkey	1367
21	Mexico	1272
22	Ukraine	1175
23	Iran	1134
24	Isreal	1049
25	Kazakhstan	1034

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	12013880
2	China	6660858
3	United States	1149260
4	Brazil	749321
5	Russian Federation	715848
6	Indonesia	663566
7	Hong Kong	332272
8	Saudi Arabia	300162
9	Iran	272697
10	Ukraine	269034
11	India	189967
12	South Korea	184997
13	Viet Nam	179720
14	Poland	169709
15	United Kingdom	154353
16	Malaysia	150996
17	Turkey	149129
18	Colombia	148257
19	Ivory Coast	135947
20	Italy	129012
21	Thailand	117765
22	Germany	102325
23	Bangladesh	102004
24	Philippines	83772
25	France	74414

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	356787215
2	China	207605894
3	United States	42938685
4	Russian Federation	26600659
5	Indonesia	25038701
6	Brazil	24262075
7	Hong Kong	12647933
8	Saudi Arabia	10433834
9	Iran	10400209
10	Ukraine	9936509
11	India	6795441
12	Viet Nam	6783444
13	South Korea	6600881
14	Poland	6259602
15	Malaysia	5802895
16	Colombia	5413919
17	Turkey	5269225
18	United Kingdom	5234615
19	Ivory Coast	5176130
20	Italy	4873135
21	Bangladesh	3914347
22	Germany	3704096
23	Thailand	3367505
24	Philippines	3180289
25	France	2714535

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	61239
2	CMNET	39373
3	CHINANET-GD	37827
4	CRTC	26015
5	UNICOM-SD	17922
6	CHINANET-JS	15614
7	CTTNET	13489
8	UNICOM-HA	9781
9	UNICOM-HE	9485
10	CHINANET-HB	8139
11	UNICOM-LN	7887
12	UNICOM-HL	6935
13	UNICOM-ZJ	6412
14	UNICOM-JL	6306
15	CHINANET-FJ	5909
16	CHINANET-XJ	5785
17	CHINANET-AH	5582
18	UNICOM-SX	5550
19	CHINANET-SC	5417
20	VNPT-VNNIC-VN	5353
21	CHINANET-SN	5016
22	CHINANET-JX	4857
23	CHINANET-HN	4707
24	CHINANET-SD	4237
25	WASU	3974

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	11891811
2	HICHINA	944132
3	CMNET	698859
4	CHINANET-GD	383731
5	CRTC	315510
6	CHINANET-JS	279715
7	UNICOM-LN	269387
8	UNICOM-SD	238177
9	UNICOM-HA	192359
10	CHINANET-AH	155472
11	BROADRIVER	143532
12	CTTNET	138422
13	AVISONET	135929
14	DEPKEU-ID	133613
15	ATHEEB-NET	114816
16	KORNET-KR	112093
17	ALIBABA-US-CDN	111360
18	004.027.547/0001-31	108430
19	Wotone	107128
20	CHINANET-ZJ	106849
21	BITNET	106082
22	TELKOMNET	98730
23	033.530.486/0001-29	97953
24	CHINANET-SD	95512
25	UNICOM-TJ	94722

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	352842409
2	HICHINA	36390409
3	CMNET	18994097
4	CHINANET-GD	11801933
5	UNICOM-LN	9449611
6	CHINANET-JS	8458651
7	CRTC	8056766
8	UNICOM-SD	7313481
9	BROADRIVER	5545884
10	UNICOM-HA	5473329
11	CHINANET-AH	5413545
12	AVISONET	5175590
13	DEPKEU-ID	5107063
14	ATHEEB-NET	4369168
15	ALIBABA-US-CDN	4241753
16	Wotone	4129452
17	004.027.547/0001-31	4048925
18	KORNET-KR	4030343
19	CHINANET-ZJ	3785914
20	TELKOMNET	3557566
21	JAVA-ID	3493483
22	CTTNET	3179629
23	002.558.157/0001-62	3176141
24	CHINANET-SH	3076293
25	BITNET	3061117