Botnet Statistics for February 2015

detection period: 2015-02-01 00:00 - 2015-02-28 23:59 UTC
total number of suspected botnet IPs: 27125
number of blocked spams: 3345404
recipient count of blocked spams: 119657070

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	17443
2	China	4228
3	Russian Federation	588
4	Viet Nam	422
5	United States	421
6	India	320
7	South Korea	234
8	Spain	192
9	Argentina	191
10	Turkey	189
11	Indonesia	174
12	Mexico	172
13	Ukraine	168
14	Brazil	165
15	Italy	159
16	Chile	125
17	Germany	124
18	United Kingdom	94
19	Colombia	85
20	Poland	84
21	Romania	82
22	Iran	80
23	Israel	73
24	France	67
25	Hong Kong	57

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1557965
2	China	528550
3	United States	215472
4	Indonesia	138162
5	Hong Kong	77744
6	Iran	75542
7	South Korea	65917
8	Russian Federation	64390
9	UNKNOWN	55405
10	Bangladesh	55234
11	Australia	47511
12	Saudi Arabia	41191
13	Viet Nam	35769
14	Brazil	33879
15	India	30989
16	Malaysia	28636
17	Ivory Coast	27877
18	Turkey	24446
19	Mongolia	19480
20	Ukraine	18466
21	Poland	16144
22	Romania	14340
23	Philippines	14027
24	Serbia	13090
25	Montenegro	12285

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	46691616
2	China	21542144
3	United States	8793737
4	Indonesia	5643531
5	Hong Kong	3171308
6	Iran	3085780
7	South Korea	2693002
8	Russian Federation	2629361
9	UNKNOWN	2255984
10	Bangladesh	2255760
11	Australia	1940973
12	Saudi Arabia	1684690
13	Viet Nam	1462445
14	Brazil	1379911
15	India	1267075
16	Malaysia	1172602
17	Ivory Coast	1142732
18	Turkey	998651
19	Mongolia	794913
20	Ukraine	754852
21	Poland	663089
22	Romania	584924
23	Philippines	573716
24	Serbia	536139
25	Montenegro	500913

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	17343
2	CHINANET-GD	3451
3	VNPT-VNNIC-VN	277
4	UNICOM-GD	176
5	KORNET-KR	105
6	UNICOM-FJ	79
7	BHARTI-IN	74
8	BSNLNET	54
9	VIETEL-VNNIC-VN	53
10	AR-CASA10-LACNIC	50
11	RIMA	48
12	TR-TELEKOM-20051027	46
13	BORANET-KR	46
14	AR-TEAR7-LACNIC	44
15	TurkTelekom	39
16	MX-USCV4-LACNIC	39
17	MX-MSCV17-LACNIC	30
18	BM-ID	30
19	GZGH	28
20	TR-TELEKOM-20040920	27
21	broadNnet-KR	26
22	CMNET	26
23	CL-VPNS-LACNIC	26
24	RCOM	25
25	CO-EPME1-LACNIC	25

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1533909
2	CHINANET-GD	51785
3	VOCUS-AS-AP	47511
4	DEPKEU-ID	42134
5	KORNET-KR	34700
6	NWT-NET	30033
7	HICHINA	29700
8	AVISONET	27877
9	MAXISNET-HSDPA	26517
10	YITAIFENG	25162
11	IR-DCC-20041125	24225
12	TR-TELEKOM-20051027	23661
13	VPLSNET	22933
14	BITNET	20692
15	CHINANET-JS	20496
16	UNICOM-HA	19746
17	G-Mobile	19480
18	UNICOM-SD	18944
19	XOXO-BLK-3	17977
20	ZIPNET-BD	17543
21	DXTNET	16566
22	IDEALSOLUTION	15524
23	ACCESSTEL2-BD	15455
24	ZENOINTERNET-AP	14996
25	CC-10	14991

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	45709127
2	CHINANET-GD	2118388
3	VOCUS-AS-AP	1940973
4	DEPKEU-ID	1721765
5	KORNET-KR	1417473
6	NWT-NET	1228379
7	HICHINA	1212508
8	AVISONET	1142732
9	MAXISNET-HSDPA	1084893
10	YITAIFENG	1028587
11	IR-DCC-20041125	990213
12	TR-TELEKOM-20051027	966764
13	VPLSNET	932576
14	BITNET	843904
15	CHINANET-JS	840226
16	UNICOM-HA	806991
17	G-Mobile	794913
18	UNICOM-SD	774253
19	XOXO-BLK-3	733938
20	ZIPNET-BD	715864
21	DXTNET	675338
22	IDEALSOLUTION	634014
23	ACCESSTEL2-BD	631195
24	ZENOINTERNET-AP	611400
25	CC-10	611014