Botnet Statistics for November 2015

detection period: 2015-11-01 00:00 - 2015-11-30 23:59 UTC
total number of suspected botnet IPs: 33371
number of blocked spams: 1944904
recipient count of blocked spams: 52618574

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	14441
2	Taiwan	13138
3	Viet Nam	1893
4	United States	555
5	India	370
6	Brazil	237
7	Russian Federation	184
8	Ukraine	182
9	Turkey	164
10	South Korea	139
11	Romania	127
12	Argentina	102
13	Indonesia	99
14	Mexico	94
15	Poland	80
16	Iran	77
17	United Kingdom	76
18	Germany	75
19	Thailand	67
20	Japan	64
21	Kazakhstan	61
22	Bulgaria	61
23	Italy	54
24	Colombia	53
25	Pakistan	48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1615596
2	Germany	166469
3	United States	37190
4	Brazil	32681
5	China	28073
6	United Kingdom	24075
7	South Korea	6827
8	Thailand	5819
9	Belgium	5752
10	Russian Federation	2055
11	Sweden	2009
12	India	1934
13	Spain	1438
14	Mexico	1122
15	Peru	1120
16	Antigua And Barbuda	1056
17	Indonesia	1005
18	Uruguay	959
19	Saudi Arabia	888
20	Chile	822
21	Viet Nam	740
22	Turkey	724
23	Argentina	632
24	Colombia	540
25	Dominican Republic	422

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	48057984
2	Germany	1680388
3	United States	630716
4	Brazil	518370
5	China	436359
6	United Kingdom	254046
7	South Korea	204172
8	Thailand	156766
9	Belgium	71749
10	Russian Federation	57724
11	India	55297
12	Sweden	52685
13	Mexico	31694
14	Peru	30854
15	Indonesia	28733
16	Antigua And Barbuda	26792
17	Uruguay	25416
18	Saudi Arabia	24511
19	Chile	23184
20	Spain	21626
21	Viet Nam	21067
22	Turkey	19921
23	Argentina	17092
24	Colombia	15731
25	Dominican Republic	11059

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	13071
2	UNICOM-ZJ	2432
3	WASU	1839
4	WASU-BB	1633
5	CHINANET-HB	1394
6	CHINANET-ZJ	1349
7	CHINANET-AH	1215
8	CHINANET-GD	1031
9	VNPT-VNNIC-VN	926
10	UNICOM-AH	913
11	CHINANET-JS	395
12	CHINANET-ZJ-JH	297
13	UNICOM-BJ	285
14	FPT-VN	269
15	NET-107-151-128-0	258
16	CHINANET-ZJ-NB	231
17	CHINANET-SC	203
18	VIETEL-VNNIC-VN	173
19	VIETEL-VN	157
20	ETC-VNNIC-VN	135
21	CHINANET-ZJ-HZ	110
22	UNICOM-JS	95
23	CHINANET-ZJ-QZ	89
24	BSNLNET	87
25	CHINANET-HN	79

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1614001
2	DE-GERMANVPS	165379
3	005.200.140/0001-27	30771
4	UK2-NET	22211
5	NASNET-68-64-174-64-27	8807
6	ALISOFT	5512
7	FUSADCO2	4861
8	FDCSERVERS	4547
9	NETBLOCK-NOBIS-TECHNOLOGY-GROUP-02	4213
10	KORNET-KR	3784
11	CAT	3566
12	NET-107-151-128-0	3428
13	CHINANET-HB	3100
14	CHINANET-GD	2665
15	CHINANET-ZJ	2578
16	NETBLK-UBIQUITY-NEW-YORK-70-32-40-0-24	2391
17	CHINANET-AH	2316
18	HICHINA	2176
19	UNICOM-AH	1950
20	NODESDIRECT	1941
21	VIKINGTECH	1848
22	tonghnetwork	1553
23	TRIPLETNET-TH	1536
24	CNLINKNET	1513
25	WISENET-WEBHOSTING-BY-NETROUTING-MIAMI	1473

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	48016139
2	DE-GERMANVPS	1649138
3	005.200.140/0001-27	461273
4	UK2-NET	221418
5	ALISOFT	147506
6	KORNET-KR	113172
7	NET-107-151-128-0	102347
8	CAT	96904
9	NASNET-68-64-174-64-27	88038
10	HICHINA	58714
11	FUSADCO2	48600
12	VIKINGTECH	47884
13	FDCSERVERS	45464
14	NETBLOCK-NOBIS-TECHNOLOGY-GROUP-02	42121
15	tonghnetwork	40871
16	TRIPLETNET-TH	40791
17	WISENET-WEBHOSTING-BY-NETROUTING-MIAMI	39056
18	CNLINKNET	39015
19	1AN1-NETWORK	37148
20	HOSTSPACE-NETWORKS-LLC	35076
21	broadNnet-KR	29436
22	ANTIGUA	26792
23	UY-ANTA-LACNIC	25416
24	NETBLK-UBIQUITY-NEW-YORK-70-32-40-0-24	23908
25	RIS	23149