Botnet Statistics for December 2015

detection period: 2015-12-01 00:00 - 2015-12-31 23:59 UTC
total number of suspected botnet IPs: 43006
number of blocked spams: 829301
recipient count of blocked spams: 8967433

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	36694
2	Taiwan	2090
3	Viet Nam	1559
4	United States	364
5	India	273
6	Russian Federation	238
7	Brazil	185
8	Ukraine	131
9	Turkey	117
10	Indonesia	95
11	Romania	87
12	Argentina	80
13	Kazakhstan	63
14	Germany	61
15	Mexico	60
16	South Korea	60
17	Poland	57
18	Iran	46
19	Thailand	45
20	United Kingdom	34
21	Hong Kong	33
22	Spain	31
23	Israel	28
24	Colombia	28
25	Bulgaria	27

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	408104
2	Taiwan	182049
3	China	88167
4	Brazil	69623
5	Russian Federation	14105
6	United Kingdom	11264
7	Germany	9505
8	Thailand	7029
9	Sweden	6293
10	Mexico	5901
11	Spain	4654
12	Antigua And Barbuda	4281
13	India	3090
14	Turkey	2863
15	France	1880
16	Canada	1695
17	Norway	1175
18	Argentina	1115
19	Israel	920
20	Ireland	889
21	Tunisia	846
22	Netherlands	819
23	Italy	693
24	Colombia	596
25	Chile	509

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	5374296
2	United States	944001
3	Brazil	718767
4	China	619947
5	Thailand	192442
6	Sweden	172256
7	Mexico	160966
8	Russian Federation	153334
9	Antigua And Barbuda	116101
10	Germany	104226
11	India	83191
12	France	50331
13	Canada	46285
14	Norway	32354
15	Argentina	30483
16	Turkey	27532
17	Israel	25936
18	Tunisia	22800
19	Colombia	16018
20	Netherlands	14796
21	Chile	13553
22	Peru	12036
23	United Kingdom	11264
24	Saudi Arabia	6893
25	Spain	6360

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	7030
2	CHINANET-JS	5105
3	CHINANET-ZJ-JH	4434
4	CHINANET-HB	3558
5	CHINANET-ZJ	3465
6	UNICOM-AH	2853
7	CHINANET-SC	2379
8	WASU	2025
9	UNICOM-ZJ	2025
10	HINET-NET	1930
11	WASU-BB	1576
12	CHINANET-GD	868
13	VNPT-VNNIC-VN	790
14	CHINANET-SD	333
15	UNICOM-BJ	180
16	CHINANET-ZJ-SX	169
17	FPT-VN	164
18	VIETEL-VNNIC-VN	157
19	VIETEL-VN	135
20	ETC-VNNIC-VN	117
21	SONET-NET	112
22	BSNLNET	73
23	BHARTI-IN	55
24	CHINANET-HN	54
25	IPxDSL-NET	53

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	177079
2	CC-198-144-189-0-24	166299
3	CC-09	126954
4	005.200.140/0001-27	43085
5	TWTC-NETBLK-11	25942
6	002.558.157/0001-62	24579
7	CHINANET-AH	14429
8	DIGITALOCEAN-9	14170
9	DIGITALOCEAN-10	13728
10	CHINANET-GD	9914
11	NETBLOCK-NOBIS-TECHNOLOGY-GROUP-02	9836
12	ALISOFT	8554
13	CHINANET-HB	8484
14	CHINANET-ZJ	8155
15	UNICOM-AH	8099
16	CHINANET-SC	8050
17	RNET	7387
18	VIKINGTECH	6293
19	CHINANET-ZJ-JH	6140
20	UK2-NET	5982
21	SINGLEHOP	5888
22	CAT	5428
23	CRISSIC	5347
24	UK-NTLI-20030228	5279
25	net-InfoLink	5193

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	5248691
2	005.200.140/0001-27	645770
3	ALISOFT	234360
4	VIKINGTECH	172256
5	CC-198-144-189-0-24	166299
6	CAT	149164
7	net-InfoLink	141937
8	MX-USCV4-LACNIC	130977
9	CC-09	126954
10	EPLUS-BROADBAND	126164
11	ANTIGUA	116101
12	tonghnetwork	115643
13	NETBLOCK-NOBIS-TECHNOLOGY-GROUP-02	98340
14	DWL-NET	83160
15	HICHINA	82227
16	CRISSIC	80205
17	CCCH3-4	67605
18	FR-ILIAD-ENTREPRISES-CUSTOMERS	50254
19	007.358.108/0001-08	45531
20	DE-GERMANVPS	42386
21	HSI-6	40145
22	CAT-ISP-NET	39873
23	CODERO2006A	39286
24	CHINANET-GD	38583
25	TANET-BNETA	36485