Botnet Statistics for February 2016

detection period: 2016-02-01 00:00 - 2016-02-29 23:59 UTC
total number of suspected botnet IPs: 13376
number of blocked spams: 388337
recipient count of blocked spams: 9090102

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	4106
2	China	3853
3	Viet Nam	1760
4	India	430
5	United States	375
6	Brazil	287
7	Thailand	277
8	Russian Federation	256
9	Mexico	249
10	Indonesia	139
11	Ukraine	137
12	Turkey	129
13	Romania	124
14	Iran	75
15	Poland	74
16	Argentina	59
17	Germany	54
18	Kazakhstan	48
19	South Korea	44
20	Israel	39
21	Hong Kong	39
22	United Kingdom	36
23	Colombia	32
24	Italy	31
25	Spain	30

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	221669
2	Mexico	56850
3	Poland	30866
4	China	24873
5	United States	8269
6	Hong Kong	7656
7	Thailand	5938
8	Viet Nam	5576
9	Sweden	3942
10	Turkey	3508
11	India	2014
12	France	1863
13	Bolivia	1760
14	South Korea	1527
15	Russian Federation	1445
16	Iran	1036
17	Canada	1034
18	Uruguay	993
19	Saudi Arabia	904
20	Macau	856
21	Brazil	763
22	Argentina	684
23	Indonesia	634
24	Romania	604
25	Colombia	580

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	6499063
2	Mexico	667972
3	China	543380
4	United States	201859
5	Hong Kong	185008
6	Thailand	158261
7	Viet Nam	143900
8	Sweden	104822
9	Turkey	78845
10	France	50655
11	India	48300
12	Bolivia	47240
13	Poland	30866
14	Russian Federation	29499
15	Iran	28231
16	Canada	28073
17	Uruguay	26793
18	Saudi Arabia	24415
19	Macau	22962
20	Indonesia	18367
21	Argentina	17753
22	South Korea	17539
23	Brazil	16731
24	Panama	15549
25	Colombia	15503

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	3270
2	VNPT-VNNIC-VN	927
3	UNICOM-ZJ	820
4	WASU	749
5	CHINANET-JS	589
6	WASU-BB	570
7	SONET-NET	500
8	CHINANET-GD	237
9	VIETEL-VN	178
10	VIETEL-VNNIC-VN	174
11	NCICNET-NET	169
12	CHINANET-SH	160
13	MX-MSCV17-LACNIC	155
14	FPT-VN	146
15	ETC-VNNIC-VN	124
16	BSNLNET	124
17	HINET	105
18	CHINANET-ZJ	101
19	BHARTI-IN	67
20	TOT-NET	62
21	totnet	55
22	IPxDSL-NET	52
23	ALISOFT	45
24	FPT-NET	44
25	076.535.764/0326-90	43

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	215086
2	MX-MSCV17-LACNIC	49228
3	EURONET-ISP	30866
4	ALISOFT	7801
5	VIKINGTECH	3866
6	CTIHK	3501
7	EPLUS-BROADBAND	3317
8	TANET-BNETA	2664
9	MX-USCV4-LACNIC	2621
10	Broadbandethernet-NET	2580
11	MX-TISC2-LACNIC	2205
12	tonghnetwork	2165
13	MX-CTSC6-LACNIC	1973
14	BO-ACBS1-LACNIC	1760
15	DWL-NET	1660
16	CAT	1619
17	VTDC-VNNIC-VN	1559
18	CHINANET-FJ	1516
19	NCICNET-NET	1512
20	CHINANET-LN	1499
21	HICHINA	1365
22	FR-OVH-20110520	1259
23	CHINANET-JS	1108
24	VOLUMEDRIVE	1086
25	TR-EXTEND-20070628	1000

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	6352122
2	MX-MSCV17-LACNIC	530774
3	ALISOFT	193435
4	CTIHK	117072
5	VIKINGTECH	104071
6	EPLUS-BROADBAND	90133
7	TANET-BNETA	71266
8	MX-USCV4-LACNIC	70234
9	Broadbandethernet-NET	67505
10	tonghnetwork	47965
11	BO-ACBS1-LACNIC	47240
12	DWL-NET	44188
13	CAT	43514
14	VTDC-VNNIC-VN	41975
15	CHINANET-LN	40322
16	HICHINA	35639
17	FR-OVH-20110520	34037
18	NCICNET-NET	32497
19	CHINANET-FJ	32234
20	EURONET-ISP	30866
21	VOLUMEDRIVE	29493
22	UY-ANTA-LACNIC	26793
23	CHINANET-AH	25144
24	TOTNET-AP	24408
25	MX-TISC2-LACNIC	24137