Botnet Statistics for November 2016

detection period: 2016-11-01 00:00 - 2016-11-30 23:59 UTC
total number of suspected botnet IPs: 20026
number of blocked spams: 532848
recipient count of blocked spams: 3469050

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	9959
2	Viet Nam	2313
3	India	1623
4	Taiwan	631
5	Brazil	416
6	Iran	363
7	United States	344
8	Mexico	303
9	Colombia	267
10	Indonesia	241
11	Pakistan	219
12	Italy	186
13	Turkey	175
14	Bangladesh	145
15	Russian Federation	135
16	Thailand	127
17	Argentina	126
18	South Korea	103
19	Peru	99
20	Saudi Arabia	75
21	Japan	71
22	Spain	71
23	Armenia	70
24	Tunisia	69
25	Chile	69

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	399092
2	Taiwan	23680
3	United States	16454
4	Poland	12439
5	India	11327
6	Brazil	7575
7	Russian Federation	5668
8	Slovenia	4582
9	Colombia	4472
10	Turkey	4342
11	South Korea	3956
12	Italy	3899
13	Spain	3362
14	Bulgaria	2333
15	El Salvador	2049
16	Pakistan	1934
17	Armenia	1736
18	Ukraine	1614
19	Macau	1538
20	Germany	1234
21	United Kingdom	1100
22	Romania	1086
23	Chile	1009
24	Antigua And Barbuda	984
25	Thailand	962

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	1169637
2	Taiwan	693580
3	Brazil	207629
4	India	184370
5	Turkey	124779
6	Russian Federation	120972
7	Colombia	107828
8	Italy	101832
9	South Korea	100642
10	Spain	90304
11	United States	83359
12	Macau	46140
13	Pakistan	37778
14	Germany	36904
15	Poland	35784
16	Chile	28327
17	Romania	28288
18	Thailand	27323
19	Hong Kong	23672
20	Ukraine	22059
21	Bolivia	21391
22	South Africa	20847
23	Argentina	20336
24	Saudi Arabia	18330
25	Venezuela	15500

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	2575
2	CHINANET-HN	2370
3	VNPT-VNNIC-VN	1141
4	UNICOM-ZJ	764
5	CHINANET-JS	664
6	UNICOM-JS	477
7	CHINANET-HB	461
8	HINET-NET	453
9	CHINANET-GD	385
10	WASU-BB	369
11	BSNLNET	312
12	FPT-VN	279
13	BHARTI-IN	278
14	VIETEL-VNNIC-VN	277
15	UNICOM-GX	212
16	CMNET	203
17	VIETEL-VN	179
18	ETC-VNNIC-VN	153
19	PTCLBB-PK	127
20	CHINANET-AH	107
21	BB-Multiplay	89
22	IPxDSL-NET	82
23	MX-USCV4-LACNIC	75
24	UNICOM-SD	72
25	CO-ACSA-LACNIC	71

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-HN	350159
2	HINET-NET	16834
3	CHINANET-JS	13649
4	PL-ZFIX-20151105	10955
5	ASO-239164-20	6523
6	OGTIPS1-129-121	4689
7	SI-T-2	4582
8	TR-TELEKOM-20051027	4098
9	BHARTI-IN	4043
10	RingLink	3641
11	PRISMANET	2998
12	CBC-CM-5	2764
13	RO-JUMP-20051129	2580
14	KORNET-KR	2580
15	TATACOMM-IN	2533
16	UNICOM-GX	2428
17	BG-SPNET-20080418	2118
18	SV-CSCV-LACNIC	1987
19	002.558.157/0001-62	1812
20	UNICOM-HE	1802
21	NCICNET-NET	1740
22	UCOM-GPON	1736
23	CO-ACSA-LACNIC	1678
24	CHINANET-GD	1648
25	CHINANET-TJ	1633

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	492492
2	CHINANET-HN	428202
3	TR-TELEKOM-20051027	117952
4	RingLink	109230
5	PRISMANET	89940
6	RO-JUMP-20051129	77400
7	TATACOMM-IN	72336
8	KORNET-KR	71658
9	UNICOM-GX	68693
10	CHINANET-JS	65356
11	002.558.157/0001-62	52040
12	NCICNET-NET	50779
13	CO-ACSA-LACNIC	47817
14	CHINANET-TJ	47337
15	SMARTONE-MO	46140
16	CHINANET-GD	42944
17	033.530.486/0001-29	40380
18	CO-ETBE-LACNIC	39300
19	CHINANET-ZJ	38313
20	IDEANET1-IN	32970
21	KREN-KR	28470
22	HOSHIN-MULTIMEDIA	28201
23	CAT	27030
24	TFN-NET	26730
25	RU-STAVNET	26250