Botnet Statistics for December 2016

detection period: 2016-12-01 00:00 - 2016-12-31 23:59 UTC
total number of suspected botnet IPs: 12468
number of blocked spams: 562466
recipient count of blocked spams: 699850

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6896
2	Viet Nam	1229
3	India	1195
4	Brazil	251
5	Iran	223
6	Indonesia	166
7	Pakistan	153
8	United States	149
9	Mexico	149
10	Taiwan	121
11	Colombia	105
12	Italy	104
13	Bangladesh	101
14	Turkey	99
15	Russian Federation	93
16	Thailand	68
17	Philippines	54
18	Argentina	52
19	Poland	42
20	Cambodia	42
21	Antigua And Barbuda	42
22	South Korea	37
23	Tunisia	34
24	Serbia	34
25	Ukraine	33

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	503171
2	Romania	16089
3	India	4917
4	United States	4772
5	Poland	4530
6	Slovenia	3572
7	Italy	2938
8	Russian Federation	1957
9	El Salvador	1333
10	Colombia	1274
11	Taiwan	1263
12	South Korea	1146
13	Brazil	1090
14	Ukraine	1020
15	Germany	983
16	Bangladesh	896
17	Antigua And Barbuda	759
18	Cambodia	758
19	Armenia	731
20	Azerbaijan	648
21	Pakistan	578
22	Indonesia	519
23	Mexico	506
24	Gabon	410
25	Spain	402

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	609549
2	Romania	16321
3	Taiwan	12143
4	Brazil	7615
5	India	6309
6	United States	5674
7	Poland	4554
8	Slovenia	3572
9	Italy	2938
10	Turkey	2728
11	Saudi Arabia	2340
12	Russian Federation	2247
13	Argentina	2174
14	Colombia	1506
15	El Salvador	1333
16	South Korea	1146
17	Bangladesh	1099
18	Ukraine	1020
19	Thailand	987
20	Germany	983
21	Antigua And Barbuda	759
22	Cambodia	758
23	Iran	749
24	Armenia	731
25	Bolivia	727

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	3105
2	VNPT-VNNIC-VN	633
3	CHINANET-HB	616
4	UNICOM-ZJ	571
5	WASU-BB	343
6	CHINANET-JS	256
7	BHARTI-IN	240
8	UNICOM-JS	239
9	CHINANET-GD	200
10	BSNLNET	186
11	WASU	163
12	CMNET	157
13	VIETEL-VNNIC-VN	152
14	CHINANET-SC	144
15	FPT-VN	132
16	VIETEL-VN	113
17	UNICOM-SD	81
18	CHINANET-CQ	79
19	PTCLBB-PK	77
20	HINET-NET	76
21	UNICOM-GX	71
22	UNICOM-BJ	66
23	BB-Multiplay	55
24	ETC-VNNIC-VN	52
25	BM-ID	45

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-HN	486222
2	ROMTELECOM	15844
3	PL-FUFO-7	4440
4	SI-T-2	3572
5	VIS-BLOCK	3077
6	BHARTI-IN	2951
7	IT-SEFLOW-20090529	2315
8	CMNET	2104
9	UNICOM-SD	1578
10	ASO-239164-20	1418
11	UNICOM-HE	1374
12	SV-CSCV-LACNIC	1311
13	UNICOM-JX	1185
14	HINET-NET	1035
15	UNICOM-GD	1018
16	CO-DCSE-LACNIC	996
17	HETZNER-RZ-BLK-ERX3	938
18	UNICOM-HA	905
19	CHINANET-YN	898
20	CHINANET-GX	766
21	BSNLNET	753
22	UCOM-GPON	731
23	AZ-AZERSAT-20110331	616
24	KORNET-KR	551
25	MetroNet	527

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-HN	578825
2	ROMTELECOM	15844
3	HINET-NET	11915
4	002.558.157/0001-62	5453
5	UNICOM-SD	4507
6	PL-FUFO-7	4440
7	SI-T-2	3572
8	CHINANET-GD	3316
9	VIS-BLOCK	3077
10	BHARTI-IN	2951
11	SA-NOURNET-20060213	2340
12	IT-SEFLOW-20090529	2315
13	HICHINA	2273
14	TR-TELEKOM-20051027	2220
15	AR-CPOY8-LACNIC	2133
16	CMNET	2104
17	tonghnetwork	1830
18	IN2CABLE	1670
19	UNICOM-HE	1548
20	ASO-239164-20	1418
21	SV-CSCV-LACNIC	1311
22	UNICOM-JX	1185
23	RingLink	1140
24	UNICOM-GD	1018
25	CO-DCSE-LACNIC	996