Botnet Statistics for December 2014

detection period: 2014-12-01 00:00 - 2014-12-31 23:59 UTC
total number of suspected botnet IPs: 27498
number of blocked spams: 2027105
recipient count of blocked spams: 65927329

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	17400
2	China	5529
3	United States	801
4	Russian Federation	239
5	South Korea	221
6	Viet Nam	208
7	Spain	183
8	Argentina	171
9	Germany	170
10	India	144
11	Italy	128
12	Brazil	114
13	Iran	111
14	Mexico	110
15	Ukraine	104
16	Chile	99
17	Bulgaria	94
18	Turkey	89
19	Arab Emirates	80
20	Indonesia	78
21	Colombia	78
22	Hong Kong	77
23	France	77
24	Poland	70
25	Israel	69

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1440982
2	United States	150387
3	China	115659
4	Hong Kong	35252
5	Indonesia	34091
6	Russian Federation	34089
7	Iran	19704
8	Viet Nam	16912
9	Brazil	15693
10	Bangladesh	12941
11	Poland	12410
12	Saudi Arabia	10032
13	Germany	8735
14	Ukraine	7801
15	Turkey	7486
16	South Korea	6988
17	Bulgaria	6900
18	India	6627
19	Czech Republic	6330
20	Canada	6244
21	Iraq	5995
22	South Africa	5985
23	Ivory Coast	5844
24	Kazakhstan	4885
25	Malaysia	4836

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	42936751
2	United States	5817958
3	China	4518439
4	Hong Kong	1412841
5	Indonesia	1344154
6	Russian Federation	1341166
7	Iran	772759
8	Viet Nam	666375
9	Brazil	621110
10	Bangladesh	507836
11	Poland	485251
12	Saudi Arabia	396527
13	Germany	348308
14	Ukraine	307942
15	Turkey	297023
16	South Korea	275709
17	Bulgaria	275599
18	India	260674
19	Canada	252702
20	Czech Republic	248869
21	South Africa	236299
22	Iraq	235993
23	Ivory Coast	230723
24	Kazakhstan	195621
25	Malaysia	191382

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	17310
2	CHINANET-GD	2727
3	UNICOM-SD	640
4	UNICOM-HA	236
5	UNICOM-FJ	206
6	UNICOM-GD	169
7	CHINANET-ZJ	137
8	CHINANET-HN	136
9	CHINANET-AH	135
10	CHINANET-SC	118
11	VNPT-VNNIC-VN	116
12	UNICOM-HL	115
13	CHINANET-JX	114
14	KORNET-KR	94
15	BROADRIVER	73
16	NETBLK-NOBIS-TECHNOLOGY-GROUP-18	69
17	CHINANET-ZJ-SX	61
18	UNICOM-SC	57
19	UNICOM-AH	54
20	CHINANET-SH	53
21	BORANET-KR	43
22	AR-CASA10-LACNIC	43
23	UNICOM-CN	36
24	BSNLNET	36
25	NETBLK-CHARTER-NET	35

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1435952
2	BROADRIVER	84502
3	CHINANET-GD	11127
4	DEPKEU-ID	8783
5	VPLSNET	7436
6	VNPT-VNNIC-VN	7158
7	CASCADELINK	6805
8	UNICOM-HA	6657
9	ANCHNET	6229
10	ACCESSTEL2-BD	5880
11	AVISONET	5844
12	NICSL-HK	5580
13	NEWTT-AS-AP	5510
14	TOWERMARKETING-NET	5479
15	TGTELECOM-AS-AP	5292
16	004.027.547/0001-31	5176
17	MAXISNET-HSDPA	4787
18	HICHINA	4769
19	072.843.212/0001-41	4432
20	CHINANET-JS	4328
21	CMNET	4139
22	LINTASBUANA-ID	4137
23	UK-OVH	4054
24	freebone	3997
25	KORNET-KR	3957

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	42736736
2	BROADRIVER	3215773
3	CHINANET-GD	412417
4	DEPKEU-ID	345819
5	VPLSNET	290788
6	VNPT-VNNIC-VN	285109
7	CASCADELINK	274464
8	UNICOM-HA	262606
9	ANCHNET	245546
10	ACCESSTEL2-BD	232223
11	AVISONET	230723
12	NICSL-HK	225641
13	NEWTT-AS-AP	221673
14	TOWERMARKETING-NET	220346
15	TGTELECOM-AS-AP	212140
16	004.027.547/0001-31	204187
17	MAXISNET-HSDPA	189495
18	HICHINA	186946
19	072.843.212/0001-41	175241
20	CHINANET-JS	167471
21	CMNET	164649
22	UK-OVH	161813
23	LINTASBUANA-ID	161635
24	freebone	157456
25	KORNET-KR	157394