Botnet Statistics for September 2011

detection period: 2011-09-01 00:00 - 2011-09-30 23:59 UTC
total number of suspected botnet IPs: 33640
number of blocked spams: 1265758
recipient count of blocked spams: 43727542

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	9026
2	Taiwan	4321
3	India	3214
4	Russian Federation	1826
5	Brazil	1422
6	South Korea	1358
7	Viet Nam	1339
8	United States	773
9	Indonesia	770
10	Ukraine	722
11	Poland	599
12	Pakistan	501
13	Argentina	458
14	Romania	353
15	Belarus	348
16	Colombia	340
17	Spain	261
18	Italy	248
19	Germany	242
20	Serbia	231
21	Chile	228
22	Saudi Arabia	225
23	Kazakhstan	206
24	Peru	194
25	United Kingdom	186

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	322671
2	Brazil	161508
3	United States	86488
4	Taiwan	62520
5	India	45835
6	Indonesia	43437
7	Russian Federation	43063
8	France	36041
9	Germany	31965
10	Colombia	30142
11	Viet Nam	25463
12	Thailand	25352
13	Ukraine	24367
14	South Korea	20593
15	United Kingdom	17926
16	Mexico	17598
17	Poland	15103
18	Argentina	14367
19	Australia	13537
20	Canada	11914
21	Czech Republic	10961
22	Chile	10841
23	Iran	10103
24	European Union	10018
25	Italy	9706

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	11061664
2	Brazil	5642789
3	United States	3021798
4	Taiwan	1982644
5	India	1601898
6	Indonesia	1517945
7	Russian Federation	1503559
8	France	1259449
9	Germany	1117279
10	Colombia	1053694
11	Viet Nam	890278
12	Thailand	886566
13	Ukraine	852376
14	South Korea	720776
15	United Kingdom	626214
16	Mexico	614393
17	Poland	526655
18	Argentina	501574
19	Australia	472848
20	Canada	416695
21	Czech Republic	382997
22	Chile	378563
23	Iran	352089
24	European Union	349702
25	Italy	338423

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	4036
2	CHINANET-GD	1782
3	CTTNET	1614
4	BSNLNET	1228
5	VNPT-VNNIC-VN	835
6	UNICOM-HN	685
7	KORNET-KR	660
8	CRTC	654
9	CHINANET-JS	629
10	PTCL	432
11	BHARTI-IN	343
12	UNICOM-CN	326
13	RCOM	303
14	UNICOM-BJ	298
15	BY-BELPAK-20091210	274
16	TELKOMNET	261
17	002.558.134/0001-58	245
18	MTNLISP	243
19	000.065.376/0002-65	236
20	002.558.157/0001-62	219
21	CHINANET-SH	192
22	AR-TEAR7-LACNIC	190
23	UKRTELNET	187
24	TATACOMM-IN	184
25	CHINANET-HN	157

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	54477
2	000.065.376/0002-65	35470
3	033.530.486/0001-29	30976
4	CHINANET-JS	29055
5	CHINANET-ZJ	22374
6	UNICOM-SD	21987
7	CHINANET-GD	21053
8	003.420.926/0002-05	19826
9	OVH	19655
10	UNICOM-JL	12339
11	CO-ACSA-LACNIC	12278
12	CHINANET-SN	11208
13	UNICOM-LN	10628
14	002.558.157/0001-62	10591
15	CHINANET-GX	10068
16	CHINANET-CQ	10048
17	CHINANET-HN	10021
18	TATACOMM-IN	9777
19	CHINA-ABITCOOL	9745
20	CHINANET-ZJ-WZ	9440
21	CHINANET-AH	8676
22	071.208.516/0001-74	8541
23	TELKOMNET	8347
24	PSYCHZ	8345
25	076.535.764/0326-90	8344

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	1701760
2	000.065.376/0002-65	1239990
3	033.530.486/0001-29	1082055
4	CHINANET-JS	1016348
5	UNICOM-SD	769409
6	CHINANET-ZJ	747196
7	CHINANET-GD	736133
8	003.420.926/0002-05	692673
9	OVH	686059
10	UNICOM-JL	431076
11	CO-ACSA-LACNIC	429019
12	CHINANET-SN	391373
13	UNICOM-LN	371423
14	002.558.157/0001-62	369079
15	CHINANET-GX	352366
16	CHINANET-CQ	351018
17	CHINANET-HN	350869
18	TATACOMM-IN	341403
19	CHINA-ABITCOOL	340420
20	CHINANET-AH	303374
21	071.208.516/0001-74	298577
22	076.535.764/0326-90	292177
23	PSYCHZ	292014
24	TELKOMNET	291039
25	CHINANET-SH	285233