Botnet Statistics for September 2012

detection period: 2012-09-01 00:00 - 2012-09-30 23:59 UTC
total number of suspected botnet IPs: 56677
number of blocked spams: 3403492
recipient count of blocked spams: 112472480

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	33637
2	Taiwan	6732
3	United States	1982
4	India	1826
5	Brazil	1036
6	South Korea	862
7	Viet Nam	851
8	Russian Federation	796
9	Iran	505
10	Kazakhstan	419
11	Argentina	411
12	Poland	403
13	Peru	345
14	Indonesia	301
15	Ukraine	300
16	Germany	295
17	Romania	290
18	Pakistan	284
19	Colombia	262
20	Spain	261
21	Mexico	216
22	Italy	200
23	Belarus	197
24	Turkey	190
25	United Kingdom	189

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	595921
2	Brazil	467621
3	United States	301807
4	Russian Federation	231800
5	Taiwan	212513
6	South Korea	133837
7	India	116943
8	Ukraine	103131
9	United Kingdom	102317
10	Germany	88289
11	Netherlands	69441
12	Iran	49323
13	Colombia	48165
14	Argentina	47019
15	Mexico	45703
16	France	40473
17	Viet Nam	39211
18	Canada	34747
19	Indonesia	33634
20	Italy	32335
21	Czech Republic	27914
22	Thailand	27419
23	Portugal	27033
24	Romania	26681
25	Arab Emirates	26100

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	16312651
2	Brazil	16206908
3	United States	10428475
4	Russian Federation	8032555
5	Taiwan	6460423
6	South Korea	4655278
7	India	4053257
8	Ukraine	3594577
9	United Kingdom	3559396
10	Germany	3050011
11	Netherlands	2422221
12	Iran	1722974
13	Colombia	1667181
14	Argentina	1636773
15	Mexico	1593751
16	Viet Nam	1367962
17	France	1278005
18	Canada	1215162
19	Indonesia	1168384
20	Czech Republic	976354
21	Thailand	947925
22	Portugal	945781
23	Romania	921230
24	Arab Emirates	913117
25	Italy	896882

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	10691
2	HINET-NET	6582
3	MAINT-CHINANET-HA	3938
4	UNICOM-GD	3804
5	CHINANET-HA	3083
6	UNICOM-LN	2566
7	CHINANET-FJ	1170
8	CRTC	785
9	CHINANET-JS	705
10	BSNLNET	663
11	ZTWL	633
12	CHINANET-HB	563
13	UNICOM-HB	468
14	VNPT-VNNIC-VN	467
15	UNICOM-HA	392
16	UNICOM-SD	321
17	CHINANET-SH	308
18	CTTNET	284
19	KORNET-KR	264
20	TimeNet	218
21	RCOM	212
22	CHINASKYNET	193
23	AR-TEAR7-LACNIC	187
24	UNICOM-BJ	177
25	CMNET	177

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	184636
2	CHINANET-GD	126627
3	003.420.926/0002-05	81132
4	002.558.157/0001-62	52987
5	000.065.376/0002-65	50038
6	UNICOM-GD	48679
7	KRNIC-KR	45747
8	033.530.486/0001-29	41988
9	CHINANET-ZJ	34264
10	076.535.764/0326-90	32663
11	CHINANET-JS	32163
12	004.027.547/0001-31	31338
13	DTAG-MESSE-DSSD	29907
14	KORNET-KR	29747
15	UNICOM-SD	27117
16	broadNnet-KR	24114
17	000.108.786/0001-65	23523
18	CMNET	22258
19	001.402.946/0001-47	21957
20	ESOTERICA	21064
21	SHEPHERD-FIRE-SECURITY	20092
22	BHARTI-IN	19654
23	TREDION	18858
24	TATACOMM-IN	18606
25	UNICOM-LN	18576

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	5505496
2	003.420.926/0002-05	2809373
3	002.558.157/0001-62	1851018
4	CHINANET-GD	1725965
5	000.065.376/0002-65	1720222
6	KRNIC-KR	1600560
7	033.530.486/0001-29	1468571
8	CHINANET-ZJ	1195984
9	076.535.764/0326-90	1143252
10	CHINANET-JS	1103123
11	004.027.547/0001-31	1063319
12	DTAG-MESSE-DSSD	1046891
13	KORNET-KR	1039852
14	UNICOM-SD	883929
15	broadNnet-KR	842909
16	000.108.786/0001-65	823059
17	001.402.946/0001-47	764485
18	CMNET	737375
19	ESOTERICA	737216
20	SHEPHERD-FIRE-SECURITY	702408
21	BHARTI-IN	686704
22	TREDION	660621
23	UNICOM-LN	639208
24	TATACOMM-IN	628235
25	LEASEWEB	621511