Botnet Statistics for October 2012

detection period: 2012-10-01 00:00 - 2012-10-31 23:59 UTC
total number of suspected botnet IPs: 60985
number of blocked spams: 3802558
recipient count of blocked spams: 128130941

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	28138
2	Taiwan	11650
3	India	2044
4	United States	1998
5	Russian Federation	1278
6	Brazil	1223
7	Peru	995
8	South Korea	834
9	Viet Nam	779
10	Iran	736
11	Colombia	580
12	Argentina	566
13	Romania	499
14	Spain	496
15	Kazakhstan	472
16	Poland	453
17	Ukraine	446
18	Mexico	418
19	Germany	362
20	Indonesia	334
21	Chile	333
22	Belarus	330
23	Serbia	301
24	Pakistan	256
25	United Kingdom	253

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	538183
2	Brazil	457350
3	Taiwan	423295
4	United States	355009
5	Russian Federation	270399
6	United Kingdom	157486
7	South Korea	129733
8	India	120515
9	Ukraine	112710
10	Germany	103391
11	Netherlands	66214
12	Canada	55956
13	Italy	55803
14	Colombia	52832
15	Mexico	48491
16	France	47138
17	Iran	44946
18	Indonesia	43448
19	Thailand	33415
20	Romania	28804
21	Viet Nam	28209
22	Poland	26336
23	Czech Republic	26299
24	Portugal	25905
25	Japan	24167

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	17062998
2	Brazil	15975351
3	Taiwan	12777369
4	United States	12407660
5	Russian Federation	9421215
6	United Kingdom	5508948
7	South Korea	4536776
8	India	4178798
9	Ukraine	3931040
10	Germany	3606982
11	Netherlands	2317707
12	Canada	1951736
13	Colombia	1843685
14	Mexico	1697103
15	France	1644472
16	Iran	1554891
17	Indonesia	1506475
18	Italy	1247571
19	Thailand	1166555
20	Romania	1006905
21	Viet Nam	985701
22	Czech Republic	915757
23	Poland	915665
24	Portugal	905807
25	Japan	845324

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	11487
2	CHINANET-GD	5383
3	UNICOM-HA	3508
4	MAINT-CHINANET-HA	3182
5	UNICOM-LN	2924
6	CHINANET-HA	2262
7	CHINANET-FJ	1097
8	UNICOM-HN	1024
9	CRTC	955
10	BSNLNET	920
11	ZTWL	786
12	CHINANET-JS	704
13	UNICOM-GD	554
14	VNPT-VNNIC-VN	479
15	UNICOM-HB	448
16	CHINANET-HB	437
17	PE-TPSA-LACNIC	406
18	UNICOM-BJ	365
19	KORNET-KR	316
20	UNICOM-SD	303
21	CTTNET	295
22	RCOM	268
23	PE-PETD2-LACNIC	259
24	AR-TEAR7-LACNIC	255
25	IR-DCC-20101018	220

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	363600
2	003.420.926/0002-05	76424
3	DTAG-MESSE-DSSD	50673
4	KRNIC-KR	50612
5	CHINANET-GD	46721
6	033.530.486/0001-29	44104
7	002.558.157/0001-62	42607
8	000.065.376/0002-65	42080
9	UNICOM-GD	36799
10	004.027.547/0001-31	36671
11	KORNET-KR	35940
12	CHINANET-JS	35368
13	BVIU27	31162
14	HINET-TW	31088
15	000.108.786/0001-65	28040
16	RCOM	26923
17	CHEMICOMP-NET	26828
18	076.535.764/0326-90	26498
19	CHINANET-ZJ	26220
20	SCN-4	23860
21	ESOTERICA	23476
22	CO-ACSA-LACNIC	22779
23	TATACOMM-IN	21843
24	002.558.134/0001-58	20836
25	UNICOM-SD	20710

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	10690739
2	003.420.926/0002-05	2668974
3	DTAG-MESSE-DSSD	1773574
4	KRNIC-KR	1771623
5	033.530.486/0001-29	1542566
6	002.558.157/0001-62	1489662
7	000.065.376/0002-65	1470531
8	004.027.547/0001-31	1281744
9	CHINANET-GD	1267416
10	KORNET-KR	1257726
11	CHINANET-JS	1175178
12	BVIU27	1090444
13	HINET-TW	1086931
14	000.108.786/0001-65	982169
15	CHEMICOMP-NET	937952
16	RCOM	933667
17	076.535.764/0326-90	919900
18	CHINANET-ZJ	913301
19	SCN-4	834751
20	ESOTERICA	821257
21	CO-ACSA-LACNIC	796599
22	TATACOMM-IN	761272
23	002.558.134/0001-58	728267
24	IR-DCC-20010403	719558
25	CMNET	706180