Botnet Statistics for January 2013

detection period: 2013-01-01 00:00 - 2013-01-31 23:59 UTC
total number of suspected botnet IPs: 68434
number of blocked spams: 1586642
recipient count of blocked spams: 47155138

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	28114
2	Taiwan	17815
3	Belarus	2259
4	United States	2176
5	Viet Nam	1909
6	India	1667
7	Russian Federation	1103
8	South Korea	868
9	Kazakhstan	856
10	Pakistan	737
11	Peru	630
12	Iran	544
13	Indonesia	531
14	Brazil	530
15	Ukraine	486
16	Poland	413
17	Colombia	353
18	Saudi Arabia	316
19	Turkey	289
20	Spain	289
21	Germany	287
22	Argentina	285
23	Romania	283
24	Mexico	277
25	France	276

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	596817
2	China	285699
3	Brazil	154577
4	Russian Federation	74327
5	United States	50209
6	South Korea	35745
7	India	25385
8	Ukraine	24886
9	France	23253
10	United Kingdom	22690
11	Colombia	18200
12	Germany	16360
13	Mexico	12852
14	Iran	12600
15	Peru	11560
16	Argentina	10983
17	Thailand	8992
18	Netherlands	8486
19	Canada	8287
20	Indonesia	8142
21	Poland	7373
22	Arab Emirates	6846
23	Viet Nam	6793
24	Japan	6549
25	Saudi Arabia	6455

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	17247957
2	China	5468266
3	Brazil	5394301
4	Russian Federation	2554551
5	United States	1747762
6	South Korea	1239848
7	India	879268
8	Ukraine	867964
9	France	799854
10	United Kingdom	793812
11	Colombia	632147
12	Germany	565007
13	Mexico	449164
14	Iran	422684
15	Peru	394089
16	Argentina	384159
17	Thailand	313643
18	Netherlands	297203
19	Canada	288310
20	Indonesia	283272
21	Poland	256458
22	Arab Emirates	240133
23	Viet Nam	234052
24	Japan	229042
25	Saudi Arabia	225477

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	17620
2	CHINANET-GD	5534
3	MAINT-CHINANET-HA	2860
4	UNICOM-HA	2323
5	CHINANET-HA	2258
6	CHINANET-HE	1665
7	CHINANET-FJ	1286
8	BY-BELPAK-20091210	1258
9	VNPT-VNNIC-VN	1210
10	CRTC	1104
11	UNICOM-HN	1003
12	UNICOM-GD	750
13	UNICOM-HL	615
14	UNICOM-NM	597
15	UNICOM-SD	499
16	PTCL	495
17	CHINANET-JS	491
18	UNICOM-SX	481
19	BSNLNET	468
20	UNICOM-HE	458
21	CHINANET-XJ	366
22	KORNET-KR	354
23	CTTNET	334
24	KZ-KAZAKTELECOM-20080923	326
25	BY-BELPAK-20120330	318

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	594872
2	UNICOM-GD	65369
3	SHENZHEN-CNC	28240
4	TimeNet	27492
5	003.420.926/0002-05	26694
6	KORNET-KR	21892
7	CHINANET-GD	20492
8	033.530.486/0001-29	19803
9	002.558.157/0001-62	16632
10	002.558.134/0001-58	11915
11	076.535.764/0326-90	11352
12	HICHINA	11128
13	CO-ACSA-LACNIC	10698
14	CMNET	10656
15	CHINANET-JS	9578
16	CHINANET-FJ	8358
17	004.027.547/0001-31	8075
18	BHARTI-IN	7215
19	UNICOM-HE	6867
20	CHINANET-SH	6842
21	UNICOM-SD	6620
22	000.065.376/0002-65	6492
23	003.508.097/0001-36	6435
24	CHINANET-ZJ	6393
25	GULFNET-MOI	5958

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	17185842
2	003.420.926/0002-05	932467
3	KORNET-KR	765655
4	033.530.486/0001-29	692937
5	002.558.157/0001-62	582401
6	CHINANET-GD	422633
7	002.558.134/0001-58	413263
8	076.535.764/0326-90	397163
9	HICHINA	382175
10	CMNET	369965
11	CO-ACSA-LACNIC	369317
12	CHINANET-JS	322689
13	CHINANET-FJ	291401
14	004.027.547/0001-31	281629
15	BHARTI-IN	251904
16	CHINANET-SH	238274
17	UNICOM-HE	237567
18	UNICOM-SD	225514
19	003.508.097/0001-36	225002
20	CHINANET-ZJ	222198
21	000.065.376/0002-65	220231
22	GULFNET-MOI	204855
23	PE-TPSA-LACNIC	194905
24	CR-ICEY-LACNIC	191496
25	TATACOMM-IN	183593