Botnet Statistics for February 2013

One thing worth mentioning is that lots of infected computers were within Belarus during February this year.

detection period: 2013-02-01 00:00 - 2013-02-28 23:59 UTC
total number of suspected botnet IPs: 65581
number of blocked spams: 1871047
recipient count of blocked spams: 66269259

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	24217
2	Belarus	7127
3	Taiwan	5132
4	United States	3162
5	Kazakhstan	2439
6	Spain	1733
7	Argentina	1350
8	Ukraine	1311
9	Viet Nam	1283
10	Russian Federation	1162
11	India	1152
12	Colombia	948
13	Poland	886
14	Mexico	842
15	Brazil	842
16	Peru	835
17	Germany	821
18	Italy	745
19	United Kingdom	558
20	Iran	546
21	South Korea	545
22	Chile	483
23	Turkey	467
24	Canada	459
25	Romania	448

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	300984
2	Brazil	290211
3	Russian Federation	142381
4	Taiwan	141635
5	United States	133157
6	South Korea	67013
7	India	65913
8	United Kingdom	54580
9	Ukraine	48595
10	Germany	35246
11	France	33172
12	Thailand	33048
13	Colombia	31284
14	Indonesia	28240
15	Peru	25837
16	Iran	23070
17	Mexico	21976
18	Portugal	21370
19	Spain	16178
20	Poland	15928
21	Kuwait	15662
22	Romania	14368
23	Pakistan	13136
24	United Arab Emirates	12988
25	Japan	12922

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Brazil	10561409
2	China	9846709
3	Russian Federation	5189845
4	United States	4860228
5	Taiwan	4357831
6	South Korea	2438284
7	India	2409203
8	United Kingdom	1997015
9	Ukraine	1762919
10	Germany	1285232
11	France	1213452
12	Thailand	1208086
13	Colombia	1139052
14	Indonesia	1030807
15	Peru	937831
16	Iran	839371
17	Mexico	798119
18	Portugal	775710
19	Spain	592797
20	Poland	580418
21	Kuwait	572741
22	Romania	522098
23	Pakistan	476765
24	United Arab Emirates	476649
25	Japan	468303

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	5700
2	HINET-NET	4886
3	BY-BELPAK-20091210	3853
4	CHINANET-HE	2617
5	CRTC	2140
6	CHINANET-GD	2137
7	CTTNET	1658
8	BY-BELPAK-20120330	1148
9	CHINANET-JS	859
10	BY-BELPAK-20080213	819
11	VNPT-VNNIC-VN	813
12	CHINANET-FJ	767
13	BY-BELPAK-20120106	662
14	UNICOM-GD	650
15	UNICOM-SD	627
16	KZ-KAZAKTELECOM-20080923	620
17	RIMA	533
18	AR-TEAR7-LACNIC	521
19	MAINT-CHINANET-HA	501
20	KZ-KAZAKTELECOM-20091126	480
21	UNICOM-HE	454
22	UNICOM-HA	407
23	UNICOM-HL	386
24	JAZZTEL-TRIPLEPLAY	334
25	PE-TPSA-LACNIC	318

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	136147
2	003.420.926/0002-05	53208
3	002.558.157/0001-62	34414
4	033.530.486/0001-29	32304
5	KORNET-KR	29765
6	HICHINA	23206
7	002.558.134/0001-58	22772
8	004.027.547/0001-31	21557
9	UNICOM-GD	21264
10	076.535.764/0326-90	21205
11	ESOTERICA	20883
12	CHINANET-FJ	19829
13	UNICOM-LN	17477
14	CO-ACSA-LACNIC	16682
15	BHARTI-IN	16566
16	CHINANET-GD	16156
17	UNICOM-HE	15864
18	GULFNET-MOI	15662
19	CHINANET-JS	15604
20	CCS-DGI	15042
21	CMNET	12943
22	ES-ONO-20040415	11175
23	CHINANET-SH	11134
24	PE-TPSA-LACNIC	10350
25	RCOM	10321

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	4155358
2	003.420.926/0002-05	1937955
3	002.558.157/0001-62	1250491
4	033.530.486/0001-29	1174104
5	KORNET-KR	1078192
6	HICHINA	843296
7	002.558.134/0001-58	831542
8	004.027.547/0001-31	783875
9	076.535.764/0326-90	773234
10	ESOTERICA	758640
11	CHINANET-FJ	718523
12	UNICOM-LN	638228
13	CO-ACSA-LACNIC	607257
14	BHARTI-IN	605308
15	UNICOM-HE	577935
16	GULFNET-MOI	572741
17	CHINANET-JS	567811
18	CHINANET-GD	552634
19	CCS-DGI	549680
20	CMNET	471211
21	ES-ONO-20040415	409173
22	CHINANET-SH	408895
23	RCOM	378576
24	PE-TPSA-LACNIC	375717
25	Netropy-KR	365084