Botnet Statistics for November 2013

detection period: 2013-11-01 00:00 - 2013-11-30 23:59 UTC
total number of suspected botnet IPs: 45918
number of blocked spams: 2884236
recipient count of blocked spams: 98544819

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	22034
2	Taiwan	10756
3	United States	2008
4	Spain	760
5	Italy	605
6	India	594
7	United Kingdom	556
8	Brazil	502
9	France	389
10	Russian Federation	378
11	Argentina	371
12	Australia	363
13	Kazakhstan	354
14	Ukraine	306
15	Peru	303
16	Japan	297
17	Hong Kong	294
18	Mexico	290
19	Singapore	287
20	Viet Nam	254
21	Colombia	249
22	Israel	229
23	Canada	221
24	Indonesia	202
25	Turkey	197

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	816969
2	Taiwan	752302
3	Brazil	260259
4	United States	138539
5	Russian Federation	125573
6	United Kingdom	61374
7	Indonesia	38299
8	Peru	37973
9	South Korea	36956
10	India	35435
11	Kuwait	34659
12	Saudi Arabia	32898
13	Iran	32307
14	Germany	31347
15	Colombia	29820
16	Ukraine	29779
17	Thailand	29262
18	Israel	29076
19	Philippines	27047
20	Hong Kong	22088
21	Ivory Coast	18808
22	Mexico	18011
23	Argentina	17958
24	Poland	17632
25	Maldives	17471

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	28801618
2	Taiwan	22883650
3	Brazil	9842446
4	Russian Federation	4752987
5	United States	2944549
6	United Kingdom	2096983
7	Indonesia	1444832
8	Peru	1438696
9	South Korea	1378853
10	India	1339801
11	Kuwait	1263824
12	Saudi Arabia	1245034
13	Iran	1219838
14	Colombia	1130697
15	Ukraine	1125675
16	Thailand	1106646
17	Israel	1100663
18	Philippines	1022944
19	Germany	902877
20	Hong Kong	833312
21	Ivory Coast	713285
22	Mexico	681983
23	Argentina	677120
24	Poland	667167
25	Maldives	662197

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	10534
2	CMNET	3229
3	CRTC	2898
4	CHINANET-GD	2423
5	CTTNET	1842
6	CHINANET-ZJ-NB	833
7	UNICOM-SD	748
8	CHINANET-FJ	618
9	CHINANET-SH	564
10	CHINANET-JS	561
11	UNICOM-HE	462
12	UNICOM-GD	423
13	UNICOM-LN	410
14	UNICOM-HL	405
15	ZTWL	400
16	UNICOM-HA	380
17	UNICOM-JL	315
18	CHINANET-GX	277
19	UNICOM-SX	273
20	CHINANET-SC	267
21	RIMA	261
22	CHINANET-XJ	226
23	SINGNET-SG	220
24	CHINANET-AH	209
25	CHINANET-JX	197

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	724412
2	UNICOM-LN	273381
3	UNICOM-HE	96302
4	CHINANET-GD	73543
5	CALPOP-NETWORK	62177
6	033.530.486/0001-29	50812
7	UNICOM-GD	46093
8	CMNET	44850
9	002.558.157/0001-62	42527
10	GULFNET-MOI	34659
11	CCS-DGI	27861
12	CHINANET-AH	25372
13	CHINANET-SH	24870
14	ATHEEB-NET	24825
15	003.420.926/0002-05	23480
16	PE-APSA4-LACNIC	22111
17	CAT	21869
18	NETBLK8-FIDN	18977
19	AVISONET	18808
20	UNICOM-CN	18464
21	STARLINE-NET	17874
22	RU-TATTELECOM-20100331	17575
23	Bnet	17471
24	RU-ZAODS-20101215	17403
25	002.449.992/0001-64	16590

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	21829506
2	UNICOM-LN	10347425
3	UNICOM-HE	3643736
4	CHINANET-GD	2778786
5	033.530.486/0001-29	1918908
6	002.558.157/0001-62	1605583
7	CMNET	1594545
8	GULFNET-MOI	1263824
9	CCS-DGI	1056059
10	CHINANET-AH	958050
11	CHINANET-SH	942532
12	ATHEEB-NET	939339
13	003.420.926/0002-05	891131
14	PE-APSA4-LACNIC	837932
15	CAT	826340
16	NETBLK8-FIDN	717843
17	AVISONET	713285
18	UNICOM-CN	697740
19	STARLINE-NET	677323
20	RU-TATTELECOM-20100331	666459
21	Bnet	662197
22	RU-ZAODS-20101215	656222
23	CHINANET-JS	636903
24	002.449.992/0001-64	628267
25	IL-BEZEQ-INTERNATIONAL-20030512	627338