Botnet Statistics for September 2014

detection period: 2014-09-01 00:00 - 2014-09-30 23:59 UTC
total number of suspected botnet IPs: 43808
number of blocked spams: 3050457
recipient count of blocked spams: 97505893

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	22552
2	China	11759
3	Viet Nam	1379
4	United States	1072
5	India	789
6	Russian Federation	733
7	Brazil	420
8	Argentina	322
9	South Korea	321
10	Chile	216
11	Colombia	206
12	Poland	203
13	Peru	203
14	Italy	199
15	Indonesia	182
16	United Kingdom	175
17	Germany	174
18	Spain	150
19	Mexico	147
20	Turkey	140
21	Ukraine	124
22	Portugal	121
23	Israel	109
24	Iran	104
25	France	96

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2168532
2	China	264561
3	United States	80120
4	Indonesia	57970
5	Brazil	49233
6	Russian Federation	44299
7	Hong Kong	39244
8	Iran	30382
9	Poland	28309
10	Saudi Arabia	23835
11	Italy	21905
12	Viet Nam	21650
13	Malaysia	21041
14	Ivory Coast	13575
15	Ukraine	12682
16	Serbia	11891
17	South Korea	11247
18	Bangladesh	9387
19	Germany	7611
20	Netherlands	7566
21	Canada	7350
22	Turkey	7332
23	Thailand	7233
24	South Africa	6962
25	Lebanon	6900

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	64664503
2	China	9749286
3	United States	2961523
4	Indonesia	2201118
5	Brazil	1787246
6	Russian Federation	1664221
7	Hong Kong	1488153
8	Iran	1148482
9	Poland	1048355
10	Saudi Arabia	904254
11	Italy	822785
12	Viet Nam	819878
13	Malaysia	798889
14	Ivory Coast	516639
15	Ukraine	472026
16	Serbia	446374
17	South Korea	430553
18	Bangladesh	356187
19	Netherlands	281896
20	Turkey	277544
21	Thailand	274183
22	Canada	271862
23	Germany	265734
24	Lebanon	261737
25	South Africa	261464

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	22443
2	CHINANET-GD	2618
3	CRTC	2013
4	UNICOM-ZJ	1400
5	VNPT-VNNIC-VN	833
6	CHINANET-JS	801
7	CHINANET-HB	755
8	CMNET	460
9	CHINANET-SN	356
10	WASU	339
11	UNICOM-BJ	311
12	CHINANET-LN	281
13	VIETEL-VNNIC-VN	224
14	WASU-BB	215
15	BSNLNET	179
16	ZJU-CN	169
17	UNICOM-GD	168
18	UNICOM-FJ	165
19	UNICOM-SD	159
20	CHINANET-AH	159
21	KORNET-KR	157
22	BHARTI-IN	140
23	CHINANET-FJ	131
24	CHINANET-HL	113
25	AR-TEAR7-LACNIC	108

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	2156928
2	CHINANET-GD	26680
3	CMNET	22155
4	HICHINA	21587
5	DEPKEU-ID	16855
6	004.027.547/0001-31	16070
7	STEADFAST-5	15977
8	CHINANET-JS	15320
9	UNICOM-SD	15137
10	ATHEEB-NET	13873
11	AVISONET	13575
12	BITNET	13412
13	IT-INTERBUSINESS-20110421	11304
14	VTDC-VNNIC-VN	11108
15	MAXISNET-HSDPA	10712
16	072.843.212/0001-41	10553
17	UNICOM-HA	10237
18	ONE-NET-HK	9748
19	TGTELECOM-AS-AP	8896
20	002.558.134/0001-58	8655
21	ACCESSTEL2-BD	8583
22	CHINANET-LN	8558
23	KORNET-KR	8547
24	XOXO-BLK-3	7722
25	CCCH3-4	6993

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	64228419
2	CHINANET-GD	948320
3	CMNET	843248
4	HICHINA	820411
5	DEPKEU-ID	642147
6	004.027.547/0001-31	605670
7	STEADFAST-5	596083
8	UNICOM-SD	571200
9	ATHEEB-NET	526440
10	AVISONET	516639
11	BITNET	509449
12	CHINANET-JS	498232
13	IT-INTERBUSINESS-20110421	425927
14	VTDC-VNNIC-VN	421376
15	MAXISNET-HSDPA	406215
16	072.843.212/0001-41	398770
17	UNICOM-HA	387592
18	ONE-NET-HK	368625
19	TGTELECOM-AS-AP	335682
20	KORNET-KR	326122
21	ACCESSTEL2-BD	325350
22	002.558.134/0001-58	325100
23	XOXO-BLK-3	294090
24	CHINANET-LN	288063
25	CCCH3-4	267374