Botnet Statistics for September 2015

detection period: 2015-09-01 00:00 - 2015-09-30 23:59 UTC
total number of suspected botnet IPs: 62715
number of blocked spams: 3651218
recipient count of blocked spams: 102000009

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	36215
2	Taiwan	20936
3	Viet Nam	1900
4	United States	530
5	Russian Federation	305
6	India	299
7	Brazil	298
8	Ukraine	257
9	Turkey	120
10	Argentina	118
11	South Korea	103
12	Indonesia	98
13	Kazakhstan	93
14	Germany	83
15	Mexico	79
16	Romania	67
17	Thailand	56
18	Poland	54
19	Japan	51
20	Israel	51
21	Belarus	48
22	Chile	43
23	France	42
24	Italy	39
25	Iran	38

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	3198705
2	United States	232530
3	Germany	78133
4	China	69070
5	Brazil	25635
6	Russian Federation	4456
7	India	3295
8	Indonesia	3258
9	Viet Nam	2993
10	Chile	2136
11	Thailand	2129
12	United Kingdom	1883
13	South Korea	1761
14	Colombia	1727
15	Bolivia	1720
16	Ukraine	1584
17	Argentina	1534
18	Hong Kong	1526
19	France	1277
20	Kazakhstan	1230
21	Ecuador	1168
22	Italy	1088
23	Poland	1087
24	Romania	1079
25	Morocco	763

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	95165527
2	United States	3034416
3	China	951193
4	Germany	855375
5	Brazil	605624
6	Russian Federation	134817
7	India	100957
8	Indonesia	97781
9	Viet Nam	90414
10	Thailand	65360
11	Chile	64976
12	South Korea	53774
13	Colombia	53309
14	Bolivia	52002
15	Ukraine	48303
16	Hong Kong	46360
17	Argentina	45703
18	France	39221
19	Kazakhstan	36828
20	Ecuador	35418
21	Italy	33398
22	Romania	32689
23	Poland	31826
24	Morocco	22545
25	United Kingdom	22497

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	20878
2	CHINANET-HB	6689
3	CHINANET-GD	5073
4	UNICOM-AH	4084
5	CHINANET-JS	2391
6	UNICOM-ZJ	1876
7	CHINANET-HN	1719
8	CHINANET-SX	1641
9	CHINANET-YN	1611
10	CHINANET-ZJ	1601
11	WASU	1572
12	CHINANET-LN	1422
13	WASU-BB	1343
14	CHINANET-SN	1202
15	VNPT-VNNIC-VN	876
16	CHINANET-FJ	657
17	CHINANET-HA	527
18	CHINANET-SD	465
19	CHINANET-AH	406
20	UNICOM-BJ	404
21	CHINANET-SC	252
22	CHINANET-NM	224
23	FPT-VN	215
24	VIETEL-VN	176
25	VIETEL-VNNIC-VN	174

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	3198402
2	TWTC-NETBLK-11	201186
3	DE-COMSITEC	77370
4	CHINANET-HB	12012
5	CHINANET-GD	9681
6	UNICOM-AH	9619
7	CHINANET-ZJ	6259
8	005.200.140/0001-27	5780
9	CHINANET-SD	5119
10	NTINET-NASH	4985
11	VIS-BLOCK	4292
12	MSFT	4266
13	MSFT-EP	2998
14	CMNET	2916
15	076.535.764/0326-90	2772
16	010.431.131/0001-87	2619
17	GDOENET	2510
18	CHINANET-SC	2273
19	033.530.486/0001-29	2252
20	CHINANET-JS	2158
21	ODS-VNNIC-VN	1955
22	UNICOM-CN	1898
23	BO-NPBS-LACNIC	1720
24	CHINANET-SX	1572
25	002.558.134/0001-58	1550

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	95156528
2	TWTC-NETBLK-11	2209177
3	DE-COMSITEC	832285
4	NTINET-NASH	152539
5	CHINANET-GD	150467
6	MSFT	129760
7	005.200.140/0001-27	92472
8	MSFT-EP	90908
9	CMNET	87451
10	GDOENET	75789
11	CHINANET-SC	69011
12	033.530.486/0001-29	67424
13	CHINANET-JS	63878
14	ODS-VNNIC-VN	59139
15	BO-NPBS-LACNIC	52002
16	CHINANET-SX	46745
17	002.558.134/0001-58	46299
18	076.535.764/0326-90	45685
19	CL-ECSA-LACNIC	40914
20	CHINANET-HN	39224
21	002.558.157/0001-62	37773
22	VWEB-208-66-72	37203
23	EC-PUSA-LACNIC	34375
24	000.065.376/0002-65	33971
25	CHINANET-YN	33470