Botnet Statistics for September 2016

detection period: 2016-09-01 00:00 - 2016-09-30 23:59 UTC
total number of suspected botnet IPs: 24729
number of blocked spams: 568419
recipient count of blocked spams: 12868411

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	9260
2	China	3681
3	Viet Nam	2323
4	India	1971
5	Mexico	1058
6	Brazil	611
7	Peru	593
8	Iran	436
9	Colombia	436
10	Turkey	332
11	Thailand	208
12	Argentina	201
13	Indonesia	200
14	Venezuela	186
15	Pakistan	175
16	Saudi Arabia	171
17	Arab Emirates	146
18	Tunisia	129
19	Bolivia	128
20	Philippines	117
21	Macedonia	116
22	Italy	107
23	Serbia	79
24	South Africa	73
25	Spain	73

The top 17 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	423203
2	Poland	82741
3	China	44535
4	United States	8010
5	Italy	4174
6	Philippines	3356
7	United Kingdom	1130
8	Thailand	705
9	Argentina	260
10	Turkey	230
11	Canada	48
12	Ukraine	16
13	Romania	5
14	Arab Emirates	3
15	Mexico	1
16	Lithuania	1
17	Croatia	1

The top 17 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	12618385
2	China	114387
3	Poland	82741
4	Thailand	19743
5	United States	10174
6	Argentina	7433
7	Turkey	6392
8	Italy	4174
9	Philippines	3359
10	United Kingdom	1130
11	Ukraine	434
12	Canada	48
13	Romania	5
14	Arab Emirates	3
15	Mexico	1
16	Lithuania	1
17	Croatia	1

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	9254
2	CHINANET-HN	2215
3	VNPT-VNNIC-VN	1167
4	CHINANET-SD	717
5	MX-USCV4-LACNIC	526
6	BSNLNET	403
7	CHINANET-JS	364
8	BHARTI-IN	274
9	FPT-VN	237
10	ETC-VNNIC-VN	230
11	VIETEL-VNNIC-VN	229
12	PE-TPSA-LACNIC	219
13	VIETEL-VN	198
14	VE-CSVE-LACNIC	158
15	BB-Multiplay	139
16	PTCLBB-PK	135
17	PE-PETD2-LACNIC	132
18	CO-ACSA-LACNIC	130
19	MX-IPMS2-LACNIC	98
20	CHINANET-AH	91
21	IR-DCC-20101018	82
22	CO-CTSE-LACNIC	82
23	AR-TEAR7-LACNIC	81
24	076.535.764/0326-90	81
25	MX-ASCV9-LACNIC	79

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	423012
2	PL-ZFIX-20151105	82741
3	CHINANET-HN	35839
4	MSFT	7894
5	CHINANET-JS	5027
6	ARUBA-NET	4174
7	ETPI	3343
8	ALISOFT	1765
9	SCCIS-NET_43	1130
10	CHINANET-SD	925
11	HICHINA	516
12	CAT	366
13	TURKLOKASYON-NOC	230
14	TANET-B	191
15	AR-CASA10-LACNIC	166
16	CHINANET-AH	137
17	SIAMDATAIDC	119
18	AR-TSCR-LACNIC	94
19	CAT-ISP-NET	83
20	1AND1-NETWORK	78
21	THAINET-TH	71
22	TRIPLETNET-TH	66
23	CHINANET-JX	51
24	CHINANET-HB	49
25	BELLCANADA-16	48

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	12613339
2	PL-ZFIX-20151105	82741
3	ALISOFT	48493
4	CHINANET-HN	43703
5	HICHINA	14098
6	CAT	10320
7	MSFT	7894
8	TURKLOKASYON-NOC	6392
9	CHINANET-JS	5138
10	TANET-B	5046
11	AR-CASA10-LACNIC	4724
12	ARUBA-NET	4174
13	ETPI	3346
14	SIAMDATAIDC	3217
15	AR-TSCR-LACNIC	2709
16	CAT-ISP-NET	2269
17	1AND1-NETWORK	2242
18	THAINET-TH	1996
19	TRIPLETNET-TH	1941
20	SCCIS-NET_43	1130
21	CHINANET-SD	993
22	YITAIFENG	831
23	FOBOS-NET	434
24	CHINANET-AH	327
25	CHINANET-JX	165