Botnet Statistics for September 2013

detection period: 2013-09-01 00:00 - 2013-09-30 23:59 UTC
total number of suspected botnet IPs: 73202
number of blocked spams: 2799963
recipient count of blocked spams: 91458340

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	33969
2	Taiwan	19658
3	United States	3672
4	United Kingdom	1076
5	India	1025
6	Argentina	1009
7	Spain	905
8	Peru	870
9	Italy	772
10	Iran	725
11	Colombia	686
12	Mexico	578
13	Brazil	501
14	Germany	481
15	Canada	398
16	Viet Nam	373
17	Romania	349
18	Chile	337
19	Russian Federation	328
20	Turkey	314
21	South Korea	314
22	Poland	305
23	Israel	224
24	France	214
25	Indonesia	197

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1176590
2	China	605679
3	Brazil	233251
4	Russian Federation	114107
5	United States	59313
6	United Kingdom	51136
7	Ukraine	40811
8	Iran	38858
9	France	32763
10	India	32241
11	South Korea	24461
12	Peru	21044
13	Thailand	20975
14	Kuwait	19843
15	Israel	18529
16	Saudi Arabia	17917
17	Hong Kong	17692
18	Poland	17540
19	Indonesia	14277
20	Kazakhstan	12983
21	Belarus	12869
22	Mexico	12825
23	Pakistan	11742
24	Cote d'Ivoire	11707
25	Colombia	10618

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	35197147
2	China	18049414
3	Brazil	8934797
4	Russian Federation	4208780
5	United States	2181652
6	United Kingdom	1941039
7	Ukraine	1527616
8	Iran	1468284
9	France	1212092
10	India	1126310
11	South Korea	910391
12	Peru	810502
13	Thailand	806933
14	Kuwait	732625
15	Israel	715220
16	Hong Kong	677077
17	Poland	669352
18	Saudi Arabia	649250
19	Indonesia	536833
20	Kazakhstan	499562
21	Belarus	495470
22	Mexico	492265
23	Cote d'Ivoire	452870
24	Pakistan	452375
25	Colombia	375987

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	19420
2	CHINANET-JS	11534
3	CHINANET-GD	4888
4	CTTNET	2471
5	CMNET	2358
6	CRTC	1712
7	CHINANET-FJ	1083
8	CHINASKYNET	854
9	ZTWL	603
10	UNICOM-SD	561
11	UNICOM-GD	531
12	UNICOM-HE	391
13	CHINANET-HE	358
14	PE-TPSA-LACNIC	348
15	UNICOM-LN	344
16	UNICOM-HA	331
17	CHINANET-JX	320
18	AR-CASA10-LACNIC	317
19	UNICOM-HL	297
20	CHINANET-AH	285
21	BSNLNET	272
22	CHINANET-GX	255
23	UNICOM-JL	248
24	CHINANET-HN	244
25	AR-TEAR7-LACNIC	243

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	1151313
2	UNICOM-LN	139838
3	UNICOM-GD	119471
4	002.558.157/0001-62	41011
5	CMNET	38285
6	033.530.486/0001-29	36818
7	CHINANET-SH	25608
8	CHINANET-GD	25284
9	003.420.926/0002-05	24936
10	CHINANET-ZJ	23715
11	UNICOM-HE	20808
12	GULFNET-MOI	19279
13	JIAOJIANG-DONGGANG-LTD	16962
14	002.558.134/0001-58	16715
15	CHINANET-JS	15270
16	CCS-DGI	14485
17	KORNET-KR	14446
18	OVH	14070
19	HINET-TW	13892
20	COMPUWEB-COMMUNICATIONS	13843
21	UNICOM-CN	13250
22	071.208.516/0001-74	12728
23	UNICOM-SD	12707
24	PE-APSA4-LACNIC	12628
25	004.027.547/0001-31	12618

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	34232101
2	UNICOM-LN	5373432
3	002.558.157/0001-62	1576180
4	033.530.486/0001-29	1421037
5	CMNET	1309775
6	CHINANET-SH	985511
7	CHINANET-GD	959103
8	003.420.926/0002-05	958555
9	CHINANET-ZJ	911792
10	UNICOM-HE	750855
11	GULFNET-MOI	711222
12	002.558.134/0001-58	641498
13	JIAOJIANG-DONGGANG-LTD	632629
14	CHINANET-JS	558604
15	CCS-DGI	557866
16	KORNET-KR	554672
17	OVH	542459
18	HINET-TW	536907
19	COMPUWEB-COMMUNICATIONS	532635
20	UNICOM-CN	509995
21	071.208.516/0001-74	489651
22	PE-APSA4-LACNIC	488128
23	004.027.547/0001-31	484561
24	CHINANET-HE	482387
25	RU-TATTELECOM-20100331	457677