Botnet Statistics for July 2012

detection period: 2012-07-01 00:00 - 2012-07-31 23:59 UTC
total number of suspected botnet IPs: 53992
number of blocked spams: 3349447
recipient count of blocked spams: 106067221

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	35011
2	Taiwan	4403
3	United States	1432
4	India	1223
5	Brazil	1059
6	Viet Nam	831
7	Russian Federation	739
8	South Korea	705
9	Argentina	445
10	Germany	441
11	Pakistan	429
12	Spain	419
13	Peru	322
14	Iran	297
15	Colombia	281
16	Chile	266
17	Romania	243
18	Mexico	240
19	Poland	228
20	Indonesia	228
21	Kazakhstan	226
22	Italy	220
23	Ukraine	213
24	United Kingdom	193
25	Thailand	180

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	700218
2	Brazil	405487
3	United States	240535
4	Russian Federation	236448
5	France	112050
6	Taiwan	108986
7	Netherlands	106040
8	United Kingdom	91624
9	Germany	87814
10	India	85192
11	South Korea	83690
12	Ukraine	72321
13	Colombia	51273
14	Saudi Arabia	47916
15	Poland	46743
16	Iran	45870
17	Canada	45356
18	Indonesia	43049
19	Mexico	41984
20	Thailand	38157
21	Argentina	30312
22	Viet Nam	29470
23	Sweden	28870
24	Chile	25269
25	Kuwait	24270

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	15832421
2	Brazil	13720939
3	United States	8194766
4	Russian Federation	8119648
5	France	3791665
6	Netherlands	3655990
7	Taiwan	3440485
8	United Kingdom	3175532
9	Germany	3008891
10	South Korea	2885396
11	India	2864531
12	Ukraine	2443354
13	Colombia	1756661
14	Saudi Arabia	1675538
15	Poland	1632858
16	Iran	1605017
17	Canada	1582046
18	Indonesia	1471917
19	Mexico	1463231
20	Thailand	1239466
21	Argentina	1029691
22	Sweden	1010325
23	Viet Nam	987830
24	Kuwait	849056
25	Italy	825710

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	13080
2	UNICOM-GD	4644
3	HINET-NET	4275
4	MAINT-CHINANET-HA	2843
5	UNICOM-LN	2651
6	CHINANET-HA	1649
7	UNICOM-HN	1276
8	CHINANET-FJ	1135
9	CRTC	886
10	UNICOM-HA	664
11	ZTWL	537
12	VNPT-VNNIC-VN	497
13	CHINANET-JS	476
14	UNICOM-BJ	403
15	BSNLNET	381
16	UNICOM-HB	372
17	PTCL	303
18	CHINANET-SH	286
19	KORNET-KR	269
20	CHINANET-HB	261
21	UNICOM-SD	203
22	GWBN-WUHAN	183
23	CHINASKYNET	177
24	CTTNET	175
25	AR-TEAR7-LACNIC	167

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-GD	188556
2	HINET-NET	84710
3	UNICOM-GD	82801
4	003.420.926/0002-05	70179
5	002.558.157/0001-62	58715
6	000.065.376/0002-65	55171
7	TELEHOUSE	54835
8	CHINANET-JS	46696
9	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	42151
10	033.530.486/0001-29	38335
11	SA-MEDUNET-19991101	35738
12	004.027.547/0001-31	33210
13	KRNIC-KR	26180
14	CHINANET-ZJ	26021
15	VLAN2618-OWNIT-SE	25507
16	KORNET-KR	24995
17	TELKOMNET	24857
18	YIPS-WEBWERK-S05192005	23685
19	PW-NET	22998
20	UNICOM-SD	22594
21	001.402.946/0001-47	21162
22	CO-ACSA-LACNIC	21139
23	BHARTI-IN	19365
24	GULFNET-MOI	19057
25	OVH	19041

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	2595542
2	003.420.926/0002-05	2349976
3	002.558.157/0001-62	2047941
4	TELEHOUSE	1919294
5	000.065.376/0002-65	1905358
6	CHINANET-GD	1741964
7	CHINANET-JS	1542352
8	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	1474310
9	033.530.486/0001-29	1314291
10	SA-MEDUNET-19991101	1249810
11	004.027.547/0001-31	1063670
12	KRNIC-KR	915370
13	VLAN2618-OWNIT-SE	892916
14	CHINANET-ZJ	883424
15	KORNET-KR	864061
16	TELKOMNET	841460
17	YIPS-WEBWERK-S05192005	816833
18	PW-NET	804432
19	CO-ACSA-LACNIC	721263
20	001.402.946/0001-47	716521
21	UNICOM-SD	684501
22	BHARTI-IN	677828
23	GULFNET-MOI	666593
24	071.208.516/0001-74	628436
25	OVH	619195