Botnet Statistics for August 2012

detection period: 2012-08-01 00:00 - 2012-08-31 23:59 UTC
total number of suspected botnet IPs: 53818
number of blocked spams: 4105545
recipient count of blocked spams: 136619007

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	31783
2	Taiwan	6258
3	India	1481
4	United States	1284
5	Brazil	1144
6	South Korea	866
7	Russian Federation	846
8	Viet Nam	725
9	Argentina	550
10	Peru	427
11	Spain	415
12	Germany	406
13	Colombia	391
14	Iran	360
15	Romania	336
16	Ukraine	308
17	Poland	295
18	Mexico	295
19	Chile	293
20	Italy	270
21	Indonesia	238
22	Kazakhstan	225
23	United Kingdom	209
24	France	193
25	Serbia	184

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	695300
2	Brazil	519137
3	Russian Federation	346070
4	United States	324623
5	Taiwan	186341
6	South Korea	144637
7	India	139324
8	France	127115
9	United Kingdom	115737
10	Netherlands	111263
11	Ukraine	97788
12	Germany	85260
13	Canada	74120
14	Iran	62658
15	Italy	60550
16	Mexico	58179
17	Colombia	56738
18	Poland	46354
19	Argentina	44049
20	Viet Nam	41844
21	Indonesia	38743
22	Czech Republic	30189
23	South Africa	27254
24	Arab Emirates	26845
25	Kuwait	24973

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	19376227
2	Brazil	18036455
3	Russian Federation	12071450
4	United States	11260536
5	Taiwan	5924484
6	South Korea	5052570
7	India	4808893
8	France	4381218
9	United Kingdom	4034516
10	Netherlands	3884208
11	Ukraine	3406905
12	Germany	2954756
13	Canada	2588326
14	Iran	2190482
15	Mexico	2019051
16	Colombia	1971375
17	Poland	1621551
18	Argentina	1527574
19	Viet Nam	1460945
20	Italy	1361386
21	Indonesia	1341982
22	Czech Republic	1041883
23	South Africa	952019
24	Arab Emirates	927589
25	Kuwait	873503

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	12360
2	HINET-NET	6100
3	UNICOM-GD	3600
4	UNICOM-LN	3087
5	MAINT-CHINANET-HA	2425
6	CHINANET-HA	1364
7	CHINANET-FJ	1243
8	CRTC	1019
9	ZTWL	598
10	CHINANET-JS	565
11	BSNLNET	473
12	VNPT-VNNIC-VN	411
13	CHINANET-HE	407
14	UNICOM-HB	399
15	UNICOM-HA	371
16	CHINANET-SH	327
17	KORNET-KR	318
18	CHINANET-HB	278
19	TimeNet	220
20	CTTNET	218
21	CHINASKYNET	207
22	AR-TEAR7-LACNIC	198
23	UNICOM-BJ	192
24	002.558.134/0001-58	171
25	000.065.376/0002-65	165

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-GD	168860
2	HINET-NET	137145
3	003.420.926/0002-05	86308
4	002.558.157/0001-62	63849
5	TELEHOUSE	63634
6	000.065.376/0002-65	61771
7	KRNIC-KR	61671
8	CHINANET-JS	57760
9	CHINANET-ZJ	41309
10	UNICOM-GD	40719
11	033.530.486/0001-29	38907
12	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	38829
13	071.208.516/0001-74	37930
14	004.027.547/0001-31	33978
15	KORNET-KR	30890
16	UNICOM-SD	29756
17	CMNET	28424
18	000.108.786/0001-65	26826
19	076.535.764/0326-90	25323
20	APOL	25019
21	CO-ACSA-LACNIC	24472
22	GULFNET-MOI	23162
23	EBOUNDHOST	22624
24	VLAN2618-OWNIT-SE	22550
25	IT-INTERBUSINESS-20100413	22270

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	4203552
2	003.420.926/0002-05	3001653
3	CHINANET-GD	2254419
4	TELEHOUSE	2226798
5	002.558.157/0001-62	2221083
6	KRNIC-KR	2157387
7	000.065.376/0002-65	2140882
8	CHINANET-JS	1988168
9	CHINANET-ZJ	1437000
10	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	1359165
11	033.530.486/0001-29	1355818
12	071.208.516/0001-74	1327304
13	004.027.547/0001-31	1165020
14	KORNET-KR	1079507
15	UNICOM-SD	1038867
16	CMNET	994023
17	000.108.786/0001-65	938257
18	076.535.764/0326-90	880681
19	APOL	875691
20	CO-ACSA-LACNIC	844170
21	GULFNET-MOI	810208
22	EBOUNDHOST	790948
23	VLAN2618-OWNIT-SE	789115
24	SHEPHERD-FIRE-SECURITY	756742
25	002.558.134/0001-58	700404