Botnet Statistics for December 2012

detection period: 2012-12-01 00:00 - 2012-12-31 23:59 UTC
total number of suspected botnet IPs: 60299
number of blocked spams: 4110560
recipient count of blocked spams: 136375309

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	28295
2	Taiwan	15500
3	India	1992
4	United States	1836
5	Russian Federation	1460
6	Brazil	621
7	South Korea	584
8	Viet Nam	554
9	Peru	526
10	Romania	456
11	Colombia	456
12	Ukraine	438
13	Iran	382
14	Poland	338
15	Argentina	333
16	Mexico	306
17	Germany	295
18	Chile	274
19	Indonesia	270
20	Spain	264
21	Turkey	232
22	Belarus	228
23	Italy	222
24	Serbia	219
25	France	194

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	679057
2	Taiwan	580209
3	Brazil	477790
4	Russian Federation	304681
5	United States	277793
6	India	131065
7	Germany	126375
8	South Korea	110081
9	Ukraine	99980
10	United Kingdom	81038
11	Poland	67040
12	Mexico	63810
13	France	61739
14	Netherlands	54667
15	Canada	49647
16	Iran	49598
17	Colombia	48236
18	Argentina	40068
19	Romania	39987
20	Hong Kong	35927
21	Italy	34477
22	Indonesia	30705
23	Turkey	28438
24	Czech Republic	24112
25	Peru	23563

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	19623298
2	Taiwan	17475155
3	Brazil	16656121
4	Russian Federation	10581054
5	United States	9674026
6	India	4495778
7	Germany	4401959
8	South Korea	3844886
9	Ukraine	3484798
10	United Kingdom	2832670
11	Poland	2339826
12	Mexico	2231417
13	France	2148470
14	Netherlands	1911483
15	Canada	1735139
16	Iran	1716271
17	Colombia	1681675
18	Argentina	1396734
19	Romania	1395542
20	Hong Kong	1252725
21	Italy	1193681
22	Indonesia	1072165
23	Turkey	994887
24	Czech Republic	843397
25	Peru	820852

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	15357
2	CHINANET-GD	6982
3	MAINT-CHINANET-HA	3854
4	CHINANET-HA	3215
5	CTTNET	1424
6	CHINANET-FJ	1374
7	CRTC	1051
8	UNICOM-HN	1023
9	CHINANET-JS	912
10	BSNLNET	862
11	UNICOM-LN	835
12	UNICOM-GD	743
13	ZTWL	692
14	CHINANET-HE	585
15	DXTNET	346
16	UNICOM-SD	320
17	VNPT-VNNIC-VN	314
18	GWBN-WUHAN	301
19	RCOM	299
20	KORNET-KR	253
21	CHINANET-GX	251
22	CHINANET-HB	206
23	PE-TPSA-LACNIC	199
24	CMNET	197
25	CHINANET-SN	182

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	565338
2	003.420.926/0002-05	84574
3	UNICOM-GD	58151
4	CHINANET-GD	57484
5	000.065.376/0002-65	50283
6	033.530.486/0001-29	50270
7	KORNET-KR	48413
8	HICHINA	42923
9	002.558.157/0001-62	40860
10	DTAG-MESSE-DSSD	38712
11	CHINANET-JS	38067
12	UNICOM-SD	34999
13	004.027.547/0001-31	34486
14	TATACOMM-IN	28710
15	CMNET	28661
16	076.535.764/0326-90	28338
17	002.558.134/0001-58	28085
18	CO-ACSA-LACNIC	26442
19	CHINANET-SH	24783
20	PL-TPSA-20031203	21810
21	CHINANET-FJ	21159
22	SHENZHEN-CNC	20477
23	MX-USCV4-LACNIC	19596
24	FR-OVH-20060920	19564
25	CHINANET-HB	19274

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	16958207
2	003.420.926/0002-05	2952333
3	033.530.486/0001-29	1759888
4	000.065.376/0002-65	1725298
5	KORNET-KR	1694079
6	HICHINA	1496675
7	CHINANET-GD	1492655
8	002.558.157/0001-62	1426326
9	DTAG-MESSE-DSSD	1353252
10	CHINANET-JS	1261431
11	004.027.547/0001-31	1205429
12	UNICOM-SD	1204571
13	TATACOMM-IN	996312
14	076.535.764/0326-90	988304
15	002.558.134/0001-58	979022
16	CMNET	965779
17	CO-ACSA-LACNIC	921559
18	CHINANET-SH	864842
19	PL-TPSA-20031203	764148
20	CHINANET-FJ	731439
21	MX-USCV4-LACNIC	685225
22	FR-OVH-20060920	684896
23	CHINANET-HB	656842
24	CHINANET-ZJ	621216
25	BHARTI-IN	611043