Botnet Statistics for May 2013

detection period: 2013-05-01 00:00 - 2013-05-31 23:59 UTC
total number of suspected botnet IPs: 122638
number of blocked spams: 2613576
recipient count of blocked spams: 90660210

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	89788
2	Taiwan	7288
3	United States	3540
4	Belarus	3067
5	India	1657
6	Kazakhstan	1319
7	Ukraine	1199
8	Viet Nam	867
9	Peru	856
10	Russian Federation	851
11	Argentina	707
12	Spain	642
13	Romania	621
14	Colombia	614
15	Brazil	583
16	Mexico	558
17	Italy	522
18	Germany	505
19	South Korea	501
20	United Kingdom	422
21	Iran	413
22	Turkey	378
23	Canada	316
24	Poland	307
25	Indonesia	304

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	549385
2	United States	404057
3	Brazil	279715
4	Taiwan	195767
5	Russian Federation	144990
6	Iran	82639
7	United Kingdom	80533
8	France	63262
9	India	56107
10	Ukraine	51244
11	Germany	48744
12	South Korea	48338
13	Colombia	43222
14	Poland	43056
15	Mexico	37124
16	Hong Kong	26697
17	Argentina	25212
18	Indonesia	21524
19	Thailand	21156
20	Peru	20626
21	Philippines	19775
22	Chile	18863
23	Canada	18646
24	Pakistan	15084
25	Kazakhstan	13557

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	16760916
2	United States	14973613
3	Brazil	10224851
4	Taiwan	6021208
5	Russian Federation	5220218
6	Iran	3001928
7	United Kingdom	2722043
8	France	2321865
9	India	2024155
10	Ukraine	1824725
11	South Korea	1778202
12	Germany	1741450
13	Poland	1591861
14	Colombia	1580294
15	Mexico	1328652
16	Hong Kong	988852
17	Argentina	931988
18	Thailand	762487
19	Peru	741665
20	Philippines	728599
21	Indonesia	701721
22	Chile	698200
23	Canada	674710
24	Pakistan	553862
25	Portugal	489043

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	24997
2	CHINANET-HB	14476
3	UNICOM-HA	13503
4	CHINANET-HE	8032
5	HINET-NET	6980
6	CRTC	4520
7	CHINANET-GD	4149
8	CHINANET-HA	3852
9	UNICOM-HB	3774
10	CTTNET	3394
11	BY-BELPAK-20091210	1700
12	CHINANET-HN	1164
13	UNICOM-HN	1097
14	CHINANET-FJ	1010
15	ZTWL	745
16	CHINASKYNET	684
17	CMNET	655
18	BSNLNET	467
19	BY-BELPAK-20120330	457
20	VNPT-VNNIC-VN	445
21	UNICOM-GD	413
22	BY-BELPAK-20080213	344
23	PE-TPSA-LACNIC	324
24	BY-BELPAK-20120106	319
25	KZ-KAZAKTELECOM-20080923	316

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	193046
2	MSFT-EP	177593
3	UNICOM-LN	84157
4	IR-DCC-20010403	52996
5	002.558.157/0001-62	48720
6	UNICOM-GD	34809
7	003.420.926/0002-05	34058
8	CHINANET-GD	32256
9	033.530.486/0001-29	30959
10	NETBLK-CHARTER-NET	29048
11	ASC-NET4	27325
12	KORNET-KR	24000
13	CMNET	23012
14	BHARTI-IN	21047
15	076.535.764/0326-90	20754
16	OVH	20348
17	JIAOJIANG-DONGGANG-LTD	19384
18	HICHINA	18992
19	CO-ACSA-LACNIC	18717
20	ALIBABA-BJ-NET	18109
21	CHINANET-SH	17432
22	NWT-NET	17418
23	FR-OVH-20100119	14858
24	UNICOM-HE	14192
25	TKTELEKOM	13381

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	MSFT-EP	6593697
2	HINET-NET	5921935
3	UNICOM-LN	3113977
4	IR-DCC-20010403	1941721
5	002.558.157/0001-62	1811040
6	003.420.926/0002-05	1219495
7	033.530.486/0001-29	1148861
8	CHINANET-GD	1132068
9	ASC-NET4	1054454
10	NETBLK-CHARTER-NET	1036385
11	KORNET-KR	877972
12	CMNET	814079
13	BHARTI-IN	766751
14	076.535.764/0326-90	754995
15	OVH	749705
16	CO-ACSA-LACNIC	685050
17	HICHINA	677575
18	ALIBABA-BJ-NET	669493
19	NWT-NET	647406
20	CHINANET-SH	639285
21	JIAOJIANG-DONGGANG-LTD	603467
22	FR-OVH-20100119	552140
23	TKTELEKOM	495697
24	ALISOFT	455852
25	UNICOM-HE	454175