Botnet Statistics for July 2013

detection period: 2013-07-01 00:00 - 2013-07-31 23:59 UTC
total number of suspected botnet IPs: 80022
number of blocked spams: 2017570
recipient count of blocked spams: 64203401

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	45511
2	Taiwan	12773
3	United States	5704
4	India	1673
5	Italy	1162
6	Argentina	1065
7	Spain	935
8	Peru	866
9	Colombia	795
10	Mexico	760
11	Germany	590
12	Canada	520
13	United Kingdom	507
14	Iran	477
15	Brazil	420
16	Turkey	404
17	Chile	380
18	Romania	329
19	Viet Nam	318
20	Russian Federation	268
21	South Korea	268
22	Saudi Arabia	219
23	France	187
24	Greece	181
25	Poland	178

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	429696
2	Taiwan	407646
3	Brazil	217108
4	United States	157670
5	Russian Federation	137963
6	Iran	50028
7	Ukraine	49335
8	United Kingdom	44435
9	France	34953
10	Kuwait	33166
11	India	26144
12	Peru	25995
13	Argentina	25798
14	South Korea	23588
15	Saudi Arabia	20549
16	Israel	19811
17	Colombia	19555
18	Portugal	18614
19	Poland	16903
20	Indonesia	15803
21	Pakistan	15349
22	Chile	14629
23	Thailand	13609
24	Iraq	12439
25	Romania	11074

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	12285771
2	China	11914003
3	Brazil	7677275
4	United States	5297669
5	Russian Federation	4364340
6	United Kingdom	1656748
7	Iran	1641570
8	Ukraine	1606325
9	France	1312052
10	Argentina	976320
11	Peru	975702
12	India	929176
13	South Korea	829333
14	Kuwait	739290
15	Colombia	735520
16	Portugal	704951
17	Israel	689042
18	Poland	614786
19	Saudi Arabia	593135
20	Indonesia	583777
21	Pakistan	583281
22	Chile	517548
23	Thailand	479170
24	Romania	403194
25	Mexico	351208

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	23625
2	HINET-NET	12576
3	CHINANET-GD	4427
4	CTTNET	3054
5	CRTC	1840
6	CHINANET-FJ	1299
7	CHINASKYNET	1201
8	CMNET	1155
9	AMAZON-2011L	930
10	UNICOM-HN	894
11	BSNLNET	652
12	CHINANET-HN	606
13	ZTWL	599
14	CHINANET-HE	594
15	UNICOM-GD	533
16	UNICOM-SD	459
17	PE-TPSA-LACNIC	348
18	UNICOM-HA	345
19	AR-CASA10-LACNIC	319
20	UNICOM-HE	275
21	CHINANET-SH	271
22	CBC-CM-4	266
23	AR-TEAR7-LACNIC	263
24	JAZZTEL-TRIPLEPLAY	229
25	CHINANET-JX	226

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	401350
2	MSFT-EP	90800
3	UNICOM-LN	77471
4	UNICOM-GD	33682
5	003.420.926/0002-05	32569
6	GULFNET-MOI	32476
7	CHINANET-GD	31352
8	002.558.157/0001-62	30654
9	033.530.486/0001-29	30289
10	CMNET	23958
11	JIAOJIANG-DONGGANG-LTD	19708
12	IR-DCC-20010403	18373
13	KORNET-KR	17959
14	UNICOM-HE	17150
15	CHINANET-ZJ	16065
16	UNICOM-SD	16013
17	076.535.764/0326-90	15566
18	CHINANET-JS	14229
19	ESOTERICA	14160
20	004.027.547/0001-31	13688
21	002.558.134/0001-58	13526
22	HICHINA	13231
23	HOSTING-COMPANY-NET	12357
24	CCS-DGI	12093
25	TOL-net	12029

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	12050707
2	MSFT-EP	3435468
3	UNICOM-LN	2930872
4	002.558.157/0001-62	1166812
5	033.530.486/0001-29	1147717
6	003.420.926/0002-05	983479
7	CHINANET-GD	892272
8	CMNET	788034
9	GULFNET-MOI	713707
10	KORNET-KR	666323
11	JIAOJIANG-DONGGANG-LTD	622699
12	076.535.764/0326-90	569193
13	ESOTERICA	537172
14	IR-DCC-20010403	521271
15	002.558.134/0001-58	500150
16	CHINANET-ZJ	470645
17	HOSTING-COMPANY-NET	470210
18	CCS-DGI	461191
19	VAUGHAN-LIMITED-24684-LAN	456810
20	COMPUWEB-COMMUNICATIONS	455267
21	CHINANET-JS	434847
22	004.027.547/0001-31	397107
23	CHINANET-SH	388276
24	UNICOM-SD	387414
25	HICHINA	377942