Botnet Statistics for August 2009

detection period: 2009-08-01 00:00 - 2009-08-31 23:59 UTC
total number of suspected botnet IPs: 107902
number of blocked spams: 4900728
recipient count of blocked spams: 104544986

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	25424
2	China	20873
3	Taiwan	20236
4	Brazil	16852
5	Argentina	9338
6	Russian Federation	3427
7	Uruguay	1088
8	Ukraine	981
9	Hong Kong	894
10	Ethiopia	836
11	Chile	830
12	Mexico	809
13	Colombia	514
14	United States	504
15	Thailand	503
16	Algeria	365
17	Kazakhstan	340
18	Germany	287
19	South Korea	285
20	Peru	248
21	Belarus	241
22	Egypt	199
23	Indonesia	171
24	Turkey	158
25	Italy	152

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	2013844
2	Taiwan	1249943
3	Brazil	411700
4	India	260666
5	Argentina	163315
6	Russian Federation	91918
7	United States	74856
8	Malaysia	57732
9	South Korea	49825
10	Indonesia	44388
11	France	43420
12	Ukraine	38882
13	Hong Kong	37172
14	Colombia	34010
15	Poland	32303
16	Thailand	29761
17	Germany	22946
18	Bulgaria	18163
19	Chile	17615
20	Venezuela	17276
21	Iran	9749
22	Algeria	8313
23	Romania	7861
24	Uruguay	7572
25	Italy	7555

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	37765249
2	Taiwan	14790900
3	Brazil	13559001
4	India	8620578
5	Argentina	5477546
6	Russian Federation	3005004
7	United States	1940876
8	South Korea	1612708
9	Ukraine	1318397
10	Indonesia	1315335
11	France	1287689
12	Hong Kong	1261096
13	Colombia	1125063
14	Malaysia	1094839
15	Poland	1086795
16	Thailand	974105
17	Germany	747276
18	Chile	610080
19	Bulgaria	591021
20	Venezuela	565324
21	Algeria	285800
22	Iran	276775
23	Uruguay	261970
24	Romania	249283
25	Peru	241688

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	18981
2	HINET-NET	10715
3	CHINANET-ZJ-WZ	8937
4	AR-TEAR7-LACNIC	7952
5	APOL-NET	7454
6	002.558.157/0001-62	5531
7	002.558.134/0001-58	3607
8	002.449.992/0001-64	2907
9	CHINANET-GD	2800
10	UNICOM-SD	2434
11	TATACOMM-IN	2185
12	040.432.544/0001-47	1886
13	TFN-NET	1565
14	RCOM	1436
15	UY-ANTA-LACNIC	1073
16	HATHWAY-NET	1024
17	HGC	883
18	UKRTELNET	860
19	ETHIONET	835
20	UNICOM-HE	694
21	UNICOM-LN	677
22	UNICOM-HA	640
23	000.065.376/0002-65	640
24	CL-TNCS-LACNIC	621
25	RU-AVANGARD-DSL	619

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ-WZ	1469355
2	HINET-NET	865999
3	APOL-NET	192515
4	TFN-NET	141827
5	BSNLNET	139750
6	AR-TEAR7-LACNIC	89592
7	002.558.157/0001-62	86099
8	UNICOM-SD	74273
9	CHINANET-GD	58320
10	000.065.376/0002-65	49116
11	002.558.134/0001-58	46267
12	UNICOM-HE	38955
13	HGC	36135
14	UNICOM-HA	35126
15	076.535.764/0326-90	34119
16	SEEDNET-NET	33131
17	RCOM	31729
18	002.449.992/0001-64	31143
19	TATACOMM-IN	30342
20	TMIDC-MY	29813
21	AR-CASA10-LACNIC	27656
22	UNICOM-BJ	27546
23	033.530.486/0001-29	26299
24	FR-OVH-20060920	24349
25	AR-PRSA-LACNIC	21246

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ-WZ	22476851
2	HINET-NET	9956974
3	BSNLNET	4667140
4	AR-TEAR7-LACNIC	3079685
5	002.558.157/0001-62	2807744
6	UNICOM-SD	2434296
7	TFN-NET	2270589
8	000.065.376/0002-65	1648830
9	002.558.134/0001-58	1563169
10	APOL-NET	1543295
11	UNICOM-HE	1244490
12	HGC	1231461
13	076.535.764/0326-90	1099439
14	UNICOM-HA	1079604
15	002.449.992/0001-64	1064009
16	RCOM	1031270
17	TATACOMM-IN	979397
18	AR-CASA10-LACNIC	941358
19	UNICOM-BJ	912833
20	033.530.486/0001-29	811227
21	FR-OVH-20060920	785051
22	AR-PRSA-LACNIC	736227
23	UNICOM-SX	612924
24	UNICOM-LN	611498
25	UKRTELNET	593961