Botnet Statistics for December 2009

detection period: 2009-12-01 00:00 - 2009-12-31 23:59 UTC
total number of suspected botnet IPs: 57949
number of blocked spams: 3155913
recipient count of blocked spams: 79702344

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	21701
2	China	12138
3	India	11110
4	Brazil	5017
5	Argentina	2417
6	Russian Federation	1306
7	Ukraine	460
8	United States	424
9	Ethiopia	391
10	Uruguay	300
11	Thailand	291
12	Chile	196
13	South Korea	174
14	Colombia	137
15	Algeria	129
16	Mexico	127
17	Germany	120
18	Kazakhstan	88
19	Indonesia	86
20	Bulgaria	72
21	United Kingdom	70
22	Italy	69
23	Belarus	69
24	Poland	68
25	Hong Kong	63

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1176442
2	Taiwan	498018
3	Brazil	236205
4	United Kingdom	170750
5	Russian Federation	139714
6	India	135926
7	United States	83076
8	Argentian	59411
9	Poland	58815
10	South Korea	47017
11	Thailand	43585
12	Colombia	41202
13	Indonesia	37860
14	Ukraine	33319
15	Iran	29011
16	Arab Emirates	28465
17	France	24515
18	Germany	20768
19	Pakistan	19918
20	Australia	19788
21	Philippines	18936
22	Italy	18379
23	Czech Republic	17047
24	Greece	15701
25	Hungary	14118

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	28067398
2	Taiwan	12554972
3	Brazil	6921484
4	India	4265076
5	Russian Federation	3487952
6	United Kingdom	3369762
7	Argentina	1905868
8	Poland	1577432
9	Thailand	1468288
10	Colombia	1357149
11	United States	1290154
12	South Korea	1261601
13	Indonesia	1118821
14	Ukraine	1076830
15	France	763854
16	Iran	615706
17	Arab Emirates	590018
18	Pakistan	488115
19	Germany	456063
20	Greece	452311
21	Italy	436328
22	Australia	421794
23	Philippines	418518
24	Slovakia	364258
25	Czech Republic	361661

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	16425
2	BSNLNET	7894
3	CHINANET-GD	5955
4	APOL-NET	3822
5	AR-TEAR7-LACNIC	1949
6	002.558.157/0001-62	1734
7	TFN-NET	1279
8	TATACOMM-IN	995
9	002.558.134/0001-58	976
10	RCOM	913
11	UNICOM-SD	865
12	002.449.992/0001-64	785
13	040.432.544/0001-47	478
14	HATHWAY-NET	476
15	ETHIONET	391
16	CHINANET-JX	375
17	CHINANET-JS	359
18	CHINANET-ZJ-WZ	353
19	UKRTELNET	331
20	UY-ANTA-LACNIC	299
21	UNICOM-BJ	282
22	UNICOM-HA	272
23	000.065.376/0002-65	269
24	UNICOM-LN	248
25	PACENET	248

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	423097
2	CHINANET-ZJ-WZ	233056
3	CHINANET-GD	117139
4	CHINANET-JS	115203
5	UK-IOKO-20040112	108116
6	UNICOM-SD	70749
7	BSNLNET	64746
8	UNICOM-HA	52085
9	002.558.157/0001-62	44165
10	033.530.486/0001-29	43590
11	HighwayNet	39020
12	UNICOM-HE	38209
13	076.535.764/0326-90	34689
14	CHINANET-GX	30279
15	UNICOM-YN	30274
16	adez-EMIRNET	28456
17	PL-TPSA-20031203	27483
18	TFN-NET	26829
19	KORNET-KR	25713
20	CHINANET-CQ	24629
21	POUNDHOST-6122	24434
22	RCOM	24142
23	TVSI-NET	23448
24	CHINANET-JX	22268
25	AR-TEAR7-LACNIC	22109

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	11065743
2	CHINANET-ZJ-WZ	3596730
3	CHINANET-JS	3032953
4	UNICOM-SD	2203489
5	BSNLNET	2077340
6	UK-IOKO-20040112	1976735
7	CHINANET-GD	1473492
8	UNICOM-HA	1462788
9	002.558.157/0001-62	1365561
10	033.530.486/0001-29	1202205
11	UNICOM-HE	1005437
12	HighwayNet	975537
13	CHINANET-GX	971981
14	076.535.764/0326-90	908918
15	UNICOM-YN	796809
16	AR-TEAR7-LACNIC	755827
17	CHINANET-JX	748709
18	PL-TPSA-20031203	738686
19	RCOM	719953
20	CO-ACSA-LACNIC	678334
21	000.065.376/0002-65	665962
22	CHINANET-CQ	612606
23	adez-EMIRNET	589754
24	KORNET-KR	569907
25	CHINANET-ZJ	535215