Botnet Statistics for November 2009

detection period: 2009-11-01 00:00 - 2009-11-30 23:59 UTC
total number of suspected botnet IPs: 53088
number of blocked spams: 3805343
recipient count of blocked spams: 59327314

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	15350
2	India	11504
3	Taiwan	8659
4	Brazil	6025
5	Argentina	3710
6	Russian Federation	1919
7	Ukraine	693
8	Thailand	660
9	Uruguay	520
10	Mexico	367
11	Ethiopia	355
12	United States	331
13	Chile	277
14	Peru	242
15	Colombia	222
16	Hong Kong	182
17	South Korea	151
18	Kazakhstan	137
19	Algeria	123
20	Germany	122
21	Belarus	111
22	Japan	107
23	Indonesia	101
24	Poland	78
25	Bulgaria	71

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1894394
2	Brazil	321441
3	Taiwan	196271
4	United Kingdom	163573
5	India	128323
6	United States	117254
7	France	103380
8	Russian Federation	87901
9	South Korea	79169
10	Ukraine	56337
11	Viet Nam	52955
12	Argentina	51102
13	Thailand	50374
14	Colombia	46353
15	Indonesia	44668
16	Slovakia	38502
17	Latvia	37943
18	Mexico	30632
19	Germany	26479
20	Arab Emirates	22539
21	Pakistan	19319
22	Poland	18955
23	Turkey	17820
24	Chile	16244
25	Bulgaria	13850

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	27178992
2	Brazil	6198437
3	Taiwan	3387303
4	India	3381763
5	Russian Federation	1663953
6	Argentina	1498314
7	France	1460450
8	United Kingdom	1452664
9	United States	1252477
10	Thailand	1201838
11	Ukraine	1098205
12	South Korea	1053480
13	Colombia	885568
14	Viet Nam	625952
15	Indonesia	613122
16	Poland	551362
17	Slovakia	463813
18	Mexico	453281
19	Germany	399420
20	Latvia	331510
21	Chile	282715
22	Pakistan	257668
23	Bulgaria	245829
24	Turkey	214098
25	Greece	212914

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	8428
2	HINET-NET	7474
3	CHINANET-GD	7291
4	AR-TEAR7-LACNIC	2963
5	002.558.157/0001-62	2218
6	UNICOM-SD	1233
7	002.558.134/0001-58	1125
8	TATACOMM-IN	910
9	002.449.992/0001-64	828
10	RCOM	778
11	TFN-NET	627
12	UKRTELNET	577
13	HATHWAY-NET	555
14	UY-ANTA-LACNIC	517
15	040.432.544/0001-47	473
16	CHINANET-JX	421
17	CHINANET-JS	420
18	CHINANET-ZJ-WZ	413
19	UNICOM-HA	393
20	ETHIONET	355
21	APOL-NET	343
22	UNICOM-BJ	326
23	UNICOM-LN	312
24	000.065.376/0002-65	312
25	AR-PRSA-LACNIC	297

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ-WZ	648021
2	CHINANET-GD	154502
3	UK-IOKO-20040112	146555
4	UNICOM-HA	123267
5	CHINANET-JS	107156
6	HINET-NET	107026
7	UNICOM-SD	69488
8	TFN-NET	68981
9	BSNLNET	67309
10	OVH	59070
11	NETBLK-THEPLANET-BLK-EV1-17	57052
12	076.535.764/0326-90	52843
13	002.558.157/0001-62	48996
14	UNICOM	45840
15	UNICOM-HE	43671
16	CRTC	40158
17	CHINANET-CQ	39886
18	SK-DRUHAPRENOSOVA-ZA	36924
19	EUGESTA-TELIALV	35853
20	033.530.486/0001-29	34923
21	UNICOM-BJ	30444
22	RUIAN-TELECOM	29843
23	CHINANET-SN	29039
24	FR-OVH-20060920	28102
25	UNICOM-SX	27845

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ-WZ	9866347
2	BSNLNET	1882622
3	HINET-NET	1850066
4	UNICOM-HA	1638355
5	UNICOM-SD	1478980
6	CHINANET-JS	1313704
7	UK-IOKO-20040112	1198794
8	002.558.157/0001-62	1183899
9	CHINANET-GD	1168498
10	TFN-NET	1067404
11	CHINANET-HL	850221
12	AR-TEAR7-LACNIC	753268
13	076.535.764/0326-90	723063
14	033.530.486/0001-29	664725
15	OVH	597590
16	UNICOM-HE	585836
17	FR-OVH-20060920	583234
18	000.065.376/0002-65	516975
19	UNICOM-BJ	510658
20	CRTC	504711
21	UNICOM	494262
22	TATACOMM-IN	482215
23	UKRTELNET	466121
24	NETBLK-THEPLANET-BLK-EV1-17	461744
25	SK-DRUHAPRENOSOVA-ZA	451575