Botnet Statistics for October 2009

detection period: 2009-10-01 00:00 - 2009-10-31 23:59 UTC
total number of suspected botnet IPs: 76181
number of blocked spams: 3779164
recipient count of blocked spams: 70722504

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	22294
2	India	16365
3	Taiwan	11943
4	Brazil	9493
5	Argentina	5339
6	Russian Federation	2932
7	Uruguay	807
8	Ukraine	768
9	Mexico	549
10	Thailand	526
11	Ethiopia	497
12	United States	445
13	Hong Kong	377
14	Chile	333
15	Algeria	326
16	Colombia	284
17	Peru	271
18	South Korea	222
19	Kazakhstan	221
20	Germany	180
21	Belarus	157
22	Japan	138
23	Indonesia	119
24	Pakistan	82
25	Italy	81

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1876022
2	Taiwan	972674
3	Brazil	234643
4	India	151568
5	Argentina	83899
6	Russian Federation	69876
7	United States	41642
8	Thailand	31022
9	France	28893
10	Colombia	28617
11	Ukraine	28441
12	South Korea	25523
13	Indonesia	17353
14	Poland	15591
15	Hong Kong	14052
16	Bulgaria	10760
17	United Kingdom	10602
18	Mexico	10067
19	Slovakia	8679
20	Chile	8505
21	Germany	7174
22	Pakistan	7155
23	Kazakhstan	7143
24	Greece	6627
25	Algeria	5921

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	31464015
2	Taiwan	11131754
3	Brazil	7257639
4	India	4923805
5	Argentina	2778286
6	Russian Federation	2209422
7	Thailand	1041143
8	Colombia	939810
9	France	928982
10	Ukraine	925807
11	United States	772770
12	South Korea	657495
13	Poland	498758
14	Hong Kong	465650
15	Indonesia	445755
16	Bulgaria	324792
17	Slovakia	280705
18	Mexico	275003
19	Chile	247898
20	Greece	228569
21	Kazahkstan	227989
22	United Kingdom	221624
23	Algeria	191282
24	Germany	182806
25	Pakistan	165339

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	12095
2	CHINANET-GD	11010
3	HINET-NET	9760
4	AR-TEAR7-LACNIC	4425
5	002.558.157/0001-62	3275
6	002.558.134/0001-58	1757
7	UNICOM-SD	1610
8	002.449.992/0001-64	1516
9	TATACOMM-IN	1292
10	040.432.544/0001-47	1151
11	RCOM	1047
12	APOL-NET	989
13	TFN-NET	878
14	UY-ANTA-LACNIC	804
15	HATHWAY-NET	762
16	CHINANET-JS	671
17	UKRTELNET	632
18	CHINANET-JX	525
19	UNICOM-HA	521
20	CHINANET-ZJ-WZ	509
21	ETHIONET	496
22	UNICOM-LN	484
23	UNICOM-HE	415
24	000.065.376/0002-65	403
25	AR-PRSA-LACNIC	375

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ-WZ	1065348
2	HINET-NET	840346
3	CHINANET-GD	229155
4	TFN-NET	114023
5	BSNLNET	85030
6	CHINANET-HL	73360
7	UNICOM-SD	60717
8	002.558.157/0001-62	53422
9	CHINANET-JS	46549
10	AR-TEAR7-LACNIC	45806
11	UNICOM-HA	39399
12	000.065.376/0002-65	29944
13	033.530.486/0001-29	22241
14	076.535.764/0326-90	20980
15	TATACOMM-IN	20575
16	002.558.134/0001-58	20207
17	RCOM	19233
18	UNICOM-HE	18058
19	FR-OVH-20060920	17078
20	UKRTELNET	17031
21	UNICOM-BJ	15510
22	UNICOM	15145
23	001.402.946/0001-47	13462
24	CO-ACSA-LACNIC	13191
25	CMNET	12951

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ-WZ	16256477
2	HINET-NET	8766981
3	BSNLNET	2811393
4	CHINANET-HL	2414951
5	TFN-NET	1818656
6	UNICOM-SD	1768534
7	002.558.157/0001-62	1687634
8	AR-TEAR7-LACNIC	1523053
9	000.065.376/0002-65	989077
10	CHINANET-JS	926348
11	CHINANET-GD	853466
12	UNICOM-HA	774287
13	TATACOMM-IN	668453
14	002.558.134/0001-58	666367
15	033.530.486/0001-29	640587
16	076.535.764/0326-90	629105
17	RCOM	599530
18	UKRTELNET	580992
19	FR-OVH-20060920	560793
20	UNICOM-BJ	461556
21	001.402.946/0001-47	448882
22	UNICOM-HE	430621
23	CO-ACSA-LACNIC	423852
24	HGC	420987
25	UNICOM	406490