Botnet Statistics for September 2009

detection period: 2009-09-01 00:00 - 2009-09-30 23:59 UTC
total number of suspected botnet IPs: 58046
number of blocked spams: 3951387
recipient count of blocked spams: 76339236

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	15991
2	China	12491
3	India	10181
4	Brazil	7303
5	Argentina	4111
6	Russian Federation	1771
7	Ukraine	542
8	Uruguay	510
9	United States	443
10	Thailand	402
11	Ethiopia	384
12	Mexico	358
13	Hong Kong	325
14	Colombia	270
15	Chile	270
16	South Korea	262
17	Germany	206
18	Algeria	186
19	Kazakhstan	125
20	Belarus	117
21	Indonesia	115
22	Peru	101
23	Bulgaria	91
24	Japan	83
25	France	80

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	2017572
2	Taiwan	1023959
3	Brazil	214592
4	India	118687
5	Argentina	76432
6	Russian Federation	55048
7	France	43419
8	United States	38941
9	Malaysia	32500
10	South Korea	32464
11	Poland	29222
12	Indonesia	27160
13	Ukraine	24070
14	Colombia	22829
15	Thailand	19618
16	Hong Kong	19174
17	Germany	14638
18	Iran	12654
19	Greece	9991
20	United Kingdom	9221
21	Mexico	7886
22	Pakistan	7341
23	Bulgaria	6990
24	Venezuela	5314
25	Algeria	4916

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	36858320
2	Taiwan	11644522
3	Brazil	6797226
4	India	3819710
5	Argentina	2547078
6	Russian Federation	1653425
7	France	1417221
8	Poland	984486
9	United States	946342
10	South Korea	942102
11	Indonesia	781536
12	Ukraine	780068
13	Colombia	734389
14	Thailand	648652
15	Hong Kong	632052
16	Malaysia	573082
17	Germany	480697
18	Iran	409378
19	Greece	347988
20	Mexico	228756
21	United Kingdom	221569
22	Pakistan	206523
23	Bulgaria	205318
24	Algeria	166667
25	Venezuela	165741

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	8901
2	BSNLNET	6894
3	APOL-NET	5418
4	CHINANET-GD	4665
5	AR-TEAR7-LACNIC	3395
6	002.558.157/0001-62	2398
7	002.558.134/0001-58	1485
8	TFN-NET	1468
9	002.449.992/0001-64	1237
10	UNICOM-SD	1172
11	TATACOMM-IN	933
12	RCOM	892
13	040.432.544/0001-47	602
14	HATHWAY-NET	513
15	UY-ANTA-LACNIC	502
16	UKRTELNET	445
17	CHINANET-JS	422
18	CHINANET-ZJ-WZ	397
19	000.065.376/0002-65	393
20	UNICOM-HE	386
21	ETHIONET	383
22	UNICOM-LN	351
23	HGC	313
24	UNICOM-HA	309
25	CHINANET-JX	303

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ-WZ	1508269
2	HINET-NET	855598
3	TFN-NET	121262
4	CHINANET-GD	82462
5	UNICOM-SD	59168
6	BSNLNET	46150
7	002.558.157/0001-62	43732
8	AR-TEAR7-LACNIC	33001
9	APOL-NET	30603
10	UNICOM-HE	26904
11	TATACOMM-IN	23837
12	000.065.376/0002-65	23418
13	RCOM	20078
14	076.535.764/0326-90	19706
15	TMIDC-MY	19466
16	UNICOM-HA	18984
17	FR-OVH-20060920	17910
18	CHINANET-JS	17448
19	CHINANET-SN	17372
20	HGC	17208
21	CHINANET-HL	17123
22	UNICOM	16888
23	UNICOM-BJ	16724
24	UNICOM-YN	16517
25	PL-TPSA-20031203	15589

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-ZJ-WZ	23083665
2	HINET-NET	8919925
3	UNICOM-SD	1945163
4	TFN-NET	1891591
5	BSNLNET	1528819
6	002.558.157/0001-62	1391092
7	AR-TEAR7-LACNIC	1118539
8	UNICOM-HE	841373
9	000.065.376/0002-65	782033
10	TATACOMM-IN	745896
11	CHINANET-GD	687646
12	RCOM	655932
13	FR-OVH-20060920	609055
14	HGC	584873
15	UNICOM-YN	572901
16	UNICOM-HA	568048
17	076.535.764/0326-90	564459
18	CHINANET-HL	562075
19	UNICOM	549616
20	UNICOM-BJ	545781
21	PL-TPSA-20031203	543878
22	CHINANET-SN	526429
23	CHINANET-JS	470767
24	AR-CASA10-LACNIC	464293
25	002.558.134/0001-58	453253