Botnet Statistics for May 2010

detection period: 2010-05-01 00:00 - 2010-05-31 23:59 UTC
total number of suspected botnet IPs: 54816
number of blocked spams: 2005269
recipient count of blocked spams: 41923740

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	17559
2	India	12218
3	China	11836
4	Brazil	4305
5	Argentina	2431
6	Russian Federation	1439
7	Thailand	861
8	United States	590
9	Mexico	400
10	Uruguay	340
11	Ukraine	312
12	Ethiopia	212
13	Chile	201
14	Indonesia	141
15	Colombia	140
16	Germany	131
17	South Korea	119
18	Kazakhstan	96
19	Japan	95
20	Hong Kong	89
21	Iran	86
22	Belarus	84
23	Algeria	81
24	Egypt	64
25	France	57

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	693891
2	Taiwan	386402
3	Brazil	245153
4	India	142641
5	Thailand	63709
6	Russian Federation	63476
7	United States	54853
8	Indonesia	48365
9	Argentina	43169
10	Colombia	33284
11	Chile	15883
12	Poland	15286
13	Viet Nam	12617
14	South Korea	12617
15	Ukraine	11852
16	Turkey	10230
17	Hong Kong	9720
18	European Union	8184
19	United Kingdom	7778
20	Japan	7738
21	Germany	7418
22	Romania	7214
23	Pakistan	6978
24	Czech Republic	5692
25	Czechoslovakia	5566

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	10861950
2	China	9709412
3	Brazil	6035562
4	India	4143705
5	Thailand	1776399
6	Russian Federation	1481574
7	Argentina	1234231
8	Indonesia	933288
9	Colombia	862193
10	United States	615367
11	Chile	346703
12	Ukraine	300476
13	Poland	248232
14	South Korea	230415
15	Viet Nam	229307
16	Turkey	180486
17	Pakistan	179302
18	Hong Kong	176819
19	European Union	171962
20	South Africa	145511
21	Romania	130024
22	Germany	120189
23	Greece	115867
24	Israel	109223
25	Japan	89824

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	16541
2	BSNLNET	8882
3	CHINANET-GD	4389
4	RITELE	2796
5	AR-TEAR7-LACNIC	1881
6	002.558.157/0001-62	1274
7	TFN-NET	923
8	RCOM	859
9	002.558.134/0001-58	833
10	TATACOMM-IN	777
11	UNICOM-SD	651
12	002.449.992/0001-64	643
13	HATHWAY-NET	583
14	TRUENET	482
15	ALLIANCEBROADBAND	416
16	000.065.376/0002-65	357
17	PACENET	343
18	UY-ANTA-LACNIC	338
19	040.432.544/0001-47	319
20	UNICOM-SX	314
21	MX-GICS-LACNIC	314
22	UNICOM-LN	287
23	ETHIONET	212
24	AISTNET	206
25	UNICOM-HA	205

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	365190
2	CHINANET-GD	99166
3	BSNLNET	66640
4	RITELE	53213
5	CHINANET-ZJ-WZ	47525
6	002.558.157/0001-62	45111
7	000.065.376/0002-65	41468
8	UNICOM-SD	36060
9	076.535.764/0326-90	35903
10	RCOM	32859
11	CHINANET-JS	32294
12	UNICOM-HE	30711
13	033.530.486/0001-29	27335
14	CHINANET-SC	26154
15	TRUENET	25607
16	UNICOM-LN	23490
17	CHINANET-HN	22058
18	UNICOM-HA	17351
19	AR-TEAR7-LACNIC	16926
20	UNICOM-BJ	16130
21	TFN-NET	16019
22	TELKOMNET	15924
23	CO-ACSA-LACNIC	15627
24	CHINANET-SH	15260
25	BITNET	14966

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	10556996
2	BSNLNET	2075623
3	002.558.157/0001-62	1288902
4	000.065.376/0002-65	1157921
5	RCOM	908523
6	TRUENET	881448
7	UNICOM-SD	867237
8	076.535.764/0326-90	792632
9	CHINANET-ZJ-WZ	749684
10	CHINANET-GD	582116
11	AR-TEAR7-LACNIC	571784
12	CHINANET-JS	519182
13	033.530.486/0001-29	452008
14	UNICOM-HE	411771
15	CHINANET-HN	396143
16	UNICOM-LN	393661
17	CHINANET-SC	391363
18	CO-ACSA-LACNIC	389880
19	TELKOMNET	366898
20	002.558.134/0001-58	331932
21	071.208.516/0001-74	317743
22	UNICOM-BJ	290785
23	UNICOM-HA	281112
24	001.402.946/0001-47	273692
25	UNICOM-SX	272289