Botnet Statistics for December 2010

detection period: 2010-12-01 00:00 - 2010-12-31 23:59 UTC
total number of suspected botnet IPs: 27020
number of blocked spams: 9202335
recipient count of blocked spams: 300574994

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	7625
2	Taiwan	6434
3	China	5981
4	Brazil	1194
5	Russian Federation	1049
6	Thailand	930
7	Argentina	679
8	Ukraine	506
9	Kazakhstan	222
10	South Korea	207
11	Belarus	186
12	United States	173
13	Indonesia	129
14	Ethiopia	108
15	Chile	101
16	Germany	94
17	Bulgaria	90
18	Uruguay	88
19	Colombia	86
20	Mexico	73
21	Algeria	73
22	France	63
23	Poland	54
24	Saudi Arabia	53
25	Italy	48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	2078835
2	Brazil	941721
3	United States	595124
4	Russian Federation	517418
5	Colombia	332338
6	India	305268
7	Taiwan	281333
8	South Korea	227967
9	Poland	224771
10	Indonesia	216008
11	France	214358
12	Ukraine	197655
13	Thailand	195921
14	Germany	189537
15	Argentina	177570
16	Italy	162827
17	Saudi Arabia	138022
18	United Kingdom	107581
19	Chile	100575
20	Mexico	100458
21	Spain	99605
22	Canada	82613
23	Philippines	78657
24	Czech Republic	75535
25	Venezuela	74325

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	62608099
2	Brazil	31529402
3	United States	20383538
4	Russian Federation	17087111
5	Colombia	11406270
6	India	10302216
7	Taiwan	7983126
8	South Korea	7691665
9	France	7469530
10	Indonesia	7177965
11	Poland	7169298
12	Ukraine	6664401
13	Germany	6627774
14	Thailand	6385919
15	Argentina	6049388
16	Italy	5544859
17	Saudi Arabia	4726686
18	United Kingdom	3694720
19	Mexico	3476695
20	Chile	3394477
21	Spain	2973597
22	Canada	2831478
23	Czech Republic	2597243
24	Philippines	2568561
25	Turkey	2563670

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	6307
2	BSNLNET	5406
3	CHINANET-GD	4596
4	RCOM	660
5	TATACOMM-IN	596
6	AR-TEAR7-LACNIC	496
7	HATHWAY-NET	370
8	UKRTELNET	331
9	TRUENET	307
10	TRUEBB-NET	256
11	ALLIANCEBROADBAND	246
12	002.558.134/0001-58	241
13	CAT-BB-NET	224
14	000.065.376/0002-65	198
15	002.449.992/0001-64	193
16	CHINANET-ZJ-WZ	181
17	UNICOM-SD	110
18	KORNET-KR	110
19	RU-RICH-20061219	109
20	PACENET	109
21	ETHIONET	108
22	CHINANET-FJ	99
23	BY-BELPAK-20091210	97
24	UY-ANTA-LACNIC	88
25	WEBSTREAM	82

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-ZJ-WZ	293406
2	CHINANET-GD	202106
3	UNICOM-SD	196803
4	033.530.486/0001-29	184932
5	CO-ACSA-LACNIC	184086
6	HINET-NET	176423
7	003.420.926/0002-05	168203
8	CHINANET-JS	154139
9	KORNET-KR	108087
10	OVH	99056
11	000.065.376/0002-65	95364
12	CHINANET-ZJ	72359
13	TFN-NET	71760
14	BHARTI-IN	67894
15	UNICOM-TJ	67231
16	TELKOMNET	65511
17	BSNLNET	62512
18	004.027.547/0001-31	55313
19	076.535.764/0326-90	52687
20	RCOM	51831
21	MX-ALES-LACNIC	49402
22	CHINANET-AH	49147
23	002.558.157/0001-62	47826
24	CMNET	46653
25	TRUENET-TH	45546

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	UNICOM-SD	6829333
2	CO-ACSA-LACNIC	6403224
3	033.530.486/0001-29	6271938
4	CHINANET-GD	5927618
5	003.420.926/0002-05	5692175
6	HINET-NET	5487399
7	CHINANET-JS	5130214
8	CHINANET-ZJ-WZ	4440844
9	KORNET-KR	3719095
10	OVH	3465351
11	000.065.376/0002-65	3329214
12	UNICOM-TJ	2352056
13	BHARTI-IN	2350490
14	TELKOMNET	2097844
15	BSNLNET	2054785
16	CHINANET-ZJ	2037254
17	004.027.547/0001-31	1754150
18	MX-ALES-LACNIC	1728745
19	076.535.764/0326-90	1717880
20	RCOM	1675810
21	CHINANET-AH	1621628
22	CMNET	1593758
23	002.558.134/0001-58	1570254
24	CHINA-ABITCOOL	1507455
25	PL-TPSA-20031203	1485820