Botnet Statistics for October 2011

detection period: 2011-10-01 00:00 - 2011-10-31 23:59 UTC
total number of suspected botnet IPs: 36068
number of blocked spams: 1478636
recipient count of blocked spams: 51332061

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	9640
2	Taiwan	5837
3	India	2189
4	Russian Federation	1598
5	Viet Nam	1377
6	Brazil	1277
7	South Korea	1069
8	Italy	1014
9	Indonesia	993
10	United States	931
11	Pakistan	807
12	Ukraine	645
13	Poland	568
14	Argentina	444
15	Romania	361
16	Belarus	359
17	European Union	320
18	Kazakhstan	309
19	Colombia	305
20	Germany	283
21	Chile	267
22	Peru	249
23	Spain	235
24	Iran	231
25	Turkey	210

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	381022
2	Brazil	136518
3	United States	115363
4	Taiwan	68384
5	Indonesia	55174
6	France	47593
7	India	47119
8	Germany	44648
9	Russian Federation	39244
10	Czech Republic	33640
11	Ukraine	31391
12	South Korea	27839
13	Colombia	27568
14	Thailand	24822
15	United Kingdom	24625
16	Viet Nam	23410
17	Chile	21733
18	Mexico	20498
19	Argentina	16503
20	Hong Kong	16420
21	Poland	15032
22	Canada	14501
23	Australia	13890
24	Italy	13733
25	Iran	13031

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	13170777
2	Brazil	4772237
3	United States	4032740
4	Taiwan	2171876
5	Indonesia	1929780
6	France	1664308
7	India	1648952
8	Germany	1561670
9	Russian Federation	1370572
10	Czech Republic	1177107
11	Ukraine	1098227
12	South Korea	973881
13	Colombia	963844
14	Thailand	867850
15	United Kingdom	861553
16	Viet Nam	818637
17	Chile	760901
18	Mexico	716551
19	Argentina	576582
20	Hong Kong	574689
21	Poland	524878
22	Canada	507611
23	Australia	485093
24	Italy	479938
25	Iran	456620

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	5597
2	CHINANET-GD	2208
3	CTTNET	1434
4	VNPT-VNNIC-VN	851
5	BSNLNET	766
6	CHINANET-HN	755
7	CRTC	737
8	PTCL	666
9	CHINANET-JS	587
10	KORNET-KR	474
11	UNICOM-HN	374
12	UNICOM-BJ	325
13	TELKOMNET	305
14	BY-BELPAK-20091210	263
15	BHARTI-IN	218
16	002.558.134/0001-58	218
17	RCOM	208
18	000.065.376/0002-65	207
19	CHINANET-SH	199
20	002.558.157/0001-62	182
21	MTNLISP	179
22	UKRTELNET	154
23	IT-FASTWEB-20080225	152
24	AR-TEAR7-LACNIC	152
25	076.535.764/0326-90	151

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	57849
2	CHINANET-JS	34798
3	000.065.376/0002-65	28223
4	CHINANET-ZJ	24130
5	033.530.486/0001-29	23940
6	CHINANET-GD	22864
7	UNICOM-SD	21123
8	OVH	20133
9	CHINANET-GX	15562
10	003.420.926/0002-05	14491
11	CHINANET-HB	13133
12	UNICOM-JL	12144
13	UNICOM-LN	11174
14	TELKOMNET	11095
15	CHINANET-HN	10401
16	002.558.157/0001-62	10230
17	CHINANET-CQ	10153
18	CHINANET-JX	10136
19	CHINANET-GS	10117
20	KORNET-KR	9833
21	TATACOMM-IN	9773
22	CL-TEEM-LACNIC	9484
23	UNICOM-HE	8918
24	FR-PROXAD-20051003	8897
25	CHINANET-SH	8594

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	1803570
2	CHINANET-JS	1216543
3	000.065.376/0002-65	987026
4	CHINANET-ZJ	836839
5	033.530.486/0001-29	836561
6	CHINANET-GD	799664
7	UNICOM-SD	737477
8	OVH	704256
9	CHINANET-GX	544666
10	003.420.926/0002-05	506231
11	CHINANET-HB	460053
12	UNICOM-JL	424904
13	UNICOM-LN	390213
14	TELKOMNET	387283
15	CHINANET-HN	363972
16	002.558.157/0001-62	357533
17	CHINANET-CQ	355750
18	CHINANET-JX	354494
19	CHINANET-GS	354332
20	KORNET-KR	343987
21	TATACOMM-IN	342243
22	CL-TEEM-LACNIC	331493
23	UNICOM-HE	311588
24	FR-PROXAD-20051003	311489
25	CHINANET-SH	300662