Botnet Statistics for November 2011

detection period: 2011-11-01 00:00 - 2011-11-30 23:59 UTC
total number of suspected botnet IPs: 42200
number of blocked spams: 6445951
recipient count of blocked spams: 224673502

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	9373
2	Taiwan	7510
3	India	3141
4	Russian Federation	2223
5	Viet Nam	1778
6	South Korea	1577
7	Brazil	1392
8	Indonesia	1185
9	United States	961
10	Ukraine	910
11	Pakistan	779
12	Poland	718
13	Belarus	560
14	Romania	538
15	Argentina	488
16	Kazakhstan	410
17	Colombia	368
18	Serbia	334
19	Czech Republic	298
20	Chile	298
21	Germany	289
22	Peru	287
23	Spain	284
24	Italy	278
25	Israel	278

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1568509
2	United States	625277
3	Brazil	597557
4	France	244627
5	Russian Federation	243448
6	Indonesia	222284
7	India	211463
8	Czech Republic	178491
9	Germany	178203
10	Taiwan	143640
11	South Korea	142486
12	Ukraine	140748
13	Italy	100329
14	Colombia	98587
15	Hong Kong	94432
16	Europe Union	88293
17	United Kingdom	84179
18	Chile	80436
19	Mexico	74547
20	Poland	73849
21	Iran	72069
22	Canada	67167
23	Thailand	65905
24	Japan	44538
25	Viet Nam	43940

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	54584511
2	United States	21857699
3	Brazil	20890671
4	France	8559922
5	Russian Federation	8512964
6	Indonesia	7771815
7	India	7395386
8	Czech Republic	6244495
9	Germany	6234683
10	South Korea	4979607
11	Ukraine	4920856
12	Taiwan	4542287
13	Italy	3509776
14	Colombia	3447377
15	Hong Kong	3304712
16	Europe Union	3087237
17	United Kingdom	2943861
18	Chile	2821024
19	Mexico	2607901
20	Poland	2583100
21	Iran	2520728
22	Canada	2349703
23	Thailand	2304686
24	Japan	1557657
25	Viet Nam	1535771

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	7189
2	CHINANET-GD	1961
3	CTTNET	1663
4	BSNLNET	1166
5	VNPT-VNNIC-VN	1084
6	KORNET-KR	839
7	CHINANET-JS	699
8	PTCL	665
9	CRTC	559
10	CHINANET-FJ	428
11	BY-BELPAK-20091210	415
12	UNICOM-HA	410
13	BHARTI-IN	327
14	TELKOMNET	320
15	UNICOM-BJ	296
16	RCOM	286
17	002.558.134/0001-58	255
18	000.065.376/0002-65	225
19	MTNLISP	223
20	AR-TEAR7-LACNIC	212
21	UKRTELNET	211
22	RO-ARTELECOM-20070815	205
23	CHINANET-SH	194
24	002.558.157/0001-62	183
25	TATACOMM-IN	177

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-JS	171322
2	CHINANET-GD	131643
3	CHINANET-ZJ	125480
4	HINET-NET	118388
5	033.530.486/0001-29	117963
6	000.065.376/0002-65	117799
7	003.420.926/0002-05	107309
8	OVH	88387
9	CHINANET-GX	85142
10	CMNET	63075
11	UNICOM-JL	55493
12	UNICOM-SD	52748
13	KORNET-KR	52199
14	CHINANET-GS	47860
15	TELKOMNET	47591
16	CHINANET-SN	46138
17	CHINANET-HN	44173
18	CHINANET-CQ	41424
19	UNICOM-LN	40660
20	CHINANET-HB	40243
21	002.558.157/0001-62	39261
22	DE-HETZNER-20070416	38899
23	DACONET-CDT-NET	35231
24	CL-TEEM-LACNIC	34393
25	NETEON	34387

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	CHINANET-JS	5994622
2	CHINANET-GD	4603041
3	CHINANET-ZJ	4307484
4	033.530.486/0001-29	4124920
5	000.065.376/0002-65	4122633
6	003.420.926/0002-05	3752311
7	HINET-NET	3659558
8	OVH	3092679
9	CHINANET-GX	2977100
10	CMNET	2206157
11	UNICOM-JL	1942433
12	UNICOM-SD	1844115
13	KORNET-KR	1826518
14	CHINANET-GS	1674103
15	TELKOMNET	1664135
16	CHINANET-SN	1614510
17	CHINANET-HN	1545191
18	CHINANET-CQ	1450815
19	UNICOM-LN	1422919
20	CHINANET-HB	1407233
21	002.558.157/0001-62	1371503
22	DE-HETZNER-20070416	1360833
23	DACONET-CDT-NET	1233615
24	NETEON	1203420
25	CL-TEEM-LACNIC	1202686