Botnet Statistics for November 2012

detection period: 2012-11-01 00:00 - 2012-11-30 23:59 UTC
total number of suspected botnet IPs: 54459
number of blocked spams: 4372878
recipient count of blocked spams: 148022410

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	26883
2	Taiwan	8350
3	India	2093
4	United States	1706
5	Russian Federation	1665
6	Brazil	867
7	Viet Nam	842
8	Peru	653
9	Ukraine	582
10	Iran	570
11	South Korea	569
12	Colombia	568
13	Romania	546
14	Argentina	435
15	Belarus	398
16	Poland	390
17	Kazakhstan	385
18	Indonesia	331
19	Mexico	327
20	Germany	291
21	Serbia	268
22	Chile	258
23	Italy	255
24	Spain	252
25	Canada	214

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	732868
2	Brazil	572769
3	United States	421283
4	Taiwan	335409
5	Russian Federation	318482
6	Germany	147732
7	India	132306
8	United Kingdom	129969
9	South Korea	118810
10	Ukraine	112843
11	Netherlands	84972
12	Colombia	69919
13	Canada	65479
14	Iran	61513
15	Indonesia	56024
16	Mexico	54753
17	Turkey	53816
18	Italy	49637
19	Poland	47543
20	Romania	47411
21	France	47247
22	Czech Republic	42649
23	Belarus	26966
24	Kazakhstan	26553
25	Malaysia	25600

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	22218055
2	Brazil	20022427
3	United States	14731035
4	Russian Federation	11124401
5	Taiwan	10405851
6	Germany	5165533
7	India	4556069
8	United Kingdom	4543737
9	South Korea	4154268
10	Ukraine	3942356
11	Netherlands	2973887
12	Colombia	2444619
13	Canada	2287421
14	Iran	2151306
15	Indonesia	1959610
16	Mexico	1915226
17	Turkey	1874893
18	Italy	1733807
19	Poland	1658483
20	Romania	1656461
21	France	1651832
22	Czech Republic	1492432
23	Belarus	942487
24	Kazakhstan	928452
25	Malaysia	895513

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	9158
2	HINET-NET	8230
3	MAINT-CHINANET-HA	3824
4	CHINANET-HA	3068
5	UNICOM-LN	1227
6	CHINANET-FJ	1190
7	BSNLNET	1000
8	UNICOM-HN	992
9	CRTC	912
10	UNICOM-GD	794
11	CHINANET-JS	593
12	VNPT-VNNIC-VN	480
13	UNICOM-HB	426
14	ZTWL	358
15	CTTNET	341
16	RCOM	311
17	CHINANET-HB	259
18	PE-TPSA-LACNIC	256
19	CMNET	231
20	KORNET-KR	223
21	UNICOM-SD	219
22	BY-BELPAK-20091210	201
23	PE-PETD2-LACNIC	183
24	AR-TEAR7-LACNIC	177
25	CHINANET-GX	174

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	299683
2	CHINANET-GD	103913
3	003.420.926/0002-05	94838
4	DTAG-MESSE-DSSD	74669
5	000.065.376/0002-65	71464
6	002.558.157/0001-62	60027
7	033.530.486/0001-29	50641
8	KRNIC-KR	45038
9	HICHINA	42917
10	CO-ACSA-LACNIC	42838
11	004.027.547/0001-31	41222
12	BAYVIEW-NET-BLK	40371
13	CMNET	39410
14	CHINANET-JS	38711
15	UNICOM-GD	38141
16	UNICOM-SD	36522
17	CHINANET-SH	33324
18	CHINANET-ZJ	32131
19	000.108.786/0001-65	30469
20	KORNET-KR	30339
21	APAZ-164-NET	29221
22	076.535.764/0326-90	27878
23	IR-DCC-20010403	27121
24	CHINANET-HB	24221
25	TELWEST-BLK	24087

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	9157405
2	003.420.926/0002-05	3316888
3	DTAG-MESSE-DSSD	2613110
4	000.065.376/0002-65	2495647
5	002.558.157/0001-62	2101466
6	CHINANET-GD	1970895
7	033.530.486/0001-29	1768389
8	KRNIC-KR	1575273
9	HICHINA	1500135
10	CO-ACSA-LACNIC	1498502
11	004.027.547/0001-31	1440851
12	BAYVIEW-NET-BLK	1411776
13	CHINANET-JS	1352911
14	CMNET	1347201
15	UNICOM-SD	1263916
16	CHINANET-SH	1167989
17	CHINANET-ZJ	1122861
18	000.108.786/0001-65	1066992
19	KORNET-KR	1059266
20	APAZ-164-NET	1023589
21	076.535.764/0326-90	972270
22	IR-DCC-20010403	945885
23	CHINANET-HB	876667
24	TELWEST-BLK	842336
25	CHINANET-FJ	827075