Botnet Statistics for January 2010

detection period: 2010-01-01 00:00 - 2010-01-31 23:59 UTC
total number of suspected botnet IPs: 65037
number of blocked spams: 5197435
recipient count of blocked spams: 169541745

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	17327
2	India	16994
3	China	14190
4	Brazil	6842
5	Argentina	2778
6	Russian Federation	1587
7	United States	653
8	Ukraine	522
9	Ethiopia	492
10	Uruguay	369
11	Thailand	283
12	Chile	246
13	Mexico	190
14	South Korea	181
15	Colombia	175
16	Germany	171
17	Algeria	158
18	Italy	125
19	Indonesia	117
20	Bulgaria	97
21	Belarus	91
22	Japan	73
23	United Kingdom	73
24	Venezuela	72
25	Poland	71

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	2036479
2	Taiwan	734831
3	Brazil	536722
4	India	288372
5	United States	166481
6	Russian Federation	153591
7	Argentina	121782
8	Indonesia	108413
9	Thailand	102065
10	Colombia	101427
11	France	84516
12	Ukraine	79742
13	United Kingdom	62186
14	Poland	59526
15	South Korea	46077
16	Germany	29816
17	European Union	28565
18	Turkey	28155
19	Hong Kong	23321
20	Chile	22358
21	Pakistan	22140
22	Italy	20869
23	Venezuela	19995
24	Greece	19855
25	Viet Nam	18359

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	63257404
2	Brazil	19979361
3	Taiwan	18999191
4	India	9355464
5	Russian Federation	5371278
6	Argentina	4590458
7	United States	4580270
8	Indonesia	4287228
9	Thailand	4111047
10	Colombia	4099911
11	France	3388060
12	Ukraine	3221837
13	Poland	2111829
14	United Kingdom	2019042
15	South Korea	1882144
16	European Union	1354980
17	Turkey	1125943
18	Germany	929325
19	Chile	845255
20	Viet Nam	771916
21	Hong Kong	770089
22	Czech Republic	737574
23	Arab Emirates	734967
24	Pakistan	728237
25	Venezuela	726366

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	15965
2	BSNLNET	12430
3	CHINANET-GD	7077
4	002.558.157/0001-62	2360
5	AR-TEAR7-LACNIC	2258
6	TATACOMM-IN	1364
7	RCOM	1353
8	002.449.992/0001-64	1285
9	002.558.134/0001-58	1215
10	TFN-NET	1110
11	UNICOM-SD	1101
12	HATHWAY-NET	713
13	040.432.544/0001-47	536
14	ETHIONET	492
15	UNICOM-HA	407
16	UY-ANTA-LACNIC	369
17	CHINANET-JS	367
18	UNICOM-LN	356
19	000.065.376/0002-65	332
20	UKRTELNET	326
21	UNICOM-BJ	316
22	PACENET	311
23	CHINANET-ZJ-WZ	283
24	ALLIANCEBROADBAND	280
25	UNICOM-SX	263

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	607778
2	CHINANET-GD	199602
3	CHINANET-ZJ-WZ	158101
4	CHINANET-JS	144433
5	UNICOM-SD	143498
6	CNCGROUP-FJ-FUZHOU-MAN	140487
7	BSNLNET	135884
8	UNICOM-HE	110644
9	002.558.157/0001-62	104295
10	033.530.486/0001-29	77378
11	CHINANET-GX	72225
12	076.535.764/0326-90	69945
13	TFN-NET	62654
14	UNICOM-LN	60155
15	RCOM	49779
16	000.065.376/0002-65	48020
17	AR-TEAR7-LACNIC	46187
18	CHINANET-SH	44571
19	UNICOM-HA	42327
20	TELKOMNET	41092
21	CHINANET-CQ	38242
22	CO-ACSA-LACNIC	36693
23	HighwayNet	35857
24	CHINANET-JX	34224
25	004.027.547/0001-31	33850

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	16202014
2	CHINANET-JS	5205447
3	UNICOM-SD	4956037
4	BSNLNET	4489103
5	CHINANET-GD	4478861
6	UNICOM-HE	4264434
7	002.558.157/0001-62	3536110
8	033.530.486/0001-29	3327961
9	076.535.764/0326-90	2807873
10	CHINANET-GX	2613282
11	CHINANET-ZJ-WZ	2405698
12	UNICOM-LN	2176104
13	CO-ACSA-LACNIC	1737098
14	TELKOMNET	1636888
15	CHINANET-SH	1632740
16	000.065.376/0002-65	1617370
17	AR-TEAR7-LACNIC	1507177
18	UNICOM-HA	1500640
19	RCOM	1481225
20	HighwayNet	1404641
21	CHINANET-AH	1384999
22	CHINANET-CQ	1336779
23	004.027.547/0001-31	1243023
24	002.558.134/0001-58	1189095
25	TATACOMM-IN	1162000