Botnet Statistics for November 2010

detection period: 2010-11-01 00:00 - 2010-11-30 23:59 UTC
total number of suspected botnet IPs: 40754
number of blocked spams: 10491156
recipient count of blocked spams: 347545981

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	16984
2	India	9719
3	China	3672
4	Brazil	1882
5	Thailand	1784
6	Russian Federation	1528
7	Argentina	1373
8	Ukraine	698
9	United States	272
10	Belarus	249
11	Uruguay	246
12	Kazakhstan	198
13	South Korea	171
14	Ethiopia	165
15	Mexico	145
16	Indonesia	145
17	Germany	134
18	Colombia	114
19	Chile	112
20	Algeria	76
21	Hong Kong	61
22	Bulgaria	61
23	Poland	59
24	Italy	56
25	Iran	54

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	2121950
2	Brazil	1302625
3	Taiwan	1160342
4	United States	722775
5	Russian Federation	646022
6	India	374273
7	Colombia	328955
8	Thailand	245807
9	Germany	210781
10	South Korea	206726
11	Argentina	177956
12	Ukraine	172465
13	France	169121
14	Indonesia	164513
15	Poland	162099
16	Italy	156307
17	Mexico	116290
18	Philippines	96926
19	Turkey	82025
20	Saudi Arabia	81639
21	Iran	80066
22	Viet Nam	79188
23	United Kingdom	76462
24	Czech Republic	76423
25	Venezuela	73585

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	63091815
2	Brazil	45448837
3	Taiwan	32906558
4	United States	25229154
5	Russian Federation	22556025
6	India	13060091
7	Colombia	11485721
8	Thailand	8582907
9	Germany	7367414
10	South Korea	7209673
11	Argentina	6214266
12	Ukraine	6015365
13	France	5901351
14	Indonesia	5778802
15	Poland	5583484
16	Italy	5457585
17	Mexico	4069784
18	Philippines	3384180
19	Turkey	2859024
20	Saudi Arabia	2850579
21	Iran	2789784
22	Viet Nam	2764155
23	United Kingdom	2668253
24	Czech Republic	2656602
25	Venezuela	2570546

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	16828
2	BSNLNET	7237
3	CHINANET-GD	1162
4	AR-TEAR7-LACNIC	1097
5	TATACOMM-IN	722
6	RCOM	645
7	CAT-BB-NET	586
8	002.558.134/0001-58	535
9	TRUENET	486
10	UKRTELNET	458
11	TRUEBB-NET	436
12	HATHWAY-NET	359
13	ALLIANCEBROADBAND	316
14	UNICOM-SD	291
15	000.065.376/0002-65	283
16	UY-ANTA-LACNIC	246
17	PACENET	198
18	002.449.992/0001-64	198
19	076.535.764/0326-90	190
20	RU-RICH-20061219	179
21	CHINANET-FJ	166
22	ETHIONET	165
23	CHINANET-ZJ-WZ	157
24	UNICOM-BJ	130
25	BY-BELPAK-20091210	128

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	947637
2	CHINANET-ZJ-WZ	457246
3	003.420.926/0002-05	262091
4	000.065.376/0002-65	235041
5	CO-ACSA-LACNIC	178960
6	UNICOM-SD	163080
7	TFN-NET	155895
8	CHINANET-GD	146054
9	CHINANET-JS	121820
10	CHINANET-ZJ	118244
11	033.530.486/0001-29	117581
12	KORNET-KR	113158
13	002.558.157/0001-62	99131
14	CO-CTSE-LACNIC	71170
15	OVH	65149
16	BHARTI-IN	63518
17	SECUREDSERVERS	63473
18	002.558.134/0001-58	62372
19	TELKOMNET	61707
20	BSNLNET	61628
21	RCOM	59320
22	UNICOM-TJ	58523
23	004.027.547/0001-31	53198
24	PL-TPSA-20031203	53011
25	MX-ALES-LACNIC	50756

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	28135047
2	003.420.926/0002-05	9158310
3	000.065.376/0002-65	8226494
4	CHINANET-ZJ-WZ	6894765
5	CO-ACSA-LACNIC	6260016
6	UNICOM-SD	5695265
7	CHINANET-GD	4787592
8	CHINANET-JS	4211475
9	033.530.486/0001-29	4108081
10	KORNET-KR	3939923
11	002.558.157/0001-62	3450967
12	CHINANET-ZJ	2861656
13	TFN-NET	2791087
14	CO-CTSE-LACNIC	2483570
15	OVH	2272746
16	SECUREDSERVERS	2221394
17	BHARTI-IN	2219846
18	002.558.134/0001-58	2167424
19	TELKOMNET	2145290
20	BSNLNET	2135473
21	RCOM	2063623
22	UNICOM-TJ	2048808
23	004.027.547/0001-31	1847771
24	PL-TPSA-20031203	1846280
25	MX-ALES-LACNIC	1775657