Botnet Statistics for March 2012

detection period: 2012-03-01 00:00 - 2012-03-31 23:59 UTC
total number of suspected botnet IPs: 67852
number of blocked spams: 4707922
recipient count of blocked spams: 161100022

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	18896
2	Taiwan	13063
3	India	4531
4	Viet Nam	2302
5	Indonesia	2290
6	Pakistan	2107
7	United States	2032
8	Brazil	1642
9	Russian Federation	1580
10	Poland	1561
11	South Korea	1207
12	Argentina	927
13	Peru	781
14	Belarus	664
15	Kazakhstan	619
16	Romania	617
17	Spain	578
18	Saudi Arabia	555
19	Ukraine	541
20	Germany	494
21	Colombia	490
22	Chile	468
23	Iran	452
24	Turkey	437
25	Serbia	392

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1096359
2	Brazil	637279
3	United States	434908
4	Taiwan	294457
5	Russian Federation	211106
6	France	153834
7	India	151956
8	Indonesia	144593
9	Germany	136517
10	Canada	101774
11	Ukraine	96079
12	South Korea	92497
13	Iran	69661
14	Hong Kong	58819
15	United Kingdom	53891
16	Poland	52912
17	European Union	50126
18	Mexico	46916
19	Netherlands	45048
20	Chile	43638
21	Viet Nam	43293
22	Serbia	37059
23	Pakistan	36415
24	Thailand	35482
25	Czech Republic	34313

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	35982514
2	Brazil	22294556
3	United States	15213458
4	Taiwan	9164641
5	Russian Federation	7378784
6	France	5380659
7	India	5309446
8	Indonesia	5056113
9	Germany	4752690
10	Canada	3559437
11	Ukraine	3360427
12	South Korea	3234691
13	Iran	2434332
14	Hong Kong	2057731
15	United Kingdom	1885267
16	Poland	1841720
17	European Union	1739195
18	Mexico	1640826
19	Netherlands	1563260
20	Chile	1526723
21	Viet Nam	1514843
22	Serbia	1296788
23	Pakistan	1274332
24	Thailand	1240459
25	Czech Republic	1198940

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	12604
2	CHINANET-GD	7301
3	UNICOM-GD	3820
4	PTCL	1683
5	BSNLNET	1450
6	VNPT-VNNIC-VN	1446
7	UNICOM-LN	903
8	CHINANET-FJ	818
9	CRTC	636
10	MTNLISP	562
11	TELKOMNET	549
12	ZTWL	533
13	KORNET-KR	481
14	BHARTI-IN	472
15	BY-BELPAK-20091210	469
16	UNICOM-HN	446
17	AR-TEAR7-LACNIC	387
18	RCOM	386
19	CHINANET-JS	376
20	CHINANET-HB	355
21	UNICOM-HB	350
22	002.558.134/0001-58	293
23	PTCLBB-PK	260
24	CHINASKYNET	250
25	000.065.376/0002-65	244

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	262818
2	003.420.926/0002-05	145328
3	033.530.486/0001-29	102028
4	000.065.376/0002-65	100760
5	CHINANET-JS	93543
6	OVH	85733
7	CHINANET-GD	83149
8	002.558.157/0001-62	79160
9	UNICOM-JL	78049
10	UNICOM-SD	60010
11	UNICOM-GD	57228
12	CHINANET-GX	56601
13	CHINANET-SC	40474
14	TELKOMNET	38671
15	CHINANET-GS	36621
16	CHINANET-SH	36013
17	TATAC-ARIN-2	33609
18	KORNET-KR	33117
19	UNICOM-BJ	31896
20	NETBLK-THEPLANET-BLK-14	31243
21	TATACOMM-IN	31067
22	004.027.547/0001-31	30727
23	CMNET	29969
24	NGNNET	29343
25	CHINANET-AH	28537

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	8057591
2	003.420.926/0002-05	5085363
3	033.530.486/0001-29	3567157
4	000.065.376/0002-65	3525413
5	CHINANET-JS	3267435
6	OVH	2998417
7	002.558.157/0001-62	2770682
8	UNICOM-JL	2730444
9	UNICOM-SD	2096786
10	CHINANET-GX	1981123
11	CHINANET-GD	1463736
12	CHINANET-SC	1415865
13	TELKOMNET	1352368
14	CHINANET-GS	1280945
15	CHINANET-SH	1260356
16	TATAC-ARIN-2	1177007
17	KORNET-KR	1157040
18	UNICOM-BJ	1113695
19	UNICOM-GD	1097931
20	NETBLK-THEPLANET-BLK-14	1093405
21	TATACOMM-IN	1087304
22	004.027.547/0001-31	1074769
23	CMNET	1048714
24	NGNNET	1026941
25	CHINANET-AH	998455