Botnet Statistics for March 2010

detection period: 2010-03-01 00:00 - 2010-03-31 23:59 UTC
total number of suspected botnet IPs: 55591
number of blocked spams: 4225893
recipient count of blocked spams: 79043657

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	14476
2	India	13161
3	China	12452
4	Brazil	4939
5	Argentina	2579
6	United States	2376
7	Russian Federation	1103
8	Thailand	610
9	Mexico	387
10	Uruguay	364
11	Ukraine	307
12	Ethiopia	276
13	Spain	244
14	Chile	177
15	South Korea	158
16	United Kingdom	152
17	Colombia	144
18	France	112
19	Germany	110
20	Indonesia	99
21	Kazakhstan	91
22	Italy	70
23	Canada	70
24	Japan	69
25	Belarus	67

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1662639
2	Brazil	607645
3	Taiwan	359716
4	India	235181
5	United States	143707
6	Indonesia	118070
7	Russian Federation	100260
8	Thailand	99239
9	Argentina	96704
10	Colombia	95130
11	France	86624
12	South Korea	59094
13	Poland	56118
14	Ukraine	43226
15	Viet Nam	35247
16	United Kingdom	33218
17	Turkey	32695
18	Mexico	30306
19	European Union	28545
20	Canada	26114
21	Czech Republic	23393
22	South Africa	19825
23	Japan	18599
24	Chile	15310
25	Germany	14438

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	22476829
2	Brazil	14298946
3	Taiwan	9122043
4	India	6407138
5	Colombia	2649866
6	Argentina	2636386
7	Thailand	2378901
8	France	2347135
9	Russian Federation	2191954
10	Indonesia	2095631
11	United States	1425754
12	Poland	1119054
13	Ukraine	866456
14	South Korea	825715
15	Viet Nam	718075
16	Turkey	695157
17	South Africa	640762
18	Chile	490486
19	Mexico	414819
20	United Kingdom	413799
21	Hong Kong	370039
22	Germany	350995
23	Greece	338172
24	European Union	327962
25	Japan	260052

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	14280
2	BSNLNET	9667
3	CHINANET-GD	3770
4	RITELE	3704
5	AR-TEAR7-LACNIC	2024
6	002.558.157/0001-62	1626
7	TATACOMM-IN	924
8	002.558.134/0001-58	922
9	RCOM	869
10	002.449.992/0001-64	776
11	UNICOM-SD	722
12	HATHWAY-NET	598
13	CHINANET-HB	439
14	ALLIANCEBROADBAND	374
15	UY-ANTA-LACNIC	363
16	000.065.376/0002-65	359
17	040.432.544/0001-47	350
18	UNICOM-LN	328
19	UNICOM-SX	318
20	TRUENET	298
21	PACENET	288
22	ETHIONET	276
23	JUMPSTART-5	272
24	MX-GICS-LACNIC	267
25	CHINANET-ZJ-WZ	258

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	267066
2	RITELE	166608
3	CHINANET-GD	166539
4	CHINANET-ZJ-WZ	125970
5	CHINANET-JS	120838
6	002.558.157/0001-62	107271
7	BSNLNET	105231
8	000.065.376/0002-65	90261
9	CNCGROUP-FJ-FUZHOU-MAN	79694
10	076.535.764/0326-90	79688
11	033.530.486/0001-29	65056
12	UNICOM-HE	65025
13	UNICOM-SD	57177
14	TFN-NET	56689
15	RCOM	52289
16	UNICOM-HA	49713
17	CO-ACSA-LACNIC	46930
18	FR-OVH-20060920	45994
19	TELKOMNET	41102
20	UNICOM-BJ	40216
21	CHINA-ABITCOOL	39989
22	CHINANET-FJ	37849
23	CNI-ID	37040
24	PUBNETPLUS-KR	35678
25	002.558.134/0001-58	34503

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	7279148
2	BSNLNET	3174615
3	002.558.157/0001-62	2772870
4	000.065.376/0002-65	2485960
5	076.535.764/0326-90	2029731
6	CHINANET-ZJ-WZ	1978729
7	CHINANET-JS	1699351
8	CHINANET-GD	1694147
9	033.530.486/0001-29	1457093
10	UNICOM-SD	1413053
11	FR-OVH-20060920	1357264
12	CO-ACSA-LACNIC	1300895
13	RCOM	1238548
14	UNICOM-HE	938882
15	AR-TEAR7-LACNIC	938208
16	TFN-NET	888302
17	TELKOMNET	840732
18	TRUENET	780751
19	002.558.134/0001-58	772532
20	004.027.547/0001-31	771388
21	OVH	759897
22	UNICOM-BJ	673297
23	003.420.926/0002-05	618678
24	UNICOM-NM	612706
25	UNICOM-HA	602039