Botnet Statistics for April 2010

detection period: 2010-04-01 00:00 - 2010-04-30 23:59 UTC
total number of suspected botnet IPs: 52084
number of blocked spams: 3654630
recipient count of blocked spams: 65818074

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	17168
2	India	11124
3	China	11054
4	Brazil	4121
5	Argentina	2356
6	Russian Federation	1123
7	Thailand	1054
8	United States	886
9	Mexico	377
10	Uruguay	325
11	Ukraine	295
12	Ethiopia	179
13	Germany	149
14	Chile	149
15	Colombia	118
16	Indonesia	115
17	South Korea	112
18	Kazakhstan	85
19	Japan	78
20	Iran	72
21	Belarus	71
22	Algeria	69
23	Bulgaria	68
24	Hong Kong	66
25	Poland	61

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1243272
2	Taiwan	580951
3	Brazil	470298
4	India	203223
5	Malaysia	156783
6	United States	118412
7	Russian Federation	97540
8	Indonesia	85842
9	Thailand	85711
10	Colombia	69476
11	Argentina	67103
12	Poland	40801
13	France	29171
14	Turkey	24459
15	United Kingdom	24244
16	European Union	21130
17	Viet Nam	20928
18	Ukraine	20018
19	Chile	20001
20	Iran	19742
21	Czech Republic	17833
22	South Korea	17153
23	Bulgaria	16637
24	Canada	15390
25	Slovakia	14126

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	15954968
2	China	15616982
3	Brazil	9396507
4	India	4901716
5	Malaysia	2414586
6	Thailand	2253350
7	Argentina	1669548
8	Russian Federation	1653536
9	Colombia	1647027
10	Indonesia	1358071
11	United States	1236340
12	Poland	746709
13	France	531065
14	Viet Nam	429932
15	Chile	382929
16	Turkey	369287
17	Ukraine	364148
18	Hong Kong	302370
19	Mongolia	292635
20	South Korea	276251
21	United Kingdom	263332
22	Iran	251491
23	European Union	244755
24	South Africa	223356
25	Bulgaria	209386

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	17051
2	BSNLNET	8010
3	RITELE	3594
4	CHINANET-GD	2731
5	AR-TEAR7-LACNIC	1872
6	002.558.157/0001-62	1260
7	002.558.134/0001-58	794
8	RCOM	723
9	TATACOMM-IN	706
10	UNICOM-SD	673
11	002.449.992/0001-64	640
12	ALLIANCEBROADBAND	498
13	HATHWAY-NET	484
14	TRUENET	442
15	CAT-BB-NET	350
16	UNICOM-SX	348
17	UNICOM-LN	348
18	UY-ANTA-LACNIC	320
19	000.065.376/0002-65	314
20	040.432.544/0001-47	298
21	MX-GICS-LACNIC	275
22	PACENET	272
23	CHINANET-ZJ-WZ	255
24	UNICOM-BJ	193
25	UNICOM-HA	189

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	564899
2	RITELE	114245
3	CHINANET-GD	101807
4	TMIDC-MY	99846
5	BSNLNET	92952
6	CHINANET-JS	85829
7	076.535.764/0326-90	76896
8	000.065.376/0002-65	69939
9	033.530.486/0001-29	60916
10	CHINANET-ZJ-WZ	60411
11	002.558.157/0001-62	58433
12	UNICOM-HE	55684
13	UNICOM-BJ	55110
14	EASTGATE	45865
15	UNICOM-SD	43515
16	CHINANET-FJ	38593
17	UNICOM-HA	35886
18	RCOM	35637
19	004.027.547/0001-31	34303
20	UNICOM-LN	34270
21	UNICOM-SX	33975
22	CO-ACSA-LACNIC	33504
23	CHINANET-SC	29247
24	003.287.268/0001-44	27355
25	CHINANET-SH	26492

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	15704549
2	BSNLNET	2428552
3	000.065.376/0002-65	1679011
4	TMIDC-MY	1597514
5	002.558.157/0001-62	1536848
6	076.535.764/0326-90	1450704
7	CHINANET-JS	1089548
8	CHINANET-GD	1064282
9	033.530.486/0001-29	1001880
10	CHINANET-ZJ-WZ	922221
11	RCOM	904110
12	TRUENET	888872
13	UNICOM-SD	861322
14	UNICOM-BJ	793641
15	CO-ACSA-LACNIC	762979
16	EASTGATE	733840
17	UNICOM-HE	699642
18	AR-TEAR7-LACNIC	614441
19	UNICOM-SX	553901
20	004.027.547/0001-31	543396
21	CAT-BB-NET	476803
22	UNICOM-LN	476214
23	CHINANET-SC	470116
24	CHINANET-FJ	442770
25	TELKOMNET	421697