Botnet Statistics for March 2011

detection period: 2011-03-01 00:00 - 2011-03-31 23:59 UTC
total number of suspected botnet IPs: 52126
number of blocked spams: 4722037
recipient count of blocked spams: 136823212

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	17975
2	Taiwan	5610
3	India	4201
4	Brazil	2427
5	Indonesia	1843
6	Viet Nam	1723
7	Russian Federation	1635
8	South Korea	1317
9	United States	1203
10	Pakistan	1093
11	Ukraine	852
12	Argentina	710
13	Thailand	709
14	Colombia	707
15	Peru	564
16	Poland	542
17	Belarus	526
18	Kazakhstan	464
19	Spain	388
20	Romania	385
21	Germany	382
22	Italy	292
23	Chile	288
24	Saudi Arabia	286
25	Serbia	253

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1249642
2	Brazil	488627
3	Taiwan	437898
4	United States	375836
5	Russian Federation	221177
6	India	151230
7	Indonesia	121513
8	Colombia	104749
9	France	104156
10	Ukraine	102656
11	Thailand	91114
12	South Korea	78653
13	Germany	76072
14	Spain	70615
15	Mexico	63329
16	Italy	61970
17	Kazakhstan	55462
18	United Kingdom	50488
19	Poland	49599
20	Philippines	36590
21	Argentina	34858
22	Turkey	34671
23	Netherlands	29617
24	Bulgaria	29421
25	Viet Nam	29337

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	31077916
2	Brazil	15350940
3	United States	12578006
4	Taiwan	9402044
5	Russian Federation	6608731
6	India	4724963
7	Indonesia	3681005
8	Colombia	3456105
9	Ukraine	3433743
10	France	3383699
11	Thailand	2747335
12	South Korea	2610723
13	Germany	2546536
14	Mexico	2097664
15	Italy	2089550
16	United Kingdom	1710956
17	Kazakhstan	1534543
18	Spain	1483160
19	Poland	1476982
20	Philippines	1190272
21	Argentina	1122761
22	Turkey	1094904
23	Netherlands	1010605
24	Bulgaria	959517
25	Canada	899395

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	8799
2	HINET-NET	5459
3	UNICOM-HA	2654
4	BSNLNET	1900
5	UNICOM-GD	1400
6	VNPT-VNNIC-VN	1227
7	PTCL	983
8	CTTNET	941
9	TELKOMNET	806
10	CRTC	805
11	KORNET-KR	576
12	CHINANET-JS	483
13	002.558.134/0001-58	483
14	RCOM	424
15	BY-BELPAK-20091210	408
16	002.558.157/0001-62	387
17	NTHAIRNET	386
18	MTNLISP	367
19	UNICOM-BJ	360
20	AR-TEAR7-LACNIC	353
21	076.535.764/0326-90	350
22	TATACOMM-IN	335
23	000.065.376/0002-65	316
24	UKRTELNET	310
25	UNICOM-SD	225

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	395098
2	CHINANET-ZJ-WZ	271304
3	CHINANET-GD	166280
4	UNICOM-SD	113846
5	003.420.926/0002-05	89339
6	CHINANET-JS	81463
7	CO-ACSA-LACNIC	66407
8	033.530.486/0001-29	66143
9	OVH	55949
10	000.065.376/0002-65	52637
11	UNICOM-GD	43079
12	004.027.547/0001-31	41894
13	RCOM	38906
14	RIMA	34946
15	TELKOMNET	32400
16	UNICOM-HE	29640
17	GZCOMP-CN	28403
18	UNICOM-HA	27542
19	UNICOM-TJ	26215
20	KORNET-KR	26032
21	002.558.157/0001-62	23216
22	CHINANET-ZJ	22886
23	THAINET-TH	22625
24	002.558.134/0001-58	22037
25	076.535.764/0326-90	21716

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	8052553
2	CHINANET-ZJ-WZ	4137931
3	UNICOM-SD	3360423
4	CHINANET-GD	2951862
5	003.420.926/0002-05	2804096
6	CHINANET-JS	2552384
7	CO-ACSA-LACNIC	2297844
8	033.530.486/0001-29	2024428
9	OVH	1943119
10	000.065.376/0002-65	1820628
11	004.027.547/0001-31	1316413
12	RCOM	1144951
13	TELKOMNET	943360
14	UNICOM-TJ	909568
15	UNICOM-HE	887320
16	KORNET-KR	866432
17	GZCOMP-CN	820161
18	UNICOM-HA	817685
19	002.558.157/0001-62	732708
20	002.558.134/0001-58	731886
21	THAINET-TH	718559
22	TATACOMM-IN	685502
23	UNICOM-BJ	671410
24	VE-CSVE-LACNIC	660317
25	CHINANET-SH	649528