Botnet Statistics for February 2012

detection period: 2012-02-01 00:00 - 2012-02-29 23:59 UTC
total number of suspected botnet IPs: 74024
number of blocked spams: 2120937
recipient count of blocked spams: 69269308

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	24194
2	Taiwan	11009
3	India	4717
4	Indonesia	3224
5	Viet Nam	2406
6	Russian Federation	2061
7	Brazil	1866
8	South Korea	1736
9	Poland	1604
10	United States	1574
11	Pakistan	1420
12	Peru	1192
13	Argentina	1025
14	Romania	763
15	Colombia	719
16	Spain	711
17	Ukraine	599
18	Chile	588
19	Belarus	561
20	Iran	540
21	Kazakhstan	538
22	Saudi Arabia	531
23	Serbia	512
24	Germany	498
25	United Kingdom	397

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	592773
2	Brazil	254648
3	United States	189203
4	Taiwan	182802
5	Russian Federation	69091
6	France	67714
7	Germany	57365
8	India	52427
9	Indonesia	50484
10	South Korea	44229
11	Ukraine	36612
12	Canada	32745
13	Poland	29877
14	Iran	29372
15	Chile	26371
16	United Kingdom	23711
17	Colombia	21631
18	Mexico	19990
19	Argentina	19383
20	European Union	18463
21	Viet Nam	17103
22	Thailand	15495
23	Netherlands	14373
24	Hong Kong	14344
25	Czech Republic	12651

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	16709980
2	Brazil	8911506
3	United States	6617675
4	Taiwan	5506554
5	Russian Federation	2416058
6	France	2368703
7	Germany	2003680
8	India	1833576
9	Indonesia	1766487
10	South Korea	1546381
11	Ukraine	1280903
12	Canada	1146728
13	Poland	1044524
14	Iran	1027459
15	Chile	922446
16	United Kingdom	829130
17	Colombia	756670
18	Mexico	699942
19	Argentina	677712
20	European Union	641627
21	Viet Nam	598500
22	Thailand	541085
23	Hong Kong	501222
24	Netherlands	500315
25	Italy	442064

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	10594
2	CHINANET-GD	10084
3	UNICOM-HA	2842
4	UNICOM-GD	2805
5	UNICOM-HN	1794
6	VNPT-VNNIC-VN	1465
7	BSNLNET	1374
8	PTCL	1100
9	UNICOM-LN	973
10	MTNLISP	908
11	TELKOMNET	800
12	KORNET-KR	788
13	CHINANET-FJ	737
14	CRTC	676
15	BHARTI-IN	528
16	CHINANET-JS	485
17	AR-TEAR7-LACNIC	453
18	ZTWL	452
19	BY-BELPAK-20091210	393
20	002.558.134/0001-58	359
21	PE-PETD2-LACNIC	343
22	RCOM	321
23	VIETEL-VNNIC-VN	291
24	002.558.157/0001-62	283
25	PE-TPSA-LACNIC	270

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	171765
2	CHINANET-GD	120603
3	003.420.926/0002-05	61892
4	CHINANET-JS	43807
5	033.530.486/0001-29	41664
6	OVH	40364
7	AMC-NET-5	37481
8	000.065.376/0002-65	32854
9	002.558.157/0001-62	30989
10	UNICOM-SD	30872
11	UNICOM-JL	28907
12	UNICOM-GD	26314
13	CHINANET-GX	23835
14	CHINANET-SH	20843
15	KRNIC-KR	20655
16	EG	20194
17	TELKOMNET	19950
18	CHINANET-GS	18917
19	NETBLK-THEPLANET-BLK-14	17501
20	CHINANET-AH	17370
21	UNICOM-HA	16748
22	CHINANET-ZJ	16541
23	004.027.547/0001-31	15342
24	CMNET	14117
25	VINADATA-VNNIC-VN	13374

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	5120196
2	003.420.926/0002-05	2166230
3	CHINANET-JS	1511888
4	033.530.486/0001-29	1458695
5	OVH	1412712
6	AMC-NET-5	1310887
7	000.065.376/0002-65	1149594
8	002.558.157/0001-62	1084508
9	UNICOM-SD	1079389
10	UNICOM-JL	1011188
11	CHINANET-GD	851398
12	CHINANET-GX	835073
13	CHINANET-SH	730515
14	KRNIC-KR	722853
15	EG	707410
16	TELKOMNET	697986
17	CHINANET-GS	661781
18	NETBLK-THEPLANET-BLK-14	612437
19	CHINANET-AH	607856
20	UNICOM-HA	585899
21	CHINANET-ZJ	578089
22	004.027.547/0001-31	536033
23	CMNET	494619
24	VINADATA-VNNIC-VN	468242
25	CHINANET-SN	445273