Botnet Statistics for April 2013

detection period: 2013-04-01 00:00 - 2013-04-30 23:59 UTC
total number of suspected botnet IPs: 114811
number of blocked spams: 2708065
recipient count of blocked spams: 95308255

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	54148
2	Belarus	16391
3	Kazakhstan	5143
4	Ukraine	5075
5	United States	4015
6	India	2305
7	Russian Federation	2283
8	Viet Nam	2236
9	Taiwan	1942
10	Peru	1315
11	Argentina	977
12	Colombia	960
13	Spain	950
14	Brazil	911
15	Iran	873
16	Poland	774
17	Germany	766
18	Italy	753
19	Romania	748
20	Mexico	740
21	United Kingdom	728
22	Turkey	560
23	Bulgaria	518
24	South Korea	517
25	Indonesia	512

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	544384
2	United States	465889
3	Brazil	279142
4	Russian Federation	191843
5	United Kingdom	92404
6	France	76445
7	India	68479
8	South Korea	53627
9	Germany	53249
10	Iran	51612
11	Indonesia	48712
12	Taiwan	48327
13	Ukraine	48137
14	Spain	45228
15	Colombia	44090
16	Thailand	34177
17	Argentina	32172
18	Mexico	30043
19	Philippines	25559
20	Poland	24999
21	Peru	23649
22	Hong Kong	23134
23	Malaysia	18800
24	Kazakhstan	18710
25	Kuwait	17670

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	United States	17398150
2	China	16006506
3	Brazil	10296177
4	Russian Federation	6914314
5	United Kingdom	3338582
6	France	2818653
7	India	2493829
8	South Korea	1954456
9	Germany	1879879
10	Iran	1826636
11	Taiwan	1774109
12	Indonesia	1728389
13	Spain	1697465
14	Ukraine	1664933
15	Colombia	1594526
16	Thailand	1276803
17	Argentina	1208766
18	Mexico	1130722
19	Philippines	956970
20	Poland	933414
21	Peru	880109
22	Hong Kong	857852
23	Malaysia	697941
24	Kazakhstan	667119
25	Kuwait	665963

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	23298
2	BY-BELPAK-20091210	8614
3	CRTC	5310
4	UNICOM-HA	4291
5	CHINANET-GD	4133
6	CHINANET-HE	4011
7	CTTNET	3349
8	BY-BELPAK-20120330	2835
9	BY-BELPAK-20080213	1909
10	BY-BELPAK-20120106	1670
11	HINET-NET	1433
12	VNPT-VNNIC-VN	1329
13	KZ-KAZAKTELECOM-20080923	1302
14	KZ-KAZAKTELECOM-20091126	1171
15	CHINANET-FJ	974
16	CMNET	687
17	BSNLNET	651
18	UNICOM-GD	546
19	PE-TPSA-LACNIC	506
20	ZTWL	428
21	UNICOM-SD	385
22	AR-TEAR7-LACNIC	374
23	CHINASKYNET	350
24	BYFLY	336
25	PE-PETD2-LACNIC	334

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	MSFT-EP	159851
2	UNICOM-LN	90010
3	UNICOM-GD	48403
4	HINET-NET	45742
5	003.420.926/0002-05	42976
6	002.558.157/0001-62	40383
7	033.530.486/0001-29	33486
8	CHINANET-GD	30907
9	CMNET	28909
10	KORNET-KR	27446
11	ES-ONO-20040415	23129
12	HICHINA	22706
13	BHARTI-IN	21150
14	NETBLK-NOBIS-TECHNOLOGY-GROUP-11	20910
15	JIAOJIANG-DONGGANG-LTD	20789
16	CO-ACSA-LACNIC	18551
17	UNICOM-HE	18233
18	OVH	18109
19	SHENZHEN-CNC	17441
20	004.027.547/0001-31	17091
21	FR-OVH-20060920	16987
22	CHINANET-SH	16552
23	GULFNET-MOI	16336
24	GBLX-11C	15602
25	ESOTERICA	14693

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	MSFT-EP	6038685
2	UNICOM-LN	3396128
3	HINET-NET	1688597
4	003.420.926/0002-05	1624595
5	002.558.157/0001-62	1524283
6	033.530.486/0001-29	1252280
7	CHINANET-GD	1074088
8	KORNET-KR	991291
9	CMNET	988461
10	ES-ONO-20040415	872969
11	HICHINA	833545
12	BHARTI-IN	797332
13	NETBLK-NOBIS-TECHNOLOGY-GROUP-11	787947
14	JIAOJIANG-DONGGANG-LTD	695581
15	OVH	683086
16	CO-ACSA-LACNIC	677711
17	CHINANET-SH	625025
18	GULFNET-MOI	615166
19	004.027.547/0001-31	607586
20	FR-OVH-20060920	604647
21	GBLX-11C	588534
22	ESOTERICA	553764
23	002.558.134/0001-58	514504
24	UNICOM-HE	493855
25	ALIBABA-BJ-NET	486330