Botnet Statistics for March 2015

detection period: 2015-03-01 00:00 - 2015-03-31 23:59 UTC
total number of suspected botnet IPs: 42166
number of blocked spams: 5418321
recipient count of blocked spams: 186482807

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	21411
2	China	5489
3	United States	3170
4	Viet Nam	1215
5	Turkey	847
6	Spain	667
7	Russian Federation	636
8	France	591
9	South Korea	509
10	Canada	479
11	India	464
12	United Kingdom	444
13	Mexico	419
14	Argentina	402
15	Italy	384
16	Germany	358
17	Brazil	333
18	Romania	279
19	Colombia	219
20	Ukraine	214
21	Poland	184
22	Australia	155
23	Portugal	151
24	Chile	151
25	Peru	142

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	3149745
2	China	598134
3	United States	273944
4	Indonesia	169883
5	Viet Nam	92408
6	Russian Federation	81470
7	Iran	75144
8	Bangladesh	71618
9	Brazil	67351
10	South Korea	66710
11	Turkey	64469
12	Australia	58571
13	Hong Kong	56475
14	UNKNOWN	53251
15	Malaysia	52632
16	India	45404
17	Italy	37392
18	Ivory Coast	34008
19	Saudi Arabia	33047
20	Ecuador	29442
21	Ukraine	29046
22	Poland	26332
23	Mongolia	25373
24	Serbia	22897
25	Romania	22848

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	94336843
2	China	24181270
3	United States	11029788
4	Indonesia	6910996
5	Viet Nam	3772035
6	Russian Federation	3323830
7	Iran	3047446
8	Bangladesh	2926740
9	Brazil	2741496
10	South Korea	2721362
11	Turkey	2645626
12	Australia	2390351
13	Hong Kong	2299052
14	UNKNOWN	2177680
15	Malaysia	2152390
16	India	1848930
17	Italy	1524892
18	Ivory Coast	1389995
19	Saudi Arabia	1351003
20	Ecuador	1201266
21	Ukraine	1176231
22	Poland	1081039
23	Mongolia	1035994
24	Serbia	940460
25	Romania	934472

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	21272
2	CHINANET-GD	2951
3	VNPT-VNNIC-VN	672
4	UNICOM-FJ	297
5	CHINANET-HN	252
6	KORNET-KR	236
7	ZJU-CN	213
8	CCCH3-4	202
9	TurkTelekom	197
10	UNICOM-GD	177
11	VIETEL-VNNIC-VN	171
12	RIMA	170
13	CBC-CM-4	166
14	TR-TELEKOM-20051027	162
15	AR-TEAR7-LACNIC	161
16	CHINANET-JS	148
17	IP2000-ADSL-BAS	146
18	TR-TELEKOM-20040920	139
19	FPT-VN	120
20	CMNET	119
21	BSNLNET	113
22	MX-USCV4-LACNIC	103
23	NETBLK-CHARTER-NET	102
24	WASU	97
25	UNICOM-BJ	89

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	3104532
2	VOCUS-AS-AP	53787
3	DEPKEU-ID	49277
4	CHINANET-GD	46928
5	CHINANET-JS	37292
6	FPT-NET	35039
7	LINKNET-ID	34521
8	HINET-TW	34481
9	AVISONET	34008
10	ALISOFT	32513
11	TR-TELEKOM-20051027	32294
12	WHOLESALEINTERNET-2	31987
13	MAXISNET-HSDPA	31947
14	IR-DCC-20041125	30155
15	SALAY-TELEKOM	30149
16	EC-ALGU-LACNIC	29442
17	004.027.547/0001-31	26594
18	UNICOM-SD	25529
19	G-Mobile	25373
20	YITAIFENG	25241
21	ZENOINTERNET-AP	23981
22	Aishang	23868
23	SOLUSINDO-ID	23657
24	KORNET-KR	22900
25	UNICOM-HA	21963

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	92493350
2	VOCUS-AS-AP	2194014
3	DEPKEU-ID	2012717
4	CHINANET-GD	1890028
5	CHINANET-JS	1513904
6	FPT-NET	1432393
7	HINET-TW	1409933
8	LINKNET-ID	1408151
9	AVISONET	1389995
10	ALISOFT	1327167
11	TR-TELEKOM-20051027	1321076
12	WHOLESALEINTERNET-2	1308194
13	MAXISNET-HSDPA	1305611
14	SALAY-TELEKOM	1242499
15	IR-DCC-20041125	1220238
16	EC-ALGU-LACNIC	1201266
17	004.027.547/0001-31	1083288
18	G-Mobile	1035994
19	UNICOM-SD	1035291
20	YITAIFENG	1029668
21	ZENOINTERNET-AP	978575
22	Aishang	974017
23	SOLUSINDO-ID	963208
24	KORNET-KR	935718
25	UNICOM-HA	881832