Botnet Statistics for April 2015

detection period: 2015-04-01 00:00 - 2015-04-30 23:59 UTC
total number of suspected botnet IPs: 36857
number of blocked spams: 3808707
recipient count of blocked spams: 122729877

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	20033
2	China	5007
3	United States	3009
4	Russian Federation	756
5	Turkey	553
6	Viet Nam	541
7	India	403
8	France	373
9	Canada	367
10	South Korea	357
11	Spain	352
12	Mexico	278
13	United Kingdom	258
14	Argentina	245
15	Germany	208
16	Malaysia	182
17	Italy	182
18	Chile	162
19	Arab Emirates	155
20	Ukraine	152
21	Romania	150
22	Brazil	148
23	Indonesia	135
24	Colombia	135
25	Australia	134

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2867234
2	China	277120
3	United States	155622
4	Indonesia	54791
5	Iran	37433
6	Hong Kong	37039
7	Brazil	33030
8	South Korea	28799
9	Bangladesh	25814
10	Malaysia	23645
11	Israel	21208
12	Poland	18770
13	Ivory Coast	16710
14	Japan	13594
15	Russian Federation	13452
16	Ecuador	13083
17	Italy	12772
18	Serbia	11703
19	Australia	11262
20	India	11192
21	Turkey	10516
22	Ukraine	10103
23	Mongolia	9995
24	Viet Nam	9626
25	South Africa	8904

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	85548567
2	China	10544441
3	United States	6265372
4	Indonesia	2160780
5	Iran	1504573
6	Hong Kong	1464877
7	Brazil	1331207
8	South Korea	1159093
9	Bangladesh	1040250
10	Malaysia	945104
11	Israel	852315
12	Poland	755926
13	Ivory Coast	674646
14	Russian Federation	543493
15	Japan	542777
16	Ecuador	524914
17	Italy	512569
18	Serbia	471323
19	Australia	452829
20	India	449982
21	Turkey	421947
22	Ukraine	405082
23	Mongolia	399240
24	Viet Nam	387197
25	South Africa	356411

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	19949
2	CHINANET-GD	2077
3	CHINANET-JS	375
4	VNPT-VNNIC-VN	308
5	CCCH3-4	195
6	UNICOM-SD	185
7	WASU	182
8	UNICOM-GD	172
9	WASU-BB	166
10	CBC-CM-4	157
11	KORNET-KR	152
12	CHINANET-HN	141
13	UNICOM-CN	127
14	UNICOM-ZJ	118
15	TurkTelekom	114
16	TR-TELEKOM-20051027	109
17	IP2000-ADSL-BAS	106
18	AR-TEAR7-LACNIC	104
19	RIMA	95
20	UNICOM-BJ	94
21	TR-TELEKOM-20040920	92
22	CHINANET-ZJ-HZ	92
23	CMNET	87
24	JUMPSTART-5	85
25	CHINANET-SN	82

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	2852822
2	ALISOFT	25145
3	IL-GOLDENLINES-20020705	21208
4	UNICOM-GD	19673
5	004.027.547/0001-31	19081
6	CHINANET-GD	18414
7	WINDSTREAM	18411
8	IR-DCC-20041125	17435
9	WHOLESALEINTERNET-2	16764
10	AVISONET	16710
11	MAXISNET-HSDPA	16330
12	CHINANET-SC	15183
13	EC-ALGU-LACNIC	13083
14	ALIBABA-US-CDN	12802
15	SOLUSINDO-ID	12343
16	LINKNET-ID	11546
17	CLIO-BROADBAND	11376
18	VOCUS-AS-AP	11262
19	TR-TELEKOM-20051027	10379
20	KORNET-KR	10269
21	SUNINFO-MDC	10245
22	CHINANET-JS	10011
23	G-Mobile	9995
24	DEPKEU-ID	9838
25	XOXO-BLK-3	9725

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	84967684
2	ALISOFT	1009991
3	IL-GOLDENLINES-20020705	852315
4	004.027.547/0001-31	771194
5	WINDSTREAM	743076
6	CHINANET-GD	740985
7	IR-DCC-20041125	699163
8	WHOLESALEINTERNET-2	676651
9	AVISONET	674646
10	MAXISNET-HSDPA	657956
11	CHINANET-SC	611431
12	EC-ALGU-LACNIC	524914
13	ALIBABA-US-CDN	514075
14	SOLUSINDO-ID	492405
15	LINKNET-ID	463926
16	CLIO-BROADBAND	457165
17	VOCUS-AS-AP	452829
18	TR-TELEKOM-20051027	416280
19	SUNINFO-MDC	413333
20	KORNET-KR	410331
21	CHINANET-JS	404185
22	G-Mobile	399240
23	DEPKEU-ID	397854
24	XOXO-BLK-3	391415
25	RITELE	371644