Botnet Statistics for March 2016

detection period: 2016-03-01 00:00 - 2016-03-31 23:59 UTC
total number of suspected botnet IPs: 38000
number of blocked spams: 536696
recipient count of blocked spams: 2668009

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	16174
2	Taiwan	7852
3	Viet Nam	2917
4	India	2692
5	Brazil	626
6	Mexico	623
7	Turkey	569
8	Indonesia	497
9	Iran	478
10	Pakistan	416
11	United States	385
12	Russian Federation	221
13	Colombia	216
14	Bangladesh	201
15	Romania	169
16	Ukraine	160
17	Thailand	153
18	Philippines	153
19	Tunisia	140
20	Ecuador	129
21	Arab Emirates	126
22	Peru	116
23	Poland	110
24	Argentina	105
25	Kenya	96

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	285518
2	Poland	123520
3	Taiwan	42270
4	Singapore	29838
5	China	20409
6	Thailand	6676
7	France	3707
8	Mexico	3054
9	Hong Kong	2562
10	Uruguay	1911
11	Bolivia	1813
12	Indonesia	1712
13	Lebanon	1566
14	Argentina	1517
15	Viet Nam	1213
16	Turkey	921
17	Occupied Palestinian Territory	794
18	Russian Federation	666
19	Saudi Arabia	653
20	Macau	633
21	Honduras	624
22	Netherlands	607
23	Germany	539
24	Canada	477
25	Colombia	427

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	841031
2	China	382486
3	United States	364675
4	Thailand	175567
5	Poland	123520
6	France	96837
7	Mexico	79801
8	Hong Kong	67076
9	Uruguay	48337
10	Indonesia	48183
11	Bolivia	47474
12	Lebanon	41527
13	Argentina	39831
14	Viet Nam	32136
15	Singapore	30205
16	Turkey	24244
17	Occupied Palestinian Territory	20049
18	Russian Federation	18492
19	Macau	16696
20	Saudi Arabia	16690
21	Netherlands	15830
22	Honduras	15767
23	Germany	12801
24	Canada	12531
25	Pakistan	11085

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	5215
2	WASU	2753
3	CHINANET-AH	2476
4	UNICOM-ZJ	2251
5	VNPT-VNNIC-VN	1491
6	CHINANET-JS	1383
7	CMNET	1295
8	WASU-BB	1225
9	UNICOM-AH	1119
10	NCICNET-NET	1112
11	SONET-NET	877
12	BSNLNET	756
13	UNICOM-JS	590
14	CHINANET-GD	528
15	HINET	461
16	CHINANET-HB	327
17	CHINANET-SD	324
18	VIETEL-VNNIC-VN	311
19	VIETEL-VN	311
20	BHARTI-IN	310
21	PTCLBB-PK	306
22	UNICOM-BJ	279
23	ETC-VNNIC-VN	253
24	MX-USCV4-LACNIC	251
25	FPT-VN	238

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	MSFT	312239
2	PL-FUFO-7	119218
3	HINET-NET	16205
4	SEEDNET-NET	9730
5	NCICNET-NET	7229
6	ALISOFT	5414
7	CHINANET-AH	4592
8	EURONET-ISP	4302
9	SONET-NET	3292
10	CAT	3049
11	MX-USCV4-LACNIC	2492
12	TANET-BNETA	2290
13	JINET-TH	2187
14	UY-ANTA-LACNIC	1911
15	LBDM-LBCI0001	1566
16	INU-VPS02	1499
17	tonghnetwork	1412
18	AR-TEAR7-LACNIC	1395
19	TencentCloud	1372
20	UNICOM-AH	1339
21	BO-ACBS1-LACNIC	1233
22	HICHINA	1161
23	SAVVIS	1137
24	HINET	1118
25	VNPT-VNNIC-VN	1075

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	MSFT	312246
2	SEEDNET-NET	295060
3	HINET-NET	246371
4	NCICNET-NET	157435
5	ALISOFT	140647
6	PL-FUFO-7	119218
7	CAT	80070
8	MX-USCV4-LACNIC	64651
9	TANET-BNETA	61124
10	JINET-TH	57348
11	UY-ANTA-LACNIC	48337
12	LBDM-LBCI0001	41527
13	INU-VPS02	39407
14	tonghnetwork	37205
15	AR-TEAR7-LACNIC	36397
16	TencentCloud	35822
17	BO-ACBS1-LACNIC	32370
18	CHINANET-AH	31866
19	HICHINA	30487
20	SAVVIS	29644
21	VNPT-VNNIC-VN	28385
22	INU-VPS03	27173
23	NEWWORLDTEL-AS-AP	26740
24	NICSL-HK	25931
25	CHINANET-HN	24763