Botnet Statistics for April 2016

detection period: 2016-04-01 00:00 - 2016-04-30 23:59 UTC
total number of suspected botnet IPs: 41877
number of blocked spams: 203234
recipient count of blocked spams: 1244181

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	18165
2	India	4063
3	Taiwan	4038
4	Viet Nam	3838
5	Mexico	1543
6	Iran	1268
7	Indonesia	651
8	Brazil	649
9	Pakistan	619
10	Turkey	446
11	Colombia	420
12	United States	337
13	Bangladesh	278
14	Peru	227
15	Tunisia	226
16	Romania	225
17	Philippines	211
18	Arab Emirates	206
19	Ecuador	198
20	Poland	153
21	Thailand	152
22	Russian Federation	141
23	Bolivia	141
24	Venezuela	138
25	Italy	134

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Poland	104877
2	United States	31225
3	Taiwan	22746
4	Germany	18907
5	China	14363
6	Thailand	3101
7	Turkey	1612
8	Colombia	1350
9	Mexico	797
10	Occupied Palestinian Territory	483
11	Bolivia	462
12	Macau	340
13	Hong Kong	334
14	France	330
15	Chile	278
16	Viet Nam	272
17	Argentina	250
18	Russian Federation	222
19	United Kingdom	222
20	Indonesia	168
21	Ecuador	141
22	Norway	138
23	Uruguay	128
24	Republic Of Moldova	125
25	Israel	113

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	450885
2	China	316971
3	Poland	104997
4	Thailand	83424
5	United States	52317
6	Turkey	45513
7	Colombia	37195
8	Mexico	21642
9	Germany	19957
10	Occupied Palestinian Territory	13063
11	Bolivia	12176
12	Macau	9050
13	Hong Kong	8899
14	France	8795
15	Chile	7667
16	Viet Nam	7088
17	Argentina	6926
18	United Kingdom	6392
19	Indonesia	4554
20	Russian Federation	4145
21	Ecuador	3793
22	Uruguay	3673
23	Republic Of Moldova	3575
24	Israel	3220
25	Norway	3018

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CNCITYNET	4760
2	WASU	3193
3	HINET-NET	2783
4	VNPT-VNNIC-VN	1904
5	UNICOM-ZJ	1898
6	SONET-NET	1121
7	UNICOM-JS	1096
8	CMNET	925
9	CHINANET-JS	857
10	BB-Multiplay	845
11	MX-USCV4-LACNIC	779
12	WASU-BB	730
13	CHINANET-SD	693
14	BHARTI-IN	503
15	PTCLBB-PK	454
16	VIETEL-VNNIC-VN	422
17	CHINANET-HB	406
18	CHINANET-AH	406
19	CHINANET-GD	403
20	VIETEL-VN	375
21	ETC-VNNIC-VN	327
22	FPT-VN	317
23	CHINANET-YN	314
24	UNICOM-BJ	257
25	CHINANET-ZJ-JH	236

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	PL-FUFO-7	104873
2	MSFT	29750
3	SCHLUND-CUSTOMERS	18872
4	SEEDNET-NET	12150
5	HINET-NET	6108
6	ALISOFT	3889
7	CAT	2254
8	SONET-NET	1928
9	TencentCloud	1446
10	Fiber-Server-Internet-Teknolojileri	948
11	HICHINA	912
12	TANET-BNETA	869
13	NCICNET-NET	800
14	tonghnetwork	791
15	CO-FLSA1-LACNIC	783
16	CHINANET-AH	718
17	CHINANET-SD	713
18	CloudVsp	687
19	JUMPSTART-1	643
20	TR-TRDESERVER-20150324	629
21	CHINANET-GD	612
22	JINET-TH	600
23	CHINANET-HB	581
24	CHINANET-FJ	538
25	MX-USCV4-LACNIC	493

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	SEEDNET-NET	288120
2	ALISOFT	107209
3	PL-FUFO-7	104873
4	HINET-NET	86902
5	CAT	60757
6	TencentCloud	39828
7	MSFT	29750
8	Fiber-Server-Internet-Teknolojileri	26518
9	NCICNET-NET	24770
10	HICHINA	24589
11	TANET-BNETA	23866
12	tonghnetwork	21903
13	CO-FLSA1-LACNIC	21491
14	SCHLUND-CUSTOMERS	18872
15	CloudVsp	18549
16	TR-TRDESERVER-20150324	18035
17	JINET-TH	16178
18	CHINANET-GD	15762
19	CHINANET-FJ	14091
20	MX-USCV4-LACNIC	13218
21	PALTEL-DSL	13063
22	TANET	12760
23	BO-ACBS1-LACNIC	12176
24	CO-ESES-LACNIC	8945
25	YITAIFENG	8436