Botnet Statistics for April 2012

detection period: 2012-04-01 00:00 - 2012-04-30 23:59 UTC
total number of suspected botnet IPs: 47077
number of blocked spams: 5005723
recipient count of blocked spams: 173653738

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	15194
2	Taiwan	4562
3	India	3629
4	Viet Nam	2445
5	United States	1747
6	South Korea	1591
7	Pakistan	1490
8	Brazil	1309
9	Russian Federation	1186
10	Poland	795
11	Indonesia	606
12	Argentina	568
13	Peru	540
14	Kazakhstan	538
15	Iran	484
16	Turkey	456
17	Romania	454
18	Colombia	425
19	Belarus	416
20	Ukraine	414
21	Spain	403
22	Saudi Arabia	347
23	Germany	326
24	Chile	300
25	European Union	245

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1178396
2	Brazil	607478
3	United States	555437
4	Russian Federation	256852
5	South Korea	215805
6	India	190031
7	Indonesia	134454
8	Taiwan	128789
9	France	123826
10	Ukraine	102308
11	Iran	82034
12	Argentina	81817
13	Hong Kong	75572
14	United Kingdom	72112
15	Netherlands	70884
16	Viet Nam	67447
17	Germany	61590
18	Colombia	57386
19	Canada	56738
20	Poland	48159
21	Serbia	46556
22	Mexico	46521
23	Philippines	44376
24	Thailand	43067
25	Australia	34198

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	40264131
2	Brazil	21244311
3	United States	19423767
4	Russian Federation	8968716
5	South Korea	7543765
6	India	6633194
7	Indonesia	4699566
8	France	4332753
9	Taiwan	4153743
10	Ukraine	3577846
11	Iran	2868263
12	Argentina	2861230
13	Hong Kong	2642842
14	United Kingdom	2521273
15	Netherlands	2469775
16	Viet Nam	2359201
17	Germany	2135424
18	Colombia	2004568
19	Canada	1976270
20	Poland	1676056
21	Serbia	1628678
22	Mexico	1626973
23	Philippines	1552009
24	Thailand	1504594
25	Australia	1197093

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	4277
2	CHINANET-GD	3995
3	UNICOM-GD	3715
4	VNPT-VNNIC-VN	1499
5	BSNLNET	1261
6	PTCL	1171
7	CHINANET-FJ	871
8	CRTC	805
9	UNICOM-HA	784
10	KORNET-KR	762
11	ZTWL	491
12	UNICOM-LN	485
13	UNICOM-HB	406
14	BHARTI-IN	375
15	CHINANET-HB	362
16	PHN-67-221-46-0-23	348
17	MTNLISP	348
18	CHINANET-JS	345
19	RCOM	312
20	VIETEL-VNNIC-VN	285
21	BY-BELPAK-20091210	282
22	UNICOM-BJ	221
23	AR-TEAR7-LACNIC	217
24	Xpeed-KR	216
25	000.065.376/0002-65	213

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	003.420.926/0002-05	117230
2	CHINANET-JS	111126
3	HINET-NET	90577
4	000.065.376/0002-65	89703
5	033.530.486/0001-29	88297
6	002.558.157/0001-62	83980
7	CHINANET-GD	80480
8	CHINANET-GX	75241
9	KORNET-KR	71280
10	KRNIC-KR	67332
11	UNICOM-JL	62515
12	WEBAIRINTERNET8	61203
13	OVH	54061
14	UNICOM-SD	45912
15	TATACOMM-IN	43785
16	CHINANET-GS	42907
17	UNICOM-GD	42131
18	CHINANET-HB	41595
19	CHINANET-SC	38181
20	CHINANET-ZJ	37779
21	TELKOMNET	36483
22	002.558.134/0001-58	36284
23	004.027.547/0001-31	34079
24	CHINANET-AH	33163
25	UNICOM-BJ	32616

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	003.420.926/0002-05	4102000
2	CHINANET-JS	3889112
3	000.065.376/0002-65	3138235
4	033.530.486/0001-29	3087543
5	002.558.157/0001-62	2937140
6	HINET-NET	2817159
7	CHINANET-GX	2631376
8	CHINANET-GD	2506734
9	KORNET-KR	2492709
10	KRNIC-KR	2354917
11	UNICOM-JL	2185956
12	WEBAIRINTERNET8	2140144
13	OVH	1891893
14	UNICOM-SD	1597919
15	TATACOMM-IN	1532102
16	CHINANET-GS	1501339
17	CHINANET-HB	1453026
18	CHINANET-SC	1336518
19	CHINANET-ZJ	1321726
20	TELKOMNET	1273363
21	002.558.134/0001-58	1270098
22	004.027.547/0001-31	1191499
23	CHINANET-AH	1159905
24	UNICOM-BJ	1141063
25	UNICOM-LN	1057619