Botnet Statistics for June 2012

The number of bots within China rose to 41K in June, accounted for more than 60% of zombie computers detected during the same period.

detection period: 2012-06-01 00:00 - 2012-06-30 23:59 UTC
total number of suspected botnet IPs: 66745
number of blocked spams: 5075176
recipient count of blocked spams: 163663903

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	41251
2	India	3464
3	Taiwan	2283
4	Viet Nam	1974
5	United States	1495
6	South Korea	1391
7	Brazil	1306
8	Pakistan	1264
9	Russian Federation	888
10	Argentina	586
11	Indonesia	523
12	Iran	482
13	Peru	474
14	Poland	463
15	Kazakhstan	410
16	Ukraine	382
17	Romania	372
18	Colombia	366
19	Saudi Arabia	332
20	Turkey	310
21	Belarus	305
22	Germany	290
23	Japan	277
24	Mexico	269
25	Chile	256

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1082021
2	Brazil	675253
3	United States	435919
4	Russian Federation	296533
5	India	167287
6	South Korea	163260
7	France	158795
8	Netherlands	142125
9	Ukraine	119156
10	Indonesia	101780
11	United Kingdom	95392
12	Taiwan	91562
13	Germany	86408
14	Thailand	79524
15	Canada	77345
16	Colombia	73457
17	Iran	68966
18	Mexico	67813
19	Poland	49648
20	Italy	47248
21	Viet Nam	45428
22	Romania	39893
23	Czech Republic	39579
24	Hong Kong	39170
25	Japan	37510

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	28058720
2	Brazil	22617755
3	United States	14832142
4	Russian Federation	9979707
5	India	5661346
6	South Korea	5617294
7	France	5411408
8	Netherlands	4933379
9	Ukraine	4025809
10	Indonesia	3460865
11	United Kingdom	3304926
12	Germany	2984270
13	Taiwan	2936235
14	Canada	2699540
15	Thailand	2626568
16	Colombia	2478048
17	Iran	2410774
18	Mexico	2350766
19	Poland	1705976
20	Italy	1631567
21	Viet Nam	1515108
22	Romania	1389773
23	Hong Kong	1320665
24	Czech Republic	1319704
25	Japan	1290480

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	17067
2	UNICOM-GD	4933
3	MAINT-CHINANET-HA	3338
4	UNICOM-LN	2307
5	HINET-NET	2084
6	CHINANET-HA	1884
7	UNICOM-HN	1557
8	CRTC	1208
9	VNPT-VNNIC-VN	1206
10	CHINANET-SH	1143
11	CHINANET-FJ	1128
12	BSNLNET	1120
13	PTCL	923
14	UNICOM-HB	709
15	CHINANET-JS	588
16	CHINANET-HB	530
17	ZTWL	493
18	KORNET-KR	471
19	UNICOM-BJ	374
20	BHARTI-IN	322
21	MTNLISP	301
22	RCOM	289
23	Xpeed-KR	234
24	broadNnet-KR	219
25	UNICOM-SD	218

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	CHINANET-GD	280696
2	000.065.376/0002-65	128770
3	003.420.926/0002-05	103932
4	002.558.157/0001-62	98639
5	CHINANET-JS	75672
6	033.530.486/0001-29	62019
7	HINET-NET	61614
8	UNICOM-GD	57924
9	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	56753
10	KORNET-KR	55507
11	CHINANET-ZJ	48173
12	004.027.547/0001-31	40264
13	TELKOMNET	39674
14	002.558.134/0001-58	37854
15	001.402.946/0001-47	36880
16	TELEHOUSE	36859
17	UNICOM-SD	34941
18	KRNIC-KR	33840
19	071.208.516/0001-74	31558
20	OVH	29927
21	MX-USCV4-LACNIC	29037
22	RACKS-8-NET-4	29032
23	CO-ACSA-LACNIC	28969
24	UNICOM-HA	27925
25	CMNET	27739

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	000.065.376/0002-65	4430160
2	CHINANET-GD	4073749
3	003.420.926/0002-05	3487478
4	002.558.157/0001-62	3402786
5	CHINANET-JS	2460032
6	033.530.486/0001-29	2082461
7	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	1987581
8	HINET-NET	1897122
9	KORNET-KR	1895346
10	CHINANET-ZJ	1629580
11	TELKOMNET	1342189
12	004.027.547/0001-31	1318926
13	002.558.134/0001-58	1293811
14	TELEHOUSE	1289573
15	001.402.946/0001-47	1208779
16	KRNIC-KR	1181280
17	UNICOM-SD	1078409
18	OVH	1037789
19	071.208.516/0001-74	1027805
20	MX-USCV4-LACNIC	1008322
21	RACKS-8-NET-4	995870
22	CO-ACSA-LACNIC	980753
23	VLAN2618-OWNIT-SE	953343
24	BHARTI-IN	942456
25	UNICOM-LN	875969