Custom Search

Saturday, January 5, 2013

Botnet Statistics for the year of 2012

detection period: 2012-01-01 00:00 - 2012-12-31 23:59 UTC
total number of suspected botnet IPs: 487145
number of blocked spams: 51254364
recipient count of blocked spams: 1719754924
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China158154
2Taiwan60135
3India36298
4Viet Nam17675
5United States15516
6Russian Federation14121
7Brazil13094
8Indonesia12655
9Pakistan11649
10South Korea10791
11Peru8424
12Poland7564
13Argentina6997
14Iran5832
15Kazakhstan5533
16Romania5450
17Colombia5346
18Belarus5004
19Spain4797
20Ukraine4728
21Germany4124
22Chile3782
23Saudi Arabia3714
24Mexico3250
25Italy3081

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China10723842
2Brazil6475326
3United States4709454
4Russian Federation3058489
5Taiwan2836443
6India1693333
7South Korea1516794
8Germany1261333
9France1203345
10Ukraine1167266
11United Kingdom1095941
12Indonesia955286
13Netherlands893971
14Canada807871
15Iran712989
16Colombia617621
17Poland605354
18Mexico604618
19Viet Nam477857
20Thailand452145
21Hong Kong437928
22Italy432666
23Argentina408383
24Czech Republic388182
25Chile339323

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1China324517461
2Brazil224618366
3United States163697741
4Russian Federation106151014
5Taiwan87543132
6India58587982
7South Korea52864340
8Germany43863941
9France41593294
10Ukraine40538083
11United Kingdom38231151
12Indonesia33226920
13Netherlands31133527
14Canada28208257
15Iran24887805
16Colombia21424009
17Poland21103677
18Mexico21098206
19Viet Nam16566650
20Thailand15511821
21Hong Kong15243844
22Argentina14176256
23Czech Republic13438683
24Italy13391899
25Romania11695701

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET57931
2CHINANET-GD55030
3BSNLNET12742
4VNPT-VNNIC-VN10890
5UNICOM-GD9547
6UNICOM-LN9279
7PTCL9023
8UNICOM-HA6327
9CRTC6218
10CHINANET-FJ5482
11CHINANET-HA5255
12CHINANET-JS5217
13MAINT-CHINANET-HA5211
14ZTWL4810
15UNICOM-HN4791
16MTNLISP4648
17KORNET-KR4247
18CHINANET-HB3444
19BY-BELPAK-200912103387
20RCOM3341
21BHARTI-IN3330
22AR-TEAR7-LACNIC3109
23CTTNET3036
24TELKOMNET2929
25PE-TPSA-LACNIC2674

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

RankNetwork# of blocked spams
1HINET-NET2465689
2CHINANET-GD1556936
3003.420.926/0002-051203000
4000.065.376/0002-65913327
5CHINANET-JS822815
6002.558.157/0001-62774904
7033.530.486/0001-29747928
8UNICOM-GD561841
9CHINANET-ZJ523900
10KRNIC-KR495802
11UNICOM-SD449770
12KORNET-KR447305
13CMNET446231
14004.027.547/0001-31406994
15OVH401033
16CHINANET-GX374882
17UNICOM-JL366863
18002.558.134/0001-58338848
19TATACOMM-IN293656
20CHINANET-SH284288
21TELKOMNET271179
22CO-ACSA-LACNIC262220
23CHINANET-SC250517
24MX-USCV4-LACNIC242889
25001.402.946/0001-47241763

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

RankNetworkrecipient count of blocked spams
1HINET-NET74614201
2003.420.926/0002-0541770655
3000.065.376/0002-6531758389
4CHINANET-JS28277933
5002.558.157/0001-6227031414
6033.530.486/0001-2926032842
7CHINANET-GD24954458
8CHINANET-ZJ18151332
9KRNIC-KR17342381
10KORNET-KR15582974
11UNICOM-SD15338052
12CMNET15173656
13004.027.547/0001-3113984247
14OVH13881816
15CHINANET-GX13086841
16UNICOM-JL12765919
17002.558.134/0001-5811758190
18TATACOMM-IN10083715
19CHINANET-SH9877977
20TELKOMNET9398306
21CO-ACSA-LACNIC9083353
22CHINANET-SC8712840
23MX-USCV4-LACNIC8474271
24001.402.946/0001-478333563
25CHINANET-AH8098823

No comments:

Post a Comment