Botnet Statistics for the year of 2010

My detection systems have been working throughout 2010. It would be interesting to summarize my data for the whole year. Because some ip blocks are missing from my network mapping table, around 4000 botnet IPs could not be mapped to the networks they belong to. I am a bit lazy recently, so I decide not to amend the mapping table this time, and release the yearly statistics without the top 25 networks.

In terms of number of bots, I expected China or Taiwan to take the crown, but to my surprise, India tops the list by a large margin. The top 6 countries are India, China, Brazil, Taiwan, Argentina, and Russian Federation. All but Argentina have been regulars on my botnet charts. Argentina has been successfully staying out of my daily chart for some time.

My statistics is by no means complete. It just describes the bots I found with the particular detection mechanism I use, which are fake open relays. Botnet detection with other means may come out with vastly different results.

detection period: 2010-01-01 00:00 - 2010-12-31 23:59 UTC
total number of suspected botnet IPs: 414398
number of blocked spams: 79256717
recipient count of blocked spams: 2328674624

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	152502
2	China	83429
3	Brazil	43875
4	Taiwan	32981
5	Argentina	25599
6	Russian Federation	15658
7	Thailand	12348
8	United States	6342
9	Ukraine	5434
10	Uruguay	3883
11	Mexico	3759
12	Ethiopia	2376
13	Chile	2069
14	Belarus	1699
15	Germany	1621
16	South Korea	1396
17	Kazakhstan	1357
18	Colombia	1353
19	Indonesia	1264
20	Algeria	1175
21	France	1057
22	Japan	999
23	Hong Kong	718
24	Italy	644
25	Spain	593

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	19216036
2	Taiwan	10256800
3	Brazil	8999024
4	United States	5823431
5	India	4072434
6	Russian Federation	3738420
7	Colombia	2414074
8	Thailand	1928087
9	Indonesia	1578363
10	Argentina	1351358
11	South Korea	1160235
12	France	1153097
13	Germany	1133384
14	Poland	1110894
15	Ukraine	964565
16	Italy	816715
17	United Kingdom	590121
18	Malaysia	573573
19	Mexico	530913
20	Iran	465483
21	Philippines	460976
22	Czech Republic	460585
23	Chile	451506
24	Saudi Arabia	410480
25	Turkey	375195

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	China	454482101
2	Brazil	291702073
3	Taiwan	253757202
4	United States	188760788
5	India	132973727
6	Russian Federation	123071994
7	Colombia	82127701
8	Thailand	63803287
9	Indonesia	49067908
10	Argentina	44582228
11	Germany	38439324
12	France	38253795
13	South Korea	37107661
14	Poland	35352486
15	Ukraine	31918584
16	Italy	27412040
17	United Kingdom	18343668
18	Mexico	17672072
19	Philippines	15613015
20	Iran	15022629
21	Chile	14702774
22	Czech Republic	14437154
23	Saudi Arabia	13688921
24	Malaysia	12190921
25	Hong Kong	11933163