Custom Search

Saturday, February 5, 2011

Botnet Statistics for January 2011

As my statistics are posted in fixed format, I often copy the post of the previous day/month into a new post, and change only the numbers and charts. Today, when I tried to compose the first monthly statistics for 2011, I found out that the ending time of all my monthly detection periods last year had been incorrectly written as "2001." It took me some time to fix this for all the 12 monthly statistics reports of 2010.

detection period: 2011-01-01 00:00 - 2011-01-31 23:59 UTC
total number of suspected botnet IPs: 26043
number of blocked spams: 8502516
recipient count of blocked spams: 272619859

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India8112
2China6055
3Taiwan4510
4Brazil1243
5Thailand1183
6Russian Federation1041
7Argentina591
8Ukraine499
9United States272
10Kazakhstan255
11South Korea186
12Indonesia171
13Belarus165
14Uruguay123
15Ethiopia118
16Colombia101
17Germany95
18Chile89
19Mexico71
20Bulgaria70
21Algeria64
22France59
23Poland57
24Italy56
25United Kingdom48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1921299
2Brazil986501
3United States719760
4Russian Federation418702
5India366314
6Taiwan316951
7Colombia292063
8Indonesia246039
9France243892
10Thailand210108
11South Korea200519
12Poland138745
13Italy134871
14Germany123351
15Ukraine122822
16Argentina113744
17Chile96375
18Spain92300
19United Kingdom80544
20Saudi Arabia75205
21Viet Nam71471
22Mexico69701
23Venezuela68870
24Iran65737
25Philippines65331

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1China56257413
2Brazil32745170
3United States24733369
4Russian Federation13557738
5India11873553
6Colombia9752767
7France8180927
8Indonesia7983641
9Taiwan7735627
10Thailand7019603
11South Korea6676711
12Italy4586861
13Poland4371317
14Germany4102560
15Ukraine4058779
16Argentina3874875
17Chile3331926
18Spain3170035
19United Kingdom2749260
20Saudi Arabia2505872
21Mexico2375771
22Viet Nam2357679
23Venezuela2298095
24Iran2210654
25Serbia2138121

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1BSNLNET5656
2HINET-NET4390
3CHINANET-GD3190
4UNICOM-BJ1357
5TATACOMM-IN801
6RCOM680
7AR-TEAR7-LACNIC394
8HATHWAY-NET343
9TRUENET335
10TRUEBB-NET335
11UKRTELNET327
12002.558.134/0001-58298
13ALLIANCEBROADBAND277
14CAT-BB-NET256
15000.065.376/0002-65191
16CHINANET-ZJ-WZ184
17002.449.992/0001-64139
18BY-BELPAK-20091210134
19CHINANET-FJ126
20UNICOM-SD125
21UY-ANTA-LACNIC123
22ETHIONET117
23PACENET107
24040.432.544/0001-4798
25CHINANET-JS96

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

RankNetwork# of blocked spams
1CHINANET-ZJ-WZ283530
2HINET-NET247354
3003.420.926/0002-05207966
4CO-ACSA-LACNIC171170
5CHINANET-JS150146
6UNICOM-SD146873
7033.530.486/0001-29132630
8OVH132178
9CHINANET-GD130373
10004.027.547/0001-31101017
11KORNET-KR91980
12BSNLNET80261
13SECUREDSERVERS79180
14CHINANET-ZJ74408
15002.558.134/0001-5870578
16076.535.764/0326-9066595
17VNPT-VNNIC-VN65777
18TELKOMNET65556
19BHARTI-IN61251
20RCOM59878
21CMNET59585
22RACKS-8-NET-457132
23UNICOM-TJ55785
24TFN-NET54181
25UNICOM-BJ53801

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

RankNetworkrecipient count of blocked spams
1003.420.926/0002-056854867
2HINET-NET6392100
3CO-ACSA-LACNIC5734943
4CHINANET-JS5051174
5UNICOM-SD5013033
6OVH4613826
7033.530.486/0001-294367479
8CHINANET-ZJ-WZ4255417
9CHINANET-GD3750575
10004.027.547/0001-313417753
11KORNET-KR2964644
12SECUREDSERVERS2768210
13BSNLNET2547861
14002.558.134/0001-582388548
15076.535.764/0326-902172510
16VNPT-VNNIC-VN2161018
17TELKOMNET2089360
18CMNET2056447
19BHARTI-IN2050526
20RACKS-8-NET-41997711
21UNICOM-TJ1940759
22RCOM1812827
23000.065.376/0002-651679568
24CHINANET-ZJ1570325
25TATACOMM-IN1525766

No comments:

Post a Comment