Custom Search

Sunday, June 3, 2012

Botnet Statistics for May 2012

The most notable number for May 2012 is the number of bots in China. It was around 15K in April, while in May it rose to 35K.

detection period: 2012-05-01 00:00 - 2012-05-31 23:59 UTC
total number of suspected botnet IPs: 70827
number of blocked spams: 4787051
recipient count of blocked spams: 162742325

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China35178
2India4848
3Taiwan4674
4Viet Nam2787
5United States1782
6South Korea1699
7Brazil1669
8Pakistan1438
9Russian Federation1274
10Argentina783
11Poland736
12Iran701
13Kazakhstan685
14Peru681
15Indonesia656
16Romania531
17Colombia515
18Ukraine497
19Belarus480
20Saudi Arabia476
21Turkey392
22Spain389
23Chile370
24Germany368
25Mexico349

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1190640
2Brazil601363
3United States388496
4Russian Federation264689
5India242710
6South Korea182054
7Taiwan141587
8Indonesia116117
9Ukraine86526
10France80072
11Hong Kong74955
12United Kingdom74033
13Iran69602
14Germany68474
15Viet Nam61960
16Netherlands60289
17Canada60060
18Colombia57623
19Mexico53862
20Philippines53290
21Poland45940
22Thailand38479
23Czech Republic36444
24Sweden35381
25Italy34829

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1China37522562
2Brazil21014319
3United States13571792
4Russian Federation9247015
5India8480726
6South Korea6362839
7Taiwan4533887
8Indonesia4054786
9Ukraine3025572
10France2796609
11Hong Kong2615644
12United Kingdom2588974
13Iran2431849
14Germany2391009
15Viet Nam2160500
16Netherlands2106900
17Canada2097958
18Colombia2014206
19Mexico1882582
20Philippines1864537
21Poland1604806
22Thailand1341954
23Czech Republic1272907
24Sweden1238168
25Italy1217491

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD13522
2UNICOM-GD4752
3HINET-NET4429
4MAINT-CHINANET-HA4077
5UNICOM-HN2523
6CHINANET-HA2454
7VNPT-VNNIC-VN1666
8BSNLNET1631
9CHINANET-FJ1069
10PTCL1049
11CRTC863
12UNICOM-LN779
13KORNET-KR589
14BHARTI-IN533
15UNICOM-HB513
16CHINANET-HB488
17ZTWL462
18MTNLISP420
19CHINANET-JS417
20RCOM367
21Xpeed-KR333
22PHN-67-221-46-0-23322
23002.558.134/0001-58309
24AR-TEAR7-LACNIC297
25VIETEL-VNNIC-VN295

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

RankNetwork# of blocked spams
1CHINANET-GD175603
2HINET-NET117603
3003.420.926/0002-05104355
4CHINANET-JS101428
5002.558.157/0001-6297393
6KRNIC-KR79747
7000.065.376/0002-6576368
8033.530.486/0001-2967978
9UNICOM-SD59012
10CHINANET-ZJ53454
11TATACOMM-IN52342
12002.558.134/0001-5851965
13UNICOM-GD46693
14KORNET-KR45932
15004.027.547/0001-3143453
16CHINANET-GX41153
17CHINANET-SH40847
18071.208.516/0001-7436699
19CHINANET-GZ34750
20UNICOM-LN34504
21TELKOMNET34244
22CHINANET-SC30858
23CHINANET-FJ29046
24BSNLNET28231
25VE-CSVE-LACNIC27695

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

RankNetworkrecipient count of blocked spams
1HINET-NET3696471
2003.420.926/0002-053650979
3CHINANET-JS3542424
4002.558.157/0001-623404559
5CHINANET-GD2925918
6KRNIC-KR2789282
7000.065.376/0002-652672037
8033.530.486/0001-292376316
9UNICOM-SD2055845
10CHINANET-ZJ1868818
11TATACOMM-IN1828497
12002.558.134/0001-581813074
13KORNET-KR1605625
14004.027.547/0001-311516703
15CHINANET-GX1440981
16CHINANET-SH1426689
17071.208.516/0001-741281122
18CHINANET-GZ1214926
19UNICOM-LN1206233
20TELKOMNET1195822
21CHINANET-SC1077800
22CHINANET-FJ1017435
23BSNLNET987238
24VE-CSVE-LACNIC968313
25IPG959635

No comments:

Post a Comment