Custom Search

Sunday, September 6, 2015

Botnet Statistics for August 2015

detection period: 2015-08-01 00:00 - 2015-08-31 23:59 UTC
total number of suspected botnet IPs: 38727
number of blocked spams: 1856497
recipient count of blocked spams: 41110718

The vps I use for data file backup disappeared in August, so I lost about 2/3 of the data needed for calculating number of blocked spams and recipient count of blocked spams. That is the reason why they seem to be much less this month.

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan20897
2China13583
3Viet Nam1585
4United States323
5Brazil282
6India238
7Russian Federation208
8Ukraine203
9Turkey102
10Argentina94
11Kazakhstan89
12Indonesia84
13South Korea70
14Mexico46
15Azerbaijan43
16Thailand38
17Germany37
18Colombia37
19United Kingdom32
20Chile32
21Netherlands31
22Israel31
23Hong Kong31
24Poland27
25Bulgaria27

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1Taiwan1124640
2Germany311143
3United States287798
4Brazil101258
5China10970
6Russian Federation2304
7Indonesia2129
8Colombia1884
9Chile1578
10Thailand1144
11Ukraine1019
12Italy1000
13India771
14Peru709
15Australia683
16Jordan643
17Morocco607
18Argentina572
19Kyrgyzstan555
20European Union515
21Kazakhstan510
22Poland487
23Venezuela454
24Hong Kong428
25Mexico270

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1Taiwan33463988
2United States4669315
3Brazil1660114
4Germany391868
5China319269
6Russian Federation67380
7Indonesia62168
8Colombia55358
9Chile46486
10Thailand33094
11Ukraine30019
12Italy29579
13India22640
14Peru20684
15Australia20069
16Jordan18065
17Morocco17825
18Argentina16412
19Kyrgyzstan16241
20European Union15062
21Kazakhstan14985
22Poland14610
23Venezuela13620
24Hong Kong12785
25Mexico8019

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET20835
2UNICOM-ZJ2434
3WASU2245
4WASU-BB1978
5CHINANET-GD1837
6CHINANET-HB1037
7VNPT-VNNIC-VN826
8CHINANET-JS554
9CHINANET-ZJ-JH507
10CHINANET-AH358
11CHINANET-HN331
12UNICOM-BJ282
13CHINANET-SC243
14CHINANET-SX195
15FPT-VN182
16CHINANET-LN177
17VIETEL-VN165
18CHINANET-YN161
19CMNET134
20VIETEL-VNNIC-VN126
21CHINANET-SH111
22UNICOM-SD110
23ETC-VNNIC-VN108
24CHINANET-SN102
25CHINANET-FJ90

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

RankNetwork# of blocked spams
1HINET-NET1124630
2DE-COMSITEC310513
3TWTC-NETBLK-11275548
4005.200.140/0001-2777196
5010.431.131/0001-8715199
6VIS-BLOCK3560
7CHINANET-GD3246
8MSFT-EP1748
9CL-ECSA-LACNIC1549
10002.558.134/0001-581382
11CBC-CM-41274
12CHINANET-HN1158
13002.558.157/0001-621148
14CO-ACSA-LACNIC871
15IT-INTERBUSINESS-20010612865
16CHINANET-JS851
17NET-CORE-BB-4822
18VWEB-208-66-72819
19004.459.311/0001-74809
20NTINET-RICH797
21CHINANET-LN759
22MSFT752
23CAT751
24PE-OPIP1-LACNIC709
25003.420.926/0002-05685

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

RankNetworkrecipient count of blocked spams
1HINET-NET33463688
2TWTC-NETBLK-114408307
3005.200.140/0001-271234992
4DE-COMSITEC374280
5010.431.131/0001-87167174
6CHINANET-GD92953
7MSFT-EP52370
8CL-ECSA-LACNIC45616
9002.558.134/0001-5840394
10CBC-CM-437438
11CHINANET-HN33679
12002.558.157/0001-6233586
13IT-INTERBUSINESS-2001061225555
14CO-ACSA-LACNIC25464
15CHINANET-JS25003
16VWEB-208-66-7224449
17NET-CORE-BB-424366
18004.459.311/0001-7424225
19NTINET-RICH23890
20CHINANET-LN22465
21MSFT22427
22CAT21836
23PE-OPIP1-LACNIC20684
24VARNION-ID19461
25003.420.926/0002-0519445

No comments:

Post a Comment