Custom Search

Tuesday, February 20, 2018

Botnet Statistics for the year of 2017

detection period: 2017-01-01 00:00 - 2017-12-31 23:59 UTC
total number of suspected botnet IPs: 103740
number of blocked spams: 17220086
recipient count of blocked spams: 369595290
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China44902
2Taiwan19140
3Viet Nam8333
4United States7619
5India3218
6Ukraine1738
7Brazil1456
8Russian Federation1107
9Netherlands953
10Iran820
11Mexico775
12United Kingdom718
13Indonesia598
14Turkey558
15Italy535
16Colombia496
17Poland489
18Peru489
19Argentina453
20South Korea439
21Thailand420
22Romania412
23Hong Kong398
24Pakistan386
25Bulgaria341

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China4531866
2Taiwan3890439
3United States3012233
4Brazil840434
5South Korea602432
6Russian Federation462929
7Poland340562
8Netherlands323180
9Hong Kong311700
10Ukraine276767
11Germany263873
12United Kingdom248179
13Canada241403
14Czech Republic205562
15Venezuela187789
16Azerbaijan150585
17India117025
18Romania102556
19South Africa91706
20Singapore73829
21Norway63083
22Italy57475
23Israel56881
24France50498
25Belize48602

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1China121933011
2Taiwan106682714
3Brazil24793636
4South Korea18392087
5United States17256741
6Russian Federation11416454
7Hong Kong8871329
8Czech Republic5774026
9Venezuela5621694
10Azerbaijan4498943
11India3300859
12Netherlands3050850
13Germany2918140
14Romania2566948
15United Kingdom2330510
16Norway1890576
17Ukraine1771998
18Tunisia1766331
19Italy1743287
20Israel1701164
21Canada1616192
22Belize1457886
23Colombia1405338
24France1374650
25Iceland1304695

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET18454
2UNICOM-ZJ6811
3CMNET5038
4CHINANET-GD4412
5VNPT-VNNIC-VN4250
6CHINANET-JS4150
7CHINANET-HN3940
8WASU2964
9CHINANET-HB2906
10WASU-BB1454
11FPT-VN1041
12VIETEL-VN903
13UNICOM-SD877
14CHINANET-AH830
15UNICOM-GX741
16UA-VOLIA-20061124710
17VIETEL-VNNIC-VN643
18MSFT632
19UNIFIEDLAYER-NETWORK-14626
20UA-VOLIA-20080404625
21BHARTI-IN593
22BSNLNET578
23UNICOM-HB543
24SERVERCRATE-03539
25ETC-VNNIC-VN527

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

RankNetwork# of blocked spams
1HINET-NET3869458
2CHINANET-ZJ1383301
3CHINANET-TJ614486
4002.558.157/0001-62575934
5KORNET-KR568513
6UNICOM-CN437886
7UNKNOWN342651
8JLU-CN339945
9CHINANET-HN297394
10NETVIGATOR282029
11SHARKTECH-3267326
12CMNET252481
13EURONET-ISP249668
14UNIFIEDLAYER-NETWORK-14246918
15CZ-WHOISPROTECTION-20141231190757
16VE-CSVE-LACNIC187324
17NET3-INC167896
18UA-VOLIA-20080404156135
19DELTA-DSL150332
20LSN-DLLSTX-2150090
21AVANTE-6147398
22PSYCHZ-NETWORKS136962
23TencentCloud131836
24CHINANET-AH127089
25CHINANET-CQ117822

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

RankNetworkrecipient count of blocked spams
1HINET-NET106082534
2CHINANET-ZJ41230541
3CHINANET-TJ18422876
4KORNET-KR17407586
5002.558.157/0001-6217260080
6UNICOM-CN13115960
7JLU-CN10185540
8NETVIGATOR8456554
9CMNET7477036
10CZ-WHOISPROTECTION-201412315719536
11VE-CSVE-LACNIC5611405
12DELTA-DSL4494496
13TencentCloud3915188
14CHINANET-AH3546251
15CHINANET-CQ3521364
16ENCRYPTED-TRANSIT-IPV43185122
17011.419.340/0001-782719369
18RSMANI-NKN-IN2694172
19AIRLINERES-CALPOP-COM2453563
201AND12258330
21CHINANET-ZJ-ZX2219871
22071.208.516/0001-741912125
23CHINANET-JS1779572
24IL-BEZEQ-INTERNATIONAL-200012291682584
25TN-ATI-200612121679029

No comments:

Post a Comment