Custom Search

Saturday, December 18, 2010

Botnet Statistics [2010-12-17]

Taiwan, where I live, had stayed on my list of top 10 botnet countries for a long time.  It does not feel good for me to see my home country so high on the list.  Though I detected many bots in Taiwan, which showed how effective my detection was, I really wished that Taiwan could make some progress in the war against botnets.  So I am gladly surprised that Taiwan has recently dropped out of the top 10.  The number of bots detected in Taiwan daily has also reduced from more than 1000 to less than 100 now.  Great!

detection period: 2010-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 998
number of botnet IPs notified to network operators: 718
number of blocked spams: 334267
recipient count of blocked spams: 11460845

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD184
2KORNET-KR17
3CHINANET-ZJ-WZ16
4033.530.486/0001-2915
5UNICOM-SD14
6CHINANET-JS11
7003.420.926/0002-0511
8AKIMPOD10
9CO-ACSA-LACNIC9
10002.558.157/0001-629

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China342
2Brazil89
3Russian Federation60
4South Korea41
5United States39
6Colombia24
7Ukraine23
8Poland23
9Kazakhstan23
10France21

No comments:

Post a Comment