Custom Search

Sunday, January 9, 2011

Botnet Statistics for the year of 2010

My detection systems have been working throughout 2010. It would be interesting to summarize my data for the whole year. Because some ip blocks are missing from my network mapping table, around 4000 botnet IPs could not be mapped to the networks they belong to. I am a bit lazy recently, so I decide not to amend the mapping table this time, and release the yearly statistics without the top 25 networks.

In terms of number of bots, I expected China or Taiwan to take the crown, but to my surprise, India tops the list by a large margin. The top 6 countries are India, China, Brazil, Taiwan, Argentina, and Russian Federation. All but Argentina have been regulars on my botnet charts. Argentina has been successfully staying out of my daily chart for some time.

My statistics is by no means complete. It just describes the bots I found with the particular detection mechanism I use, which are fake open relays. Botnet detection with other means may come out with vastly different results.

detection period: 2010-01-01 00:00 - 2010-12-31 23:59 UTC
total number of suspected botnet IPs: 414398
number of blocked spams: 79256717
recipient count of blocked spams: 2328674624

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India152502
2China83429
3Brazil43875
4Taiwan32981
5Argentina25599
6Russian Federation15658
7Thailand12348
8United States6342
9Ukraine5434
10Uruguay3883
11Mexico3759
12Ethiopia2376
13Chile2069
14Belarus1699
15Germany1621
16South Korea1396
17Kazakhstan1357
18Colombia1353
19Indonesia1264
20Algeria1175
21France1057
22Japan999
23Hong Kong718
24Italy644
25Spain593

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China19216036
2Taiwan10256800
3Brazil8999024
4United States5823431
5India4072434
6Russian Federation3738420
7Colombia2414074
8Thailand1928087
9Indonesia1578363
10Argentina1351358
11South Korea1160235
12France1153097
13Germany1133384
14Poland1110894
15Ukraine964565
16Italy816715
17United Kingdom590121
18Malaysia573573
19Mexico530913
20Iran465483
21Philippines460976
22Czech Republic460585
23Chile451506
24Saudi Arabia410480
25Turkey375195

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

RankCountryrecipient count of blocked spams
1China454482101
2Brazil291702073
3Taiwan253757202
4United States188760788
5India132973727
6Russian Federation123071994
7Colombia82127701
8Thailand63803287
9Indonesia49067908
10Argentina44582228
11Germany38439324
12France38253795
13South Korea37107661
14Poland35352486
15Ukraine31918584
16Italy27412040
17United Kingdom18343668
18Mexico17672072
19Philippines15613015
20Iran15022629
21Chile14702774
22Czech Republic14437154
23Saudi Arabia13688921
24Malaysia12190921
25Hong Kong11933163

No comments:

Post a Comment