total number of suspected botnet IPs: 1102
number of botnet IPs notified to network operators: 931
The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 336 |
| 2 | CHINANET-GD | 195 |
| 3 | 002.558.157/0001-62 | 28 |
| 4 | CHINANET-ZJ-WZ | 26 |
| 5 | BSNLNET | 21 |
| 6 | UNICOM-SD | 19 |
| 7 | AR-TEAR7-LACNIC | 16 |
| 8 | CHINANET-JS | 13 |
| 9 | TFN-NET | 9 |
| 10 | 000.065.376/0002-65 | 9 |
The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:
| Rank | Country | # of suspected botnet IPs |
|---|---|---|
| 1 | China | 371 |
| 2 | Taiwan | 353 |
| 3 | Brazil | 89 |
| 4 | India | 44 |
| 5 | Argentina | 35 |
| 6 | Russian Federation | 34 |
| 7 | Indonesia | 17 |
| 8 | Colombia | 17 |
| 9 | United States | 15 |
| 10 | Thailand | 10 |
The dramatic drop of suspected botnet IPs was a result of the disk problem of my botnet detection system during the day.
No comments:
Post a Comment