Botnet Statistics [2009-10-30]

detection period: 2009-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3306
number of botnet IPs notified to network operators: 2702

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1065
2	CHINANET-GD	530
3	BSNLNET	242
4	002.558.157/0001-62	103
5	AR-TEAR7-LACNIC	96
6	002.558.134/0001-58	50
7	UNICOM-SD	46
8	TATACOMM-IN	44
9	RCOM	40
10	000.065.376/0002-65	34

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1089
2	China	900
3	India	391
4	Brazil	315
5	Argentina	164
6	Russian Federation	102
7	Colombia	26
8	Ukraine	24
9	South Korea	24
10	Thailand	20

Botnet Statistics [2009-10-29]

detection period: 2009-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3888
number of botnet IPs notified to network operators: 3130

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1158
2	CHINANET-GD	610
3	BSNLNET	332
4	002.558.157/0001-62	133
5	AR-TEAR7-LACNIC	113
6	RCOM	58
7	UNICOM-SD	54
8	TATACOMM-IN	53
9	002.558.134/0001-58	49
10	CHINANET-JS	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1180
2	China	1032
3	India	511
4	Brazil	370
5	Argentina	202
6	Russian Federation	128
7	Ukraine	44
8	United States	36
9	Thailand	32
10	South Korea	30

Botnet Statistics [2009-10-28]

detection period: 2009-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3727
number of botnet IPs notified to network operators: 3124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1391
2	CHINANET-GD	378
3	BSNLNET	224
4	002.558.157/0001-62	141
5	AR-TEAR7-LACNIC	106
6	UNICOM-SD	53
7	002.449.992/0001-64	52
8	002.558.134/0001-58	50
9	TATACOMM-IN	40
10	AR-CASA10-LACNIC	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1413
2	China	757
3	Brazil	430
4	India	351
5	Argentina	203
6	Russian Federation	104
7	United States	52
8	Ukraine	36
9	Colombia	28
10	Thailand	25

Botnet Statistics [2009-10-27]

detection period: 2009-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3043
number of botnet IPs notified to network operators: 2476

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	978
2	BSNLNET	233
3	CHINANET-GD	224
4	002.558.157/0001-62	132
5	AR-TEAR7-LACNIC	109
6	002.558.134/0001-58	67
7	RCOM	54
8	UNICOM-SD	46
9	TATACOMM-IN	43
10	AR-PRSA-LACNIC	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	999
2	China	524
3	Brazil	402
4	India	396
5	Argentina	212
6	Russian Federation	82
7	Ukraine	40
8	United States	32
9	Thailand	27
10	Colombia	27

My Botnet Detection System

In terms of hardware specification, my botnet detection system is nothing to brag about. It is a small VPS with mere 256MB RAM and 6GB storage space. Its limited CPU power proves not to be an obstacle, as the passive detection I employ is not CPU bound.

Its software is equally modest.  My botnet detection strategy is to follow the spam upstream, so I just installed an SMTP server I am familiar with over a plain vanilla Debian 5 OS. Originally the maximum number of concurrent SMTP connections was set to 90, but later it has been raised to 180. In real world condition, I have witnessed the system handling 150+ incoming SMTP connections at the same time with ease.

Next time, I'll write about how to uncover botnet computers.

Botnet Statistics [2009-10-26]

detection period: 2009-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4075
number of botnet IPs notified to network operators: 3315

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1301
2	CHINANET-GD	389
3	BSNLNET	349
4	002.558.157/0001-62	156
5	AR-TEAR7-LACNIC	153
6	002.558.134/0001-58	71
7	UNICOM-SD	62
8	002.449.992/0001-64	54
9	RCOM	46
10	000.065.376/0002-65	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1325
2	China	841
3	India	510
4	Brazil	476
5	Argentina	256
6	Russian Federation	134
7	United States	53
8	Colombia	37
9	Ukraine	35
10	Uruguay	34

Botnet Statistics [2009-10-25]

detection period: 2009-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3529
number of botnet IPs notified to network operators: 2884

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1032
2	CHINANET-GD	296
3	BSNLNET	252
4	AR-TEAR7-LACNIC	207
5	002.558.157/0001-62	124
6	002.558.134/0001-58	74
7	UNICOM-SD	59
8	UY-ANTA-LACNIC	46
9	AR-PRSA-LACNIC	41
10	AR-CASA10-LACNIC	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1060
2	China	772
3	Brazil	375
4	India	342
5	Argentina	310
6	Russian Federation	131
7	Thailand	48
8	Uruguay	46
9	Mexico	37
10	Ukraine	35

Botnet Statistics [2009-10-24]

detection period: 2009-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 4063
number of botnet IPs notified to network operators: 2974

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1016
2	BSNLNET	601
3	CHINANET-GD	309
4	AR-TEAR7-LACNIC	213
5	002.558.157/0001-62	154
6	UNICOM-SD	68
7	002.558.134/0001-58	68
8	TATACOMM-IN	60
9	RCOM	56
10	AR-PRSA-LACNIC	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1041
2	India	820
3	China	794
4	Brazil	421
5	Argentina	326
6	Russian Federation	150
7	Uruguay	35
8	United States	35
9	Colombia	34
10	Ukraine	33

Botnet Statistics [2009-10-23]

detection period: 2009-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 4757
number of botnet IPs notified to network operators: 3740

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1309
2	BSNLNET	561
3	CHINANET-GD	558
4	AR-TEAR7-LACNIC	205
5	002.558.157/0001-62	196
6	002.558.134/0001-58	90
7	UNICOM-SD	71
8	RCOM	68
9	TATACOMM-IN	64
10	002.449.992/0001-64	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1331
2	China	1019
3	India	796
4	Brazil	593
5	Argentina	328
6	Russian Federation	150
7	United States	40
8	Uruguay	38
9	Ukraine	38
10	Thailand	38

Botnet Statistics [2009-10-22]

detection period: 2009-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 5355
number of botnet IPs notified to network operators: 4271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1644
2	CHINANET-GD	773
3	BSNLNET	608
4	AR-TEAR7-LACNIC	232
5	002.558.157/0001-62	200
6	002.558.134/0001-58	90
7	002.449.992/0001-64	68
8	UNICOM-SD	59
9	TATACOMM-IN	54
10	040.432.544/0001-47	53

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1666
2	China	1233
3	India	798
4	Brazil	592
5	Argentina	351
6	Russian Federation	155
7	United States	42
8	Thailand	39
9	Ukraine	36
10	Colombia	35

Botnet Statistics [2009-10-21]

detection period: 2009-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 4712
number of botnet IPs notified to network operators: 3747

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1203
2	CHINANET-GD	639
3	BSNLNET	454
4	AR-TEAR7-LACNIC	242
5	002.558.157/0001-62	178
6	002.558.134/0001-58	87
7	UNICOM-SD	85
8	002.449.992/0001-64	62
9	040.432.544/0001-47	52
10	RCOM	45

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1289
2	Taiwan	1231
3	India	615
4	Brazil	533
5	Argentina	356
6	Russian Federation	148
7	Ukraine	47
8	Uruguay	40
9	Colombia	39
10	United States	34

Botnet Statistics [2009-10-20]

detection period: 2009-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 4549
number of botnet IPs notified to network operators: 3516

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1179
2	BSNLNET	506
3	CHINANET-GD	481
4	AR-TEAR7-LACNIC	202
5	002.558.157/0001-62	183
6	002.558.134/0001-58	92
7	UNICOM-SD	80
8	040.432.544/0001-47	62
9	TATACOMM-IN	60
10	002.449.992/0001-64	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1203
2	China	1048
3	India	709
4	Brazil	568
5	Argentina	305
6	Russian Federation	174
7	Ukraine	50
8	United States	44
9	Colombia	35
10	Uruguay	33

Botnet Statistics [2009-10-19]

detection period: 2009-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4570
number of botnet IPs notified to network operators: 3676

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1126
2	CHINANET-GD	709
3	BSNLNET	409
4	AR-TEAR7-LACNIC	224
5	002.558.157/0001-62	201
6	002.558.134/0001-58	87
7	UNICOM-SD	71
8	002.449.992/0001-64	64
9	040.432.544/0001-47	54
10	AR-CASA10-LACNIC	43

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1258
2	Taiwan	1158
3	Brazil	572
4	India	500
5	Argentina	328
6	Russian Federation	187
7	United States	58
8	Ukraine	39
9	Uruguay	33
10	Colombia	31

Botnet Statistics [2009-10-18]

detection period: 2009-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 3791
number of botnet IPs notified to network operators: 3232

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1069
2	CHINANET-GD	673
3	AR-TEAR7-LACNIC	175
4	BSNLNET	140
5	002.558.157/0001-62	92
6	UNICOM-SD	87
7	002.558.134/0001-58	60
8	UNICOM-HA	47
9	CHINANET-ZJ-WZ	38
10	CHINANET-JS	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1326
2	Taiwan	1096
3	Brazil	311
4	Argentina	261
5	India	205
6	Russian Federation	136
7	United States	64
8	Uruguay	32
9	Ukraine	30
10	Thailand	25

Botnet Statistics [2009-10-17]

detection period: 2009-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3852
number of botnet IPs notified to network operators: 3200

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1161
2	CHINANET-GD	808
3	BSNLNET	483
4	AR-TEAR7-LACNIC	192
5	002.558.157/0001-62	143
6	002.558.134/0001-58	73
7	UNICOM-SD	69
8	TATACOMM-IN	63
9	RCOM	63
10	002.449.992/0001-64	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1204
2	China	1129
3	Brazil	388
4	India	302
5	Argentina	258
6	Russian Federation	128
7	Ukraine	41
8	United States	37
9	Uruguay	33
10	Colombia	32

Botnet Statistics [2009-10-16]

detection period: 2009-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 4478
number of botnet IPs notified to network operators: 3449

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1161
2	CHINANET-GD	808
3	BSNLNET	483
4	AR-TEAR7-LACNIC	192
5	002.558.157/0001-62	143
6	002.558.134/0001-58	73
7	UNICOM-SD	69
8	TATACOMM-IN	63
9	RCOM	63
10	002.449.992/0001-64	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1234
2	Taiwan	1186
3	India	698
4	Brazil	454
5	Argentina	300
6	Russian Federation	147
7	Ukraine	41
8	Colombia	35
9	Uruguay	28
10	South Korea	26

Botnet Statistics [2009-10-15]

detection period: 2009-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 4095
number of botnet IPs notified to network operators: 2982

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	921
2	BSNLNET	522
3	CHINANET-GD	442
4	AR-TEAR7-LACNIC	218
5	002.558.157/0001-62	145
6	002.558.134/0001-58	77
7	UNICOM-SD	69
8	TATACOMM-IN	67
9	RCOM	59
10	002.449.992/0001-64	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	942
2	China	896
3	India	750
4	Brazil	491
5	Argentina	336
6	Russian Federation	154
7	Ukraine	44
8	Uruguay	37
9	Colombia	36
10	United States	34

Botnet Statistics [2009-10-14]

detection period: 2009-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 4703
number of botnet IPs notified to network operators: 2903

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1231
2	CHINANET-GD	572
3	BSNLNET	562
4	AR-TEAR7-LACNIC	198
5	002.558.157/0001-62	171
6	002.558.134/0001-58	83
7	UNICOM-SD	77
8	002.449.992/0001-64	76
9	TATACOMM-IN	75
10	RCOM	66

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1261
2	China	1090
3	India	803
4	Brazil	538
5	Argentina	308
6	Russian Federation	161
7	United States	63
8	Ukraine	47
9	Uruguay	39
10	Colombia	31

Botnet Statistics [2009-10-13]

detection period: 2009-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 4621
number of botnet IPs notified to network operators: 2689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	941
2	CHINANET-GD	675
3	BSNLNET	525
4	AR-TEAR7-LACNIC	186
5	002.558.157/0001-62	179
6	002.558.134/0001-58	93
7	UNICOM-SD	82
8	TATACOMM-IN	61
9	RCOM	59
10	002.449.992/0001-64	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1268
2	Taiwan	969
3	India	735
4	Brazil	562
5	Argentina	295
6	Russian Federation	175
7	United States	76
8	South Korea	50
9	Ukraine	43
10	Colombia	36

Botnet Statistics [2009-10-12]

detection period: 2009-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 5340
number of botnet IPs notified to network operators: 4318

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1357
2	CHINANET-GD	1001
3	BSNLNET	514
4	AR-TEAR7-LACNIC	185
5	002.558.157/0001-62	112
6	UNICOM-SD	81
7	RCOM	72
8	002.558.134/0001-58	67
9	TATACOMM-IN	55
10	CHINANET-JS	54

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1818
2	Taiwan	1389
3	India	760
4	Brazil	339
5	Argentina	287
6	Russian Federation	158
7	United States	65
8	South Korea	43
9	Ukraine	38
10	Uruguay	33

Center Align Inline Google Ads for Blogger

I added Google Adsense to my blog yesterday. I noticed immediately that inline ads (the ads between posts) were left aligned, and overlapped with my blog frame. It's ugly.

The following are the steps I took to center align inline ads:

1. Log into Blogger account.
2. From Dashboard, click Layout
3. Click Edit HTML, then check the Expand Widget Templates box.
4. Click in text area, search (press Ctrl+F) for inline-ad
5. The string found should be <div class='inline-ad'>; change it into <div align='center' class='inline-ad'>
6. Click the SAVE TEMPLATE button.
7. Click View Blog to see inline ads center aligned.

Don't send me mail! Leave a comment instead!

Botnet Statistics [2009-10-11]

detection period: 2009-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3767
number of botnet IPs notified to network operators: 3165

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	1101
2	HINET-NET	334
3	BSNLNET	206
4	AR-TEAR7-LACNIC	166
5	002.558.157/0001-62	95
6	UNICOM-SD	81
7	CHINANET-HL	63
8	002.558.134/0001-58	61
9	CHINANET-JS	53
10	CHINANET-ZJ-WZ	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1891
2	Taiwan	367
3	India	317
4	Brazil	302
5	Argentina	266
6	Russian Federation	144
7	United States	55
8	Uruguay	32
9	South Korea	30
10	Ukraine	26

Botnet Statistics [2009-10-10]

detection period: 2009-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3718
number of botnet IPs notified to network operators: 2920

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	822
2	HINET-NET	544
3	BSNLNET	370
4	AR-TEAR7-LACNIC	128
5	002.558.157/0001-62	97
6	UNICOM-SD	66
7	RCOM	60
8	CHINANET-HL	56
9	002.558.134/0001-58	56
10	TATACOMM-IN	52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1412
2	Taiwan	581
3	India	574
4	Brazil	315
5	Argentina	237
6	Russian Federation	111
7	United States	69
8	South Korea	32
9	Colombia	28
10	Thailand	27

Botnet Statistics [2009-10-09]

detection period: 2009-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 3468
number of botnet IPs notified to network operators: 2533

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	776
2	BSNLNET	508
3	HINET-NET	277
4	AR-TEAR7-LACNIC	166
5	002.558.157/0001-62	132
6	RCOM	72
7	TATACOMM-IN	70
8	CHINANET-HL	67
9	002.558.134/0001-58	57
10	040.432.544/0001-47	49

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1160
2	India	750
3	Brazil	418
4	Taiwan	304
5	Argentina	271
6	Russian Federation	116
7	United States	40
8	Colombia	36
9	South Korea	27
10	Hong Kong	25

Botnet Statistics [2009-10-08]

detection period: 2009-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3256
number of botnet IPs notified to network operators: 2529

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	750
2	CHINANET-GD	466
3	BSNLNET	319
4	AR-TEAR7-LACNIC	145
5	002.558.157/0001-62	118
6	RCOM	61
7	002.449.992/0001-64	57
8	TATACOMM-IN	47
9	040.432.544/0001-47	44
10	002.558.134/0001-58	43

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	795
2	Taiwan	775
3	India	497
4	Brazil	384
5	Argentina	248
6	Russian Federation	113
7	United States	46
8	South Korea	34
9	Colombia	34
10	Uruguay	26

Botnet Statistics [2009-10-07]

detection period: 2009-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2975
number of botnet IPs notified to network operators: 2494

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	953
2	CHINANET-GD	368
3	BSNLNET	180
4	AR-TEAR7-LACNIC	121
5	002.558.157/0001-62	92
6	CHINANET-ZJ-WZ	39
7	040.432.544/0001-47	39
8	002.449.992/0001-64	39
9	CHINANET-HL	38
10	RCOM	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	983
2	China	747
3	Brazil	309
4	India	299
5	Argentina	193
6	Russian Federation	93
7	United States	47
8	Colombia	26
9	South Korea	18
10	Thailand	17

Botnet Statistics [2009-10-06]

detection period: 2009-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3931
number of botnet IPs notified to network operators: 3089

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	999
2	CHINANET-GD	450
3	BSNLNET	419
4	002.558.157/0001-62	136
5	AR-TEAR7-LACNIC	121
6	CHINANET-HL	71
7	TATACOMM-IN	70
8	RCOM	58
9	002.449.992/0001-64	52
10	UNICOM-SD	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1033
2	Taiwan	1032
3	India	656
4	Brazil	409
5	Argentina	202
6	Russian Federation	136
7	United States	57
8	Colombia	36
9	Ukraine	30
10	South Korea	29

Botnet Statistics [2009-10-05]

detection period: 2009-10-05 00:00-23:59 UTC
total number of suspected botnet IPs: 4569
number of botnet IPs notified to network operators: 3580

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	946
2	CHINANET-GD	531
3	BSNLNET	501
4	AR-TEAR7-LACNIC	188
5	002.558.157/0001-62	183
6	UNICOM-SD	80
7	002.558.134/0001-58	80
8	TATACOMM-IN	76
9	CHINANET-HL	66
10	002.449.992/0001-64	65

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1248
2	Taiwan	979
3	India	740
4	Brazil	555
5	Argentina	300
6	Russian Federation	178
7	South Korea	43
8	Ukraine	42
9	United States	37
10	Colombia	37

Botnet Statistics [2009-10-04]

detection period: 2009-10-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3544
number of botnet IPs notified to network operators: 3018

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1019
2	CHINANET-GD	470
3	BSNLNET	182
4	AR-TEAR7-LACNIC	128
5	002.558.157/0001-62	98
6	CHINANET-HL	64
7	002.558.134/0001-58	59
8	UNICOM-SD	57
9	CHINANET-ZJ-WZ	41
10	002.449.992/0001-64	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1057
2	China	1056
3	Brazil	350
4	India	266
5	Argentina	210
6	Russian Federation	131
7	United States	60
8	Uruguay	31
9	Hong Kong	27
10	South Korea	26

Botnet Statistics [2009-10-03]

detection period: 2009-10-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3452
number of botnet IPs notified to network operators: 2907

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1267
2	CHINANET-GD	338
3	BSNLNET	222
4	AR-TEAR7-LACNIC	114
5	002.558.157/0001-62	111
6	CHINANET-HL	69
7	002.558.134/0001-58	52
8	002.449.992/0001-64	44
9	CHINANET-ZJ-WZ	39
10	UNICOM-SD	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1293
2	China	810
3	Brazil	345
4	India	336
5	Argentina	190
6	Russian Federation	96
7	United States	31
8	Colombia	30
9	Thailand	19
10	Uruguay	18

Botnet Statistics [2009-10-02]

detection period: 2009-10-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3526
number of botnet IPs notified to network operators: 2792

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	821
2	BSNLNET	302
3	CHINANET-GD	237
4	002.558.157/0001-62	140
5	AR-TEAR7-LACNIC	125
6	002.558.134/0001-58	62
7	UNICOM-SD	60
8	002.449.992/0001-64	55
9	CHINANET-HL	51
10	RCOM	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	921
2	Taiwan	858
3	India	486
4	Brazil	458
5	Argentina	210
6	Russian Federation	125
7	Ukraine	37
8	South Korea	37
9	United States	31
10	Colombia	31

Botnet Statistics [2009-10-01]

detection period: 2009-10-01 00:00-23:59 UTC
total number of suspected botnet IPs: 4427
number of botnet IPs notified to network operators: 3377

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1159
2	BSNLNET	548
3	CHINANET-GD	197
4	AR-TEAR7-LACNIC	178
5	002.558.157/0001-62	158
6	CHINANET-HL	112
7	002.558.134/0001-58	81
8	TATACOMM-IN	78
9	002.449.992/0001-64	75
10	RCOM	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1199
2	China	869
3	India	792
4	Brazil	542
5	Argentina	274
6	Russian Federation	155
7	United States	59
8	South Korea	43
9	Colombia	40
10	Ukraine	32

Botnet Statistics [2009-09-30]

detection period: 2009-09-30 00:00-23:59 UTC
total number of suspected botnet IPs: 4044
number of botnet IPs notified to network operators: 3160

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	864
2	BSNLNET	390
3	002.558.157/0001-62	184
4	AR-TEAR7-LACNIC	170
5	CHINANET-GD	161
6	002.449.992/0001-64	91
7	CHINANET-HL	90
8	002.558.134/0001-58	84
9	UNICOM-SD	82
10	CHINANET-JS	69

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	996
2	Taiwan	903
3	Brazil	583
4	India	579
5	Argentina	268
6	Russian Federation	137
7	United States	56
8	South Korea	50
9	Colombia	38
10	Ukraine	34