Custom Search

Saturday, October 31, 2009

Botnet Statistics [2009-10-30]

detection period: 2009-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3306
number of botnet IPs notified to network operators: 2702

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1065
2CHINANET-GD530
3BSNLNET242
4002.558.157/0001-62103
5AR-TEAR7-LACNIC96
6002.558.134/0001-5850
7UNICOM-SD46
8TATACOMM-IN44
9RCOM40
10000.065.376/0002-6534

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1089
2China900
3India391
4Brazil315
5Argentina164
6Russian Federation102
7Colombia26
8Ukraine24
9South Korea24
10Thailand20

Friday, October 30, 2009

Botnet Statistics [2009-10-29]

detection period: 2009-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3888
number of botnet IPs notified to network operators: 3130

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1158
2CHINANET-GD610
3BSNLNET332
4002.558.157/0001-62133
5AR-TEAR7-LACNIC113
6RCOM58
7UNICOM-SD54
8TATACOMM-IN53
9002.558.134/0001-5849
10CHINANET-JS35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1180
2China1032
3India511
4Brazil370
5Argentina202
6Russian Federation128
7Ukraine44
8United States36
9Thailand32
10South Korea30

Thursday, October 29, 2009

Botnet Statistics [2009-10-28]

detection period: 2009-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3727
number of botnet IPs notified to network operators: 3124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1391
2CHINANET-GD378
3BSNLNET224
4002.558.157/0001-62141
5AR-TEAR7-LACNIC106
6UNICOM-SD53
7002.449.992/0001-6452
8002.558.134/0001-5850
9TATACOMM-IN40
10AR-CASA10-LACNIC39



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1413
2China757
3Brazil430
4India351
5Argentina203
6Russian Federation104
7United States52
8Ukraine36
9Colombia28
10Thailand25

Wednesday, October 28, 2009

Botnet Statistics [2009-10-27]

detection period: 2009-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3043
number of botnet IPs notified to network operators: 2476

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET978
2BSNLNET233
3CHINANET-GD224
4002.558.157/0001-62132
5AR-TEAR7-LACNIC109
6002.558.134/0001-5867
7RCOM54
8UNICOM-SD46
9TATACOMM-IN43
10AR-PRSA-LACNIC40



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan999
2China524
3Brazil402
4India396
5Argentina212
6Russian Federation82
7Ukraine40
8United States32
9Thailand27
10Colombia27

Tuesday, October 27, 2009

My Botnet Detection System

In terms of hardware specification, my botnet detection system is nothing to brag about. It is a small VPS with mere 256MB RAM and 6GB storage space. Its limited CPU power proves not to be an obstacle, as the passive detection I employ is not CPU bound.

Its software is equally modest.  My botnet detection strategy is to follow the spam upstream, so I just installed an SMTP server I am familiar with over a plain vanilla Debian 5 OS. Originally the maximum number of concurrent SMTP connections was set to 90, but later it has been raised to 180. In real world condition, I have witnessed the system handling 150+ incoming SMTP connections at the same time with ease.

Next time, I'll write about how to uncover botnet computers.

Botnet Statistics [2009-10-26]

detection period: 2009-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4075
number of botnet IPs notified to network operators: 3315

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1301
2CHINANET-GD389
3BSNLNET349
4002.558.157/0001-62156
5AR-TEAR7-LACNIC153
6002.558.134/0001-5871
7UNICOM-SD62
8002.449.992/0001-6454
9RCOM46
10000.065.376/0002-6544



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1325
2China841
3India510
4Brazil476
5Argentina256
6Russian Federation134
7United States53
8Colombia37
9Ukraine35
10Uruguay34

Monday, October 26, 2009

Botnet Statistics [2009-10-25]

detection period: 2009-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3529
number of botnet IPs notified to network operators: 2884

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1032
2CHINANET-GD296
3BSNLNET252
4AR-TEAR7-LACNIC207
5002.558.157/0001-62124
6002.558.134/0001-5874
7UNICOM-SD59
8UY-ANTA-LACNIC46
9AR-PRSA-LACNIC41
10AR-CASA10-LACNIC40



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1060
2China772
3Brazil375
4India342
5Argentina310
6Russian Federation131
7Thailand48
8Uruguay46
9Mexico37
10Ukraine35

Sunday, October 25, 2009

Botnet Statistics [2009-10-24]

detection period: 2009-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 4063
number of botnet IPs notified to network operators: 2974

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1016
2BSNLNET601
3CHINANET-GD309
4AR-TEAR7-LACNIC213
5002.558.157/0001-62154
6UNICOM-SD68
7002.558.134/0001-5868
8TATACOMM-IN60
9RCOM56
10AR-PRSA-LACNIC47



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1041
2India820
3China794
4Brazil421
5Argentina326
6Russian Federation150
7Uruguay35
8United States35
9Colombia34
10Ukraine33

Saturday, October 24, 2009

Botnet Statistics [2009-10-23]

detection period: 2009-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 4757
number of botnet IPs notified to network operators: 3740

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1309
2BSNLNET561
3CHINANET-GD558
4AR-TEAR7-LACNIC205
5002.558.157/0001-62196
6002.558.134/0001-5890
7UNICOM-SD71
8RCOM68
9TATACOMM-IN64
10002.449.992/0001-6459



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1331
2China1019
3India796
4Brazil593
5Argentina328
6Russian Federation150
7United States40
8Uruguay38
9Ukraine38
10Thailand38

Friday, October 23, 2009

Botnet Statistics [2009-10-22]

detection period: 2009-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 5355
number of botnet IPs notified to network operators: 4271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1644
2CHINANET-GD773
3BSNLNET608
4AR-TEAR7-LACNIC232
5002.558.157/0001-62200
6002.558.134/0001-5890
7002.449.992/0001-6468
8UNICOM-SD59
9TATACOMM-IN54
10040.432.544/0001-4753



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1666
2China1233
3India798
4Brazil592
5Argentina351
6Russian Federation155
7United States42
8Thailand39
9Ukraine36
10Colombia35

Thursday, October 22, 2009

Botnet Statistics [2009-10-21]

detection period: 2009-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 4712
number of botnet IPs notified to network operators: 3747

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1203
2CHINANET-GD639
3BSNLNET454
4AR-TEAR7-LACNIC242
5002.558.157/0001-62178
6002.558.134/0001-5887
7UNICOM-SD85
8002.449.992/0001-6462
9040.432.544/0001-4752
10RCOM45



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1289
2Taiwan1231
3India615
4Brazil533
5Argentina356
6Russian Federation148
7Ukraine47
8Uruguay40
9Colombia39
10United States34

Wednesday, October 21, 2009

Botnet Statistics [2009-10-20]

detection period: 2009-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 4549
number of botnet IPs notified to network operators: 3516

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1179
2BSNLNET506
3CHINANET-GD481
4AR-TEAR7-LACNIC202
5002.558.157/0001-62183
6002.558.134/0001-5892
7UNICOM-SD80
8040.432.544/0001-4762
9TATACOMM-IN60
10002.449.992/0001-6459



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1203
2China1048
3India709
4Brazil568
5Argentina305
6Russian Federation174
7Ukraine50
8United States44
9Colombia35
10Uruguay33

Tuesday, October 20, 2009

Botnet Statistics [2009-10-19]

detection period: 2009-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4570
number of botnet IPs notified to network operators: 3676

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1126
2CHINANET-GD709
3BSNLNET409
4AR-TEAR7-LACNIC224
5002.558.157/0001-62201
6002.558.134/0001-5887
7UNICOM-SD71
8002.449.992/0001-6464
9040.432.544/0001-4754
10AR-CASA10-LACNIC43



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1258
2Taiwan1158
3Brazil572
4India500
5Argentina328
6Russian Federation187
7United States58
8Ukraine39
9Uruguay33
10Colombia31

Monday, October 19, 2009

Botnet Statistics [2009-10-18]

detection period: 2009-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 3791
number of botnet IPs notified to network operators: 3232

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1069
2CHINANET-GD673
3AR-TEAR7-LACNIC175
4BSNLNET140
5002.558.157/0001-6292
6UNICOM-SD87
7002.558.134/0001-5860
8UNICOM-HA47
9CHINANET-ZJ-WZ38
10CHINANET-JS37



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1326
2Taiwan1096
3Brazil311
4Argentina261
5India205
6Russian Federation136
7United States64
8Uruguay32
9Ukraine30
10Thailand25

Sunday, October 18, 2009

Botnet Statistics [2009-10-17]

detection period: 2009-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3852
number of botnet IPs notified to network operators: 3200

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1161
2CHINANET-GD808
3BSNLNET483
4AR-TEAR7-LACNIC192
5002.558.157/0001-62143
6002.558.134/0001-5873
7UNICOM-SD69
8TATACOMM-IN63
9RCOM63
10002.449.992/0001-6461



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1204
2China1129
3Brazil388
4India302
5Argentina258
6Russian Federation128
7Ukraine41
8United States37
9Uruguay33
10Colombia32

Saturday, October 17, 2009

Botnet Statistics [2009-10-16]

detection period: 2009-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 4478
number of botnet IPs notified to network operators: 3449

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1161
2CHINANET-GD808
3BSNLNET483
4AR-TEAR7-LACNIC192
5002.558.157/0001-62143
6002.558.134/0001-5873
7UNICOM-SD69
8TATACOMM-IN63
9RCOM63
10002.449.992/0001-6461



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1234
2Taiwan1186
3India698
4Brazil454
5Argentina300
6Russian Federation147
7Ukraine41
8Colombia35
9Uruguay28
10South Korea26

Friday, October 16, 2009

Botnet Statistics [2009-10-15]

detection period: 2009-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 4095
number of botnet IPs notified to network operators: 2982

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET921
2BSNLNET522
3CHINANET-GD442
4AR-TEAR7-LACNIC218
5002.558.157/0001-62145
6002.558.134/0001-5877
7UNICOM-SD69
8TATACOMM-IN67
9RCOM59
10002.449.992/0001-6455



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan942
2China896
3India750
4Brazil491
5Argentina336
6Russian Federation154
7Ukraine44
8Uruguay37
9Colombia36
10United States34

Thursday, October 15, 2009

Botnet Statistics [2009-10-14]

detection period: 2009-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 4703
number of botnet IPs notified to network operators: 2903

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1231
2CHINANET-GD572
3BSNLNET562
4AR-TEAR7-LACNIC198
5002.558.157/0001-62171
6002.558.134/0001-5883
7UNICOM-SD77
8002.449.992/0001-6476
9TATACOMM-IN75
10RCOM66



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1261
2China1090
3India803
4Brazil538
5Argentina308
6Russian Federation161
7United States63
8Ukraine47
9Uruguay39
10Colombia31

Wednesday, October 14, 2009

Botnet Statistics [2009-10-13]

detection period: 2009-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 4621
number of botnet IPs notified to network operators: 2689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET941
2CHINANET-GD675
3BSNLNET525
4AR-TEAR7-LACNIC186
5002.558.157/0001-62179
6002.558.134/0001-5893
7UNICOM-SD82
8TATACOMM-IN61
9RCOM59
10002.449.992/0001-6459



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1268
2Taiwan969
3India735
4Brazil562
5Argentina295
6Russian Federation175
7United States76
8South Korea50
9Ukraine43
10Colombia36

Tuesday, October 13, 2009

Botnet Statistics [2009-10-12]

detection period: 2009-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 5340
number of botnet IPs notified to network operators: 4318

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1357
2CHINANET-GD1001
3BSNLNET514
4AR-TEAR7-LACNIC185
5002.558.157/0001-62112
6UNICOM-SD81
7RCOM72
8002.558.134/0001-5867
9TATACOMM-IN55
10CHINANET-JS54



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1818
2Taiwan1389
3India760
4Brazil339
5Argentina287
6Russian Federation158
7United States65
8South Korea43
9Ukraine38
10Uruguay33

Monday, October 12, 2009

Center Align Inline Google Ads for Blogger

I added Google Adsense to my blog yesterday. I noticed immediately that inline ads (the ads between posts) were left aligned, and overlapped with my blog frame. It's ugly.
The following are the steps I took to center align inline ads:
  1. Log into Blogger account.
  2. From Dashboard, click Layout
  3. Click Edit HTML, then check the Expand Widget Templates box.
  4. Click in text area, search (press Ctrl+F) for inline-ad
  5. The string found should be <div class='inline-ad'>; change it into <div align='center' class='inline-ad'>
  6. Click the SAVE TEMPLATE button.
  7. Click View Blog to see inline ads center aligned.
Don't send me mail! Leave a comment instead!

Botnet Statistics [2009-10-11]

detection period: 2009-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3767
number of botnet IPs notified to network operators: 3165

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD1101
2HINET-NET334
3BSNLNET206
4AR-TEAR7-LACNIC166
5002.558.157/0001-6295
6UNICOM-SD81
7CHINANET-HL63
8002.558.134/0001-5861
9CHINANET-JS53
10CHINANET-ZJ-WZ44



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1891
2Taiwan367
3India317
4Brazil302
5Argentina266
6Russian Federation144
7United States55
8Uruguay32
9South Korea30
10Ukraine26

Sunday, October 11, 2009

Botnet Statistics [2009-10-10]

detection period: 2009-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3718
number of botnet IPs notified to network operators: 2920

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD822
2HINET-NET544
3BSNLNET370
4AR-TEAR7-LACNIC128
5002.558.157/0001-6297
6UNICOM-SD66
7RCOM60
8CHINANET-HL56
9002.558.134/0001-5856
10TATACOMM-IN52



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1412
2Taiwan581
3India574
4Brazil315
5Argentina237
6Russian Federation111
7United States69
8South Korea32
9Colombia28
10Thailand27

Saturday, October 10, 2009

Botnet Statistics [2009-10-09]

detection period: 2009-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 3468
number of botnet IPs notified to network operators: 2533

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD776
2BSNLNET508
3HINET-NET277
4AR-TEAR7-LACNIC166
5002.558.157/0001-62132
6RCOM72
7TATACOMM-IN70
8CHINANET-HL67
9002.558.134/0001-5857
10040.432.544/0001-4749



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1160
2India750
3Brazil418
4Taiwan304
5Argentina271
6Russian Federation116
7United States40
8Colombia36
9South Korea27
10Hong Kong25

Friday, October 9, 2009

Botnet Statistics [2009-10-08]

detection period: 2009-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3256
number of botnet IPs notified to network operators: 2529

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET750
2CHINANET-GD466
3BSNLNET319
4AR-TEAR7-LACNIC145
5002.558.157/0001-62118
6RCOM61
7002.449.992/0001-6457
8TATACOMM-IN47
9040.432.544/0001-4744
10002.558.134/0001-5843



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China795
2Taiwan775
3India497
4Brazil384
5Argentina248
6Russian Federation113
7United States46
8South Korea34
9Colombia34
10Uruguay26

Thursday, October 8, 2009

Botnet Statistics [2009-10-07]

detection period: 2009-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2975
number of botnet IPs notified to network operators: 2494

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET953
2CHINANET-GD368
3BSNLNET180
4AR-TEAR7-LACNIC121
5002.558.157/0001-6292
6CHINANET-ZJ-WZ39
7040.432.544/0001-4739
8002.449.992/0001-6439
9CHINANET-HL38
10RCOM36



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan983
2China747
3Brazil309
4India299
5Argentina193
6Russian Federation93
7United States47
8Colombia26
9South Korea18
10Thailand17

Wednesday, October 7, 2009

Botnet Statistics [2009-10-06]

detection period: 2009-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3931
number of botnet IPs notified to network operators: 3089

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET999
2CHINANET-GD450
3BSNLNET419
4002.558.157/0001-62136
5AR-TEAR7-LACNIC121
6CHINANET-HL71
7TATACOMM-IN70
8RCOM58
9002.449.992/0001-6452
10UNICOM-SD47



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1033
2Taiwan1032
3India656
4Brazil409
5Argentina202
6Russian Federation136
7United States57
8Colombia36
9Ukraine30
10South Korea29

Tuesday, October 6, 2009

Botnet Statistics [2009-10-05]

detection period: 2009-10-05 00:00-23:59 UTC
total number of suspected botnet IPs: 4569
number of botnet IPs notified to network operators: 3580

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET946
2CHINANET-GD531
3BSNLNET501
4AR-TEAR7-LACNIC188
5002.558.157/0001-62183
6UNICOM-SD80
7002.558.134/0001-5880
8TATACOMM-IN76
9CHINANET-HL66
10002.449.992/0001-6465



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1248
2Taiwan979
3India740
4Brazil555
5Argentina300
6Russian Federation178
7South Korea43
8Ukraine42
9United States37
10Colombia37

Monday, October 5, 2009

Botnet Statistics [2009-10-04]

detection period: 2009-10-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3544
number of botnet IPs notified to network operators: 3018

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1019
2CHINANET-GD470
3BSNLNET182
4AR-TEAR7-LACNIC128
5002.558.157/0001-6298
6CHINANET-HL64
7002.558.134/0001-5859
8UNICOM-SD57
9CHINANET-ZJ-WZ41
10002.449.992/0001-6439



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1057
2China1056
3Brazil350
4India266
5Argentina210
6Russian Federation131
7United States60
8Uruguay31
9Hong Kong27
10South Korea26

Sunday, October 4, 2009

Botnet Statistics [2009-10-03]

detection period: 2009-10-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3452
number of botnet IPs notified to network operators: 2907

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1267
2CHINANET-GD338
3BSNLNET222
4AR-TEAR7-LACNIC114
5002.558.157/0001-62111
6CHINANET-HL69
7002.558.134/0001-5852
8002.449.992/0001-6444
9CHINANET-ZJ-WZ39
10UNICOM-SD38



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1293
2China810
3Brazil345
4India336
5Argentina190
6Russian Federation96
7United States31
8Colombia30
9Thailand19
10Uruguay18

Saturday, October 3, 2009

Botnet Statistics [2009-10-02]

detection period: 2009-10-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3526
number of botnet IPs notified to network operators: 2792

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET821
2BSNLNET302
3CHINANET-GD237
4002.558.157/0001-62140
5AR-TEAR7-LACNIC125
6002.558.134/0001-5862
7UNICOM-SD60
8002.449.992/0001-6455
9CHINANET-HL51
10RCOM46



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China921
2Taiwan858
3India486
4Brazil458
5Argentina210
6Russian Federation125
7Ukraine37
8South Korea37
9United States31
10Colombia31

Friday, October 2, 2009

Botnet Statistics [2009-10-01]

detection period: 2009-10-01 00:00-23:59 UTC
total number of suspected botnet IPs: 4427
number of botnet IPs notified to network operators: 3377

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1159
2BSNLNET548
3CHINANET-GD197
4AR-TEAR7-LACNIC178
5002.558.157/0001-62158
6CHINANET-HL112
7002.558.134/0001-5881
8TATACOMM-IN78
9002.449.992/0001-6475
10RCOM58



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1199
2China869
3India792
4Brazil542
5Argentina274
6Russian Federation155
7United States59
8South Korea43
9Colombia40
10Ukraine32

Thursday, October 1, 2009

Botnet Statistics [2009-09-30]

detection period: 2009-09-30 00:00-23:59 UTC
total number of suspected botnet IPs: 4044
number of botnet IPs notified to network operators: 3160

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET864
2BSNLNET390
3002.558.157/0001-62184
4AR-TEAR7-LACNIC170
5CHINANET-GD161
6002.449.992/0001-6491
7CHINANET-HL90
8002.558.134/0001-5884
9UNICOM-SD82
10CHINANET-JS69



The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China996
2Taiwan903
3Brazil583
4India579
5Argentina268
6Russian Federation137
7United States56
8South Korea50
9Colombia38
10Ukraine34