Custom Search

Sunday, January 31, 2010

Botnet Statistics [2010-01-30]

detection period: 2010-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3502
number of botnet IPs notified to network operators: 3175

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1235
2BSNLNET485
3TFN-NET232
4002.558.157/0001-62102
5RCOM95
6AR-TEAR7-LACNIC81
7TATACOMM-IN78
8HATHWAY-NET59
9UNICOM-SD47
10002.449.992/0001-6444

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1477
2India785
3Brazil339
4China324
5Argentina133
6Russian Federation78
7Unitedd States34
8Colombia32
9Ukraine27
10South Korea26

Saturday, January 30, 2010

Botnet Statistics [2010-01-29]

India took the number one spot yesterday, as their number of bots climbed to 900+. This is very rare for India. Another point worth mentioning is that the total number of bots detected is in the decline. I hope that is because my detection strategy is so effective, that spammers are forced to change their ways of sending mail. Just kidding:).

detection period: 2010-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3106
number of botnet IPs notified to network operators: 2725

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1BSNLNET581
2HINET-NET512
3TFN-NET202
4002.558.157/0001-62134
5AR-TEAR7-LACNIC95
6TATACOMM-IN91
7RCOM88
8HATHWAY-NET76
9002.449.992/0001-6460
10002.558.134/0001-5854

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India906
2Taiwan727
3Brazil442
4China347
5Argentina152
6Russian Federation102
7Colombia34
8Ukraine33
9United States32
10Thailand26

Friday, January 29, 2010

Botnet Statistics [2010-01-28]

detection period: 2010-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3390
number of botnet IPs notified to network operators: 3058

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1246
2BSNLNET524
3002.558.157/0001-62124
4AR-TEAR7-LACNIC86
5RCOM74
6002.449.992/0001-6457
7TFN-NET56
8TATACOMM-IN56
9HATHWAY-NET56
10002.558.134/0001-5845

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1313
2India767
3Brazil396
4China301
5Argentina137
6Russian Federation90
7United States36
8Colombia33
9Ukraine27
10Indonesia24

Thursday, January 28, 2010

Botnet Statistics [2010-01-27]

detection period: 2010-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3713
number of botnet IPs notified to network operators: 3349

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1277
2BSNLNET577
3002.558.157/0001-62136
4AR-TEAR7-LACNIC101
5TATACOMM-IN88
6TFN-NET86
7RCOM84
8002.449.992/0001-6469
9002.558.134/0001-5859
10HATHWAY-NET58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1374
2India859
3Brazil446
4China339
5Argentina155
6Russian Federation97
7United States34
8Colombia31
9Indonesia30
10Ethiopia28

Wednesday, January 27, 2010

Botnet Statistics [2010-01-26]

detection period: 2010-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3411
number of botnet IPs notified to network operators: 3054

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1256
2BSNLNET242
3TFN-NET208
4002.558.157/0001-62149
5AR-TEAR7-LACNIC90
6002.558.134/0001-5878
7002.449.992/0001-6463
8UNICOM-SD61
9RCOM45
10ETHIONET29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1477
2Brazil466
3China409
4India374
5Argentina154
6Russian Federation108
7Ethiopia29
8Colombia29
9Ukraine28
10United States27

Tuesday, January 26, 2010

Botnet Statistics [2010-01-25]

detection period: 2010-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 4183
number of botnet IPs notified to network operators: 3854

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1260
2BSNLNET547
3TFN-NET350
4002.558.157/0001-62121
5AR-TEAR7-LACNIC100
6RCOM88
7UNICOM-SD85
8HATHWAY-NET69
9TATACOMM-IN66
10002.558.134/0001-5855

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1635
2India835
3China684
4Brazil374
5Argentina171
6Russian Federation76
7United States29
8South Korea28
9Indonesia25
10Ethiopia24

Monday, January 25, 2010

Botnet Statistics [2010-01-24]

detection period: 2010-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3308
number of botnet IPs notified to network operators: 3042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1517
2BSNLNET168
3TFN-NET153
4UNICOM-SD65
5002.558.157/0001-6264
6AR-TEAR7-LACNIC61
7CHINANET-JS45
8CHINANET-GD44
9002.558.134/0001-5837
10UNICOM-HA35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1685
2China615
3India246
4Brazil225
5Argentina117
6Russian Federation63
7United States59
8Indonesia23
9South Korea22
10Ukraine21

Sunday, January 24, 2010

Botnet Statistics [2010-01-23]

detection period: 2010-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2611
number of botnet IPs notified to network operators: 2315

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET464
2BSNLNET359
3CHINANET-GD254
4002.558.157/0001-6283
5AR-TEAR7-LACNIC76
6TFN-NET62
7RCOM58
8UNICOM-SD57
9002.558.134/0001-5843
10TATACOMM-IN42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China649
2India550
3Taiwan543
4Brazil270
5Argentina141
6United States63
7Russian Federation61
8South Korea31
9Ukraine27
10Indonesia26

Saturday, January 23, 2010

Botnet Statistics [2010-01-22]

detection period: 2010-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3800
number of botnet IPs notified to network operators: 3471

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1069
2BSNLNET500
3CHINANET-GD340
4TFN-NET215
5002.558.157/0001-62133
6AR-TEAR7-LACNIC92
7RCOM80
8TATACOMM-IN56
9002.558.134/0001-5855
10002.449.992/0001-6454

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1305
2India735
3China667
4Brazil413
5Argentina161
6Russian Federation91
7United States50
8Ukraine31
9South Korea31
10Colombia28

Friday, January 22, 2010

Botnet Statistics [2010-01-21]

detection period: 2010-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3626
number of botnet IPs notified to network operators: 3255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET764
2BSNLNET570
3CHINANET-GD296
4002.558.157/0001-62135
5AR-TEAR7-LACNIC108
6RCOM90
7TFN-NET82
8TATACOMM-IN64
9002.558.134/0001-5855
10002.449.992/0001-6455

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan862
2India843
3China683
4Brazil416
5Argentina169
6Russian Federation118
7United States101
8South Korea33
9Colombia30
10Indonesia28

Thursday, January 21, 2010

Botnet Statistics [2010-01-20]

detection period: 2010-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3849
number of botnet IPs notified to network operators: 3452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET853
2BSNLNET534
3CHINANET-GD265
4TFN-NET221
5002.558.157/0001-62112
6AR-TEAR7-LACNIC103
7RCOM89
8TATACOMM-IN71
9002.449.992/0001-6463
10HATHWAY-NET59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1091
2India821
3China647
4Brazil403
5Argentina180
6United States112
7Russian Federation109
8Ukraine36
9South Korea36
10Indonesia31

Wednesday, January 20, 2010

Botnet Statistics [2010-01-19]

detection period: 2010-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4723
number of botnet IPs notified to network operators: 4335

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1264
2CHINANET-GD703
3BSNLNET569
4TFN-NET172
5002.558.157/0001-62157
6RCOM94
7AR-TEAR7-LACNIC93
8TATACOMM-IN71
9002.449.992/0001-6463
10002.558.134/0001-5858

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1449
2China1072
3India852
4Brazil474
5Argentina162
6United States156
7Russian Federation93
8Ukraine39
9Indonesia34
10South Korea33

Tuesday, January 19, 2010

Botnet Statistics [2010-01-18]

detection period: 2010-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 5057
number of botnet IPs notified to network operators: 4658

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1236
2CHINANET-GD846
3BSNLNET662
4TFN-NET193
5002.558.157/0001-62152
6AR-TEAR7-LACNIC107
7RCOM89
8TATACOMM-IN78
9002.449.992/0001-6468
10002.558.134/0001-5860

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1442
2China1303
3India936
4Brazil478
5Argentina170
6United States130
7Russian Federation105
8Ukraine38
9Thailand36
10South Korea31

Monday, January 18, 2010

Botnet Statistics [2010-01-17]

detection period: 2010-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3865
number of botnet IPs notified to network operators: 3540

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1279
2CHINANET-GD835
3BSNLNET191
4TFN-NET144
5002.558.157/0001-6277
6AR-TEAR7-LACNIC76
7UNICOM-SD49
8002.558.134/0001-5840
9RCOM31
10000.065.376/0002-6529

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1440
2China1191
3India282
4Brazil251
5Argentina129
6United States110
7Russian Federation84
8Ukraine39
9Thailand28
10South Korea24

Sunday, January 17, 2010

Botnet Statistics [2010-01-16]

detection period: 2010-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3746
number of botnet IPs notified to network operators: 3389

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1280
2BSNLNET441
3TFN-NET213
4002.558.157/0001-62100
5AR-TEAR7-LACNIC97
6RCOM77
7UNICOM-SD70
8TATACOMM-IN62
9002.558.134/0001-5858
10HATHWAY-NET39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1507
2India669
3China550
4Brazil337
5Argentina152
6Russian Federation95
7United States50
8Ukraine31
9South Korea29
10Thailand25

Saturday, January 16, 2010

Botnet Statistics [2010-01-15]

detection period: 2010-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3289
number of botnet IPs notified to network operators: 2861

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1BSNLNET615
2HINET-NET366
3TFN-NET322
4002.558.157/0001-62155
5AR-TEAR7-LACNIC111
6RCOM87
7TATACOMM-IN69
8002.558.134/0001-5866
9UNICOM-SD52
10HATHWAY-NET47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India884
2Taiwan701
3Brazil457
4China416
5Argentina166
6Russian Federation125
7United States52
8Ukraine40
9South Korea36
10Indonesia30

Friday, January 15, 2010

Botnet Statistics [2010-01-14]

detection period: 2010-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3774
number of botnet IPs notified to network operators: 3345

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET902
2BSNLNET477
3CHINANET-GD153
4002.558.157/0001-62147
5TFN-NET125
6AR-TEAR7-LACNIC108
7UNICOM-SD73
8RCOM57
9002.558.134/0001-5856
10000.065.376/0002-6548

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1040
2China684
3India677
4Brazil460
5Argentina165
6United States121
7Russian Federation111
8Thailand37
9Ukraine34
10South Korea34

Thursday, January 14, 2010

Botnet Statistics [2010-01-13]

detection period: 2010-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 4396
number of botnet IPs notified to network operators: 3967

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET701
2BSNLNET660
3CHINANET-GD490
4002.558.157/0001-62157
5TFN-NET138
6AR-TEAR7-LACNIC105
7TATACOMM-IN96
8RCOM95
9002.558.134/0001-5867
10HOSTNOC-5BLK65

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1067
2India981
3Taiwan857
4Brazil480
5United States172
6Argentina166
7Russian Federation131
8Ukraine47
9South Korea40
10Ethiopia29

Wednesday, January 13, 2010

Botnet Statistics [2010-01-12]

A botnet outbreak seemed to have occurred in the U.S., where nearly 200 bots were detected yesterday.

detection period: 2010-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 4419
number of botnet IPs notified to network operators: 4015

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET981
2CHINANET-GD555
3BSNLNET496
4002.558.157/0001-62166
5TFN-NET161
6AR-TEAR7-LACNIC114
7RCOM97
8TATACOMM-IN79
9HOSTNOC-5BLK64
10002.449.992/0001-6463

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1158
2China969
3India788
4Brazil510
5United States191
6Argentina175
7Russian Federation119
8Ukraine48
9South Korea34
10Ethiopia27

Tuesday, January 12, 2010

Botnet Statistics [2010-01-11]

Is there some kind of new malware circulating right now? The number of bots detected increased to nearly 5000, which is rare for the past few months.

detection period: 2010-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 4931
number of botnet IPs notified to network operators: 4560

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1246
2CHINANET-GD932
3BSNLNET628
4TFN-NET183
5002.558.157/0001-62145
6AR-TEAR7-LACNIC99
7RCOM92
8TATACOMM-IN66
9002.558.134/0001-5866
10HATHWAY-NET55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1441
2China1320
3India896
4Brazil444
5Argentina160
6Russian Federation116
7United States95
8Ukraine31
9Ethiopia31
10South Korea30

Monday, January 11, 2010

Botnet Statistics [2010-01-10]

detection period: 2010-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3749
number of botnet IPs notified to network operators: 3452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1226
2CHINANET-GD955
3TFN-NET197
4BSNLNET136
5002.558.157/0001-6264
6AR-TEAR7-LACNIC51
7UNICOM-SD40
8002.558.134/0001-5840
9002.449.992/0001-6424
10CHINANET-ZJ-WZ23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1432
2China1270
3Brazil230
4India206
5United States103
6Argentina103
7Russian Federation67
8South Korea23
9Poland20
10Colombia20

Sunday, January 10, 2010

Botnet Statistics [2010-01-09]

detection period: 2010-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 4033
number of botnet IPs notified to network operators: 3709

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1309
2CHINANET-GD698
3TFN-NET267
4BSNLNET262
5AR-TEAR7-LACNIC74
6002.558.157/0001-6268
7TATACOMM-IN55
8UNICOM-SD51
9RCOM49
10002.449.992/0001-6435

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1590
2China1097
3India434
4Brazil266
5Argentina126
6United States103
7Russian Federation67
8Ukraine29
9South Korea21
10Indonesia18

Saturday, January 9, 2010

Botnet Statistics [2010-01-08]

detection period: 2010-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3621
number of botnet IPs notified to network operators: 3312

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET752
2CHINANET-GD608
3BSNLNET329
4TFN-NET211
5002.558.157/0001-6291
6RCOM69
7UNICOM-SD66
8AR-TEAR7-LACNIC62
9TATACOMM-IN54
10002.558.134/0001-5847

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1166
2Taiwan980
3India538
4Brazil337
5Argentina111
6United States69
7Russian Federation63
8South Korea28
9Ukraine25
10Indonesia23

Friday, January 8, 2010

Botnet Statistics [2010-01-07]

detection period: 2010-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 3402
number of botnet IPs notified to network operators: 3103

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1223
2CHINANET-GD322
3BSNLNET314
4TFN-NET157
5002.558.157/0001-62104
6AR-TEAR7-LACNIC67
7TATACOMM-IN49
8RCOM47
9UNICOM-SD42
10002.558.134/0001-5836

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1394
2China661
3India475
4Brazil328
5Argentina112
6Russian Federation67
7United States36
8Indonesia26
9Ukraine23
10Germany22

Thursday, January 7, 2010

Botnet Statistics [2010-01-06]

detection period: 2010-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3142
number of botnet IPs notified to network operators: 2837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1278
2BSNLNET283
3TFN-NET151
4002.558.157/0001-6286
5RCOM69
6AR-TEAR7-LACNIC62
7TATACOMM-IN51
8UNICOM-SD46
9002.558.134/0001-5841
10002.449.992/0001-6440

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1442
2India474
3China399
4Brazil303
5Argentina102
6Russian Federation73
7United States30
8Colombia23
9Ukraine21
10Thailand21

Wednesday, January 6, 2010

Botnet Statistics [2010-01-05]

detection period: 2010-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 3418
number of botnet IPs notified to network operators: 3070

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1290
2BSNLNET318
3TFN-NET236
4002.558.157/0001-6292
5AR-TEAR7-LACNIC73
6TATACOMM-IN64
7CHINANET-GD55
8002.449.992/0001-6447
9RCOM45
10002.558.134/0001-5844

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1542
2India501
3China408
4Brazil332
5Argentina117
6Russian Federation72
7United States54
8Colombia28
9Ukraine27
10Indonesia27

Tuesday, January 5, 2010

Botnet Statistics [2010-01-04]

detection period: 2010-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3991
number of botnet IPs notified to network operators: 3633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1240
2BSNLNET449
3CHINANET-GD400
4TFN-NET226
5002.558.157/0001-62103
6AR-TEAR7-LACNIC82
7RCOM77
8TATACOMM-IN59
9UNICOM-SD52
10002.558.134/0001-5851

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1486
2China753
3India676
4Brazil361
5Argentina141
6Russian Federation91
7United States90
8Indonesia28
9Ukraine25
10South Korea24

Monday, January 4, 2010

Botnet Statistics [2010-01-03]

detection period: 2010-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3433
number of botnet IPs notified to network operators: 3137

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1359
2CHINANET-GD567
3TFN-NET286
4BSNLNET99
5AR-TEAR7-LACNIC65
6002.558.157/0001-6244
7UNICOM-SD38
8002.558.134/0001-5831
9RCOM20
10CHINANET-JS19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1657
2China862
3Brazil184
4India160
5Argentina110
6United States83
7Russian Federation77
8Poland24
9United Kingdom21
10Ukraine19

Sunday, January 3, 2010

Botnet Statistics [2010-01-02]

detection period: 2010-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3570
number of botnet IPs notified to network operators: 3286

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET857
2CHINANET-GD544
3BSNLNET467
4TFN-NET318
5AR-TEAR7-LACNIC84
6RCOM81
7002.558.157/0001-6268
8TATACOMM-IN63
9HATHWAY-NET55
10UNICOM-SD30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1192
2China860
3India714
4Brazil214
5Argentina131
6United States82
7Russian Federation65
8South Korea25
9Germany19
10Thailand18

Saturday, January 2, 2010

Botnet Statistics [2010-01-01]

detection period: 2010-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 3699
number of botnet IPs notified to network operators: 3297

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1208
2BSNLNET535
3CHINANET-GD411
4RCOM78
5TFN-NET73
6TATACOMM-IN68
7AR-TEAR7-LACNIC67
8002.558.157/0001-6251
9HATHWAY-NET50
10ETHIONET48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1291
2India778
3China752
4Brazil199
5Argentina125
6United States98
7Russian Federation74
8Ethiopia48
9Ukraine28
10South Korea19

Friday, January 1, 2010

Botnet Statistics [2009-12-31]

Happy New Year!

The United States has broken through the barrier of 100 detected bots today. I hope that in 2010, I can detect more and more bots in the US.

There is no way that Taiwan should top the chart for so long. It is really the fault of my detection system, which can only detect certain kinds of bots. As I do not own a spam-rich domain, I have no way to know if detection with greylisting is better in this regard.

Maybe I should ask some large installations of greylisting, like Texas A&M University, to share their logs? If it works, then it is very likely that I will have 10 times more bots to report!

detection period: 2009-12-31 00:00-23:59 UTC
total number of suspected botnet IPs: 3908
number of botnet IPs notified to network operators: 3455

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1042
2BSNLNET563
3CHINANET-GD348
4TFN-NET166
5RCOM90
6002.558.157/0001-6287
7AR-TEAR7-LACNIC85
8TATACOMM-IN83
9002.558.134/0001-5858
10UNICOM-SD52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1221
2India847
3China760
4Brazil318
5Argentina145
6United States102
7Russian Federation93
8Ukraine33
9Ethiopia30
10South Korea26