Botnet Statistics [2010-02-20]

detection period: 2010-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3201
number of botnet IPs notified to network operators: 2920
number of blocked spams: 108320
recipient count of blocked spams: 3359644

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1299
2	BSNLNET	444
3	002.558.157/0001-62	110
4	AR-TEAR7-LACNIC	100
5	CHINATELECOM-BJ	88
6	RCOM	65
7	TATACOMM-IN	50
8	002.558.134/0001-58	50
9	002.449.992/0001-64	44
10	HATHWAY-NET	39

(I found the table above was incorrect while browsing my own blog on Feb 27. As HiNet is an ISP in Taiwan, there is no way that Hinet had 1299 bots while only 894 bots were found in Taiwan. It seems to be the same table from Feb 19. I must have forgotten to update this table. The recalculated, correct one is shown below.)

Rank	Network	# of suspected botnet IPs
1	HINET-NET	883
2	BSNLNET	617
3	CHINATELECOM-BJ	147
4	AR-TEAR7-LACNIC	137
5	002.558.157/0001-62	100
6	RCOM	72
7	002.558.134/0001-58	59
8	HATHWAY-NET	55
9	TATACOMM-IN	53
10	UNICOM-SD	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	894
2	India	870
3	China	464
4	Brazil	334
5	Argentina	210
6	Russian Federation	85
7	Thailand	37
8	Colombia	27
9	Uruguay	23
10	Ukraine	22