Custom Search

Friday, April 30, 2010

Botnet Statistics for March 2010

detection period: 2010-03-01 00:00 - 2010-03-31 23:59 UTC
total number of suspected botnet IPs: 55591
number of blocked spams: 4225893
recipient count of blocked spams: 79043657

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan14476
2India13161
3China12452
4Brazil4939
5Argentina2579
6United States2376
7Russian Federation1103
8Thailand610
9Mexico387
10Uruguay364
11Ukraine307
12Ethiopia276
13Spain244
14Chile177
15South Korea158
16United Kingdom152
17Colombia144
18France112
19Germany110
20Indonesia99
21Kazakhstan91
22Italy70
23Canada70
24Japan69
25Belarus67

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1662639
2Brazil607645
3Taiwan359716
4India235181
5United States143707
6Indonesia118070
7Russian Federation100260
8Thailand99239
9Argentina96704
10Colombia95130
11France86624
12South Korea59094
13Poland56118
14Ukraine43226
15Viet Nam35247
16United Kingdom33218
17Turkey32695
18Mexico30306
19European Union28545
20Canada26114
21Czech Republic23393
22South Africa19825
23Japan18599
24Chile15310
25Germany14438

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-29]

detection period: 2010-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 4300
number of botnet IPs notified to network operators: 3906
number of blocked spams: 151892
recipient count of blocked spams: 2969118

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1309
2BSNLNET629
3RITELE253
4AR-TEAR7-LACNIC151
5002.558.157/0001-62133
6CHINANET-GD117
7RCOM83
8002.558.134/0001-5863
9HATHWAY-NET60
10TATACOMM-IN48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1316
2India913
3China747
4Brazil405
5Argentina227
6Russian Federation119
7Thailand95
8United States90
9Colombia32
10Indonesia31

Thursday, April 29, 2010

Botnet Statistics [2010-04-28]

detection period: 2010-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 4270
number of botnet IPs notified to network operators: 3905
number of blocked spams: 162235
recipient count of blocked spams: 3067912

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1331
2BSNLNET674
3RITELE141
4CHINANET-GD133
5AR-TEAR7-LACNIC129
6002.558.157/0001-62116
7RCOM75
8002.558.134/0001-5862
9TATACOMM-IN60
10HATHWAY-NET56

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1339
2India951
3China670
4Brazil404
5Argentina200
6Russian Federation112
7United States97
8Thailand67
9Mexico35
10Ukraine34

Wednesday, April 28, 2010

Botnet Statistics [2010-04-27]

detection period: 2010-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 4300
number of botnet IPs notified to network operators: 3909
number of blocked spams: 140917
recipient count of blocked spams: 2841104

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1356
2BSNLNET493
3RITELE226
4CHINANET-GD197
5AR-TEAR7-LACNIC108
6002.558.157/0001-62100
7RCOM86
8HATHWAY-NET68
9TATACOMM-IN57
10002.558.134/0001-5856

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1365
2China840
3India780
4Brazil372
5Argentina192
6Russian Federation127
7United States106
8Thailand81
9Mexico36
10Colombia29

Tuesday, April 27, 2010

Botnet Statistics for February 2010

detection period: 2010-02-01 00:00 - 2010-02-28 23:59 UTC
total number of suspected botnet IPs: 65322
number of blocked spams: 3806452
recipient count of blocked spams: 109294730

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India22952
2Taiwan15903
3Brazil7531
4China7254
5Argentina3781
6Russian Federation1904
7Thailand891
8Uruguay660
9Mexico579
10Ethiopia482
11Ukraine421
12Chile233
13Colombia220
14South Korea172
15Germany156
16Kazakhstan153
17Algeria140
18United States138
19Belarus136
20Japan133
21Indonesia100
22South Africa84
23Venezuela82
24Bulgaria81
25Peru67

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1253026
2Brazil602052
3India392523
4Taiwan382621
5Argentina130993
6Colombia123351
7Russian Federation116877
8Thailand112174
9France83723
10United States73363
11Indonesia72951
12Poland49457
13Ukraine38512
14South Korea31244
15South Africa30517
16Germany29079
17Chile22527
18United Kingdom19777
19Turkey18522
20Viet Nam15595
21Venezuela15199
22Greece14793
23Japan12591
24Hong Kong11664
25European Union10575

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-26]

detection period: 2010-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4446
number of botnet IPs notified to network operators: 4005
number of blocked spams: 198051
recipient count of blocked spams: 3126691

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1352
2BSNLNET587
3CHINANET-GD272
4AR-TEAR7-LACNIC142
5002.558.157/0001-62123
6RITELE93
7RCOM85
8002.558.134/0001-5864
9000.065.376/0002-6554
10TATACOMM-IN48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1363
2India857
3China804
4Brazil426
5Argentina224
6Russian Federation149
7United States96
8Thailand81
9Mexico39
10Colombia31

Monday, April 26, 2010

Botnet Statistics [2010-04-25]

detection period: 2010-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3665
number of botnet IPs notified to network operators: 3339
number of blocked spams: 199124
recipient count of blocked spams: 2808409

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1367
2CHINANET-GD333
3BSNLNET264
4RITELE191
5AR-TEAR7-LACNIC102
6002.558.157/0001-6287
7CAT-BB-NET44
8002.558.134/0001-5838
9TRUENET33
10UNICOM-SD31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1376
2China874
3India345
4Brazil275
5Argentina173
6United States121
7Thailand99
8Russian Federation74
9Mexico29
10Indonesia23

Sunday, April 25, 2010

Botnet Statistics [2010-04-24]

detection period: 2010-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3324
number of botnet IPs notified to network operators: 3028
number of blocked spams: 140692
recipient count of blocked spams: 2087204

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1280
2BSNLNET294
3RITELE286
4CHINANET-GD167
5AR-TEAR7-LACNIC77
6002.558.157/0001-6253
7RCOM49
8CAT-BB-NET36
9TRUENET32
10HATHWAY-NET29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1288
2China742
3India447
4Brazil184
5Argentina137
6United States132
7Thailand80
8Russian Federation61
9Colombia24
10Ukraine17

Saturday, April 24, 2010

Botnet Statistics for January 2010

detection period: 2010-01-01 00:00 - 2010-01-31 23:59 UTC
total number of suspected botnet IPs: 65037
number of blocked spams: 5197435
recipient count of blocked spams: 169541745

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan17327
2India16994
3China14190
4Brazil6842
5Argentina2778
6Russian Federation1587
7United States653
8Ukraine522
9Ethiopia492
10Uruguay369
11Thailand283
12Chile246
13Mexico190
14South Korea181
15Colombia175
16Germany171
17Algeria158
18Italy125
19Indonesia117
20Bulgaria97
21Belarus91
22Japan73
23United Kingdom73
24Venezuela72
25Poland71

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China2036479
2Taiwan734831
3Brazil536722
4India288372
5United States166481
6Russian Federation153591
7Argentina121782
8Indonesia108413
9Thailand102065
10Colombia101427
11France84516
12Ukraine79742
13United Kingdom62186
14Poland59526
15South Korea46077
16Germany29816
17European Union28565
18Turkey28155
19Hong Kong23321
20Chile22358
21Pakistan22140
22Italy20869
23Venezuela19995
24Greece19855
25Viet Nam18359

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-23]

detection period: 2010-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3456
number of botnet IPs notified to network operators: 3156
number of blocked spams: 91506
recipient count of blocked spams: 1696696

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1287
2BSNLNET361
3RITELE247
4CHINANET-GD204
5002.558.157/0001-6273
6RCOM59
7AR-TEAR7-LACNIC51
8TATACOMM-IN34
9UNICOM-SD33
10TRUENET31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1291
2China784
3India532
4Brazil227
5United States128
6Argentina94
7Thailand78
8Russian Federation68
9Colombia23
10Indonesia18

Friday, April 23, 2010

Botnet Statistics [2010-04-22]

detection period: 2010-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3324
number of botnet IPs notified to network operators: 3055
number of blocked spams: 118397
recipient count of blocked spams: 1840552

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1307
2BSNLNET304
3RITELE259
4CHINANET-GD179
5AR-TEAR7-LACNIC77
6002.558.157/0001-6263
7RCOM52
8TATACOMM-IN40
9UNICOM-SD33
10000.065.376/0002-6531

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1309
2China754
3India472
4Brazil218
5Argentina126
6United States86
7Russian Federation64
8Thailand60
9Indonesia21
10Colombia20

Thursday, April 22, 2010

Botnet Statistics [2010-04-21]

detection period: 2010-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3444
number of botnet IPs notified to network operators: 3147
number of blocked spams: 107105
recipient count of blocked spams: 1903794

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1327
2BSNLNET273
3CHINANET-GD255
4RITELE250
5AR-TEAR7-LACNIC94
6002.558.157/0001-6253
7RCOM41
8000.065.376/0002-6531
9TATACOMM-IN30
10UNICOM-SD27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1334
2China808
3India433
4Brazil196
5Argentina146
6United States124
7Thailand69
8Russian Federation69
9Colombia27
10Indonesia25

Wednesday, April 21, 2010

Botnet Statistics for December 2009

detection period: 2009-12-01 00:00 - 2009-12-31 23:59 UTC
total number of suspected botnet IPs: 57949
number of blocked spams: 3155913
recipient count of blocked spams: 79702344

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan21701
2China12138
3India11110
4Brazil5017
5Argentina2417
6Russian Federation1306
7Ukraine460
8United States424
9Ethiopia391
10Uruguay300
11Thailand291
12Chile196
13South Korea174
14Colombia137
15Algeria129
16Mexico127
17Germany120
18Kazakhstan88
19Indonesia86
20Bulgaria72
21United Kingdom70
22Italy69
23Belarus69
24Poland68
25Hong Kong63

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1176442
2Taiwan498018
3Brazil236205
4United Kingdom170750
5Russian Federation139714
6India135926
7United States83076
8Argentian59411
9Poland58815
10South Korea47017
11Thailand43585
12Colombia41202
13Indonesia37860
14Ukraine33319
15Iran29011
16Arab Emirates28465
17France24515
18Germany20768
19Pakistan19918
20Australia19788
21Philippines18936
22Italy18379
23Czech Republic17047
24Greece15701
25Hungary14118

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-20]

detection period: 2010-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3672
number of botnet IPs notified to network operators: 3313
number of blocked spams: 104227
recipient count of blocked spams: 1901575

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1298
2BSNLNET395
3RITELE261
4CHINANET-GD173
5AR-TEAR7-LACNIC73
6002.558.157/0001-6272
7RCOM47
8UNICOM-SD41
9TATACOMM-IN39
10076.535.764/0326-9034

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1306
2China804
3India571
4Brazil259
5United States129
6Argentina128
7Thailand75
8Russian Federation75
9Indonesia28
10Colombia23

Tuesday, April 20, 2010

Botnet Statistics [2010-04-19]

detection period: 2010-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3354
number of botnet IPs notified to network operators: 3045
number of blocked spams: 82224
recipient count of blocked spams: 1541979

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1316
2RITELE305
3BSNLNET250
4CHINANET-GD132
5002.558.157/0001-6261
6AR-TEAR7-LACNIC60
7UNICOM-SD33
8NAC-NETBLK0732
9002.558.134/0001-5832
10000.065.376/0002-6532

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1319
2China769
3India388
4Brazil243
5United States121
6Argentina104
7Thailand72
8Russian Federation70
9Indonesia26
10Colombia23

Monday, April 19, 2010

Botnet Statistics [2010-04-18]

detection period: 2010-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2683
number of botnet IPs notified to network operators: 2442
number of blocked spams: 75466
recipient count of blocked spams: 1458970

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1187
2RITELE385
3BSNLNET128
4AR-TEAR7-LACNIC48
5002.558.157/0001-6238
6TRUENET31
7CAT-BB-NET25
8000.065.376/0002-6524
9UNICOM-LN23
10CHINANET-ZJ-WZ19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1192
2China714
3India181
4Brazil151
5Argentina88
6Thailand79
7Russian Federation37
8United States24
9Indonesia18
10Colombia16

Sunday, April 18, 2010

Botnet Statistics for November 2009

detection period: 2009-11-01 00:00 - 2009-11-30 23:59 UTC
total number of suspected botnet IPs: 53088
number of blocked spams: 3805343
recipient count of blocked spams: 59327314

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China15350
2India11504
3Taiwan8659
4Brazil6025
5Argentina3710
6Russian Federation1919
7Ukraine693
8Thailand660
9Uruguay520
10Mexico367
11Ethiopia355
12United States331
13Chile277
14Peru242
15Colombia222
16Hong Kong182
17South Korea151
18Kazakhstan137
19Algeria123
20Germany122
21Belarus111
22Japan107
23Indonesia101
24Poland78
25Bulgaria71

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1894394
2Brazil321441
3Taiwan196271
4United Kingdom163573
5India128323
6United States117254
7France103380
8Russian Federation87901
9South Korea79169
10Ukraine56337
11Viet Nam52955
12Argentina51102
13Thailand50374
14Colombia46353
15Indonesia44668
16Slovakia38502
17Latvia37943
18Mexico30632
19Germany26479
20Arab Emirates22539
21Pakistan19319
22Poland18955
23Turkey17820
24Chile16244
25Bulgaria13850

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-17]

detection period: 2010-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3125
number of botnet IPs notified to network operators: 2802
number of blocked spams: 135735
recipient count of blocked spams: 2458869

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1336
2BSNLNET293
3RITELE216
4AR-TEAR7-LACNIC68
5002.558.157/0001-6263
6RCOM46
7TRUENET37
8UNICOM-SD30
9002.558.134/0001-5829
10000.065.376/0002-6529

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1340
2China557
3India444
4Brazil229
5Argentina114
6Thailand84
7Russian Federation64
8United States25
9Mexico24
10Indonesia22

Saturday, April 17, 2010

Botnet Statistics [2010-04-16]

detection period: 2010-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2916
number of botnet IPs notified to network operators: 2637
number of blocked spams: 80470
recipient count of blocked spams: 1663028

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1184
2BSNLNET281
3RITELE205
4AR-TEAR7-LACNIC72
5002.558.157/0001-6269
6TRUENET36
7RCOM34
8002.558.134/0001-5833
9UNICOM-SD32
10002.449.992/0001-6426

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1193
2China533
3India404
4Brazil254
5Argentina132
6Thailand71
7Russian Federation61
8United States24
9Mexico24
10Indonesia22

Friday, April 16, 2010

Botnet Statistics [2010-04-15]

detection period: 2010-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3661
number of botnet IPs notified to network operators: 3303
number of blocked spams: 127660
recipient count of blocked spams: 2450356

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1244
2BSNLNET415
3RITELE374
4AR-TEAR7-LACNIC97
5002.558.157/0001-6292
6RCOM68
7TATACOMM-IN47
8002.558.134/0001-5844
9HATHWAY-NET40
10002.449.992/0001-6437

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1252
2China755
3India634
4Brazil325
5Argentina166
6Russian Federation96
7Thailand75
8United States40
9Indonesia24
10Ukraine23

Thursday, April 15, 2010

Botnet Statistics for October 2009

detection period: 2009-10-01 00:00 - 2009-10-31 23:59 UTC
total number of suspected botnet IPs: 76181
number of blocked spams: 3779164
recipient count of blocked spams: 70722504

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China22294
2India16365
3Taiwan11943
4Brazil9493
5Argentina5339
6Russian Federation2932
7Uruguay807
8Ukraine768
9Mexico549
10Thailand526
11Ethiopia497
12United States445
13Hong Kong377
14Chile333
15Algeria326
16Colombia284
17Peru271
18South Korea222
19Kazakhstan221
20Germany180
21Belarus157
22Japan138
23Indonesia119
24Pakistan82
25Italy81

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1876022
2Taiwan972674
3Brazil234643
4India151568
5Argentina83899
6Russian Federation69876
7United States41642
8Thailand31022
9France28893
10Colombia28617
11Ukraine28441
12South Korea25523
13Indonesia17353
14Poland15591
15Hong Kong14052
16Bulgaria10760
17United Kingdom10602
18Mexico10067
19Slovakia8679
20Chile8505
21Germany7174
22Pakistan7155
23Kazakhstan7143
24Greece6627
25Algeria5921

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-14]

detection period: 2010-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2839
number of botnet IPs notified to network operators: 2494
number of blocked spams: 110730
recipient count of blocked spams: 2000940

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET760
2BSNLNET211
3CHINANET-GD180
4AR-TEAR7-LACNIC95
5RITELE90
6002.558.157/0001-6283
7UNICOM-SD47
8RCOM42
9002.558.134/0001-5838
10TRUENET33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan773
2China647
3India342
4Brazil304
5Argentina160
6United States137
7Russian Federation82
8Thailand77
9Mexico28
10Colombia26

Wednesday, April 14, 2010

Botnet Statistics [2010-04-13]

detection period: 2010-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3269
number of botnet IPs notified to network operators: 3022
number of blocked spams: 101094
recipient count of blocked spams: 1715697

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1289
2RITELE395
3BSNLNET218
4CHINANET-GD201
5002.558.157/0001-6253
6AR-TEAR7-LACNIC52
7RCOM39
8UNICOM-SD37
9000.065.376/0002-6526
10TATACOMM-IN24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1301
2China883
3India341
4Brazil205
5United States150
6Argentina87
7Russian Federation43
8Thailand28
9Indonesia22
10Colombia20

Tuesday, April 13, 2010

Botnet Statistics [2010-04-12]

detection period: 2010-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2661
number of botnet IPs notified to network operators: 2479
number of blocked spams: 91716
recipient count of blocked spams: 1404349

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1262
2RITELE360
3CHINANET-GD242
4002.558.157/0001-6249
5BSNLNET27
6AR-TEAR7-LACNIC27
7076.535.764/0326-9023
8000.065.376/0002-6516
9UNICOM-SD15
10JUMPSTART-513

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1269
2China768
3Brazil172
4United States114
5India62
6Argentina56
7Russian Federation35
8Colombia19
9Poland18
10Indonesia18

Monday, April 12, 2010

Botnet Statistics for September 2009

detection period: 2009-09-01 00:00 - 2009-09-30 23:59 UTC
total number of suspected botnet IPs: 58046
number of blocked spams: 3951387
recipient count of blocked spams: 76339236

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan15991
2China12491
3India10181
4Brazil7303
5Argentina4111
6Russian Federation1771
7Ukraine542
8Uruguay510
9United States443
10Thailand402
11Ethiopia384
12Mexico358
13Hong Kong325
14Colombia270
15Chile270
16South Korea262
17Germany206
18Algeria186
19Kazakhstan125
20Belarus117
21Indonesia115
22Peru101
23Bulgaria91
24Japan83
25France80

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China2017572
2Taiwan1023959
3Brazil214592
4India118687
5Argentina76432
6Russian Federation55048
7France43419
8United States38941
9Malaysia32500
10South Korea32464
11Poland29222
12Indonesia27160
13Ukraine24070
14Colombia22829
15Thailand19618
16Hong Kong19174
17Germany14638
18Iran12654
19Greece9991
20United Kingdom9221
21Mexico7886
22Pakistan7341
23Bulgaria6990
24Venezuela5314
25Algeria4916

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-11]

detection period: 2010-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2784
number of botnet IPs notified to network operators: 2603
number of blocked spams: 125654
recipient count of blocked spams: 1858074

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1321
2CHINANET-GD306
3RITELE243
4BSNLNET53
5SHARKTECH-327
6076.535.764/0326-9021
7002.558.157/0001-6221
8UNICOM-SD20
9AR-TEAR7-LACNIC20
10JUMPSTART-516

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1329
2China766
3United States210
4Brazil122
5India83
6Argentina43
7Russian Federation27
8Ukraine15
9Poland15
10South Korea15

Sunday, April 11, 2010

Botnet Statistics [2010-04-10]

detection period: 2010-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3330
number of botnet IPs notified to network operators: 3091
number of blocked spams: 109389
recipient count of blocked spams: 1912613

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1338
2RITELE427
3CHINANET-GD262
4BSNLNET158
5AR-TEAR7-LACNIC46
6002.558.157/0001-6242
7RCOM35
8SHARKTECH-330
9UNICOM-SD25
10HATHWAY-NET24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1347
2China951
3India267
4United States211
5Brazil183
6Argentina87
7Russian Federation52
8Colombia20
9South Korea18
10Ukraine15

Saturday, April 10, 2010

Botnet Statistics [2010-04-09]

detection period: 2010-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2983
number of botnet IPs notified to network operators: 2724
number of blocked spams: 115472
recipient count of blocked spams: 2215063

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1225
2BSNLNET207
3RITELE181
4CHINANET-GD164
5002.558.157/0001-6267
6AR-TEAR7-LACNIC65
7RCOM43
8002.558.134/0001-5830
9002.449.992/0001-6429
10UNICOM-SD26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1233
2China622
3India335
4Brazil261
5Argentina111
6United States95
7Russian Federation69
8Indonesia24
9Colombia23
10Ukraine17

Friday, April 9, 2010

Botnet Statistics for August 2009

detection period: 2009-08-01 00:00 - 2009-08-31 23:59 UTC
total number of suspected botnet IPs: 107902
number of blocked spams: 4900728
recipient count of blocked spams: 104544986

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India25424
2China20873
3Taiwan20236
4Brazil16852
5Argentina9338
6Russian Federation3427
7Uruguay1088
8Ukraine981
9Hong Kong894
10Ethiopia836
11Chile830
12Mexico809
13Colombia514
14United States504
15Thailand503
16Algeria365
17Kazakhstan340
18Germany287
19South Korea285
20Peru248
21Belarus241
22Egypt199
23Indonesia171
24Turkey158
25Italy152

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China2013844
2Taiwan1249943
3Brazil411700
4India260666
5Argentina163315
6Russian Federation91918
7United States74856
8Malaysia57732
9South Korea49825
10Indonesia44388
11France43420
12Ukraine38882
13Hong Kong37172
14Colombia34010
15Poland32303
16Thailand29761
17Germany22946
18Bulgaria18163
19Chile17615
20Venezuela17276
21Iran9749
22Algeria8313
23Romania7861
24Uruguay7572
25Italy7555

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-08]

detection period: 2010-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3022
number of botnet IPs notified to network operators: 2756
number of blocked spams: 116917
recipient count of blocked spams: 2242221

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1247
2RITELE396
3BSNLNET243
4002.558.157/0001-6273
5AR-TEAR7-LACNIC50
6RCOM38
7002.558.134/0001-5829
8002.449.992/0001-6429
9TATACOMM-IN27
10UNICOM-SD26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1260
2China685
3India374
4Brazil248
5Argentina99
6Russian Federation69
7United States27
8Indonesia27
9Colombia24
10Thailand19

Thursday, April 8, 2010

Botnet Statistics [2010-04-07]

detection period: 2010-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2652
number of botnet IPs notified to network operators: 2390
number of blocked spams: 98899
recipient count of blocked spams: 1710477

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET970
2RITELE386
3BSNLNET232
4002.558.157/0001-6258
5AR-TEAR7-LACNIC45
6RCOM39
7HATHWAY-NET26
8076.535.764/0326-9025
9UNICOM-SD24
10002.449.992/0001-6424

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan980
2China652
3India360
4Brazil227
5Argentina79
6Russian Federation58
7United States32
8Ukraine24
9Indonesia24
10Thailand21

Wednesday, April 7, 2010

Botnet Statistics [2010-04-06]

A network named RITELE have been staying on my botnet charts for several weeks. After looking up for its WHOIS data, why it is staying there is beyond me. That particular network is composed of 2 class B networks, and belongs to Research Institution of Telecom in Beijing, China.

Although I could not find their website, an organization with such name (Research? Telecom?) should be very good at securing their computers. It is very unusual to let hundreds of their computers participate in spam runs for so long. Did I notify the wrong contact? I don't think so, because it is CNCERT who I notify of most bots in China.

detection period: 2010-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 2827
number of botnet IPs notified to network operators: 2599
number of blocked spams: 101451
recipient count of blocked spams: 1747767

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1293
2RITELE357
3BSNLNET148
4002.558.157/0001-6251
5AR-TEAR7-LACNIC45
6UNICOM-SD26
7RCOM26
8076.535.764/0326-9026
9TATACOMM-IN25
10HATHWAY-NET24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1306
2China623
3India244
4Brazil234
5Argentina89
6Russian Federation52
7United States33
8Indonesia25
9Ukraine19
10Colombia19

Tuesday, April 6, 2010

Botnet Statistics for July 2009

The following is collected from two vpses of mine. I tried to keep at least two vpses running at the same time. If an unexpected hardware or network problem hits one vps, I still have something on the other one to report.

detection period: 2009-07-01 00:00 - 2009-07-31 23:59 UTC
total number of suspected botnet IPs: 78186
number of blocked spams: 2465875
recipient count of blocked spams: 54559064

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan19257
2India18531
3Brazil12300
4China10100
5Argentina7297
6Russian Federation2392
7Uruguay939
8Ukraine667
9Chile624
10Hong Kong585
11Mexico541
12Ethiopia464
13Colombia406
14United States294
15Thailand273
16Algeria236
17Kazakhstan235
18Germany234
19South Korea175
20Belarus168
21Japan143
22Indonesia137
23Turkey134
24Italy129
25Costa Rica124

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1Taiwan1036100
2China449094
3Brazil229515
4India171946
5Argentina96138
6Malaysia91380
7Russian Federation53137
8United States35679
9Hong Kong23099
10Ukraine22541
11Indonesia18734
12Germany18535
13Colombia18459
14Poland16696
15France15755
16Thailand15580
17South Korea14999
18Chile10815
19Iran9416
20Bulgaria9097
21Venezuela8474
22Viet Nam7022
23Uruguay7001
24United Kingdom5797
25Spain5428

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2010-04-05]

detection period: 2010-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 3109
number of botnet IPs notified to network operators: 2862
number of blocked spams: 147399
recipient count of blocked spams: 2630787

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1393
2RITELE324
3BSNLNET238
4002.558.157/0001-6273
5AR-TEAR7-LACNIC63
6RCOM47
7TATACOMM-IN39
8076.535.764/0326-9033
9002.558.134/0001-5833
10002.449.992/0001-6426

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1399
2China584
3India388
4Brazil279
5Argentina106
6Russian Federation63
7United States36
8Indonesia32
9Ukraine18
10Thailand17

Monday, April 5, 2010

Botnet Statistics [2010-04-04]

detection period: 2010-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 2440
number of botnet IPs notified to network operators: 2223
number of blocked spams: 154994
recipient count of blocked spams: 2873753

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1070
2RITELE316
3BSNLNET110
4AR-TEAR7-LACNIC55
5002.558.157/0001-6242
6UNICOM-SD33
7002.558.134/0001-5822
8076.535.764/0326-9019
9UNICOM-LN17
10000.065.376/0002-6517

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1077
2China628
3India172
4Brazil162
5Argentina92
6United States44
7Russian Federation44
8Indonesia23
9Ukraine16
10Thailand16

Sunday, April 4, 2010

Botnet Statistics [2010-04-03]

detection period: 2010-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 2614
number of botnet IPs notified to network operators: 2366
number of blocked spams: 121717
recipient count of blocked spams: 2386290

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET887
2RITELE426
3BSNLNET235
4AR-TEAR7-LACNIC61
5002.558.157/0001-6256
6RCOM40
7002.558.134/0001-5830
8TATACOMM-IN25
9HATHWAY-NET25
10UNICOM-SD24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan895
2China720
3India371
4Brazil201
5Argentina108
6Russian Federation43
7United States39
8Indonesia23
9Thailand19
10Colombia17

Saturday, April 3, 2010

Botnet Statistics for June 2009

I started to detect and report bots around last June, when I rented my first vps from VPSLink. I did not have the chance to publish my work from the start, as this blog was an afterthought. To put all the collected data in another perspective, I decided to present them in a new, monthly format.

I regularly move the collected data (mail log) off my vpses, which only have limited storage space. Now all the old data (since last June) reside on my Windows PC at home. Unable to move them back to the vps (I have only 256Kbps upload bandwidth at home), I have to process them under UWIN , a UNIX emulation under Windows by AT&T, instead. A script taking minutes to run in the vps, now takes hours to complete under UWIN. I knew Windows was not a good fit for a UNIX environment, but I never thought the difference would be so huge.

detection period: 2009-06-08 07:37 - 2009-06-30 23:59 UTC
total number of suspected botnet IPs: 15240
number of blocked spams: 940245
recipient count of blocked spams: 13480394

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan14726
2China258
3Brazil54
4India46
5Russian Federation23
6United States22
7Indonesia8
8Bulgaria8
9Hong Kong7
10Germany6
11Colombia6
12Argentina6
13Pakistan5
14France5
15Egypt5
16Thailand4
17South Korea4
18Iran4
19Czech Republic4
20Philippines3
21Malaysia3
22United Kingdom3
23Spain3
24Ukraine2
25Mongolia2

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1Taiwan725865
2Malaysia152121
3China57677
4Brazil802
5United States618
6India411
7Russian Federation364
8Hong Kong342
9Indonesia278
10Ukraine208
11Argentina150
12Bangladesh144
13Colombia122
14Germany118
15Bulgaria112
16Czech Republic108
17United Kingdom71
18Czechoslovakia68
19Belgium64
20Italy61
21Thailand60
22Philippines60
23Pakistan52
24Egypt47
25Canada47

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: