Botnet Statistics [2011-04-12]

The greylisting detection system is heavily loaded, perhaps caused by other vpses on the same host node. I can not finish the calculation on its data, so they are not included below.

detection period: 2011-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1380
number of botnet IPs notified to network operators: 1085
number of blocked spams: 138365
recipient count of blocked spams: 4209915

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	371
2	UNICOM-GD	240
3	CHINANET-GD	51
4	NTHAIRNET	22
5	000.065.376/0002-65	16
6	UNICOM-SD	14
7	CHINANET-JS	13
8	CHINANET-ZJ-WZ	12
9	033.530.486/0001-29	11
10	003.420.926/0002-05	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	460
2	Taiwan	376
3	Brazil	81
4	United States	59
5	Russian Federation	54
6	India	26
7	Kazakhstan	23
8	South Korea	21
9	Ukraine	20
10	France	18