Botnet Statistics [2011-04-16]

Greylisting detection host got better, but still slow. I decided to move greylisting to another vps this morning. Yesterday's greylisting data is included below.

detection period: 2011-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3067
number of botnet IPs notified to network operators: 2478
number of blocked spams: 47495
recipient count of blocked spams: 1070412

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	390
2	UNICOM-HA	314
3	UNICOM-GD	274
4	CTTNET	233
5	UNICOM-HN	200
6	CHINANET-GD	118
7	KORNET-KR	86
8	BSNLNET	51
9	TELKOMNET	27
10	VNPT-VNNIC-VN	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1299
2	Taiwan	407
3	Russian Federation	160
4	South Korea	134
5	India	126
6	Brazil	121
7	Ukraine	81
8	Indonesia	53
9	Kazakhstan	38
10	Colombia	38