Botnet Statistics [2011-05-28]

It turned out that I did not notice the SMTP server in my fake open relay died unexpectedly. That is why it had collected nothing for the past few days. I will see whether it can capture anything tomorrow.

detection period: 2011-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1188
number of botnet IPs notified to network operators: 816
number of blocked spams: 0
recipient count of blocked spams: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	129
2	BSNLNET	36
3	CRTC	33
4	CHINANET-JS	31
5	KORNET-KR	29
6	AR-TEAR7-LACNIC	24
7	PTCL	16
8	TELKOMNET	12
9	VNPT-VNNIC-VN	11
10	TATACOMM-IN	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	357
2	India	95
3	Russian Federation	65
4	Argentina	47
5	Brazil	46
6	South Korea	44
7	Indonesia	37
8	United States	33
9	Poland	30
10	Chile	28