Custom Search

Wednesday, March 28, 2012

Botnet Statistics [2012-03-27]

The greylisting vps is still down. Today's number is taken from fake open relays only. Maybe I need to get another vps to replace the greylisting one.

detection period: 2012-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1941
number of botnet IPs notified to network operators: 1718
number of spam blocked: 161381
recipient count of spam blocked: 5484198

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD489
2HINET-NET455
3UNICOM-GD378
4UNICOM-BJ23
5CHINANET-JS15
6003.420.926/0002-0514
7002.558.157/0001-6213
8000.065.376/0002-6513
9033.530.486/0001-2912
10UNICOM-SD11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1042
2Taiwan462
3Brazil78
4United States43
5Russian Federation38
6India27
7Germany26
8Iran17
9Indonesia16
10France14

No comments:

Post a Comment