Botnet Statistics [2012-07-02]

Due to a configuration error I made to the greylisting system for a few minutes yesterday, I decided not to use its data today.

detection period: 2012-07-02 00:00-23:59 UTC
total number of suspected botnet IPs: 2485
number of botnet IPs notified to network operators: 2187
number of spam blocked: 128668
recipient count of spam blocked: 4219526

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	1161
2	UNICOM-GD	569
3	002.558.157/0001-62	19
4	000.065.376/0002-65	18
5	CHINANET-JS	17
6	003.420.926/0002-05	15
7	KORNET-KR	12
8	TELEHOUSE	9
9	033.530.486/0001-29	9
10	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1865
2	Brazil	104
3	Russian Federation	63
4	United States	51
5	South Korea	30
6	Netherlands	25
7	India	25
8	Ukraine	23
9	France	22
10	United Kingdom	18