Botnet Statistics [2010-02-02]

detection period: 2010-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3651
number of botnet IPs notified to network operators: 3240
number of blocked spams: 211178
recipient count of blocked spams: 4795358

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	798
2	HINET-NET	732
3	TFN-NET	190
4	002.558.157/0001-62	151
5	AR-TEAR7-LACNIC	115
6	TATACOMM-IN	84
7	RCOM	84
8	002.558.134/0001-58	71
9	HATHWAY-NET	65
10	002.449.992/0001-64	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1129
2	Taiwan	932
3	Brazil	469
4	China	372
5	Argentina	184
6	Russian Federation	102
7	United States	35
8	Ethiopia	34
9	Colombia	33
10	South Korea	28

Botnet Statistics [2010-02-01]

detection period: 2010-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 3685
number of botnet IPs notified to network operators: 3334
number of blocked spams: 146142
recipient count of blocked spams: 4313429

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1255
2	BSNLNET	531
3	002.558.157/0001-62	147
4	TFN-NET	141
5	RCOM	76
6	AR-TEAR7-LACNIC	74
7	TATACOMM-IN	66
8	002.449.992/0001-64	60
9	002.558.134/0001-58	50
10	UNICOM-SD	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1405
2	India	787
3	China	430
4	Brazil	425
5	Argentina	134
6	Russian Federation	79
7	United States	36
8	South Korea	29
9	Ukraine	28
10	Colombia	28

Botnet Statistics [2010-01-31]

Last week I read a paper titled "Spamming Chains: A New Way of Understanding Spammer Behavior" from CEAS 2009, and then realized that I should add number of blocked spams and recipient count of blocked spams to my daily statistics. So here they are.

detection period: 2010-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 3140
number of botnet IPs notified to network operators: 2876
number of blocked spams: 142094
recipient count of blocked spams: 4283754

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1338
2	BSNLNET	221
3	TFN-NET	149
4	002.558.157/0001-62	84
5	UNICOM-SD	64
6	AR-TEAR7-LACNIC	60
7	CHINANET-JS	43
8	UNICOM-HA	38
9	CHINANET-GD	38
10	002.558.134/0001-58	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1499
2	China	579
3	India	315
4	Brazil	255
5	Argentina	124
6	Russian Federation	55
7	United States	32
8	Colombia	21
9	Thailand	19
10	Indonesia	19