Custom Search

Tuesday, September 2, 2014

Botnet Statistics [2014-09-01]

detection period: 2014-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 2142
number of botnet IPs notified to network operators: 2064
number of spam blocked: 132434
recipient count of spam blocked: 4138903

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1196
2CRTC127
3Wotone88
4CHINANET-GD59
5WASU42
6CHINANET-HB40
7UNICOM-BJ20
8CHINANET-JX19
9UNICOM-SD15
10WASU-BB14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1206
2China547
3Russian Federation47
4India47
5United States40
6Brazil21
7Indonesia19
8Iran16
9Viet Nam11
10Hong Kong11

Monday, September 1, 2014

Suspected Bot List [2014-08-31]

detection period: 2014-08-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IN27.5.182.53India
IN202.62.67.254India
IN203.90.114.228India
IR194.33.124.77Iran
IT31.199.192.17Italy
IT31.199.192.20Italy
PH58.69.100.234Philippines
PK221.120.222.69Pakistan
SA94.77.199.148Saudi Arabia
US50.201.42.106United States
UZ89.236.219.106Uzbekistan

List from greylisting:

Botnet Statistics [2014-08-31]

detection period: 2014-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 1928
number of botnet IPs notified to network operators: 1880
number of spam blocked: 148432
recipient count of spam blocked: 4540679

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1128
2CRTC128
3CHINANET-GD94
4Wotone88
5CHINANET-HB38
6CHINANET-JX20
7UNICOM-BJ15
8UNICOM-GD13
9UNICOM-SD8
10HICHINA7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1135
2China498
3Russian Federation39
4United States26
5Brazil25
6Indonesia19
7India13
8Viet Nam12
9Hong Kong9
10Iran8