Custom Search

Thursday, December 3, 2015

Botnet Statistics [2015-12-02]

detection period: 2015-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 1246
number of botnet IPs notified to network operators: 1230
number of spam blocked: 89011
recipient count of spam blocked: 205762

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-AH159
2CHINANET-ZJ-JH137
3UNICOM-ZJ136
4WASU102
5CHINANET-SC97
6WASU-BB93
7CHINANET-HB93
8UNICOM-AH76
9CHINANET-ZJ67
10CHINANET-JS67

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1107
2Viet Nam34
3United States18
4Russian Federation11
5Brazil9
6India7
7Taiwan5
8Argentina5
9Germany4
10Thailand3

Wednesday, December 2, 2015

Botnet Statistics for November 2015

detection period: 2015-11-01 00:00 - 2015-11-30 23:59 UTC
total number of suspected botnet IPs: 33371
number of blocked spams: 1944904
recipient count of blocked spams: 52618574

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China14441
2Taiwan13138
3Viet Nam1893
4United States555
5India370
6Brazil237
7Russian Federation184
8Ukraine182
9Turkey164
10South Korea139
11Romania127
12Argentina102
13Indonesia99
14Mexico94
15Poland80
16Iran77
17United Kingdom76
18Germany75
19Thailand67
20Japan64
21Kazakhstan61
22Bulgaria61
23Italy54
24Colombia53
25Pakistan48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1Taiwan1615596
2Germany166469
3United States37190
4Brazil32681
5China28073
6United Kingdom24075
7South Korea6827
8Thailand5819
9Belgium5752
10Russian Federation2055
11Sweden2009
12India1934
13Spain1438
14Mexico1122
15Peru1120
16Antigua And Barbuda1056
17Indonesia1005
18Uruguay959
19Saudi Arabia888
20Chile822
21Viet Nam740
22Turkey724
23Argentina632
24Colombia540
25Dominican Republic422

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2015-12-01]

detection period: 2015-12-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.178.129.29Argentina
AR190.178.152.172Argentina
AR190.178.161.211Argentina
AR190.178.163.254Argentina
AR190.178.167.38Argentina
MX187.141.118.20Mexico
MX189.242.104.72Mexico
US50.255.96.65United States

List from greylisting:

country codeIP addressCountry
AR190.191.110.50Argentina
AR191.80.183.197Argentina
BD180.210.130.16Bangladesh
BG178.75.224.111Bulgaria
BO186.27.126.130Bolivia
BO186.27.127.129Bolivia
CM41.202.221.42Cameroon
EC200.125.239.214Ecuador
ES87.235.177.251Spain
IN117.217.147.209India
IN117.241.189.58India
IN122.169.95.49India
IN203.194.109.142India
RO109.98.160.237Romania
RO109.98.161.211Romania
RS188.2.127.120Serbia
US50.116.123.183United States