Custom Search

Friday, January 6, 2017

Botnet Statistics [2017-01-05]

detection period: 2017-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 595
number of botnet IPs notified to network operators: 549
number of spam blocked: 15342
recipient count of spam blocked: 18283

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN226
2CHINANET-HB26
3MSFT18
4CMNET18
5UNICOM-GD13
6UNICOM-BJ13
7CHINANET-YN10
8UNICOM-HA9
9SV-CSCV-LACNIC8
10CHINANET-GD8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China421
2United States28
3India16
4Taiwan9
5El Salvador8
6Colombia7
7Brazil7
8Bangladesh7
9Russian Federation6
10Cambodia6

Thursday, January 5, 2017

Suspected Bot List [2017-01-04]

detection period: 2017-01-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2017-01-04]

detection period: 2017-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 317
number of botnet IPs notified to network operators: 312
number of spam blocked: 14040
recipient count of spam blocked: 17229

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN197
2CHINANET-HB12
3UNICOM-BJ10
4HINET-NET7
5UNICOM-GX6
6CHINANET-GD6
7UNICOM-SD5
8CMNET4
9CHINANET-JS4
10RingLink3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China277
2United States7
3Taiwan7
4Hong Kong3
5Austria2
6South Africa1
7Viet Nam1
8Venezuela1
9Ukraine1
10Thailand1