Daily Botnet Statistics

Thursday, June 20, 2013

Botnet Statistics [2013-06-19]

detection period: 2013-06-19 00:00-23:59 UTC
total number of suspected botnet IPs: 6761
number of botnet IPs notified to network operators: 6525
number of spam blocked: 104137
recipient count of spam blocked: 3638457

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1374
2	CHINANET-HE	932
3	HINET-NET	667
4	CRTC	421
5	CMNET	391
6	CTTNET	300
7	CHINANET-GD	176
8	CHINANET-FJ	84
9	UNICOM-SD	79
10	UNICOM-LN	60

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4819
2	Taiwan	694
3	United States	318
4	Brazil	86
5	Russian Federation	62
6	Colombia	56
7	Iran	54
8	India	46
9	Mexico	45
10	Argentina	43

Wednesday, June 19, 2013

Suspected Bot List [2013-06-18]

detection period: 2013-06-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 212

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BR	150.161.30.7	Brazil
CA	174.142.18.252	Canada
CN	110.210.0.51	China
CN	113.0.31.104	China
CN	119.0.208.174	China
CN	119.0.243.205	China
CN	150.255.209.182	China
CN	183.159.0.85	China
CN	222.214.0.79	China
GB	193.164.207.16	United Kingdom
GT	200.30.165.178	Guatemala
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.166.11.34	India
IN	122.180.71.10	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
JO	87.236.232.231	Jordan
LB	212.36.193.188	Lebanon
MX	148.208.224.251	Mexico
MX	177.228.74.25	Mexico
MX	187.240.73.166	Mexico
MX	200.92.57.205	Mexico
MX	201.132.167.105	Mexico
MX	201.164.163.184	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PH	202.86.204.202	Philippines
PK	111.68.104.132	Pakistan
PK	121.52.154.230	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SG	119.234.182.84	Singapore
TR	82.222.189.43	Turkey
TW	61.228.0.80	Taiwan
TW	61.228.0.183	Taiwan
US	24.178.82.50	United States
US	96.127.147.170	United States
US	192.161.54.12	United States
US	199.36.77.15	United States

List from greylisting:

Botnet Statistics [2013-06-18]

detection period: 2013-06-18 00:00-23:59 UTC
total number of suspected botnet IPs: 5160
number of botnet IPs notified to network operators: 4958
number of spam blocked: 73101
recipient count of spam blocked: 2597798

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1594
2	CHINANET-HE	628
3	HINET-NET	565
4	CTTNET	178
5	CHINANET-GD	166
6	CRTC	164
7	CMNET	129
8	CHINANET-FJ	61
9	CHINANET-HN	40
10	UNICOM-SD	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3579
2	Taiwan	575
3	United States	299
4	Brazil	60
5	Mexico	44
6	Iran	43
7	Argentina	43
8	Russian Federation	41
9	India	36
10	Colombia	34