Custom Search

Friday, March 31, 2017

Botnet Statistics [2017-03-30]

detection period: 2017-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 260
number of botnet IPs notified to network operators: 223
number of spam blocked: 914
recipient count of spam blocked: 943

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1SINGLEHOP14
2CMNET14
3CHINANET-AH9
4VNPT-VNNIC-VN8
5CHINANET-GD8
6BHARTI-IN6
7UNICOM-BJ5
8Chinafic5
9CHINANET-JS4
10BSNLNET4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China80
2United States28
3India24
4Viet Nam13
5Russian Federation11
6Mexico11
7Indonesia9
8Turkey6
9Peru6
10Saudi Arabia5

Suspected Bot List [2017-03-30]

detection period: 2017-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, March 30, 2017

Botnet Statistics [2017-03-29]

detection period: 2017-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 279
number of botnet IPs notified to network operators: 250
number of spam blocked: 2394
recipient count of spam blocked: 32388

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET11
2VNPT-VNNIC-VN9
3ALISOFT8
4CHINANET-JS6
5Chinafic5
6CHINANET-JX5
7CHINANET-GZ5
8CHINANET-AH5
9VIETEL-VNNIC-VN4
10UNICOM-SH4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China109
2Viet Nam15
3United States14
4Russian Federation14
5Mexico9
6Argentina8
7India7
8Indonesia7
9Brazil6
10Ukraine5