Botnet Statistics [2010-01-30]

detection period: 2010-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3502
number of botnet IPs notified to network operators: 3175

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1235
2	BSNLNET	485
3	TFN-NET	232
4	002.558.157/0001-62	102
5	RCOM	95
6	AR-TEAR7-LACNIC	81
7	TATACOMM-IN	78
8	HATHWAY-NET	59
9	UNICOM-SD	47
10	002.449.992/0001-64	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1477
2	India	785
3	Brazil	339
4	China	324
5	Argentina	133
6	Russian Federation	78
7	Unitedd States	34
8	Colombia	32
9	Ukraine	27
10	South Korea	26

Botnet Statistics [2010-01-29]

India took the number one spot yesterday, as their number of bots climbed to 900+. This is very rare for India. Another point worth mentioning is that the total number of bots detected is in the decline. I hope that is because my detection strategy is so effective, that spammers are forced to change their ways of sending mail. Just kidding:).

detection period: 2010-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3106
number of botnet IPs notified to network operators: 2725

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	581
2	HINET-NET	512
3	TFN-NET	202
4	002.558.157/0001-62	134
5	AR-TEAR7-LACNIC	95
6	TATACOMM-IN	91
7	RCOM	88
8	HATHWAY-NET	76
9	002.449.992/0001-64	60
10	002.558.134/0001-58	54

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	906
2	Taiwan	727
3	Brazil	442
4	China	347
5	Argentina	152
6	Russian Federation	102
7	Colombia	34
8	Ukraine	33
9	United States	32
10	Thailand	26

Botnet Statistics [2010-01-28]

detection period: 2010-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3390
number of botnet IPs notified to network operators: 3058

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1246
2	BSNLNET	524
3	002.558.157/0001-62	124
4	AR-TEAR7-LACNIC	86
5	RCOM	74
6	002.449.992/0001-64	57
7	TFN-NET	56
8	TATACOMM-IN	56
9	HATHWAY-NET	56
10	002.558.134/0001-58	45

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1313
2	India	767
3	Brazil	396
4	China	301
5	Argentina	137
6	Russian Federation	90
7	United States	36
8	Colombia	33
9	Ukraine	27
10	Indonesia	24

Botnet Statistics [2010-01-27]

detection period: 2010-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3713
number of botnet IPs notified to network operators: 3349

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1277
2	BSNLNET	577
3	002.558.157/0001-62	136
4	AR-TEAR7-LACNIC	101
5	TATACOMM-IN	88
6	TFN-NET	86
7	RCOM	84
8	002.449.992/0001-64	69
9	002.558.134/0001-58	59
10	HATHWAY-NET	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1374
2	India	859
3	Brazil	446
4	China	339
5	Argentina	155
6	Russian Federation	97
7	United States	34
8	Colombia	31
9	Indonesia	30
10	Ethiopia	28

Botnet Statistics [2010-01-26]

detection period: 2010-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3411
number of botnet IPs notified to network operators: 3054

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1256
2	BSNLNET	242
3	TFN-NET	208
4	002.558.157/0001-62	149
5	AR-TEAR7-LACNIC	90
6	002.558.134/0001-58	78
7	002.449.992/0001-64	63
8	UNICOM-SD	61
9	RCOM	45
10	ETHIONET	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1477
2	Brazil	466
3	China	409
4	India	374
5	Argentina	154
6	Russian Federation	108
7	Ethiopia	29
8	Colombia	29
9	Ukraine	28
10	United States	27

Botnet Statistics [2010-01-25]

detection period: 2010-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 4183
number of botnet IPs notified to network operators: 3854

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1260
2	BSNLNET	547
3	TFN-NET	350
4	002.558.157/0001-62	121
5	AR-TEAR7-LACNIC	100
6	RCOM	88
7	UNICOM-SD	85
8	HATHWAY-NET	69
9	TATACOMM-IN	66
10	002.558.134/0001-58	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1635
2	India	835
3	China	684
4	Brazil	374
5	Argentina	171
6	Russian Federation	76
7	United States	29
8	South Korea	28
9	Indonesia	25
10	Ethiopia	24

Botnet Statistics [2010-01-24]

detection period: 2010-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3308
number of botnet IPs notified to network operators: 3042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1517
2	BSNLNET	168
3	TFN-NET	153
4	UNICOM-SD	65
5	002.558.157/0001-62	64
6	AR-TEAR7-LACNIC	61
7	CHINANET-JS	45
8	CHINANET-GD	44
9	002.558.134/0001-58	37
10	UNICOM-HA	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1685
2	China	615
3	India	246
4	Brazil	225
5	Argentina	117
6	Russian Federation	63
7	United States	59
8	Indonesia	23
9	South Korea	22
10	Ukraine	21

Botnet Statistics [2010-01-23]

detection period: 2010-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2611
number of botnet IPs notified to network operators: 2315

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	464
2	BSNLNET	359
3	CHINANET-GD	254
4	002.558.157/0001-62	83
5	AR-TEAR7-LACNIC	76
6	TFN-NET	62
7	RCOM	58
8	UNICOM-SD	57
9	002.558.134/0001-58	43
10	TATACOMM-IN	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	649
2	India	550
3	Taiwan	543
4	Brazil	270
5	Argentina	141
6	United States	63
7	Russian Federation	61
8	South Korea	31
9	Ukraine	27
10	Indonesia	26

Botnet Statistics [2010-01-22]

detection period: 2010-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3800
number of botnet IPs notified to network operators: 3471

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1069
2	BSNLNET	500
3	CHINANET-GD	340
4	TFN-NET	215
5	002.558.157/0001-62	133
6	AR-TEAR7-LACNIC	92
7	RCOM	80
8	TATACOMM-IN	56
9	002.558.134/0001-58	55
10	002.449.992/0001-64	54

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1305
2	India	735
3	China	667
4	Brazil	413
5	Argentina	161
6	Russian Federation	91
7	United States	50
8	Ukraine	31
9	South Korea	31
10	Colombia	28

Botnet Statistics [2010-01-21]

detection period: 2010-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3626
number of botnet IPs notified to network operators: 3255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	764
2	BSNLNET	570
3	CHINANET-GD	296
4	002.558.157/0001-62	135
5	AR-TEAR7-LACNIC	108
6	RCOM	90
7	TFN-NET	82
8	TATACOMM-IN	64
9	002.558.134/0001-58	55
10	002.449.992/0001-64	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	862
2	India	843
3	China	683
4	Brazil	416
5	Argentina	169
6	Russian Federation	118
7	United States	101
8	South Korea	33
9	Colombia	30
10	Indonesia	28

Botnet Statistics [2010-01-20]

detection period: 2010-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3849
number of botnet IPs notified to network operators: 3452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	853
2	BSNLNET	534
3	CHINANET-GD	265
4	TFN-NET	221
5	002.558.157/0001-62	112
6	AR-TEAR7-LACNIC	103
7	RCOM	89
8	TATACOMM-IN	71
9	002.449.992/0001-64	63
10	HATHWAY-NET	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1091
2	India	821
3	China	647
4	Brazil	403
5	Argentina	180
6	United States	112
7	Russian Federation	109
8	Ukraine	36
9	South Korea	36
10	Indonesia	31

Botnet Statistics [2010-01-19]

detection period: 2010-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4723
number of botnet IPs notified to network operators: 4335

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1264
2	CHINANET-GD	703
3	BSNLNET	569
4	TFN-NET	172
5	002.558.157/0001-62	157
6	RCOM	94
7	AR-TEAR7-LACNIC	93
8	TATACOMM-IN	71
9	002.449.992/0001-64	63
10	002.558.134/0001-58	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1449
2	China	1072
3	India	852
4	Brazil	474
5	Argentina	162
6	United States	156
7	Russian Federation	93
8	Ukraine	39
9	Indonesia	34
10	South Korea	33

Botnet Statistics [2010-01-18]

detection period: 2010-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 5057
number of botnet IPs notified to network operators: 4658

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1236
2	CHINANET-GD	846
3	BSNLNET	662
4	TFN-NET	193
5	002.558.157/0001-62	152
6	AR-TEAR7-LACNIC	107
7	RCOM	89
8	TATACOMM-IN	78
9	002.449.992/0001-64	68
10	002.558.134/0001-58	60

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1442
2	China	1303
3	India	936
4	Brazil	478
5	Argentina	170
6	United States	130
7	Russian Federation	105
8	Ukraine	38
9	Thailand	36
10	South Korea	31

Botnet Statistics [2010-01-17]

detection period: 2010-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3865
number of botnet IPs notified to network operators: 3540

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1279
2	CHINANET-GD	835
3	BSNLNET	191
4	TFN-NET	144
5	002.558.157/0001-62	77
6	AR-TEAR7-LACNIC	76
7	UNICOM-SD	49
8	002.558.134/0001-58	40
9	RCOM	31
10	000.065.376/0002-65	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1440
2	China	1191
3	India	282
4	Brazil	251
5	Argentina	129
6	United States	110
7	Russian Federation	84
8	Ukraine	39
9	Thailand	28
10	South Korea	24

Botnet Statistics [2010-01-16]

detection period: 2010-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3746
number of botnet IPs notified to network operators: 3389

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1280
2	BSNLNET	441
3	TFN-NET	213
4	002.558.157/0001-62	100
5	AR-TEAR7-LACNIC	97
6	RCOM	77
7	UNICOM-SD	70
8	TATACOMM-IN	62
9	002.558.134/0001-58	58
10	HATHWAY-NET	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1507
2	India	669
3	China	550
4	Brazil	337
5	Argentina	152
6	Russian Federation	95
7	United States	50
8	Ukraine	31
9	South Korea	29
10	Thailand	25

Botnet Statistics [2010-01-15]

detection period: 2010-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3289
number of botnet IPs notified to network operators: 2861

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	615
2	HINET-NET	366
3	TFN-NET	322
4	002.558.157/0001-62	155
5	AR-TEAR7-LACNIC	111
6	RCOM	87
7	TATACOMM-IN	69
8	002.558.134/0001-58	66
9	UNICOM-SD	52
10	HATHWAY-NET	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	884
2	Taiwan	701
3	Brazil	457
4	China	416
5	Argentina	166
6	Russian Federation	125
7	United States	52
8	Ukraine	40
9	South Korea	36
10	Indonesia	30

Botnet Statistics [2010-01-14]

detection period: 2010-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3774
number of botnet IPs notified to network operators: 3345

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	902
2	BSNLNET	477
3	CHINANET-GD	153
4	002.558.157/0001-62	147
5	TFN-NET	125
6	AR-TEAR7-LACNIC	108
7	UNICOM-SD	73
8	RCOM	57
9	002.558.134/0001-58	56
10	000.065.376/0002-65	48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1040
2	China	684
3	India	677
4	Brazil	460
5	Argentina	165
6	United States	121
7	Russian Federation	111
8	Thailand	37
9	Ukraine	34
10	South Korea	34

Botnet Statistics [2010-01-13]

detection period: 2010-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 4396
number of botnet IPs notified to network operators: 3967

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	701
2	BSNLNET	660
3	CHINANET-GD	490
4	002.558.157/0001-62	157
5	TFN-NET	138
6	AR-TEAR7-LACNIC	105
7	TATACOMM-IN	96
8	RCOM	95
9	002.558.134/0001-58	67
10	HOSTNOC-5BLK	65

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1067
2	India	981
3	Taiwan	857
4	Brazil	480
5	United States	172
6	Argentina	166
7	Russian Federation	131
8	Ukraine	47
9	South Korea	40
10	Ethiopia	29

Botnet Statistics [2010-01-12]

A botnet outbreak seemed to have occurred in the U.S., where nearly 200 bots were detected yesterday.

detection period: 2010-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 4419
number of botnet IPs notified to network operators: 4015

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	981
2	CHINANET-GD	555
3	BSNLNET	496
4	002.558.157/0001-62	166
5	TFN-NET	161
6	AR-TEAR7-LACNIC	114
7	RCOM	97
8	TATACOMM-IN	79
9	HOSTNOC-5BLK	64
10	002.449.992/0001-64	63

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1158
2	China	969
3	India	788
4	Brazil	510
5	United States	191
6	Argentina	175
7	Russian Federation	119
8	Ukraine	48
9	South Korea	34
10	Ethiopia	27

Botnet Statistics [2010-01-11]

Is there some kind of new malware circulating right now? The number of bots detected increased to nearly 5000, which is rare for the past few months.

detection period: 2010-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 4931
number of botnet IPs notified to network operators: 4560

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1246
2	CHINANET-GD	932
3	BSNLNET	628
4	TFN-NET	183
5	002.558.157/0001-62	145
6	AR-TEAR7-LACNIC	99
7	RCOM	92
8	TATACOMM-IN	66
9	002.558.134/0001-58	66
10	HATHWAY-NET	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1441
2	China	1320
3	India	896
4	Brazil	444
5	Argentina	160
6	Russian Federation	116
7	United States	95
8	Ukraine	31
9	Ethiopia	31
10	South Korea	30

Botnet Statistics [2010-01-10]

detection period: 2010-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3749
number of botnet IPs notified to network operators: 3452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1226
2	CHINANET-GD	955
3	TFN-NET	197
4	BSNLNET	136
5	002.558.157/0001-62	64
6	AR-TEAR7-LACNIC	51
7	UNICOM-SD	40
8	002.558.134/0001-58	40
9	002.449.992/0001-64	24
10	CHINANET-ZJ-WZ	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1432
2	China	1270
3	Brazil	230
4	India	206
5	United States	103
6	Argentina	103
7	Russian Federation	67
8	South Korea	23
9	Poland	20
10	Colombia	20

Botnet Statistics [2010-01-09]

detection period: 2010-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 4033
number of botnet IPs notified to network operators: 3709

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1309
2	CHINANET-GD	698
3	TFN-NET	267
4	BSNLNET	262
5	AR-TEAR7-LACNIC	74
6	002.558.157/0001-62	68
7	TATACOMM-IN	55
8	UNICOM-SD	51
9	RCOM	49
10	002.449.992/0001-64	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1590
2	China	1097
3	India	434
4	Brazil	266
5	Argentina	126
6	United States	103
7	Russian Federation	67
8	Ukraine	29
9	South Korea	21
10	Indonesia	18

Botnet Statistics [2010-01-08]

detection period: 2010-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3621
number of botnet IPs notified to network operators: 3312

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	752
2	CHINANET-GD	608
3	BSNLNET	329
4	TFN-NET	211
5	002.558.157/0001-62	91
6	RCOM	69
7	UNICOM-SD	66
8	AR-TEAR7-LACNIC	62
9	TATACOMM-IN	54
10	002.558.134/0001-58	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1166
2	Taiwan	980
3	India	538
4	Brazil	337
5	Argentina	111
6	United States	69
7	Russian Federation	63
8	South Korea	28
9	Ukraine	25
10	Indonesia	23

Botnet Statistics [2010-01-07]

detection period: 2010-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 3402
number of botnet IPs notified to network operators: 3103

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1223
2	CHINANET-GD	322
3	BSNLNET	314
4	TFN-NET	157
5	002.558.157/0001-62	104
6	AR-TEAR7-LACNIC	67
7	TATACOMM-IN	49
8	RCOM	47
9	UNICOM-SD	42
10	002.558.134/0001-58	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1394
2	China	661
3	India	475
4	Brazil	328
5	Argentina	112
6	Russian Federation	67
7	United States	36
8	Indonesia	26
9	Ukraine	23
10	Germany	22

Botnet Statistics [2010-01-06]

detection period: 2010-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3142
number of botnet IPs notified to network operators: 2837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1278
2	BSNLNET	283
3	TFN-NET	151
4	002.558.157/0001-62	86
5	RCOM	69
6	AR-TEAR7-LACNIC	62
7	TATACOMM-IN	51
8	UNICOM-SD	46
9	002.558.134/0001-58	41
10	002.449.992/0001-64	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1442
2	India	474
3	China	399
4	Brazil	303
5	Argentina	102
6	Russian Federation	73
7	United States	30
8	Colombia	23
9	Ukraine	21
10	Thailand	21

Botnet Statistics [2010-01-05]

detection period: 2010-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 3418
number of botnet IPs notified to network operators: 3070

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1290
2	BSNLNET	318
3	TFN-NET	236
4	002.558.157/0001-62	92
5	AR-TEAR7-LACNIC	73
6	TATACOMM-IN	64
7	CHINANET-GD	55
8	002.449.992/0001-64	47
9	RCOM	45
10	002.558.134/0001-58	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1542
2	India	501
3	China	408
4	Brazil	332
5	Argentina	117
6	Russian Federation	72
7	United States	54
8	Colombia	28
9	Ukraine	27
10	Indonesia	27

Botnet Statistics [2010-01-04]

detection period: 2010-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3991
number of botnet IPs notified to network operators: 3633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1240
2	BSNLNET	449
3	CHINANET-GD	400
4	TFN-NET	226
5	002.558.157/0001-62	103
6	AR-TEAR7-LACNIC	82
7	RCOM	77
8	TATACOMM-IN	59
9	UNICOM-SD	52
10	002.558.134/0001-58	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1486
2	China	753
3	India	676
4	Brazil	361
5	Argentina	141
6	Russian Federation	91
7	United States	90
8	Indonesia	28
9	Ukraine	25
10	South Korea	24

Botnet Statistics [2010-01-03]

detection period: 2010-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3433
number of botnet IPs notified to network operators: 3137

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1359
2	CHINANET-GD	567
3	TFN-NET	286
4	BSNLNET	99
5	AR-TEAR7-LACNIC	65
6	002.558.157/0001-62	44
7	UNICOM-SD	38
8	002.558.134/0001-58	31
9	RCOM	20
10	CHINANET-JS	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1657
2	China	862
3	Brazil	184
4	India	160
5	Argentina	110
6	United States	83
7	Russian Federation	77
8	Poland	24
9	United Kingdom	21
10	Ukraine	19

Botnet Statistics [2010-01-02]

detection period: 2010-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3570
number of botnet IPs notified to network operators: 3286

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	857
2	CHINANET-GD	544
3	BSNLNET	467
4	TFN-NET	318
5	AR-TEAR7-LACNIC	84
6	RCOM	81
7	002.558.157/0001-62	68
8	TATACOMM-IN	63
9	HATHWAY-NET	55
10	UNICOM-SD	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1192
2	China	860
3	India	714
4	Brazil	214
5	Argentina	131
6	United States	82
7	Russian Federation	65
8	South Korea	25
9	Germany	19
10	Thailand	18

Botnet Statistics [2010-01-01]

detection period: 2010-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 3699
number of botnet IPs notified to network operators: 3297

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1208
2	BSNLNET	535
3	CHINANET-GD	411
4	RCOM	78
5	TFN-NET	73
6	TATACOMM-IN	68
7	AR-TEAR7-LACNIC	67
8	002.558.157/0001-62	51
9	HATHWAY-NET	50
10	ETHIONET	48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1291
2	India	778
3	China	752
4	Brazil	199
5	Argentina	125
6	United States	98
7	Russian Federation	74
8	Ethiopia	48
9	Ukraine	28
10	South Korea	19

Botnet Statistics [2009-12-31]

Happy New Year!

The United States has broken through the barrier of 100 detected bots today. I hope that in 2010, I can detect more and more bots in the US.

There is no way that Taiwan should top the chart for so long. It is really the fault of my detection system, which can only detect certain kinds of bots. As I do not own a spam-rich domain, I have no way to know if detection with greylisting is better in this regard.

Maybe I should ask some large installations of greylisting, like Texas A&M University, to share their logs? If it works, then it is very likely that I will have 10 times more bots to report!

detection period: 2009-12-31 00:00-23:59 UTC
total number of suspected botnet IPs: 3908
number of botnet IPs notified to network operators: 3455

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1042
2	BSNLNET	563
3	CHINANET-GD	348
4	TFN-NET	166
5	RCOM	90
6	002.558.157/0001-62	87
7	AR-TEAR7-LACNIC	85
8	TATACOMM-IN	83
9	002.558.134/0001-58	58
10	UNICOM-SD	52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1221
2	India	847
3	China	760
4	Brazil	318
5	Argentina	145
6	United States	102
7	Russian Federation	93
8	Ukraine	33
9	Ethiopia	30
10	South Korea	26