Botnet Statistics [2010-02-27]

detection period: 2010-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3448
number of botnet IPs notified to network operators: 3042
number of blocked spams: 138775
recipient count of blocked spams: 4573252

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	831
2	HINET-NET	342
3	RITELE	201
4	AR-TEAR7-LACNIC	182
5	002.558.157/0001-62	177
6	002.558.134/0001-58	89
7	RCOM	87
8	HATHWAY-NET	76
9	TATACOMM-IN	75
10	002.449.992/0001-64	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1161
2	China	553
3	Brazil	484
4	Taiwan	355
5	Argentina	251
6	Russian Federation	141
7	Thailand	65
8	Mexico	45
9	Ukraine	36
10	Uruguay	34

Botnet Statistics [2010-02-26]

detection period: 2010-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4298
number of botnet IPs notified to network operators: 3818
number of blocked spams: 187492
recipient count of blocked spams: 5166771

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	1099
2	HINET-NET	632
3	002.558.157/0001-62	202
4	AR-TEAR7-LACNIC	199
5	RITELE	150
6	RCOM	109
7	002.558.134/0001-58	100
8	TATACOMM-IN	98
9	HATHWAY-NET	85
10	002.449.992/0001-64	76

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1498
2	Taiwan	643
3	Brazil	610
4	China	533
5	Argentina	289
6	Russian Federation	174
7	Thailand	62
8	Mexico	43
9	Uruguay	36
10	Colombia	36

Botnet Statistics [2010-02-25]

detection period: 2010-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3506
number of botnet IPs notified to network operators: 3102
number of blocked spams: 136227
recipient count of blocked spams: 3732042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	749
2	HINET-NET	581
3	002.558.157/0001-62	170
4	RITELE	142
5	AR-TEAR7-LACNIC	139
6	RCOM	85
7	002.558.134/0001-58	82
8	TATACOMM-IN	66
9	HATHWAY-NET	54
10	002.449.992/0001-64	53

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1025
2	Taiwan	593
3	Brazil	503
4	China	495
5	Argentina	214
6	Russian Federation	131
7	Thailand	64
8	Uruguay	42
9	Mexico	37
10	Colombia	33

Botnet Statistics [2010-02-24]

detection period: 2010-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 4200
number of botnet IPs notified to network operators: 3768
number of blocked spams: 156972
recipient count of blocked spams: 4613896

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	1113
2	HINET-NET	740
3	002.558.157/0001-62	173
4	AR-TEAR7-LACNIC	158
5	002.558.134/0001-58	106
6	RCOM	101
7	TATACOMM-IN	100
8	RITELE	89
9	002.449.992/0001-64	85
10	HATHWAY-NET	83

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1495
2	Taiwan	750
3	Brazil	572
4	China	450
5	Argentina	240
6	Russian Federation	143
7	Thailand	54
8	Uruguay	40
9	Colombia	40
10	South Korea	38

Botnet Statistics [2010-02-23]

detection period: 2010-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3965
number of botnet IPs notified to network operators: 3549
number of blocked spams: 141639
recipient count of blocked spams: 4422904

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	853
2	HINET-NET	820
3	002.558.157/0001-62	183
4	AR-TEAR7-LACNIC	170
5	CHINATELECOM-BJ	115
6	002.558.134/0001-58	99
7	RCOM	92
8	TATACOMM-IN	89
9	002.449.992/0001-64	74
10	HATHWAY-NET	72

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1198
2	Taiwan	832
3	Brazil	569
4	China	460
5	Argentina	250
6	Russian Federation	107
7	Thailand	47
8	Mexico	38
9	Uruguay	36
10	Ethiopia	34

Botnet Statistics [2010-02-22]

detection period: 2010-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 4571
number of botnet IPs notified to network operators: 4161
number of blocked spams: 127936
recipient count of blocked spams: 3993286

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1269
2	BSNLNET	848
3	AR-TEAR7-LACNIC	189
4	CHINANET-GD	185
5	002.558.157/0001-62	171
6	CHINATELECOM-BJ	117
7	002.558.134/0001-58	104
8	TATACOMM-IN	86
9	RCOM	78
10	HATHWAY-NET	70

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1283
2	India	1180
3	China	653
4	Brazil	534
5	Argentina	265
6	Russian Federation	104
7	Thailand	58
8	Uruguay	47
9	Mexico	40
10	Colombia	34

Botnet Statistics [2010-02-21]

detection period: 2010-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3372
number of botnet IPs notified to network operators: 3042
number of blocked spams: 115587
recipient count of blocked spams: 3622472

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1011
2	BSNLNET	377
3	AR-TEAR7-LACNIC	173
4	002.558.157/0001-62	120
5	CHINATELECOM-BJ	109
6	002.558.134/0001-58	77
7	UNICOM-SD	55
8	UY-ANTA-LACNIC	54
9	CHINANET-GD	44
10	MX-GICS-LACNIC	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1028
2	China	616
3	India	495
4	Brazil	388
5	Argentina	252
6	Russian Federation	116
7	Uruguay	54
8	Thailand	51
9	Meico	46
10	Colombia	31

Botnet Statistics [2010-02-20]

detection period: 2010-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3201
number of botnet IPs notified to network operators: 2920
number of blocked spams: 108320
recipient count of blocked spams: 3359644

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1299
2	BSNLNET	444
3	002.558.157/0001-62	110
4	AR-TEAR7-LACNIC	100
5	CHINATELECOM-BJ	88
6	RCOM	65
7	TATACOMM-IN	50
8	002.558.134/0001-58	50
9	002.449.992/0001-64	44
10	HATHWAY-NET	39

(I found the table above was incorrect while browsing my own blog on Feb 27. As HiNet is an ISP in Taiwan, there is no way that Hinet had 1299 bots while only 894 bots were found in Taiwan. It seems to be the same table from Feb 19. I must have forgotten to update this table. The recalculated, correct one is shown below.)

Rank	Network	# of suspected botnet IPs
1	HINET-NET	883
2	BSNLNET	617
3	CHINATELECOM-BJ	147
4	AR-TEAR7-LACNIC	137
5	002.558.157/0001-62	100
6	RCOM	72
7	002.558.134/0001-58	59
8	HATHWAY-NET	55
9	TATACOMM-IN	53
10	UNICOM-SD	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	894
2	India	870
3	China	464
4	Brazil	334
5	Argentina	210
6	Russian Federation	85
7	Thailand	37
8	Colombia	27
9	Uruguay	23
10	Ukraine	22

Botnet Statistics [2010-02-19]

detection period: 2010-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3263
number of botnet IPs notified to network operators: 2978
number of blocked spams: 118013
recipient count of blocked spams: 3024802

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1299
2	BSNLNET	444
3	002.558.157/0001-62	110
4	AR-TEAR7-LACNIC	100
5	CHINATELECOM-BJ	88
6	RCOM	65
7	TATACOMM-IN	50
8	002.558.134/0001-58	50
9	002.449.992/0001-64	44
10	HATHWAY-NET	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1312
2	India	655
3	Brazil	361
4	China	347
5	Argentina	165
6	Russian Federation	74
7	Colombia	29
8	United States	24
9	South Korea	23
10	Thailand	21

Botnet Statistics [2010-02-18]

detection period: 2010-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 3331
number of botnet IPs notified to network operators: 3035
number of blocked spams: 135580
recipient count of blocked spams: 3660817

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1304
2	BSNLNET	522
3	CHINATELECOM-BJ	150
4	002.558.157/0001-62	105
5	AR-TEAR7-LACNIC	79
6	TATACOMM-IN	61
7	002.558.134/0001-58	51
8	RCOM	50
9	HATHWAY-NET	45
10	CHINANET-GD	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1316
2	India	738
3	China	398
4	Brazil	315
5	Argentina	140
6	Russian Federation	78
7	Thailand	32
8	Colombia	32
9	Ethiopia	24
10	Ukraine	17

Botnet Statistics [2010-02-17]

detection period: 2010-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3256
number of botnet IPs notified to network operators: 2955
number of blocked spams: 131105
recipient count of blocked spams: 3536840

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1264
2	BSNLNET	489
3	CHINANET-GD	120
4	AR-TEAR7-LACNIC	95
5	CHINATELECOM-BJ	88
6	002.558.157/0001-62	81
7	RCOM	61
8	002.558.134/0001-58	48
9	HATHWAY-NET	46
10	TATACOMM-IN	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1273
2	India	693
3	China	404
4	Brazil	270
5	Argentina	167
6	Russian Federation	73
7	Thailand	36
8	Colombia	32
9	South Korea	23
10	Ethiopia	20

Botnet Statistics [2010-02-16]

detection period: 2010-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3363
number of botnet IPs notified to network operators: 3045
number of blocked spams: 145417
recipient count of blocked spams: 3819794

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1183
2	BSNLNET	533
3	CHINATELECOM-BJ	243
4	CHINANET-GD	106
5	AR-TEAR7-LACNIC	105
6	RCOM	75
7	002.558.157/0001-62	65
8	HATHWAY-NET	51
9	TATACOMM-IN	47
10	002.558.134/0001-58	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1192
2	India	768
3	China	560
4	Brazil	205
5	Argentina	161
6	Russian Federation	103
7	Thailand	43
8	Colombia	29
9	United States	22
10	Ukraine	20

Botnet Statistics [2010-02-15]

detection period: 2010-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3519
number of botnet IPs notified to network operators: 3187
number of blocked spams: 143163
recipient count of blocked spams: 3037715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	898
2	BSNLNET	803
3	CHINATELECOM-BJ	252
4	AR-TEAR7-LACNIC	108
5	RCOM	89
6	002.558.157/0001-62	89
7	HATHWAY-NET	79
8	TATACOMM-IN	68
9	CHINANET-GD	62
10	002.558.134/0001-58	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1134
2	Taiwan	907
3	China	511
4	Brazil	266
5	Argentina	171
6	Russian Federation	111
7	Thailand	57
8	Colombia	29
9	South Korea	26
10	Ukraine	25

Botnet Statistics [2010-02-14]

detection period: 2010-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2801
number of botnet IPs notified to network operators: 2475
number of blocked spams: 109898
recipient count of blocked spams: 2583217

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	826
2	BSNLNET	414
3	AR-TEAR7-LACNIC	132
4	CHINATELECOM-BJ	109
5	002.558.157/0001-62	95
6	002.558.134/0001-58	66
7	TRUENET	33
8	000.065.376/0002-65	33
9	RCOM	31
10	TATACOMM-IN	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	842
2	India	553
3	China	364
4	Brazil	306
5	Argentina	195
6	Russian Federation	116
7	Thailand	66
8	United States	27
9	Uruguay	26
10	Mexico	25

Botnet Statistics [2010-02-13]

detection period: 2010-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3837
number of botnet IPs notified to network operators: 3432
number of blocked spams: 156416
recipient count of blocked spams: 3711177

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1152
2	BSNLNET	786
3	AR-TEAR7-LACNIC	141
4	002.558.157/0001-62	137
5	RCOM	102
6	002.558.134/0001-58	87
7	HATHWAY-NET	74
8	TATACOMM-IN	70
9	UY-ANTA-LACNIC	40
10	000.065.376/0002-65	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1165
2	India	1132
3	Brazil	411
4	China	295
5	Argentina	218
6	Russian Federation	128
7	Thailand	53
8	Uruguay	40
9	United States	34
10	South Korea	30

Botnet Statistics [2010-02-12]

detection period: 2010-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 3931
number of botnet IPs notified to network operators: 3522
number of blocked spams: 141953
recipient count of blocked spams: 4177461

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1286
2	BSNLNET	647
3	002.558.157/0001-62	174
4	AR-TEAR7-LACNIC	172
5	RCOM	94
6	002.558.134/0001-58	88
7	TATACOMM-IN	77
8	002.449.992/0001-64	57
9	HATHWAY-NET	56
10	000.065.376/0002-65	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1299
2	India	959
3	Brazil	524
4	China	295
5	Argentina	259
6	Russian Federation	140
7	Thailand	44
8	Uruguay	37
9	Mexico	30
10	Colombia	30

Botnet Statistics [2010-02-11]

detection period: 2010-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 4018
number of botnet IPs notified to network operators: 3637
number of blocked spams: 124518
recipient count of blocked spams: 3869416

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1273
2	BSNLNET	857
3	AR-TEAR7-LACNIC	151
4	002.558.157/0001-62	134
5	TFN-NET	100
6	RCOM	94
7	002.558.134/0001-58	74
8	TATACOMM-IN	67
9	HATHWAY-NET	59
10	000.065.376/0002-65	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1382
2	India	1165
3	Brazil	405
4	China	280
5	Argentina	232
6	Russian Federation	116
7	Thailand	52
8	Ukraine	37
9	Colombia	37
10	Mexico	34

Botnet Statistics [2010-02-10]

detection period: 2010-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3999
number of botnet IPs notified to network operators: 3614
number of blocked spams: 125911
recipient count of blocked spams: 4065817

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1261
2	BSNLNET	853
3	AR-TEAR7-LACNIC	149
4	002.558.157/0001-62	138
5	RCOM	95
6	002.558.134/0001-58	85
7	TATACOMM-IN	64
8	HATHWAY-NET	58
9	002.449.992/0001-64	53
10	000.065.376/0002-65	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1273
2	India	1141
3	Brazil	460
4	China	314
5	Argentina	234
6	Russian Federation	124
7	Thailand	56
8	Colombia	35
9	United States	31
10	Ukraine	29

Botnet Statistics [2010-02-09]

detection period: 2010-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 3636
number of botnet IPs notified to network operators: 3306
number of blocked spams: 111703
recipient count of blocked spams: 3548886

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1271
2	BSNLNET	677
3	002.558.157/0001-62	149
4	AR-TEAR7-LACNIC	131
5	RCOM	93
6	002.558.134/0001-58	80
7	TATACOMM-IN	55
8	HATHWAY-NET	54
9	002.449.992/0001-64	46
10	TFN-NET	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1315
2	India	941
3	Brazil	431
4	China	239
5	Argentina	209
6	Russian Federation	114
7	Thailand	54
8	Ukraine	30
9	Colombia	28
10	Mexico	24

Botnet Statistics [2010-02-08]

detection period: 2010-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3600
number of botnet IPs notified to network operators: 3241
number of blocked spams: 121734
recipient count of blocked spams: 3849271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	876
2	BSNLNET	834
3	002.558.157/0001-62	155
4	RCOM	114
5	AR-TEAR7-LACNIC	113
6	TFN-NET	111
7	002.558.134/0001-58	73
8	HATHWAY-NET	61
9	002.449.992/0001-64	52
10	TATACOMM-IN	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1122
2	Taiwan	994
3	Brazil	456
4	China	311
5	Argentina	181
6	Russian Federation	124
7	Thailand	48
8	Colombia	37
9	Indonesia	25
10	Mexico	24

Botnet Statistics [2010-02-07]

detection period: 2010-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2509
number of botnet IPs notified to network operators: 2255
number of blocked spams: 125256
recipient count of blocked spams: 4276790

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1171
2	BSNLNET	179
3	AR-TEAR7-LACNIC	92
4	002.558.157/0001-62	76
5	002.558.134/0001-58	53
6	000.065.376/0002-65	33
7	RCOM	26
8	CHINANET-ZJ-WZ	26
9	CHINANET-GD	26
10	AR-CASA10-LACNIC	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1178
2	Brazil	272
3	India	256
4	China	243
5	Argentina	155
6	Russian Federation	78
7	Thailand	37
8	Colombia	34
9	Ukraine	18
10	South Korea	18

Botnet Statistics [2010-02-06]

detection period: 2010-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 2337
number of botnet IPs notified to network operators: 2061
number of blocked spams: 104040
recipient count of blocked spams: 3591730

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	542
2	BSNLNET	525
3	AR-TEAR7-LACNIC	96
4	002.558.157/0001-62	77
5	RCOM	68
6	002.558.134/0001-58	52
7	TATACOMM-IN	48
8	CHINANET-GD	46
9	HATHWAY-NET	43
10	000.065.376/0002-65	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	734
2	Taiwan	548
3	Brazil	259
4	China	248
5	Argentina	166
6	Russian Federation	61
7	Thailand	44
8	Colombia	26
9	Indonesia	19
10	Ukraine	18

Botnet Statistics [2010-02-05]

detection period: 2010-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 3149
number of botnet IPs notified to network operators: 2888
number of blocked spams: 82661
recipient count of blocked spams: 2801911

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1265
2	BSNLNET	428
3	TFN-NET	226
4	002.558.157/0001-62	105
5	AR-TEAR7-LACNIC	76
6	RCOM	66
7	002.558.134/0001-58	45
8	HATHWAY-NET	40
9	TATACOMM-IN	36
10	CHINANET-GD	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1500
2	India	609
3	Brazil	306
4	China	235
5	Argentina	139
6	Russian Federation	62
7	Thailand	38
8	Colombia	22
9	Indonesia	20
10	Ukraine	18

Botnet Statistics [2010-02-04]

detection period: 2010-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3672
number of botnet IPs notified to network operators: 3373
number of blocked spams: 77210
recipient count of blocked spams: 2621961

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1293
2	BSNLNET	661
3	TFN-NET	265
4	002.558.157/0001-62	118
5	AR-TEAR7-LACNIC	102
6	002.558.134/0001-58	68
7	RCOM	65
8	TATACOMM-IN	60
9	HATHWAY-NET	59
10	002.449.992/0001-64	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1566
2	India	893
3	Brazil	372
4	China	251
5	Argentina	156
6	Russian Federation	101
7	Thailand	38
8	Colombia	23
9	Ukraine	21
10	Indonesia	19

Botnet Statistics [2010-02-03]

detection period: 2010-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 4248
number of botnet IPs notified to network operators: 3812
number of blocked spams: 186057
recipient count of blocked spams: 4763174

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1308
2	BSNLNET	769
3	002.558.157/0001-62	168
4	AR-TEAR7-LACNIC	127
5	RCOM	102
6	TATACOMM-IN	93
7	002.558.134/0001-58	83
8	002.449.992/0001-64	75
9	TFN-NET	70
10	HATHWAY-NET	70

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1391
2	India	1119
3	Brazil	531
4	China	357
5	Argentina	202
6	Russian Federation	128
7	Ethiopia	40
8	Colombia	36
9	United States	35
10	Thailand	35

How Many Bots Can a Greylisting System Detect?

According to a paper presented at TANET 2005（Taiwan Academic Network Conference 2005), titled "Spam Filtering with Open Source Software, and Some Hard Facts from NTU's Email System" (title translated by me, not necessarily correct), their daily mail volume was 800K, of which 58 per cent were blocked by greylisting.

I myself detected 3651 suspected bots while blocking 211178 spams yesterday, so if the folks at NTU (National Taiwan University) had a similiar bots/spam ratio, they would be able to detect (800K * 58% * 3651 / 211178) = 8021 bots daily in 2005. Though I believe greylisting should do much better than my current detection setup.

Now imagine what will happen if some large greylisting users, like Texas A&M University, SpamCop, and Computer Science in Aarhus (DAIMI), all contribute their logs: tens of thousands of bots will be uncovered every day.

For those of you interested in the paper mentioned above, remember that it is written in Chinese. If you can not read Chinese yourself, don't forget to find someone who can to help you:).

Botnet Statistics [2010-02-02]

detection period: 2010-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3651
number of botnet IPs notified to network operators: 3240
number of blocked spams: 211178
recipient count of blocked spams: 4795358

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	798
2	HINET-NET	732
3	TFN-NET	190
4	002.558.157/0001-62	151
5	AR-TEAR7-LACNIC	115
6	TATACOMM-IN	84
7	RCOM	84
8	002.558.134/0001-58	71
9	HATHWAY-NET	65
10	002.449.992/0001-64	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1129
2	Taiwan	932
3	Brazil	469
4	China	372
5	Argentina	184
6	Russian Federation	102
7	United States	35
8	Ethiopia	34
9	Colombia	33
10	South Korea	28

Botnet Statistics [2010-02-01]

detection period: 2010-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 3685
number of botnet IPs notified to network operators: 3334
number of blocked spams: 146142
recipient count of blocked spams: 4313429

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1255
2	BSNLNET	531
3	002.558.157/0001-62	147
4	TFN-NET	141
5	RCOM	76
6	AR-TEAR7-LACNIC	74
7	TATACOMM-IN	66
8	002.449.992/0001-64	60
9	002.558.134/0001-58	50
10	UNICOM-SD	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1405
2	India	787
3	China	430
4	Brazil	425
5	Argentina	134
6	Russian Federation	79
7	United States	36
8	South Korea	29
9	Ukraine	28
10	Colombia	28

Botnet Statistics [2010-01-31]

Last week I read a paper titled "Spamming Chains: A New Way of Understanding Spammer Behavior" from CEAS 2009, and then realized that I should add number of blocked spams and recipient count of blocked spams to my daily statistics. So here they are.

detection period: 2010-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 3140
number of botnet IPs notified to network operators: 2876
number of blocked spams: 142094
recipient count of blocked spams: 4283754

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1338
2	BSNLNET	221
3	TFN-NET	149
4	002.558.157/0001-62	84
5	UNICOM-SD	64
6	AR-TEAR7-LACNIC	60
7	CHINANET-JS	43
8	UNICOM-HA	38
9	CHINANET-GD	38
10	002.558.134/0001-58	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1499
2	China	579
3	India	315
4	Brazil	255
5	Argentina	124
6	Russian Federation	55
7	United States	32
8	Colombia	21
9	Thailand	19
10	Indonesia	19