Botnet Statistics [2010-03-30]

detection period: 2010-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3347
number of botnet IPs notified to network operators: 3088
number of blocked spams: 164651
recipient count of blocked spams: 2795081

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1252
2	RITELE	370
3	BSNLNET	304
4	CHINANET-GD	127
5	002.558.157/0001-62	89
6	AR-TEAR7-LACNIC	52
7	SHARKTECH	44
8	RCOM	41
9	TATACOMM-IN	35
10	002.449.992/0001-64	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1259
2	China	783
3	India	449
4	Brazil	292
5	United States	121
6	Argentina	103
7	Russian Federation	50
8	Indonesia	26
9	Colombia	23
10	Thailand	22

Botnet Statistics [2010-03-29]

detection period: 2010-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3460
number of botnet IPs notified to network operators: 3173
number of blocked spams: 173156
recipient count of blocked spams: 2990104

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1244
2	RITELE	373
3	BSNLNET	295
4	CHINANET-GD	249
5	002.558.157/0001-62	76
6	AR-TEAR7-LACNIC	58
7	RCOM	51
8	HATHWAY-NET	38
9	002.449.992/0001-64	37
10	TATACOMM-IN	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1249
2	China	936
3	India	463
4	Brazil	287
5	Argentina	106
6	United States	65
7	Russian Federation	60
8	Indonesia	26
9	South Korea	22
10	Colombia	21

Botnet Statistics [2010-03-28]

detection period: 2010-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2599
number of botnet IPs notified to network operators: 2431
number of blocked spams: 101440
recipient count of blocked spams: 1367909

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1201
2	RITELE	463
3	CHINANET-GD	270
4	AR-TEAR7-LACNIC	28
5	002.558.157/0001-62	26
6	SHARKTECH	21
7	BSNLNET	21
8	076.535.764/0326-90	20
9	CHINANET-ZJ-WZ	17
10	000.065.376/0002-65	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1206
2	China	893
3	Brazil	118
4	United States	75
5	Argentina	55
6	India	40
7	Russian Federation	30
8	Indonesia	19
9	Colombia	17
10	South Korea	13

Botnet Statistics [2010-03-27]

detection period: 2010-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2996
number of botnet IPs notified to network operators: 2784
number of blocked spams: 128926
recipient count of blocked spams: 1889113

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	949
2	RITELE	392
3	CHINANET-GD	340
4	BSNLNET	211
5	SHARKTECH	66
6	002.558.157/0001-62	48
7	AR-TEAR7-LACNIC	43
8	RCOM	40
9	TATACOMM-IN	31
10	UNICOM-SD	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	986
2	Taiwan	958
3	India	336
4	Brazil	177
5	United States	146
6	Argentina	92
7	Russian Federation	37
8	Indonesia	24
9	Thailand	21
10	Colombia	19

Botnet Statistics [2010-03-26]

One of my 2 detection systems, which usually detects more bots than the other, has some problem today. I have not been able to connect to it so far. So the following data were calculated only from the log of the other one.

detection period: 2010-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1653
number of botnet IPs notified to network operators: 1420
number of blocked spams: 87331
recipient count of blocked spams: 1315757

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	RITELE	331
2	BSNLNET	256
3	002.558.157/0001-62	60
4	AR-TEAR7-LACNIC	53
5	RCOM	37
6	TATACOMM-IN	33
7	HATHWAY-NET	27
8	UNICOM-SD	26
9	000.065.376/0002-65	20
10	076.535.764/0326-90	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	625
2	India	395
3	Brazil	213
4	Argentina	89
5	Russian Federation	50
6	Thailand	23
7	Colombia	22
8	United States	21
9	Indonesia	21
10	South Korea	17

Botnet Statistics [2010-03-25]

detection period: 2010-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2654
number of botnet IPs notified to network operators: 2335
number of blocked spams: 229333
recipient count of blocked spams: 3359037

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	355
2	HINET-NET	337
3	RITELE	266
4	BSNLNET	181
5	002.558.157/0001-62	66
6	AR-TEAR7-LACNIC	62
7	RCOM	39
8	002.558.134/0001-58	33
9	TATACOMM-IN	31
10	UNICOM-SD	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	941
2	Taiwan	353
3	India	316
4	Brazil	264
5	United States	221
6	Argentina	112
7	Russian Federation	66
8	South Korea	27
9	Indonesia	24
10	United Kingdom	23

Botnet Statistics [2010-03-24]

detection period: 2010-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3972
number of botnet IPs notified to network operators: 3605
number of blocked spams: 207935
recipient count of blocked spams: 3133320

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1344
2	CHINANET-GD	461
3	RITELE	305
4	BSNLNET	259
5	002.558.157/0001-62	82
6	AR-TEAR7-LACNIC	60
7	RCOM	48
8	UNICOM-SD	35
9	002.558.134/0001-58	30
10	000.065.376/0002-65	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1364
2	China	1107
3	India	407
4	Brazil	269
5	United States	228
6	Argentina	103
7	Russian Federation	74
8	United Kingdom	40
9	Spain	30
10	South Korea	26

Botnet Statistics [2010-03-23]

detection period: 2010-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3060
number of botnet IPs notified to network operators: 2691
number of blocked spams: 151526
recipient count of blocked spams: 2384941

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	545
2	HINET-NET	420
3	RITELE	337
4	BSNLNET	297
5	002.558.157/0001-62	82
6	AR-TEAR7-LACNIC	66
7	RCOM	56
8	TATACOMM-IN	40
9	UNICOM-SD	36
10	000.065.376/0002-65	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1211
2	India	462
3	Taiwan	439
4	Brazil	280
5	United States	115
6	Argentina	111
7	Russian Federation	75
8	Thailand	34
9	Ukraine	25
10	Indonesia	22

Botnet Statistics [2010-03-22]

detection period: 2010-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3824
number of botnet IPs notified to network operators: 3442
number of blocked spams: 160235
recipient count of blocked spams: 2625363

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1152
2	CHINANET-GD	545
3	BSNLNET	309
4	RITELE	213
5	002.558.157/0001-62	97
6	AR-TEAR7-LACNIC	65
7	RCOM	50
8	000.065.376/0002-65	42
9	TATACOMM-IN	40
10	UNICOM-SD	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1166
2	China	1094
3	India	488
4	Brazil	319
5	United States	173
6	Argentina	114
7	Russian Federation	86
8	Thailand	25
9	Indonesia	23
10	Colombia	22

Who in His Right Mind would Communicate with a Mail Server via HTTP?

When I was reading my mail server's log a few days ago, I found someone had tried to communicate with my SMTP server via HTTP. Kind of amusing, huh? Who in his right mind would do that?

The data sent to my server was something like the following:
CONNECT /var/www/index.html HTTP/1.1
Host: xxx.xx.x.xxx:25
X-Forwarded-For: yy.yyy.y.yy
X-Forwarded-Server: zzzz.com
Connection: Keep-Alive

I am not familiar with HTTP protocol, but after googling for "X-Forwarded-For" and "X-Forwarded-Server", I guessed this was a case of open proxy abuse. The 2 "X-Forwarded" headers were added by the proxy server during connection forwarding. I have already notified a service provider where 2 suspected open proxies resided. I would know whether my guess is correct if they ever reply to me.

Botnet Statistics [2010-03-21]

detection period: 2010-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3191
number of botnet IPs notified to network operators: 2861
number of blocked spams: 152465
recipient count of blocked spams: 2903304

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1380
2	RITELE	237
3	CHINANET-GD	131
4	BSNLNET	127
5	002.558.157/0001-62	60
6	AR-TEAR7-LACNIC	58
7	000.065.376/0002-65	39
8	UNICOM-SX	32
9	UNICOM-SD	31
10	002.558.134/0001-58	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1393
2	China	700
3	Brazil	237
4	India	209
5	United States	140
6	Argentina	112
7	Russian Federation	60
8	South Korea	25
9	Thailand	22
10	Poland	19

Botnet Statistics [2010-03-20]

detection period: 2010-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3001
number of botnet IPs notified to network operators: 2707
number of blocked spams: 67773
recipient count of blocked spams: 1593672

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	754
2	CHINANET-GD	459
3	RITELE	236
4	BSNLNET	205
5	002.558.157/0001-62	55
6	AR-TEAR7-LACNIC	49
7	RCOM	38
8	000.065.376/0002-65	35
9	UNICOM-SD	28
10	RRMA	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	989
2	Taiwan	769
3	India	337
4	United States	235
5	Brazil	215
6	Argentina	99
7	Russian Federation	45
8	Spain	26
9	Colombia	22
10	Indonesia	19

Botnet Statistics [2010-03-19]

detection period: 2010-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3752
number of botnet IPs notified to network operators: 3456
number of blocked spams: 66483
recipient count of blocked spams: 1578867

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1357
2	CHINANET-GD	558
3	RITELE	234
4	BSNLNET	233
5	002.558.157/0001-62	62
6	AR-TEAR7-LACNIC	45
7	RCOM	39
8	000.065.376/0002-65	32
9	002.558.134/0001-58	28
10	UNICOM-SD	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1374
2	China	1050
3	India	353
4	United States	254
5	Brazil	239
6	Argentina	97
7	Russian Federation	46
8	Spain	40
9	United Kingdom	24
10	France	21

Botnet Statistics [2010-03-18]

detection period: 2010-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 3134
number of botnet IPs notified to network operators: 2801
number of blocked spams: 66676
recipient count of blocked spams: 1719969

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	885
2	CHINANET-GD	356
3	BSNLNET	320
4	RITELE	266
5	002.558.157/0001-62	63
6	AR-TEAR7-LACNIC	48
7	RCOM	47
8	000.065.376/0002-65	39
9	UNICOM-SD	34
10	TATACOMM-IN	34

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	901
2	China	900
3	India	491
4	Brazil	255
5	United States	105
6	Argentina	101
7	Russian Federation	52
8	Thailand	24
9	Colombia	23
10	South Korea	20

Botnet Statistics [2010-03-17]

detection period: 2010-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3163
number of botnet IPs notified to network operators: 2811
number of blocked spams: 117251
recipient count of blocked spams: 2359367

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	740
2	BSNLNET	419
3	RITELE	320
4	CHINANET-GD	153
5	002.558.157/0001-62	104
6	AR-TEAR7-LACNIC	71
7	RCOM	62
8	000.065.376/0002-65	49
9	002.558.134/0001-58	39
10	HATHWAY-NET	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	842
2	Taiwan	760
3	India	622
4	Brazil	351
5	Argentina	130
6	Russian Federation	76
7	United States	44
8	Colombia	26
9	South Korea	25
10	Ukraine	22

Botnet Statistics [2010-03-16]

detection period: 2010-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3334
number of botnet IPs notified to network operators: 2979
number of blocked spams: 137914
recipient count of blocked spams: 2593696

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1191
2	RITELE	341
3	BSNLNET	309
4	002.558.157/0001-62	96
5	AR-TEAR7-LACNIC	71
6	TATACOMM-IN	45
7	UNICOM-SD	40
8	RCOM	39
9	002.558.134/0001-58	39
10	000.065.376/0002-65	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1210
2	China	692
3	India	488
4	Brazil	332
5	Argentina	131
6	Russian Federation	78
7	United States	44
8	Colombia	27
9	South Korea	25
10	Ukraine	22

Botnet Statistics [2010-03-15]

detection period: 2010-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2988
number of botnet IPs notified to network operators: 2666
number of blocked spams: 150899
recipient count of blocked spams: 2246121

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	731
2	RITELE	336
3	BSNLNET	244
4	002.558.157/0001-62	70
5	AR-TEAR7-LACNIC	60
6	UNICOM-SD	46
7	RCOM	38
8	JUMPSTART-5	33
9	000.065.376/0002-65	32
10	TATACOMM-IN	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	751
2	China	686
3	United States	379
4	India	375
5	Brazil	245
6	Argentina	111
7	Russian Federation	67
8	South Korea	27
9	Spain	25
10	Colombia	23

Botnet Statistics [2010-03-14]

detection period: 2010-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3453
number of botnet IPs notified to network operators: 3137
number of blocked spams: 174992
recipient count of blocked spams: 2364755

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1246
2	RITELE	274
3	JUMPSTART-5	90
4	BSNLNET	72
5	AR-TEAR7-LACNIC	54
6	002.558.157/0001-62	43
7	RRSW	40
8	RRMA	38
9	UNICOM-SD	31
10	000.065.376/0002-65	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1262
2	United States	672
3	China	589
4	Brazil	180
5	India	120
6	Argentina	102
7	Spain	69
8	United Kingdom	54
9	Russian Federation	51
10	France	36

Botnet Statistics [2010-03-13]

detection period: 2010-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3239
number of botnet IPs notified to network operators: 2948
number of blocked spams: 159556
recipient count of blocked spams: 1898449

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1254
2	RITELE	312
3	BSNLNET	137
4	JUMPSTART-5	60
5	002.558.157/0001-62	51
6	RCOM	32
7	000.065.376/0002-65	32
8	RRMA	31
9	RRSW	26
10	HATHWAY-NET	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1274
2	China	541
3	United States	516
4	India	235
5	Brazil	193
6	Argentina	61
7	Russian Federation	44
8	Spain	41
9	United Kingdom	25
10	Colombia	24

Botnet Statistics [2010-03-12]

Recently I have detected more and more bots in the United States, which took number 2 spot in my botnet chart yesterday. There were more than 100 bots in both Comcast and Road Runner.

The total number of bots I detected has shown a decline, which might be the result of recent mitigation efforts against Waledac, Mariposa, and Zeus botnets.

detection period: 2010-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2116
number of botnet IPs notified to network operators: 1920
number of blocked spams: 173292
recipient count of blocked spams: 1606303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	810
2	RITELE	127
3	CHINANET-GD	117
4	JUMPSTART-5	64
5	002.558.157/0001-62	40
6	BSNLNET	31
7	RRMA	28
8	000.065.376/0002-65	22
9	RCOM	18
10	CHINANET-JS	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	814
2	United States	417
3	China	394
4	Brazil	117
5	India	67
6	Spain	35
7	United Kingdom	28
8	Russian Federation	26
9	South Korea	25
10	Indonesia	13

Botnet Statistics [2010-03-11]

detection period: 2010-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2662
number of botnet IPs notified to network operators: 2397
number of blocked spams: 168739
recipient count of blocked spams: 1481245

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	866
2	CHINANET-GD	407
3	RITELE	295
4	BSNLNET	79
5	002.558.157/0001-62	74
6	RCOM	31
7	000.065.376/0002-65	30
8	HATHWAY-NET	20
9	040.432.544/0001-47	20
10	TATACOMM-IN	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	938
2	Taiwan	877
3	Brazil	246
4	India	173
5	United States	68
6	Russian Federation	60
7	Argentina	27
8	Colombia	23
9	South Korea	21
10	Thailand	20

Botnet Statistics [2010-03-10]

detection period: 2010-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2541
number of botnet IPs notified to network operators: 2171
number of blocked spams: 102476
recipient count of blocked spams: 1625452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	424
2	HINET-NET	196
3	CHINANET-GD	151
4	RITELE	117
5	002.558.157/0001-62	71
6	RCOM	65
7	AR-TEAR7-LACNIC	64
8	UNICOM-SD	61
9	TATACOMM-IN	52
10	HATHWAY-NET	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	731
2	India	634
3	Brazil	249
4	Taiwan	215
5	United States	121
6	Argentina	118
7	Russian Federation	77
8	Thailand	47
9	Mexico	30
10	South Korea	27

Botnet Statistics [2010-03-09]

detection period: 2010-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 3073
number of botnet IPs notified to network operators: 2690
number of blocked spams: 76911
recipient count of blocked spams: 1925597

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	536
2	BSNLNET	422
3	RITELE	343
4	002.558.157/0001-62	147
5	AR-TEAR7-LACNIC	89
6	CHINANET-HB	73
7	RCOM	46
8	000.065.376/0002-65	44
9	002.558.134/0001-58	43
10	UNICOM-SD	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	750
2	India	606
3	Taiwan	554
4	Brazil	406
5	Argentina	166
6	United States	130
7	Russian Federation	62
8	Thailand	59
9	Colombia	29
10	Indonesia	22

Botnet Statistics [2010-03-08]

detection period: 2010-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 3494
number of botnet IPs notified to network operators: 3092
number of blocked spams: 96716
recipient count of blocked spams: 2029538

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	745
2	BSNLNET	472
3	RITELE	303
4	002.558.157/0001-62	113
5	AR-TEAR7-LACNIC	98
6	RCOM	62
7	002.558.134/0001-58	55
8	TATACOMM-IN	38
9	HATHWAY-NET	37
10	JUMPSTART-5	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	762
2	India	671
3	China	659
4	Brazil	379
5	United States	308
6	Argentina	169
7	Russian Federation	80
8	Thailand	53
9	Spain	34
10	Colombia	29

Botnet Statistics [2010-03-07]

detection period: 2010-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2927
number of botnet IPs notified to network operators: 2566
number of blocked spams: 101596
recipient count of blocked spams: 2504650

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	635
2	RITELE	409
3	BSNLNET	279
4	AR-TEAR7-LACNIC	130
5	002.558.157/0001-62	71
6	002.558.134/0001-58	41
7	RCOM	33
8	000.065.376/0002-65	32
9	UNICOM-SD	31
10	CHINANET-HB	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	772
2	Taiwan	651
3	India	399
4	Brazil	272
5	Argentina	202
6	United States	148
7	Russian Federation	86
8	Thailand	34
9	Mexico	33
10	Colombia	27

Botnet Statistics [2010-03-06]

detection period: 2010-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3330
number of botnet IPs notified to network operators: 2979
number of blocked spams: 128860
recipient count of blocked spams: 3760836

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	729
2	BSNLNET	655
3	RITELE	195
4	AR-TEAR7-LACNIC	149
5	002.558.157/0001-62	110
6	RCOM	88
7	CHINANET-HB	70
8	HATHWAY-NET	64
9	TATACOMM-IN	61
10	002.558.134/0001-58	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	937
2	Taiwan	752
3	China	552
4	Brazil	362
5	Argentina	233
6	Russian Federation	90
7	Thailand	43
8	Mexico	34
9	United States	30
10	Colombia	27

Botnet Statistics [2010-03-05]

detection period: 2010-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 3466
number of botnet IPs notified to network operators: 3137
number of blocked spams: 82232
recipient count of blocked spams: 2469976

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	796
2	BSNLNET	631
3	RITELE	247
4	002.558.157/0001-62	145
5	AR-TEAR7-LACNIC	125
6	RCOM	83
7	CHINANET-HB	74
8	TATACOMM-IN	59
9	002.558.134/0001-58	59
10	HATHWAY-NET	53

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	898
2	Taiwan	813
3	China	637
4	Brazil	403
5	Argentina	194
6	Russian Federation	91
7	Thailand	54
8	United States	34
9	Mexico	34
10	Uruguay	30

Botnet Statistics [2010-03-04]

detection period: 2010-03-04 00:00-23:59 UTC
total number of suspected botnet IPs: 3744
number of botnet IPs notified to network operators: 3383
number of blocked spams: 125595
recipient count of blocked spams: 3878962

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	752
2	BSNLNET	734
3	RITELE	302
4	AR-TEAR7-LACNIC	167
5	002.558.157/0001-62	139
6	RCOM	82
7	TATACOMM-IN	78
8	002.558.134/0001-58	63
9	002.449.992/0001-64	58
10	HATHWAY-NET	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1029
2	Taiwan	767
3	China	676
4	Brazil	449
5	Argentina	246
6	Russian Federation	125
7	Thailand	52
8	Colombia	35
9	Uruguay	31
10	United States	29

Botnet Statistics [2010-03-03]

detection period: 2010-03-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3315
number of botnet IPs notified to network operators: 2969
number of blocked spams: 115478
recipient count of blocked spams: 3600914

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	723
2	HINET-NET	331
3	RITELE	304
4	AR-TEAR7-LACNIC	175
5	002.558.157/0001-62	149
6	RCOM	83
7	TATACOMM-IN	74
8	002.558.134/0001-58	72
9	HATHWAY-NET	71
10	002.449.992/0001-64	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1033
2	China	661
3	Brazil	465
4	Taiwan	343
5	Argentina	252
6	Russian Federation	107
7	Thailand	57
8	Colombia	31
9	Uruguay	27
10	Indonesia	25

Botnet Statistics [2010-03-02]

detection period: 2010-03-02 00:00-23:59 UTC
total number of suspected botnet IPs: 3138
number of botnet IPs notified to network operators: 2728
number of blocked spams: 123470
recipient count of blocked spams: 3980095

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	718
2	RITELE	254
3	002.558.157/0001-62	183
4	AR-TEAR7-LACNIC	154
5	RCOM	85
6	HATHWAY-NET	82
7	002.558.134/0001-58	71
8	TATACOMM-IN	65
9	CHINANET-HB	61
10	002.449.992/0001-64	53

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	1051
2	China	660
3	Brazil	495
4	Argentina	247
5	Russian Federation	137
6	Thailand	58
7	Mexico	46
8	Taiwan	40
9	Uruguay	38
10	Colombia	33

Botnet Statistics [2010-03-01]

detection period: 2010-03-01 00:00-23:59 UTC
total number of suspected botnet IPs: 3276
number of botnet IPs notified to network operators: 2837
number of blocked spams: 116724
recipient count of blocked spams: 3743561

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	BSNLNET	464
2	HINET-NET	398
3	RITELE	291
4	AR-TEAR7-LACNIC	185
5	002.558.157/0001-62	180
6	002.558.134/0001-58	98
7	002.449.992/0001-64	71
8	000.065.376/0002-65	47
9	TATACOMM-IN	44
10	MX-GICS-LACNIC	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	687
2	India	601
3	Brazil	574
4	Taiwan	411
5	Argentina	283
6	Russian Federation	131
7	Thailand	71
8	Mexico	56
9	Ethiopia	44
10	Uruguay	39

Botnet Statistics [2010-02-28]

detection period: 2010-02-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3397
number of botnet IPs notified to network operators: 3075
number of blocked spams: 113852
recipient count of blocked spams: 3617307

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1257
2	BSNLNET	300
3	RITELE	189
4	AR-TEAR7-LACNIC	167
5	002.558.157/0001-62	124
6	002.558.134/0001-58	69
7	UNICOM-SD	41
8	TRUENET	34
9	MX-GICS-LACNIC	34
10	RCOM	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1270
2	China	525
3	India	415
4	Brazil	381
5	Argentina	248
6	Russian Federation	92
7	Thailand	65
8	Mexico	40
9	Uruguay	31
10	Colombia	27