Botnet Statistics [2010-03-12]

Recently I have detected more and more bots in the United States, which took number 2 spot in my botnet chart yesterday. There were more than 100 bots in both Comcast and Road Runner.

The total number of bots I detected has shown a decline, which might be the result of recent mitigation efforts against Waledac, Mariposa, and Zeus botnets.

detection period: 2010-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2116
number of botnet IPs notified to network operators: 1920
number of blocked spams: 173292
recipient count of blocked spams: 1606303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	810
2	RITELE	127
3	CHINANET-GD	117
4	JUMPSTART-5	64
5	002.558.157/0001-62	40
6	BSNLNET	31
7	RRMA	28
8	000.065.376/0002-65	22
9	RCOM	18
10	CHINANET-JS	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	814
2	United States	417
3	China	394
4	Brazil	117
5	India	67
6	Spain	35
7	United Kingdom	28
8	Russian Federation	26
9	South Korea	25
10	Indonesia	13