Custom Search

Saturday, March 13, 2010

Botnet Statistics [2010-03-12]

Recently I have detected more and more bots in the United States, which took number 2 spot in my botnet chart yesterday. There were more than 100 bots in both Comcast and Road Runner.

The total number of bots I detected has shown a decline, which might be the result of recent mitigation efforts against Waledac, Mariposa, and Zeus botnets.

detection period: 2010-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2116
number of botnet IPs notified to network operators: 1920
number of blocked spams: 173292
recipient count of blocked spams: 1606303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET810
2RITELE127
3CHINANET-GD117
4JUMPSTART-564
5002.558.157/0001-6240
6BSNLNET31
7RRMA28
8000.065.376/0002-6522
9RCOM18
10CHINANET-JS18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan814
2United States417
3China394
4Brazil117
5India67
6Spain35
7United Kingdom28
8Russian Federation26
9South Korea25
10Indonesia13

No comments:

Post a Comment