Custom Search

Saturday, August 7, 2010

Botnet Statistics [2010-08-03]

I had been attending a meeting for the past 3 days. As the keyboard of my notebook had some intermittent problems, and I also did not want to pay for wireless service in my hotel room, I was unable to send botnet notifications. I could not update this blog, either. Now I have gone back to my home town, I will add statistics for the past 3 days here, but each with 0 notification sent.

detection period: 2010-08-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3337
number of botnet IPs notified to network operators: 0
number of blocked spams: 145081
recipient count of blocked spams: 4067316

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1BSNLNET1091
2CHINANET-GD242
3AR-TEAR7-LACNIC150
4TFN-NET129
5RCOM118
6TATACOMM-IN103
7HATHWAY-NET70
8002.558.134/0001-5855
9000.065.376/0002-6550
10ALLIANCEBROADBAND47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1India1491
2China523
3Brazil298
4Argentina230
5Taiwan164
6Russian Federation125
7Thailand110
8Ukraine43
9Indonesia37
10Mexico30

No comments:

Post a Comment