Botnet Statistics [2011-02-27]

detection period: 2011-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2172
number of botnet IPs notified to network operators: 1635
number of blocked spams: 290142
recipient count of blocked spams: 9465717

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	288
2	HINET-NET	231
3	CHINANET-GD	191
4	BSNLNET	33
5	CTTNET	32
6	CRTC	29
7	CHINANET-ZJ-WZ	29
8	CHINANET-JS	25
9	KORNET-KR	24
10	000.065.376/0002-65	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	788
2	Taiwan	246
3	Brazil	160
4	Russian Federation	107
5	United States	101
6	India	84
7	South Korea	47
8	Ukraine	44
9	Thailand	40
10	Indonesia	40

Botnet Statistics [2011-02-26]

detection period: 2011-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2976
number of botnet IPs notified to network operators: 2267
number of blocked spams: 215799
recipient count of blocked spams: 6725560

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	380
2	HINET-NET	236
3	CHINANET-GD	236
4	VNPT-VNNIC-VN	77
5	BSNLNET	68
6	TELKOMNET	49
7	KORNET-KR	47
8	RCOM	36
9	CTTNET	35
10	CRTC	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	952
2	Taiwan	257
3	India	198
4	Brazil	167
5	Russian Federation	139
6	Indonesia	120
7	Viet Nam	108
8	United States	104
9	South Korea	87
10	Ukraine	73

Botnet Statistics [2011-02-25]

detection period: 2011-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3795
number of botnet IPs notified to network operators: 2902
number of blocked spams: 294486
recipient count of blocked spams: 9147882

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	329
2	CHINANET-GD	278
3	HINET-NET	243
4	BSNLNET	132
5	VNPT-VNNIC-VN	117
6	TELKOMNET	89
7	KORNET-KR	68
8	CHINANET-JS	54
9	RCOM	43
10	UNICOM-HN	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1084
2	India	316
3	Taiwan	262
4	Brazil	242
5	Indonesia	210
6	Russian Federation	199
7	Viet Nam	162
8	South Korea	134
9	United States	108
10	Ukraine	95

Botnet Statistics [2011-02-24]

detection period: 2011-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3354
number of botnet IPs notified to network operators: 2501
number of blocked spams: 164454
recipient count of blocked spams: 4602467

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	360
2	CHINANET-GD	251
3	HINET-NET	233
4	VNPT-VNNIC-VN	92
5	KORNET-KR	62
6	TELKOMNET	61
7	BSNLNET	55
8	UNICOM-HN	39
9	PTCL	39
10	CRTC	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1025
2	Taiwan	252
3	Brazil	204
4	India	159
5	Indonesia	148
6	Russian Federation	133
7	Viet Nam	129
8	South Korea	116
9	United States	110
10	Ukraine	62

Botnet Statistics [2011-02-23]

detection period: 2011-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3477
number of botnet IPs notified to network operators: 2682
number of blocked spams: 210137
recipient count of blocked spams: 6158853

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	333
2	CHINANET-GD	230
3	HINET-NET	226
4	VNPT-VNNIC-VN	141
5	TELKOMNET	82
6	BSNLNET	72
7	KORNET-KR	70
8	PTCL	35
9	RCOM	34
10	TATACOMM-IN	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	983
2	Taiwan	239
3	Brazil	219
4	India	218
5	Indonesia	195
6	Viet Nam	190
7	South Korea	164
8	Russian Federation	122
9	United States	120
10	Ukraine	67

Botnet Statistics [2011-02-22]

detection period: 2011-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3684
number of botnet IPs notified to network operators: 2761
number of blocked spams: 298353
recipient count of blocked spams: 8376552

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	382
2	CHINANET-GD	227
3	HINET-NET	222
4	VNPT-VNNIC-VN	120
5	TELKOMNET	83
6	PTCL	80
7	BSNLNET	77
8	KORNET-KR	64
9	CTTNET	49
10	CHINANET-JS	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1111
2	Taiwan	236
3	India	227
4	Brazil	220
5	Indonesia	183
6	Viet Nam	162
7	Russian Federation	156
8	South Korea	144
9	United States	109
10	Pakistan	96

Botnet Statistics [2011-02-21]

detection period: 2011-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2943
number of botnet IPs notified to network operators: 2186
number of blocked spams: 290423
recipient count of blocked spams: 8002769

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	437
2	HINET-NET	226
3	CHINANET-GD	211
4	PTCL	46
5	VNPT-VNNIC-VN	45
6	KORNET-KR	34
7	BSNLNET	32
8	CHINANET-ZJ-WZ	29
9	002.558.157/0001-62	27
10	TELKOMNET	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	985
2	Taiwan	240
3	Brazil	182
4	Russian Federation	122
5	United States	109
6	India	106
7	Indonesia	72
8	Poland	64
9	South Korea	64
10	Ukraine	61

Botnet Statistics [2011-02-20]

detection period: 2011-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2315
number of botnet IPs notified to network operators: 1771
number of blocked spams: 315361
recipient count of blocked spams: 8176908

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	419
2	HINET-NET	227
3	CHINANET-GD	201
4	VNPT-VNNIC-VN	42
5	TELKOMNET	40
6	CHINANET-JS	27
7	CRTC	24
8	KORNET-KR	23
9	UNICOM-HN	19
10	UNICOM-SD	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	913
2	Taiwan	239
3	Brazil	116
4	United States	99
5	Russian Federation	95
6	Indonesia	85
7	India	77
8	Viet Nam	61
9	South Korea	51
10	Ukraine	43

Botnet Statistics [2011-02-19]

detection period: 2011-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3288
number of botnet IPs notified to network operators: 2532
number of blocked spams: 293792
recipient count of blocked spams: 7806783

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	423
2	HINET-NET	237
3	CHINANET-GD	215
4	VNPT-VNNIC-VN	127
5	TELKOMNET	89
6	BSNLNET	65
7	PTCL	59
8	BY-BELPAK-20091210	45
9	UNICOM-HN	42
10	KORNET-KR	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1035
2	Taiwan	252
3	India	199
4	Indonesia	187
5	Viet Nam	173
6	Brazil	170
7	Russian Federation	132
8	United States	88
9	South Korea	76
10	Ukraine	72

Botnet Statistics [2011-02-18]

detection period: 2011-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2594
number of botnet IPs notified to network operators: 2015
number of blocked spams: 275976
recipient count of blocked spams: 7440732

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	359
2	HINET-NET	234
3	CHINANET-GD	133
4	VNPT-VNNIC-VN	82
5	TELKOMNET	54
6	UNICOM-HA	39
7	PTCL	33
8	BSNLNET	33
9	CHINANET-JS	31
10	CRTC	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	904
2	Taiwan	242
3	Brazil	150
4	Indonesia	130
5	Viet Nam	120
6	India	107
7	Russian Federation	98
8	South Korea	53
9	United States	49
10	Ukraine	48

Botnet Statistics [2011-02-17]

detection period: 2011-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2656
number of botnet IPs notified to network operators: 2120
number of blocked spams: 172393
recipient count of blocked spams: 4453201

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	353
2	CHINANET-GD	242
3	HINET-NET	234
4	BSNLNET	76
5	UNICOM-HA	51
6	UNICOM-HN	45
7	CHINANET-HN	44
8	CHINANET-JS	40
9	CHINATELECOM-BJ	37
10	KORNET-KR	33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1097
2	Taiwan	246
3	India	166
4	Brazil	161
5	Russian Federation	108
6	South Korea	61
7	Indonesia	53
8	Thailand	51
9	Viet Nam	43
10	United States	41

Botnet Statistics [2011-02-16]

detection period: 2011-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2265
number of botnet IPs notified to network operators: 1831
number of blocked spams: 170394
recipient count of blocked spams: 4347115

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	349
2	HINET-NET	227
3	CHINANET-GD	193
4	CTTNET	84
5	UNICOM-HN	60
6	UNICOM-HA	60
7	CHINANET-HN	51
8	CRTC	38
9	CHINANET-JS	31
10	BSNLNET	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1041
2	Taiwan	233
3	Brazil	138
4	Russian Federation	98
5	India	89
6	Ukraine	46
7	Indonesia	45
8	Viet Nam	36
9	South Korea	31
10	Colombia	31

Botnet Statistics [2011-02-15]

detection period: 2011-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2524
number of botnet IPs notified to network operators: 2067
number of blocked spams: 188211
recipient count of blocked spams: 4086799

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	356
2	UNICOM-BJ	311
3	HINET-NET	235
4	BSNLNET	82
5	UNICOM-HA	48
6	VNPT-VNNIC-VN	46
7	CRTC	36
8	UNICOM-HN	32
9	002.558.134/0001-58	32
10	CTTNET	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1029
2	Taiwan	247
3	Brazil	186
4	India	182
5	Russian Federation	114
6	Viet Nam	62
7	Thailand	52
8	Indonesia	49
9	Ukraine	48
10	South Korea	47

Botnet Statistics [2011-02-14]

detection period: 2011-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2620
number of botnet IPs notified to network operators: 2167
number of blocked spams: 133787
recipient count of blocked spams: 2871448

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	537
2	UNICOM-BJ	337
3	HINET-NET	237
4	UNICOM-HA	80
5	BSNLNET	52
6	CTTNET	41
7	002.558.134/0001-58	33
8	CRTC	32
9	VNPT-VNNIC-VN	30
10	CHINATELECOM-BJ	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1251
2	Taiwan	250
3	Brazil	175
4	India	138
5	Russian Federation	116
6	Ukraine	44
7	Indonesia	41
8	Viet Nam	40
9	Pakistan	35
10	Thailand	33

Botnet Statistics [2011-02-13]

detection period: 2011-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2696
number of botnet IPs notified to network operators: 2207
number of blocked spams: 155000
recipient count of blocked spams: 3411503

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	509
2	UNICOM-BJ	353
3	HINET-NET	225
4	UNICOM-HA	72
5	CTTNET	50
6	BSNLNET	48
7	PTCL	45
8	VNPT-VNNIC-VN	38
9	CRTC	36
10	BY-BELPAK-20091210	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1204
2	Taiwan	234
3	Brazil	148
4	India	119
5	Russian Federation	114
6	Indonesia	66
7	Viet Nam	61
8	Thailand	59
9	Ukraine	56
10	Pakistan	52

Botnet Statistics [2011-02-12]

detection period: 2011-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2893
number of botnet IPs notified to network operators: 2379
number of blocked spams: 128780
recipient count of blocked spams: 3087515

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	643
2	UNICOM-BJ	281
3	HINET-NET	241
4	BSNLNET	82
5	UNICOM-HA	73
6	VNPT-VNNIC-VN	46
7	TELKOMNET	44
8	CTTNET	35
9	CRTC	33
10	PTCL	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1276
2	Taiwan	252
3	India	215
4	Brazil	181
5	Russian Federation	115
6	Indonesia	89
7	Viet Nam	64
8	Ukraine	61
9	Thailand	45
10	Pakistan	38

Botnet Statistics [2011-02-11]

detection period: 2011-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2344
number of botnet IPs notified to network operators: 1956
number of blocked spams: 125086
recipient count of blocked spams: 3278880

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	689
2	UNICOM-BJ	336
3	HINET-NET	231
4	UNICOM-HA	34
5	BSNLNET	32
6	RCOM	23
7	003.420.926/0002-05	22
8	CRTC	21
9	CHINANET-ZJ-WZ	20
10	002.558.157/0001-62	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1245
2	Taiwan	241
3	Brazil	131
4	India	102
5	Russian Federation	84
6	Ukraine	37
7	Indonesia	32
8	South Korea	31
9	Belarus	27
10	Poland	26

Botnet Statistics [2011-02-10]

detection period: 2011-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2810
number of botnet IPs notified to network operators: 2300
number of blocked spams: 156964
recipient count of blocked spams: 4082325

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	696
2	UNICOM-BJ	292
3	HINET-NET	239
4	BSNLNET	83
5	VNPT-VNNIC-VN	59
6	PTCL	36
7	TELKOMNET	32
8	RCOM	32
9	002.558.157/0001-62	32
10	002.558.134/0001-58	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1175
2	Taiwan	249
3	India	207
4	Brazil	178
5	Russian Federation	114
6	Viet Nam	83
7	Indonesia	81
8	Thailand	57
9	South Korea	48
10	Colombia	41

Botnet Statistics [2011-02-09]

detection period: 2011-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2968
number of botnet IPs notified to network operators: 2443
number of blocked spams: 197991
recipient count of blocked spams: 4491778

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	696
2	UNICOM-BJ	403
3	HINET-NET	225
4	VNPT-VNNIC-VN	81
5	BSNLNET	76
6	TELKOMNET	63
7	PTCL	48
8	002.558.134/0001-58	30
9	CRTC	26
10	KORNET-KR	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1272
2	Taiwan	234
3	India	184
4	Brazil	170
5	Indonesia	124
6	Viet Nam	111
7	Russian Federation	90
8	Pakistan	55
9	Thailand	51
10	South Korea	50

Botnet Statistics [2011-02-08]

detection period: 2011-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 2743
number of botnet IPs notified to network operators: 2238
number of blocked spams: 180042
recipient count of blocked spams: 3888248

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	664
2	UNICOM-BJ	375
3	HINET-NET	226
4	VNPT-VNNIC-VN	58
5	TELKOMNET	57
6	BSNLNET	55
7	PTCL	34
8	CRTC	29
9	RCOM	28
10	KORNET-KR	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1212
2	Taiwan	241
3	India	150
4	Brazil	147
5	Indonesia	126
6	Russian Federation	103
7	Viet Nam	86
8	South Korea	52
9	Thailand	44
10	Pakistan	39

Botnet Statistics [2011-02-07]

detection period: 2011-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2582
number of botnet IPs notified to network operators: 2006
number of blocked spams: 190507
recipient count of blocked spams: 3943164

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	369
2	UNICOM-BJ	365
3	HINET-NET	242
4	BSNLNET	76
5	PTCL	74
6	VNPT-VNNIC-VN	54
7	KORNET-KR	46
8	TELKOMNET	45
9	RCOM	27
10	TATACOMM-IN	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	897
2	Taiwan	251
3	India	212
4	Brazil	162
5	Russian Federation	112
6	Indonesia	95
7	Pakistan	81
8	South Korea	73
9	Viet Nam	68
10	Ukraine	54

Botnet Statistics [2011-02-06]

As botnets have become the tool of choice when hackers commit cyber crime, what we do to mitigate botnets are really preventive measures against future cyber incidents indeed. Many security experts have expressed worries over even larger DDoS attacks and cyber threats this year, but if we can keep botnets at bay through detection and notification, we should be fine.

detection period: 2011-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 1779
number of botnet IPs notified to network operators: 1340
number of blocked spams: 228446
recipient count of blocked spams: 5773274

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	219
2	UNICOM-BJ	196
3	CHINANET-GD	175
4	PTCL	54
5	BSNLNET	38
6	VNPT-VNNIC-VN	30
7	CRTC	29
8	KORNET-KR	27
9	002.558.134/0001-58	23
10	TELKOMNET	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	505
2	Taiwan	226
3	Brazil	128
4	India	108
5	Russian Federation	91
6	Pakistan	61
7	Ukraine	56
8	Indonesia	51
9	Viet Nam	39
10	South Korea	39

Botnet Statistics [2011-02-05]

detection period: 2011-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1850
number of botnet IPs notified to network operators: 1324
number of blocked spams: 200812
recipient count of blocked spams: 4784222

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	241
2	CHINANET-GD	198
3	BSNLNET	91
4	PTCL	74
5	BY-BELPAK-20091210	33
6	VNPT-VNNIC-VN	32
7	KORNET-KR	32
8	RCOM	30
9	TELKOMNET	28
10	TATACOMM-IN	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	342
2	Taiwan	250
3	India	223
4	Brazil	124
5	Russian Federation	99
6	Pakistan	76
7	Indonesia	71
8	South Korea	52
9	Ukraine	50
10	Viet Nam	40

Botnet Statistics for January 2011

As my statistics are posted in fixed format, I often copy the post of the previous day/month into a new post, and change only the numbers and charts. Today, when I tried to compose the first monthly statistics for 2011, I found out that the ending time of all my monthly detection periods last year had been incorrectly written as "2001." It took me some time to fix this for all the 12 monthly statistics reports of 2010.

detection period: 2011-01-01 00:00 - 2011-01-31 23:59 UTC
total number of suspected botnet IPs: 26043
number of blocked spams: 8502516
recipient count of blocked spams: 272619859

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	India	8112
2	China	6055
3	Taiwan	4510
4	Brazil	1243
5	Thailand	1183
6	Russian Federation	1041
7	Argentina	591
8	Ukraine	499
9	United States	272
10	Kazakhstan	255
11	South Korea	186
12	Indonesia	171
13	Belarus	165
14	Uruguay	123
15	Ethiopia	118
16	Colombia	101
17	Germany	95
18	Chile	89
19	Mexico	71
20	Bulgaria	70
21	Algeria	64
22	France	59
23	Poland	57
24	Italy	56
25	United Kingdom	48

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1921299
2	Brazil	986501
3	United States	719760
4	Russian Federation	418702
5	India	366314
6	Taiwan	316951
7	Colombia	292063
8	Indonesia	246039
9	France	243892
10	Thailand	210108
11	South Korea	200519
12	Poland	138745
13	Italy	134871
14	Germany	123351
15	Ukraine	122822
16	Argentina	113744
17	Chile	96375
18	Spain	92300
19	United Kingdom	80544
20	Saudi Arabia	75205
21	Viet Nam	71471
22	Mexico	69701
23	Venezuela	68870
24	Iran	65737
25	Philippines	65331

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2011-02-04]

detection period: 2011-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 1505
number of botnet IPs notified to network operators: 1132
number of blocked spams: 256761
recipient count of blocked spams: 5713566

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	236
2	CHINANET-GD	162
3	BSNLNET	63
4	RCOM	31
5	002.558.157/0001-62	26
6	KORNET-KR	21
7	CHINANET-ZJ-WZ	21
8	002.558.134/0001-58	19
9	000.065.376/0002-65	18
10	AR-TEAR7-LACNIC	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	281
2	Taiwan	243
3	India	151
4	Brazil	142
5	Russian Federation	82
6	Thailand	49
7	Colombia	41
8	South Korea	36
9	Ukraine	32
10	Argentina	31

Botnet Statistics [2011-02-03]

Today I included data gathered from greylisting to my statistics, except the number of blocked spams and recipient count of blocked spams, which greylisting does not apply.

detection period: 2011-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 1621
number of botnet IPs notified to network operators: 1169
number of blocked spams: 183725
recipient count of blocked spams: 4253926

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	235
2	CHINANET-GD	172
3	BSNLNET	78
4	RCOM	28
5	002.558.157/0001-62	24
6	076.535.764/0326-90	19
7	BY-BELPAK-20091210	18
8	033.530.486/0001-29	18
9	003.420.926/0002-05	18
10	KORNET-KR	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	287
2	Taiwan	243
3	India	165
4	Brazil	143
5	Russian Federation	95
6	Thailand	40
7	Colombia	39
8	United States	38
9	South Korea	34
10	Germany	34

Botnet Statistics [2011-02-02]

detection period: 2011-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 842
number of botnet IPs notified to network operators: 689
number of blocked spams: 168469
recipient count of blocked spams: 3503746

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	231
2	CHINANET-GD	158
3	RCOM	13
4	CHINANET-ZJ-WZ	12
5	BSNLNET	12
6	003.420.926/0002-05	9
7	076.535.764/0326-90	8
8	002.558.157/0001-62	8
9	INTER-SAT	7
10	CO-ACSA-LACNIC	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	256
2	Taiwan	238
3	Brazil	54
4	India	45
5	Russian Federation	41
6	United States	20
7	Colombia	18
8	Poland	14
9	Indonesia	14
10	South Korea	9

Botnet Statistics [2011-02-01]

I have been trying to detect botnets with greylisting recently. Today I sent a small batch of botnet notification based on greylisting's detection for the first time. Fake open relay will still be my primary detection mechanism. Greylisting will be used only for those bots not reported by fake open relay. The following statistics does not include bots detected by greylisting.

detection period: 2011-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 881
number of botnet IPs notified to network operators: 719
number of blocked spams: 170267
recipient count of blocked spams: 3523360

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	231
2	CHINANET-GD	144
3	CHINANET-ZJ-WZ	22
4	RCOM	17
5	BSNLNET	14
6	003.420.926/0002-05	10
7	CHINANET-ZJ	9
8	002.558.157/0001-62	9
9	KORNET-KR	7
10	INTER-SAT	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	259
2	Taiwan	236
3	India	57
4	Brazil	53
5	Russian Federation	46
6	United States	24
7	Colombia	19
8	Indonesia	16
9	Poland	14
10	South Korea	14

Botnet Statistics [2011-01-31]

detection period: 2011-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 1001
number of botnet IPs notified to network operators: 832
number of blocked spams: 213572
recipient count of blocked spams: 5102123

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	215
2	CHINANET-GD	215
3	UNICOM-BJ	65
4	RCOM	16
5	CHINANET-ZJ-WZ	13
6	BSNLNET	12
7	003.420.926/0002-05	9
8	KORNET-KR	8
9	CHINANET-FJ	8
10	002.558.157/0001-62	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	390
2	Taiwan	221
3	Brazil	54
4	India	49
5	Russian Federation	46
6	United States	25
7	Colombia	18
8	Indonesia	16
9	South Korea	15
10	Poland	14