Custom Search

Wednesday, March 28, 2012

Botnet Statistics [2012-03-26]

My detection system built around greylisting is offline currently, so today's number is derived from fake open relays only.

detection period: 2012-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2095
number of botnet IPs notified to network operators: 1867
number of spam blocked: 183072
recipient count of spam blocked: 6234312

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD492
2UNICOM-GD490
3HINET-NET461
4UNICOM-BJ18
5CHINANET-JS17
6033.530.486/0001-2915
7003.420.926/0002-0515
8002.558.157/0001-6214
9000.065.376/0002-6513
10UNICOM-SD11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1160
2Taiwan470
3Brazil81
4United States50
5Russian Federation36
6India27
7Germany27
8South Korea18
9Iran17
10Indonesia17

No comments:

Post a Comment