Botnet Statistics [2012-03-27]

The greylisting vps is still down. Today's number is taken from fake open relays only. Maybe I need to get another vps to replace the greylisting one.

detection period: 2012-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1941
number of botnet IPs notified to network operators: 1718
number of spam blocked: 161381
recipient count of spam blocked: 5484198

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	489
2	HINET-NET	455
3	UNICOM-GD	378
4	UNICOM-BJ	23
5	CHINANET-JS	15
6	003.420.926/0002-05	14
7	002.558.157/0001-62	13
8	000.065.376/0002-65	13
9	033.530.486/0001-29	12
10	UNICOM-SD	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1042
2	Taiwan	462
3	Brazil	78
4	United States	43
5	Russian Federation	38
6	India	27
7	Germany	26
8	Iran	17
9	Indonesia	16
10	France	14