Custom Search

Tuesday, July 10, 2012

Botnet Statistics [2012-07-09]

Yesterday I forgot to mention that my greylisting was not available. And its data is not usable today due to the offline period. So greylisting data is not used for July the 8th and 9th.

detection period: 2012-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1376
number of botnet IPs notified to network operators: 1111
number of spam blocked: 123864
recipient count of spam blocked: 4162779

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD406
2UNICOM-GD179
3HINET-NET137
4002.558.157/0001-6216
5CHINANET-JS14
6003.420.926/0002-0514
7000.065.376/0002-6512
8TELEHOUSE10
9033.530.486/0001-2910
10NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China694
2Taiwan141
3Brazil96
4Russian Federation54
5United States50
6Netherlands23
7India21
8Germany21
9South Korea19
10France19

No comments:

Post a Comment