Botnet Statistics [2012-07-09]

Yesterday I forgot to mention that my greylisting was not available. And its data is not usable today due to the offline period. So greylisting data is not used for July the 8th and 9th.

detection period: 2012-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1376
number of botnet IPs notified to network operators: 1111
number of spam blocked: 123864
recipient count of spam blocked: 4162779

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	406
2	UNICOM-GD	179
3	HINET-NET	137
4	002.558.157/0001-62	16
5	CHINANET-JS	14
6	003.420.926/0002-05	14
7	000.065.376/0002-65	12
8	TELEHOUSE	10
9	033.530.486/0001-29	10
10	NETBLK-SOFTLAYER-RIPE-CUST-AR10282-RIPE	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	694
2	Taiwan	141
3	Brazil	96
4	Russian Federation	54
5	United States	50
6	Netherlands	23
7	India	21
8	Germany	21
9	South Korea	19
10	France	19