Daily Botnet Statistics

Saturday, February 2, 2013

Botnet Statistics [2013-02-01]

detection period: 2013-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1164
number of botnet IPs notified to network operators: 937
number of spam blocked: 64510
recipient count of spam blocked: 2020346

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	142
2	CHINANET-GD	100
3	CRTC	34
4	CHINANET-FJ	31
5	CHINANET-JS	29
6	BY-BELPAK-20091210	28
7	003.420.926/0002-05	13
8	CHINANET-SH	12
9	BY-BELPAK-20120330	12
10	UNICOM-BJ	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	365
2	Taiwan	147
3	United States	69
4	Brazil	62
5	Belarus	49
6	Russian Federation	46
7	Ukraine	22
8	Kazakhstan	22
9	South Korea	20
10	India	20

Friday, February 1, 2013

Suspected Bot List [2013-01-31]

detection period: 2013-01-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead.

country code	IP address	Country
AE	94.200.108.10	Arab Emirates
AL	82.114.76.206	Albania
AO	41.63.166.3	Angola
AR	190.216.26.194	Argentina
AZ	94.20.30.111	Azerbaijan
BG	94.236.237.10	Bulgaria
BY	212.98.187.147	Belarus
CA	184.71.51.114	Canada
CH	212.243.135.35	Switzerland
CI	213.136.105.210	Ivory Coast
CZ	77.104.244.69	Czech Republic
CZ	176.109.56.66	Czech Republic
CZ	213.192.3.66	Czech Republic
DE	62.176.232.167	Germany
DE	78.138.117.42	Germany
DE	82.165.197.82	Germany
DE	83.221.236.188	Germany
DE	85.214.242.208	Germany
DE	89.202.127.8	Germany
EC	186.42.113.53	Ecuador
EG	41.33.169.30	Egypt
ES	80.34.65.9	Spain
ES	84.124.18.129	Spain
ES	212.89.2.228	Spain
ES	213.171.239.5	Spain
GB	77.246.20.2	United Kingdom
GB	78.40.145.66	United Kingdom
GB	81.171.173.66	United Kingdom
GB	81.199.3.148	United Kingdom
GB	83.218.130.114	United Kingdom
GB	89.106.131.16	United Kingdom
GE	92.241.80.222	Republic Of Georgia
IN	121.247.145.22	India
IN	182.72.118.131	India
IN	182.72.170.34	India
IN	182.73.111.162	India
IN	203.193.144.200	India
IT	85.33.184.194	Italy
IT	93.63.6.97	Italy
IT	217.18.211.131	Italy
JP	125.252.87.231	Japan
KE	41.207.106.5	Kenya
KW	213.132.241.7	Kuwait
KZ	81.17.163.58	Kazakhstan
KZ	88.204.208.55	Kazakhstan
KZ	89.218.94.164	Kazakhstan
LT	77.90.88.210	Lithuania
MA	41.214.129.22	Morocco
MD	77.89.251.70	Republic Of Moldova
MN	180.149.96.69	Mongolia
MV	202.21.182.26	Republic of Maldives
MX	200.52.87.170	Mexico
MX	201.144.213.20	Mexico
MX	201.159.106.90	Mexico
NF	203.142.221.27	Norfolk Island
NI	186.1.10.154	Nicaragua
NL	80.89.226.88	Netherlands
PA	190.33.184.107	Panama
PH	120.28.8.194	Philippines
PH	124.104.141.204	Philippines
PK	110.93.211.7	Pakistan
RO	91.220.26.4	Romania
RO	92.86.2.82	Romania
RO	188.240.22.164	Romania
RS	217.26.67.60	Serbia
RU	217.198.3.238	Russian Federation
SG	203.120.230.66	Singapore
SK	85.237.244.128	Slovakia
SK	93.184.71.66	Slovakia
SV	190.86.185.1	El Salvador
US	66.206.87.135	United States
US	67.20.29.147	United States
US	70.33.229.148	United States
US	72.9.228.236	United States
US	72.22.90.115	United States
US	75.103.105.100	United States
US	173.45.78.187	United States
US	174.34.168.242	United States
US	184.154.70.91	United States
US	198.71.81.53	United States
US	205.164.58.2	United States
US	205.208.148.104	United States
US	216.25.32.242	United States

Botnet Statistics [2013-01-31]

detection period: 2013-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 1425
number of botnet IPs notified to network operators: 1169
number of spam blocked: 23839
recipient count of spam blocked: 704091

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	250
2	CHINANET-GD	113
3	UNICOM-GD	46
4	CHINANET-FJ	43
5	CRTC	33
6	TimeNet	28
7	SHENZHEN-CNC	23
8	CHINANET-JS	23
9	KORNET-KR	17
10	003.420.926/0002-05	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	489
2	Taiwan	255
3	Brazil	80
4	United States	60
5	Russian Federation	57
6	India	35
7	Ukraine	28
8	South Korea	28
9	Belarus	27
10	Viet Nam	24