Custom Search

Sunday, August 15, 2010

Botnet Statistics [2010-08-14]

While I still detected 1000+ botnet computers on August 14, all of them came from 4 networks of 3 different countries. This is very different from what I got several months ago. Now I can not even fill out my daily top 10 botnet networks and countries. is it a sign that my detection is not as effective as it used to be? Or is the number of botnet computers in general declining?

detection period: 2010-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1560
number of botnet IPs notified to network operators: 1560
number of blocked spams: 67742
recipient count of blocked spams: 1602308

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET1369
2CHINANET-GD178
3CHINANET-ZJ-WZ12
4UPC-NL1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan1369
2China190
3Netherlands1

No comments:

Post a Comment