Suspected Bot List [2013-12-30]

detection period: 2013-12-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 256

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.132.106	China
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IT	95.227.34.226	Italy
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	61.64.21.68	Taiwan
TW	119.77.206.218	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-30]

detection period: 2013-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3057
number of botnet IPs notified to network operators: 2801
number of spam blocked: 32624
recipient count of spam blocked: 1186706

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	269
2	CMNET	156
3	UNICOM-SD	140
4	CRTC	123
5	CTTNET	113
6	CHINANET-JS	96
7	UNICOM-LN	90
8	UNICOM-HA	79
9	UNICOM-JL	78
10	UNICOM-HE	75

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2324
2	United States	64
3	Taiwan	57
4	Brazil	49
5	Spain	41
6	Italy	34
7	Russian Federation	29
8	Argentina	27
9	Germany	26
10	Colombia	24

Suspected Bot List [2013-12-29]

detection period: 2013-12-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 182

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IT	95.227.34.226	Italy
MO	60.246.154.160	Macau
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-29]

detection period: 2013-12-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1868
number of botnet IPs notified to network operators: 1686
number of spam blocked: 41466
recipient count of spam blocked: 1573246

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	215
2	UNICOM-SD	74
3	CTTNET	73
4	CMNET	56
5	CRTC	54
6	UNICOM-LN	52
7	CHINANET-XJ	50
8	CHINANET-JS	48
9	UNICOM-HA	41
10	CHINANET-FJ	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1301
2	United States	54
3	Taiwan	30
4	Spain	30
5	Germany	29
6	Brazil	28
7	United Kingdom	27
8	Argentina	27
9	Iran	23
10	Russian Federation	22

Suspected Bot List [2013-12-28]

detection period: 2013-12-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 211

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.0.54	China
CN	150.255.19.233	China
CN	150.255.161.149	China
CN	150.255.177.135	China
CN	150.255.185.84	China
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IT	95.227.34.226	Italy
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-28]

detection period: 2013-12-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2400
number of botnet IPs notified to network operators: 2189
number of spam blocked: 49111
recipient count of spam blocked: 1868558

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	277
2	CMNET	120
3	UNICOM-SD	109
4	CTTNET	98
5	CRTC	83
6	CHINANET-JS	77
7	UNICOM-LN	64
8	UNICOM-HA	55
9	CHINANET-XJ	52
10	UNICOM-HE	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1756
2	Taiwan	64
3	United States	63
4	Brazil	36
5	United Kingdom	35
6	Argentina	30
7	Germany	28
8	Iran	27
9	Peru	25
10	Colombia	25

Suspected Bot List [2013-12-27]

detection period: 2013-12-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 352

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
KZ	109.229.189.175	Kazakhstan
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	211.76.93.140	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-27]

detection period: 2013-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2574
number of botnet IPs notified to network operators: 2223
number of spam blocked: 41256
recipient count of spam blocked: 1583938

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	276
2	CMNET	105
3	CTTNET	92
4	UNICOM-SD	88
5	CRTC	83
6	UNICOM-HE	61
7	UNICOM-LN	60
8	CHINANET-JS	51
9	UNICOM-HL	44
10	UNICOM-JL	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1539
2	United States	131
3	India	55
4	Taiwan	46
5	Argentina	45
6	Brazil	42
7	Italy	40
8	Spain	40
9	United Kingdom	36
10	Peru	35

Suspected Bot List [2013-12-26]

detection period: 2013-12-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 295

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.92.48	China
CO	190.90.2.30	Colombia
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
KZ	109.229.189.175	Kazakhstan
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MY	203.142.53.200	Malaysia
PE	190.81.249.18	Peru
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-26]

detection period: 2013-12-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2813
number of botnet IPs notified to network operators: 2519
number of spam blocked: 42975
recipient count of spam blocked: 1626533

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	543
2	CTTNET	98
3	UNICOM-SD	83
4	CHINANET-JS	83
5	CMNET	78
6	UNICOM-LN	73
7	CRTC	72
8	UNICOM-HE	60
9	UNICOM-HL	44
10	UNICOM-JL	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1893
2	United States	152
3	Taiwan	52
4	Brazil	50
5	Spain	46
6	United Kingdom	45
7	Peru	41
8	India	34
9	Italy	33
10	Argentina	32

Suspected Bot List [2013-12-25]

detection period: 2013-12-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 191

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	109.229.189.175	Kazakhstan
MO	60.246.179.2	Macau
MX	189.204.49.66	Mexico
MY	203.142.53.200	Malaysia
PE	190.81.249.18	Peru
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	61.64.4.180	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-25]

detection period: 2013-12-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3167
number of botnet IPs notified to network operators: 2977
number of spam blocked: 38041
recipient count of spam blocked: 1398532

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	685
2	CRTC	168
3	CTTNET	157
4	UNICOM-SD	123
5	CMNET	107
6	CHINANET-JS	97
7	UNICOM-LN	88
8	UNICOM-HE	64
9	UNICOM-HA	59
10	UNICOM-HL	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2501
2	United States	76
3	Taiwan	66
4	Brazil	43
5	Spain	26
6	Argentina	26
7	Italy	23
8	Russian Federation	22
9	United Kingdom	22
10	India	20

Suspected Bot List [2013-12-24]

detection period: 2013-12-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 261

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	109.229.189.175	Kazakhstan
MX	189.204.49.66	Mexico
PE	190.81.249.18	Peru
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.206.218	Taiwan
TW	211.76.90.34	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-24]

detection period: 2013-12-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2868
number of botnet IPs notified to network operators: 2608
number of spam blocked: 31387
recipient count of spam blocked: 1154251

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	575
2	CRTC	165
3	CMNET	128
4	CTTNET	84
5	UNICOM-SD	82
6	UNICOM-LN	67
7	CHINANET-JS	66
8	UNICOM-HL	55
9	HINET-NET	48
10	UNICOM-HE	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2010
2	United States	89
3	Taiwan	73
4	India	46
5	Brazil	41
6	United Kingdom	34
7	Spain	34
8	Argentina	32
9	Italy	29
10	Colombia	28

Suspected Bot List [2013-12-23]

detection period: 2013-12-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 337

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	109.229.189.175	Kazakhstan
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.154.229	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States
US	74.128.122.135	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-23]

detection period: 2013-12-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2717
number of botnet IPs notified to network operators: 2381
number of spam blocked: 31768
recipient count of spam blocked: 1233499

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	503
2	CRTC	167
3	CTTNET	92
4	CMNET	87
5	UNICOM-SD	62
6	CHINANET-JS	46
7	UNICOM-LN	42
8	UNICOM-HE	36
9	CHINANET-FJ	36
10	HINET-NET	33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1562
2	United States	151
3	India	81
4	Brazil	60
5	France	55
6	Taiwan	54
7	South Korea	53
8	Spain	47
9	United Kingdom	40
10	Indonesia	33

Suspected Bot List [2013-12-22]

detection period: 2013-12-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.154.229	Taiwan
US	50.201.42.106	United States
US	67.229.59.146	United States

List from greylisting:

Botnet Statistics [2013-12-22]

detection period: 2013-12-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1526
number of botnet IPs notified to network operators: 1491
number of spam blocked: 3570
recipient count of spam blocked: 141673

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	461
2	CRTC	255
3	CTTNET	230
4	CHINANET-FJ	45
5	UNICOM-LN	26
6	MSFT-GFS	18
7	UNICOM-HE	10
8	UNICOM-GD	9
9	CHINANET-JS	9
10	002.558.157/0001-62	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1185
2	United States	80
3	Brazil	35
4	Russian Federation	22
5	South Korea	15
6	Turkey	11
7	Indonesia	11
8	Taiwan	10
9	United Kingdom	10
10	Germany	10

Suspected Bot List [2013-12-21]

detection period: 2013-12-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2013-12-21]

detection period: 2013-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 927
number of botnet IPs notified to network operators: 896
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	331
2	CTTNET	133
3	CHINANET-GD	107
4	CHINANET-FJ	39
5	UNICOM-GD	13
6	MSFT-GFS	9
7	DORATELEKOM-NET	7
8	UNICOM-SD	6
9	Wotone	5
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	754
2	United States	31
3	India	12
4	Turkey	10
5	Kazakhstan	8
6	Russian Federation	7
7	Brazil	6
8	Singapore	5
9	South Korea	5
10	Iran	5

Suspected Bot List [2013-12-20]

detection period: 2013-12-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2013-12-20]

detection period: 2013-12-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1197
number of botnet IPs notified to network operators: 1052
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	85
2	CRTC	76
3	CHINANET-FJ	42
4	IP2000-ADSL-BAS	30
5	SINGNET-SG	22
6	CTTNET	16
7	FR-LDCOMNET-20090813	14
8	HINET-NET	13
9	BHARTI-IN	13
10	UNICOM-SD	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	383
2	United States	140
3	France	87
4	India	57
5	United Kingdom	35
6	Hong Kong	31
7	Singapore	30
8	Taiwan	24
9	Russian Federation	24
10	South Korea	21

Suspected Bot List [2013-12-19]

detection period: 2013-12-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 129

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2013-12-19]

detection period: 2013-12-19 00:00-23:59 UTC
total number of suspected botnet IPs: 962
number of botnet IPs notified to network operators: 833
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	105
2	CTTNET	80
3	CHINANET-FJ	44
4	CRTC	31
5	UNICOM-GD	17
6	CHINANET-JS	17
7	IP2000-ADSL-BAS	14
8	DORATELEKOM-NET	14
9	CHINANET-HB	8
10	UNICOM-SD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	434
2	United States	83
3	France	52
4	United Kingdom	30
5	India	26
6	Brazil	24
7	Turkey	22
8	Russian Federation	19
9	Mexico	17
10	Spain	16

Suspected Bot List [2013-12-18]

detection period: 2013-12-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 198

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2013-12-18]

detection period: 2013-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1531
number of botnet IPs notified to network operators: 1333
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	267
2	CTTNET	132
3	CRTC	121
4	HINET-NET	54
5	CHINANET-FJ	32
6	SINGNET-SG	31
7	KORNET-KR	29
8	VNPT-VNNIC-VN	25
9	NETVIGATOR	14
10	BHARTI-IN	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	696
2	United States	92
3	Taiwan	68
4	India	49
5	South Korea	45
6	Russian Federation	42
7	Indonesia	40
8	Singapore	37
9	Viet Nam	33
10	Hong Kong	31

Suspected Bot List [2013-12-17]

detection period: 2013-12-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 91

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2013-12-17]

detection period: 2013-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1240
number of botnet IPs notified to network operators: 1149
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	434
2	CRTC	74
3	CHINANET-FJ	34
4	CTTNET	22
5	CHINANET-JS	20
6	UNICOM-GD	17
7	KORNET-KR	13
8	HINET-NET	13
9	UNICOM-SD	12
10	DORATELEKOM-NET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	742
2	United States	91
3	Russian Federation	28
4	South Korea	27
5	Brazil	23
6	Taiwan	22
7	Turkey	22
8	United Kingdom	20
9	Israel	13
10	Indonesia	13

Suspected Bot List [2013-12-16]

detection period: 2013-12-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 119

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
KZ	109.229.189.175	Kazakhstan
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.154.229	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-16]

detection period: 2013-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1347
number of botnet IPs notified to network operators: 1229
number of spam blocked: 22591
recipient count of spam blocked: 752915

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	295
2	CHINANET-GD	261
3	CHINANET-FJ	42
4	UNICOM-GD	40
5	CHINANET-ZJ-NB	32
6	UNICOM-LN	31
7	CHINANET-JS	20
8	CTTNET	14
9	CHINANET-JX	12
10	CHINANET-ZJ	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	615
2	Taiwan	302
3	United States	53
4	Brazil	37
5	Russian Federation	29
6	South Korea	17
7	Argentina	17
8	Germany	16
9	Indonesia	15
10	Romania	13

Suspected Bot List [2013-12-15]

detection period: 2013-12-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 121

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.154.229	Taiwan
US	50.201.42.106	United States
US	74.128.122.135	United States

List from greylisting:

Botnet Statistics [2013-12-15]

detection period: 2013-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2230
number of botnet IPs notified to network operators: 2111
number of spam blocked: 66973
recipient count of spam blocked: 2034410

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	878
2	CHINANET-GD	372
3	UNICOM-GD	168
4	CHINANET-ZJ-NB	101
5	CTTNET	33
6	CHINANET-FJ	30
7	UNICOM-LN	26
8	ZTWL	20
9	CHINANET-ZJ	15
10	CHINANET-JS	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	938
2	Taiwan	886
3	United States	45
4	Brazil	33
5	Argentina	20
6	Russian Federation	17
7	United Kingdom	16
8	Indonesia	15
9	Ukraine	13
10	Israel	13

Suspected Bot List [2013-12-14]

detection period: 2013-12-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PH	124.107.158.30	Philippines
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-14]

detection period: 2013-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1802
number of botnet IPs notified to network operators: 1766
number of spam blocked: 69673
recipient count of spam blocked: 2161007

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	892
2	CHINANET-GD	249
3	UNICOM-GD	195
4	CHINANET-ZJ-NB	55
5	ZTWL	28
6	UNICOM-LN	25
7	PSYCHZ-NETWORKS	21
8	CHINANET-JS	12
9	CHINANET-ZJ	11
10	UNICOM-HE	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	895
2	China	688
3	United States	47
4	Brazil	24
5	Russian Federation	16
6	Ukraine	10
7	United Kingdom	8
8	South Korea	6
9	Indonesia	6
10	Hong Kong	6

Suspected Bot List [2013-12-13]

detection period: 2013-12-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
FR	89.3.32.179	France
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-13]

detection period: 2013-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1741
number of botnet IPs notified to network operators: 1707
number of spam blocked: 65474
recipient count of spam blocked: 2065268

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	850
2	CHINANET-GD	252
3	UNICOM-GD	178
4	CHINANET-ZJ-NB	38
5	UNICOM-LN	24
6	CHINANET-ZJ	15
7	CHINANET-FJ	15
8	CHINANET-JX	13
9	CTTNET	11
10	ZTWL	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	856
2	China	661
3	Brazil	25
4	United States	22
5	Russian Federation	14
6	Ukraine	11
7	United Kingdom	11
8	South Korea	10
9	Iran	7
10	Germany	7

Suspected Bot List [2013-12-12]

detection period: 2013-12-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 85

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
EC	200.24.218.187	Ecuador
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	202.63.105.226	India
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PE	200.31.105.172	Peru
PH	124.107.158.30	Philippines
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-12]

detection period: 2013-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2045
number of botnet IPs notified to network operators: 1960
number of spam blocked: 68068
recipient count of spam blocked: 2013651

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	855
2	CHINANET-GD	385
3	UNICOM-GD	162
4	CHINANET-ZJ-NB	49
5	UNICOM-LN	25
6	ZTWL	21
7	PSYCHZ-NETWORKS	21
8	CHINANET-JX	18
9	CHINANET-FJ	14
10	CTTNET	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	858
2	China	814
3	United States	60
4	Brazil	27
5	Russian Federation	23
6	Spain	16
7	Argentina	15
8	Germany	14
9	Italy	12
10	Colombia	12

Suspected Bots' IP List for December 2013

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2013-12-31]
Suspected Bots IP [2013-12-30]
Suspected Bots IP [2013-12-29]
Suspected Bots IP [2013-12-28]
Suspected Bots IP [2013-12-27]
Suspected Bots IP [2013-12-26]
Suspected Bots IP [2013-12-25]
Suspected Bots IP [2013-12-24]
Suspected Bots IP [2013-12-23]
Suspected Bots IP [2013-12-22]
Suspected Bots IP [2013-12-21]
Suspected Bots IP [2013-12-20]
Suspected Bots IP [2013-12-19]
Suspected Bots IP [2013-12-18]
Suspected Bots IP [2013-12-17]
Suspected Bots IP [2013-12-16]
Suspected Bots IP [2013-12-15]
Suspected Bots IP [2013-12-14]
Suspected Bots IP [2013-12-13]
Suspected Bots IP [2013-12-12]
Suspected Bots IP [2013-12-11]
Suspected Bots IP [2013-12-10]
Suspected Bots IP [2013-12-09]
Suspected Bots IP [2013-12-08]
Suspected Bots IP [2013-12-07]
Suspected Bots IP [2013-12-06]
Suspected Bots IP [2013-12-05]
Suspected Bots IP [2013-12-04]
Suspected Bots IP [2013-12-03]
Suspected Bots IP [2013-12-02]
Suspected Bots IP [2013-12-01]

Suspected Bot List [2013-12-11]

detection period: 2013-12-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 133

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
ES	80.25.103.81	Spain
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-11]

detection period: 2013-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2425
number of botnet IPs notified to network operators: 2292
number of spam blocked: 75924
recipient count of spam blocked: 2520268

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	884
2	CHINANET-GD	525
3	UNICOM-GD	133
4	CHINANET-ZJ-NB	43
5	UNICOM-LN	25
6	SINGNET-SG	21
7	PSYCHZ-NETWORKS	21
8	CHINANET-FJ	20
9	CHINANET-JX	12
10	CHINANET-JS	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	893
2	Taiwan	892
3	United States	88
4	India	42
5	France	37
6	Russian Federation	31
7	Singapore	27
8	Brazil	26
9	Hong Kong	24
10	Indonesia	21

Suspected Bot List [2013-12-10]

detection period: 2013-12-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 80

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
NO	193.91.131.11	Norway
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-10]

detection period: 2013-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2005
number of botnet IPs notified to network operators: 1925
number of spam blocked: 75292
recipient count of spam blocked: 2425951

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	869
2	CHINANET-GD	388
3	UNICOM-GD	184
4	CHINANET-ZJ-NB	40
5	ZTWL	25
6	UNICOM-LN	24
7	CTTNET	18
8	UNICOM-HE	13
9	CHINANET-FJ	12
10	PE-TPSA-LACNIC	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	876
2	China	816
3	United States	44
4	Brazil	25
5	Russian Federation	19
6	Argentina	17
7	Peru	14
8	Ukraine	11
9	India	11
10	Israel	11

Suspected Bot List [2013-12-09]

detection period: 2013-12-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 259

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
IR	94.183.223.16	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-09]

detection period: 2013-12-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2341
number of botnet IPs notified to network operators: 2082
number of spam blocked: 80060
recipient count of spam blocked: 2604447

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	889
2	CHINANET-GD	234
3	UNICOM-GD	186
4	CHINANET-ZJ-NB	37
5	UNICOM-LN	26
6	CTTNET	18
7	ZTWL	16
8	CHINANET-FJ	16
9	CO-CTSE-LACNIC	13
10	UNICOM-HE	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	893
2	China	677
3	United States	82
4	India	60
5	Brazil	41
6	France	33
7	United Kingdom	32
8	Spain	30
9	Colombia	30
10	Argentina	30

Suspected Bot List [2013-12-08]

detection period: 2013-12-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 163

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	94.12.42.121	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
IR	94.183.223.16	Iran
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-08]

detection period: 2013-12-08 00:00-23:59 UTC
total number of suspected botnet IPs: 2142
number of botnet IPs notified to network operators: 1979
number of spam blocked: 78034
recipient count of spam blocked: 2548888

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	855
2	CHINANET-GD	408
3	UNICOM-GD	170
4	CHINANET-ZJ-NB	36
5	UNICOM-LN	25
6	ZTWL	19
7	JAZZTEL-TRIPLEPLAY	12
8	UNICOM-HE	11
9	CHINANET-JS	11
10	AR-CASA10-LACNIC	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	862
2	China	796
3	United States	46
4	Argentina	29
5	Brazil	27
6	Spain	25
7	Russian Federation	24
8	Romania	24
9	Iran	23
10	Italy	20

Suspected Bot List [2013-12-07]

detection period: 2013-12-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 170

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
IR	91.98.117.28	Iran
IT	217.133.6.218	Italy
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2013-12-07]

detection period: 2013-12-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1934
number of botnet IPs notified to network operators: 1764
number of spam blocked: 75685
recipient count of spam blocked: 2474919

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	839
2	CHINANET-GD	381
3	CHINANET-ZJ-NB	86
4	UNICOM-LN	25
5	UNICOM-HE	11
6	CO-EPME1-LACNIC	10
7	CHINANET-JS	10
8	AR-CASA10-LACNIC	9
9	002.558.157/0001-62	9
10	SHARKTECH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	849
2	China	608
3	United States	45
4	Brazil	36
5	Argentina	27
6	Colombia	24
7	Iran	21
8	United Kingdom	21
9	Russian Federation	18
10	Mexico	18

Suspected Bot List [2013-12-06]

detection period: 2013-12-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 262

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.3.14.59	Argentina
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	202.63.105.226	India
IN	210.212.145.180	India
IR	91.98.117.28	Iran
IT	217.133.6.218	Italy
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	181.67.125.202	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States

List from greylisting: