Suspected Bot List [2013-07-30]

detection period: 2013-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 371

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	95.111.38.156	Bulgaria
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.224.245.64	Mexico
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-07-30]

detection period: 2013-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3020
number of botnet IPs notified to network operators: 2650
number of spam blocked: 37562
recipient count of spam blocked: 1308189

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	458
2	UNICOM-HN	379
3	CHINANET-GD	306
4	UNICOM-GD	205
5	CTTNET	100
6	KORNET-KR	37
7	CHINASKYNET	34
8	CHINANET-FJ	34
9	HINET-NET	29
10	SHENZHEN-CNC	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1785
2	United States	216
3	South Korea	71
4	Brazil	70
5	India	62
6	Italy	55
7	Argentina	46
8	Russian Federation	44
9	Taiwan	43
10	Spain	41

Suspected Bot List [2013-07-29]

detection period: 2013-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 337

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	95.111.38.156	Bulgaria
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.224.245.64	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-07-29]

detection period: 2013-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 4342
number of botnet IPs notified to network operators: 4007
number of spam blocked: 47257
recipient count of spam blocked: 1516561

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	703
2	HINET-NET	379
3	CHINANET-GD	273
4	UNICOM-HN	250
5	UNICOM-GD	214
6	CMNET	174
7	CTTNET	110
8	UNICOM-SD	80
9	CRTC	78
10	CHINASKYNET	73

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2745
2	Taiwan	398
3	United States	369
4	Brazil	64
5	Italy	50
6	India	47
7	Argentina	43
8	Colombia	40
9	Russian Federation	39
10	United Kingdom	39

Suspected Bot List [2013-07-28]

detection period: 2013-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 156

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	95.111.38.156	Bulgaria
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MO	122.100.223.108	Macau
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RU	109.207.93.158	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-07-28]

detection period: 2013-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2638
number of botnet IPs notified to network operators: 2483
number of spam blocked: 45209
recipient count of spam blocked: 1538849

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	353
2	UNICOM-GD	200
3	CHINANET-GD	178
4	UNICOM-HN	149
5	CTTNET	89
6	CMNET	88
7	CHINANET-JS	68
8	UNICOM-SD	64
9	CRTC	51
10	CHINASKYNET	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1647
2	Taiwan	370
3	United States	70
4	Brazil	49
5	Russian Federation	32
6	Argentina	32
7	Spain	30
8	Peru	28
9	Iran	21
10	Germany	20

Suspected Bot List [2013-07-27]

detection period: 2013-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 198

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
CN	150.255.208.222	China
GB	193.164.207.16	United Kingdom
IN	59.97.157.51	India
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-07-27]

detection period: 2013-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3870
number of botnet IPs notified to network operators: 3672
number of spam blocked: 63299
recipient count of spam blocked: 1981141

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	417
2	HINET-NET	322
3	CMNET	312
4	UNICOM-HN	261
5	UNICOM-GD	215
6	CRTC	188
7	CTTNET	141
8	UNICOM-SD	106
9	CHINANET-JS	100
10	CHINASKYNET	70

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2844
2	Taiwan	338
3	United States	72
4	Argentina	49
5	Brazil	47
6	Spain	35
7	Italy	32
8	Russian Federation	27
9	Peru	27
10	India	27

Suspected Bot List [2013-07-26]

detection period: 2013-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 281

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
CN	150.255.226.126	China
GB	193.164.207.16	United Kingdom
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-07-26]

detection period: 2013-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2756
number of botnet IPs notified to network operators: 2475
number of spam blocked: 52902
recipient count of spam blocked: 1892146

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	404
2	HINET-NET	364
3	UNICOM-GD	153
4	UNICOM-HN	141
5	CTTNET	82
6	CMNET	80
7	CRTC	43
8	CHINASKYNET	42
9	CHINANET-JS	40
10	CHINANET-FJ	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1421
2	Taiwan	392
3	United States	130
4	Brazil	63
5	Peru	60
6	Argentina	50
7	Italy	49
8	India	48
9	Mexico	38
10	Spain	38

Suspected Bot List [2013-07-25]

detection period: 2013-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 312

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	117.218.129.170	India
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MO	122.100.162.109	Macau
MX	177.224.245.64	Mexico
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	211.76.81.210	Taiwan
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-07-25]

detection period: 2013-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 4544
number of botnet IPs notified to network operators: 4232
number of spam blocked: 51387
recipient count of spam blocked: 1819427

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	950
2	CHINANET-GD	307
3	HINET-NET	263
4	CMNET	250
5	UNICOM-GD	182
6	CRTC	103
7	UNICOM-SD	92
8	CTTNET	83
9	CHINANET-HN	76
10	UNICOM-HE	66

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3069
2	United States	319
3	Taiwan	282
4	Brazil	69
5	Peru	63
6	Argentina	55
7	Italy	53
8	Colombia	43
9	India	41
10	Mexico	40

Suspected Bot List [2013-07-24]

detection period: 2013-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 386

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.67.98	Albania
BR	150.161.30.7	Brazil
CN	112.0.4.158	China
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MX	177.224.245.64	Mexico
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	36.226.0.130	Taiwan
TW	36.226.0.183	Taiwan
TW	61.228.0.108	Taiwan
TW	61.228.0.242	Taiwan
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-07-24]

detection period: 2013-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 4196
number of botnet IPs notified to network operators: 3815
number of spam blocked: 57470
recipient count of spam blocked: 2089728

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1096
2	HINET-NET	645
3	UNICOM-GD	181
4	CHINANET-GD	179
5	CMNET	73
6	CHINASKYNET	71
7	UNICOM-BJ	69
8	CHINANET-HN	44
9	CHINANET-FJ	42
10	CTTNET	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2240
2	Taiwan	659
3	United States	327
4	India	76
5	Italy	68
6	Brazil	55
7	Argentina	45
8	Spain	44
9	Colombia	44
10	Mexico	42

Suspected Bot List [2013-07-23]

detection period: 2013-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 276

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.67.98	Albania
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
MX	177.224.245.64	Mexico
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey

List from greylisting:

Botnet Statistics [2013-07-23]

detection period: 2013-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3499
number of botnet IPs notified to network operators: 3224
number of spam blocked: 56139
recipient count of spam blocked: 1957604

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	880
2	CHINANET-JS	858
3	CHINANET-GD	134
4	UNICOM-GD	92
5	CTTNET	86
6	UNICOM-BJ	38
7	MSFT-EP	28
8	CHINASKYNET	28
9	UNICOM-LN	27
10	CHINANET-FJ	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1561
2	Taiwan	888
3	United States	204
4	India	60
5	Brazil	54
6	Italy	53
7	Argentina	42
8	Iran	40
9	Peru	38
10	Spain	37

Suspected Bot List [2013-07-22]

detection period: 2013-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 308

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
CN	124.42.238.0	China
CO	190.5.199.173	Colombia
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	36.226.0.48	Taiwan
TW	36.226.0.53	Taiwan
TW	36.226.0.222	Taiwan
TW	61.228.0.11	Taiwan
TW	114.45.0.190	Taiwan
TW	114.45.0.220	Taiwan
US	72.34.181.170	United States

List from greylisting:

Botnet Statistics [2013-07-22]

detection period: 2013-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3553
number of botnet IPs notified to network operators: 3252
number of spam blocked: 52519
recipient count of spam blocked: 1819050

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	671
2	CHINANET-JS	519
3	CTTNET	264
4	UNICOM-GD	212
5	CHINANET-GD	140
6	CRTC	87
7	CHINASKYNET	57
8	SHENZHEN-CNC	54
9	MSFT-EP	34
10	ZTWL	33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1630
2	Taiwan	676
3	United States	304
4	Brazil	65
5	Italy	56
6	India	56
7	Argentina	56
8	Iran	47
9	Peru	45
10	Spain	41

Suspected Bot List [2013-07-21]

detection period: 2013-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 230

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
BR	150.161.30.7	Brazil
CO	190.5.199.173	Colombia
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
TW	36.226.0.99	Taiwan
TW	36.226.0.141	Taiwan
TW	36.226.0.235	Taiwan
US	23.20.0.182	United States
US	54.226.0.90	United States
US	54.226.0.146	United States
US	54.226.0.185	United States
US	54.226.0.194	United States
US	54.227.0.81	United States
US	54.227.0.83	United States
US	54.227.0.112	United States
US	54.227.0.117	United States
US	54.234.74.0	United States
US	54.242.167.0	United States
US	72.34.181.170	United States
US	184.73.51.0	United States
US	184.82.143.2	United States
US	184.82.143.3	United States
US	184.82.143.21	United States
US	184.82.143.34	United States
US	184.82.143.38	United States
US	184.82.143.70	United States
US	184.82.143.74	United States
US	184.82.143.86	United States
US	184.82.143.96	United States
US	184.82.143.115	United States
US	184.82.143.130	United States
US	184.82.143.140	United States
US	184.82.143.150	United States
US	184.82.143.175	United States
US	184.82.143.186	United States
US	184.82.187.138	United States
US	184.82.187.142	United States
US	184.82.187.145	United States
US	184.82.187.151	United States
US	184.82.187.157	United States
US	198.143.159.140	United States
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-07-21]

detection period: 2013-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3771
number of botnet IPs notified to network operators: 3557
number of spam blocked: 116956
recipient count of spam blocked: 2659608

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	972
2	AMAZON-2011L	309
3	CRTC	286
4	CTTNET	250
5	CHINANET-JS	214
6	UNICOM-GD	203
7	CHINANET-GD	125
8	CHINANET-HN	66
9	SHENZHEN-CNC	56
10	AMAZON-EC2-8	53

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1535
2	Taiwan	980
3	United States	589
4	Brazil	54
5	Argentina	46
6	Iran	40
7	Russian Federation	36
8	Colombia	33
9	India	32
10	Peru	30

Suspected Bot List [2013-07-20]

detection period: 2013-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 269

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
CO	190.5.199.173	Colombia
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
TW	36.226.0.3	Taiwan
TW	36.226.0.19	Taiwan
TW	36.226.0.22	Taiwan
TW	36.226.0.149	Taiwan
TW	36.226.0.180	Taiwan
TW	36.226.0.196	Taiwan
TW	36.226.0.198	Taiwan
TW	36.226.0.237	Taiwan
TW	114.45.0.52	Taiwan
US	23.20.0.182	United States
US	54.226.0.90	United States
US	54.226.46.0	United States
US	54.242.167.0	United States
US	72.34.181.170	United States
US	169.227.254.125	United States
US	184.73.0.240	United States
US	184.73.51.0	United States
US	184.82.143.2	United States
US	184.82.143.3	United States
US	184.82.143.21	United States
US	184.82.143.34	United States
US	184.82.143.38	United States
US	184.82.143.70	United States
US	184.82.143.74	United States
US	184.82.143.86	United States
US	184.82.143.96	United States
US	184.82.143.115	United States
US	184.82.143.130	United States
US	184.82.143.140	United States
US	184.82.143.150	United States
US	184.82.143.175	United States
US	184.82.143.186	United States
US	184.82.187.138	United States
US	184.82.187.142	United States
US	184.82.187.145	United States
US	184.82.187.151	United States
US	184.82.187.157	United States
US	198.143.159.140	United States
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-07-20]

The US took the number 1 position from China on July 20. 800+ bots were there, which is unusual. More specifically, no less than 500 suspected malware-infected computers were detected within Amazon's networks.

detection period: 2013-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3290
number of botnet IPs notified to network operators: 3036
number of spam blocked: 121681
recipient count of spam blocked: 2426035

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	822
2	AMAZON-2011L	370
3	UNICOM-GD	201
4	CHINANET-GD	156
5	AMAZON-EC2-8	76
6	CHINASKYNET	55
7	SHENZHEN-CNC	54
8	ZTWL	47
9	CHINANET-HN	47
10	CHINANET-FJ	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	United States	868
2	China	847
3	Taiwan	829
4	Brazil	59
5	Russian Federation	48
6	Iran	45
7	India	43
8	Argentina	41
9	Canada	40
10	Peru	38

Suspected Bot List [2013-07-19]

detection period: 2013-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 307

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
BR	150.161.30.7	Brazil
CO	190.5.199.173	Colombia
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
TW	36.226.0.78	Taiwan
TW	36.226.0.218	Taiwan
TW	36.226.0.222	Taiwan
TW	61.228.0.58	Taiwan
TW	114.45.0.24	Taiwan
US	23.20.0.182	United States
US	54.226.0.90	United States
US	54.226.0.185	United States
US	54.226.0.194	United States
US	54.227.0.83	United States
US	72.34.181.170	United States
US	75.103.105.100	United States
US	169.227.254.125	United States
US	184.82.143.2	United States
US	184.82.143.3	United States
US	184.82.143.21	United States
US	184.82.143.34	United States
US	184.82.143.38	United States
US	184.82.143.70	United States
US	184.82.143.74	United States
US	184.82.143.86	United States
US	184.82.143.96	United States
US	184.82.143.115	United States
US	184.82.143.130	United States
US	184.82.143.140	United States
US	184.82.143.150	United States
US	184.82.143.175	United States
US	184.82.143.186	United States
US	184.82.187.138	United States
US	184.82.187.142	United States
US	184.82.187.145	United States
US	184.82.187.151	United States
US	184.82.187.157	United States
US	198.143.159.140	United States

List from greylisting:

Botnet Statistics [2013-07-19]

detection period: 2013-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4072
number of botnet IPs notified to network operators: 3777
number of spam blocked: 86629
recipient count of spam blocked: 2306770

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	957
2	CHINANET-JS	860
3	AMAZON-2011L	207
4	UNICOM-GD	193
5	CHINANET-GD	118
6	CTTNET	78
7	CHINANET-FJ	61
8	SHENZHEN-CNC	54
9	AMAZON-EC2-8	51
10	CHINASKYNET	50

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1691
2	Taiwan	961
3	United States	589
4	Brazil	62
5	Argentina	48
6	Spain	47
7	Italy	46
8	Mexico	39
9	Peru	36
10	India	36

Suspected Bot List [2013-07-18]

detection period: 2013-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 407

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
HN	190.107.140.77	Honduras
IN	111.93.6.198	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
NG	196.3.181.162	Nigeria
PE	190.12.66.226	Peru
PE	190.81.196.71	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RO	89.120.75.51	Romania
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	36.226.0.67	Taiwan
TW	36.226.0.189	Taiwan
TW	36.226.0.229	Taiwan
TW	61.228.0.168	Taiwan
TW	61.228.0.176	Taiwan
US	23.20.0.242	United States
US	50.197.38.178	United States
US	54.242.167.0	United States
US	72.34.181.170	United States
US	75.103.105.100	United States
US	169.227.254.125	United States
US	184.82.143.2	United States
US	184.82.143.3	United States
US	184.82.143.21	United States
US	184.82.143.34	United States
US	184.82.143.38	United States
US	184.82.143.70	United States
US	184.82.143.74	United States
US	184.82.143.86	United States
US	184.82.143.96	United States
US	184.82.143.115	United States
US	184.82.143.130	United States
US	184.82.143.140	United States
US	184.82.143.150	United States
US	184.82.143.175	United States
US	184.82.143.186	United States
US	184.82.187.138	United States
US	184.82.187.142	United States
US	184.82.187.145	United States
US	184.82.187.151	United States
US	184.82.187.157	United States
US	198.143.159.140	United States
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-07-18]

detection period: 2013-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 5156
number of botnet IPs notified to network operators: 4761
number of spam blocked: 94605
recipient count of spam blocked: 2515318

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1761
2	HINET-NET	963
3	UNICOM-GD	198
4	CHINANET-GD	151
5	CTTNET	148
6	CHINASKYNET	65
7	SHENZHEN-CNC	55
8	CHINANET-FJ	54
9	AMAZON-2011L	49
10	ZTWL	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2780
2	Taiwan	973
3	United States	480
4	Italy	56
5	Brazil	55
6	Peru	52
7	India	52
8	Colombia	50
9	Argentina	45
10	Mexico	44

Suspected Bot List [2013-07-17]

detection period: 2013-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 309

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
CN	124.42.214.0	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	61.228.0.53	Taiwan
TW	61.228.0.75	Taiwan
TW	114.45.0.222	Taiwan
US	50.197.38.178	United States
US	72.34.181.170	United States

List from greylisting:

Botnet Statistics [2013-07-17]

detection period: 2013-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 4919
number of botnet IPs notified to network operators: 4615
number of spam blocked: 55924
recipient count of spam blocked: 1746646

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	2293
2	HINET-NET	585
3	UNICOM-GD	115
4	CTTNET	115
5	CHINANET-GD	100
6	CHINANET-FJ	79
7	SHENZHEN-CNC	37
8	MSFT-EP	33
9	CHINANET-HN	31
10	CHINASKYNET	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3034
2	Taiwan	592
3	United States	397
4	Italy	61
5	Argentina	61
6	Brazil	60
7	India	49
8	United Kingdom	44
9	Spain	43
10	Russian Federation	42

Suspected Bot List [2013-07-16]

detection period: 2013-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 294

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
CN	124.42.237.0	China
CO	190.5.199.173	Colombia
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.108.194	India
IN	117.218.50.225	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	85.9.75.215	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	200.92.57.205	Mexico
NG	196.3.181.162	Nigeria
PE	190.12.66.226	Peru
PE	190.81.196.71	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RS	178.149.182.28	Serbia
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TR	193.255.143.62	Turkey
TW	36.226.0.39	Taiwan
US	23.20.0.182	United States
US	50.197.38.178	United States
US	54.224.0.47	United States
US	54.226.0.35	United States
US	54.226.46.0	United States
US	54.227.0.112	United States
US	72.34.181.170	United States
US	169.227.254.125	United States

List from greylisting:

Botnet Statistics [2013-07-16]

detection period: 2013-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 4581
number of botnet IPs notified to network operators: 4295
number of spam blocked: 66683
recipient count of spam blocked: 2001770

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1198
2	HINET-NET	952
3	AMAZON-2011L	218
4	UNICOM-GD	153
5	CTTNET	122
6	CHINASKYNET	71
7	CHINANET-GD	65
8	AMAZON-EC2-8	63
9	SHENZHEN-CNC	48
10	CHINANET-FJ	43

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2052
2	Taiwan	962
3	United States	645
4	Brazil	68
5	India	64
6	Italy	60
7	Argentina	49
8	Russian Federation	45
9	Colombia	41
10	Mexico	39

Suspected Bot List [2013-07-15]

detection period: 2013-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 331

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
GR	89.210.205.217	Greece
HN	190.107.140.77	Honduras
IN	111.93.6.198	India
IN	117.218.50.225	India
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
PE	190.12.66.226	Peru
PE	190.81.196.71	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	124.109.47.66	Pakistan
PK	203.215.162.36	Pakistan
RS	178.149.182.28	Serbia
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
SV	190.150.101.13	El Salvador
TR	82.222.189.43	Turkey
TR	193.255.143.63	Turkey
US	50.197.38.178	United States
US	54.226.46.0	United States
US	72.34.181.170	United States

List from greylisting:

Botnet Statistics [2013-07-15]

detection period: 2013-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2952
number of botnet IPs notified to network operators: 2623
number of spam blocked: 68513
recipient count of spam blocked: 1951540

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	312
2	HINET-NET	261
3	AMAZON-2011L	171
4	UNICOM-GD	135
5	CTTNET	118
6	CHINANET-GD	80
7	CHINASKYNET	71
8	AMAZON-EC2-8	50
9	SHENZHEN-CNC	49
10	CRTC	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1148
2	United States	555
3	Taiwan	269
4	Brazil	70
5	Italy	57
6	India	54
7	Argentina	53
8	Spain	51
9	Colombia	48
10	Russian Federation	44

Suspected Bot List [2013-07-14]

detection period: 2013-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
GR	89.210.205.217	Greece
IN	59.96.66.2	India
IN	111.93.6.198	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.188	Lebanon
MX	177.228.74.25	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	124.109.47.66	Pakistan
PK	203.215.162.36	Pakistan
RS	178.149.63.175	Serbia
RU	46.39.0.14	Russian Federation
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
SV	190.150.101.13	El Salvador
TR	82.222.189.43	Turkey
TW	61.228.0.184	Taiwan
TW	61.228.0.201	Taiwan
US	50.197.38.178	United States
US	54.226.0.79	United States
US	72.34.181.170	United States

List from greylisting:

Botnet Statistics [2013-07-14]

detection period: 2013-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1830
number of botnet IPs notified to network operators: 1732
number of spam blocked: 62952
recipient count of spam blocked: 1875939

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	258
2	UNICOM-GD	139
3	CTTNET	112
4	CHINANET-JS	90
5	CHINASKYNET	89
6	CHINANET-GD	86
7	AMAZON-2011L	84
8	CRTC	55
9	CHINANET-FJ	51
10	SHENZHEN-CNC	45

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	958
2	Taiwan	263
3	United States	189
4	Brazil	52
5	Russian Federation	40
6	Iran	21
7	India	19
8	Ukraine	16
9	Argentina	16
10	Italy	14

Suspected Bot List [2013-07-13]

detection period: 2013-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 203

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
IN	59.96.66.2	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IT	193.111.46.3	Italy
LB	212.36.193.188	Lebanon
MX	177.228.74.25	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	203.215.162.36	Pakistan
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
TW	61.228.0.130	Taiwan

List from greylisting:

Botnet Statistics [2013-07-13]

detection period: 2013-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1674
number of botnet IPs notified to network operators: 1472
number of spam blocked: 43239
recipient count of spam blocked: 979876

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	310
2	UNICOM-GD	97
3	CHINANET-GD	91
4	CTTNET	78
5	CHINASKYNET	60
6	CHINANET-FJ	47
7	SHENZHEN-CNC	40
8	CHINANET-SH	25
9	MSFT-EP	21
10	UNICOM-LN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	634
2	Taiwan	316
3	United States	109
4	Brazil	47
5	Italy	37
6	Peru	34
7	India	34
8	Russian Federation	33
9	Spain	33
10	Argentina	32

Suspected Bot List [2013-07-12]

detection period: 2013-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 395

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
BR	150.161.30.7	Brazil
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
GR	89.210.205.217	Greece
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.36.84	Iran
IR	94.183.138.253	Iran
IT	193.111.46.3	Italy
LB	194.126.140.247	Lebanon
LB	212.36.193.188	Lebanon
MX	177.228.74.25	Mexico
PE	190.12.66.226	Peru
PE	190.187.168.186	Peru
PE	190.222.236.98	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.60.71.146	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RU	213.135.97.189	Russian Federation
SA	94.77.199.148	Saudi Arabia
SV	190.150.101.13	El Salvador
TR	82.222.189.43	Turkey
TW	36.226.0.241	Taiwan
TW	61.228.0.45	Taiwan
US	50.197.38.178	United States
US	72.34.181.170	United States
US	169.227.254.125	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2013-07-12]

detection period: 2013-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 3547
number of botnet IPs notified to network operators: 3154
number of spam blocked: 104557
recipient count of spam blocked: 2936147

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1122
2	HINET-NET	511
3	CTTNET	128
4	CHINANET-GD	103
5	CHINANET-FJ	48
6	UNICOM-GD	43
7	CHINANET-HN	38
8	MSFT-EP	29
9	CHINANET-SH	25
10	PE-TPSA-LACNIC	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1765
2	Taiwan	523
3	United States	260
4	Brazil	63
5	Italy	58
6	Peru	55
7	Argentina	53
8	Russian Federation	48
9	Spain	47
10	India	45

Suspected Bots' IP List for July 2013

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2013-07-01]
Suspected Bots IP [2013-07-02]
Suspected Bots IP [2013-07-03]
Suspected Bots IP [2013-07-04]
Suspected Bots IP [2013-07-05]
Suspected Bots IP [2013-07-06]
Suspected Bots IP [2013-07-07]
Suspected Bots IP [2013-07-08]
Suspected Bots IP [2013-07-09]
Suspected Bots IP [2013-07-10]
Suspected Bots IP [2013-07-11]
Suspected Bots IP [2013-07-12]
Suspected Bots IP [2013-07-13]
Suspected Bots IP [2013-07-14]
Suspected Bots IP [2013-07-15]
Suspected Bots IP [2013-07-16]
Suspected Bots IP [2013-07-17]
Suspected Bots IP [2013-07-18]
Suspected Bots IP [2013-07-19]
Suspected Bots IP [2013-07-20]
Suspected Bots IP [2013-07-21]
Suspected Bots IP [2013-07-22]
Suspected Bots IP [2013-07-23]
Suspected Bots IP [2013-07-24]
Suspected Bots IP [2013-07-25]
Suspected Bots IP [2013-07-26]
Suspected Bots IP [2013-07-27]
Suspected Bots IP [2013-07-28]
Suspected Bots IP [2013-07-29]
Suspected Bots IP [2013-07-30]
Suspected Bots IP [2013-07-31]