Suspected Bot List [2013-08-30]

detection period: 2013-08-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 376

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.239.107.21	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	82.99.246.10	Iran
KZ	109.229.189.175	Kazakhstan
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	64.181.43.79	United States
US	184.82.214.35	United States
US	209.239.112.104	United States
UZ	213.230.121.186	Uzbekistan

List from greylisting:

Botnet Statistics [2013-08-30]

detection period: 2013-08-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2874
number of botnet IPs notified to network operators: 2502
number of spam blocked: 63113
recipient count of spam blocked: 2117340

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	466
2	HINET-NET	400
3	CHINANET-GD	292
4	UNICOM-GD	95
5	CTTNET	41
6	CHINANET-FJ	35
7	CHINASKYNET	33
8	UNICOM-LN	24
9	PE-TPSA-LACNIC	22
10	CMNET	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1274
2	Taiwan	410
3	United States	226
4	India	70
5	Brazil	70
6	Peru	54
7	United Kingdom	51
8	Iran	42
9	Spain	40
10	Colombia	37

Suspected Bot List [2013-08-29]

detection period: 2013-08-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 391

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
IN	117.239.107.21	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
IR	82.99.246.10	Iran
KZ	109.229.189.175	Kazakhstan
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	64.181.43.79	United States
US	184.82.214.35	United States
UZ	213.230.121.186	Uzbekistan

List from greylisting:

Botnet Statistics [2013-08-29]

detection period: 2013-08-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3807
number of botnet IPs notified to network operators: 3423
number of spam blocked: 79167
recipient count of spam blocked: 2491203

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	990
2	HINET-NET	649
3	CHINANET-GD	262
4	UNICOM-GD	106
5	CTTNET	64
6	CHINANET-FJ	47
7	CHINANET-HE	45
8	CMNET	43
9	KORNET-KR	42
10	CHINASKYNET	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1856
2	Taiwan	658
3	United States	286
4	India	95
5	South Korea	73
6	Brazil	70
7	Russian Federation	51
8	Iran	44
9	Peru	43
10	Italy	33

Suspected Bot List [2013-08-28]

detection period: 2013-08-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 297

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
KZ	109.229.189.175	Kazakhstan
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UZ	213.230.121.186	Uzbekistan

List from greylisting:

Botnet Statistics [2013-08-28]

detection period: 2013-08-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3641
number of botnet IPs notified to network operators: 3344
number of spam blocked: 85593
recipient count of spam blocked: 2951121

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1086
2	HINET-NET	577
3	CHINANET-GD	389
4	UNICOM-GD	131
5	CTTNET	106
6	CHINANET-FJ	55
7	CMNET	31
8	UNICOM-LN	25
9	ZTWL	22
10	PE-PETD2-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2089
2	Taiwan	589
3	United States	78
4	Brazil	58
5	Peru	54
6	India	51
7	Italy	50
8	Colombia	50
9	Iran	41
10	Argentina	37

Suspected Bot List [2013-08-27]

detection period: 2013-08-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 324

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UZ	213.230.121.186	Uzbekistan

List from greylisting:

Botnet Statistics [2013-08-27]

detection period: 2013-08-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3274
number of botnet IPs notified to network operators: 2951
number of spam blocked: 83599
recipient count of spam blocked: 2904320

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	757
2	HINET-NET	474
3	CHINANET-GD	328
4	UNICOM-GD	131
5	CTTNET	124
6	ZTWL	38
7	CHINASKYNET	36
8	CHINANET-FJ	28
9	UNICOM-LN	26
10	CMNET	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1711
2	Taiwan	482
3	United States	220
4	Brazil	66
5	Iran	47
6	Peru	45
7	Spain	44
8	India	43
9	Argentina	38
10	United Kingdom	37

Suspected Bot List [2013-08-26]

detection period: 2013-08-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 330

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States

List from greylisting:

Botnet Statistics [2013-08-26]

detection period: 2013-08-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4122
number of botnet IPs notified to network operators: 3792
number of spam blocked: 88793
recipient count of spam blocked: 2899110

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	834
2	CHINANET-JS	545
3	CHINANET-SH	385
4	CHINANET-GD	294
5	UNICOM-GD	201
6	CTTNET	145
7	CHINASKYNET	84
8	ZTWL	47
9	CHINANET-FJ	43
10	CBC-CM-4	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1992
2	Taiwan	843
3	United States	455
4	Brazil	59
5	Peru	47
6	United Kingdom	47
7	India	45
8	Iran	43
9	Canada	39
10	Spain	34

Suspected Bot List [2013-08-25]

detection period: 2013-08-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 318

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	46.55.178.17	Bulgaria
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	180.188.225.21	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	208.67.17.197	United States

List from greylisting:

Botnet Statistics [2013-08-25]

detection period: 2013-08-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2776
number of botnet IPs notified to network operators: 2458
number of spam blocked: 61019
recipient count of spam blocked: 2177423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-SH	385
2	CHINANET-JS	277
3	HINET-NET	276
4	CHINANET-GD	209
5	UNICOM-GD	157
6	CTTNET	137
7	CHINASKYNET	84
8	ZTWL	34
9	UNICOM-LN	25
10	CHINANET-FJ	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1568
2	Taiwan	292
3	United States	68
4	Brazil	55
5	Iran	54
6	Argentina	46
7	India	40
8	Peru	38
9	Russian Federation	36
10	South Korea	33

Suspected Bot List [2013-08-24]

detection period: 2013-08-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 230

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	46.55.178.17	Bulgaria
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	180.188.225.21	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States

List from greylisting:

Botnet Statistics [2013-08-24]

detection period: 2013-08-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1961
number of botnet IPs notified to network operators: 1731
number of spam blocked: 48619
recipient count of spam blocked: 1802079

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-SH	408
2	CHINANET-GD	175
3	CTTNET	145
4	UNICOM-GD	101
5	CHINASKYNET	51
6	HINET-NET	47
7	UNICOM-LN	25
8	ZTWL	23
9	CHINANET-CN	17
10	UNICOM-SD	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1197
2	United States	62
3	Taiwan	57
4	Brazil	53
5	India	40
6	Peru	38
7	Russian Federation	29
8	Iran	28
9	Spain	28
10	Argentina	28

Suspected Bot List [2013-08-23]

detection period: 2013-08-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 411

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	46.55.178.17	Bulgaria
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	180.188.225.21	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	190.232.218.104	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States

List from greylisting:

Botnet Statistics [2013-08-23]

detection period: 2013-08-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3358
number of botnet IPs notified to network operators: 2948
number of spam blocked: 85777
recipient count of spam blocked: 2884045

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	495
2	HINET-NET	482
3	UNICOM-GD	196
4	CHINANET-SH	154
5	CHINASKYNET	153
6	CHINANET-GD	148
7	CTTNET	125
8	ZTWL	64
9	KORNET-KR	30
10	PE-TPSA-LACNIC	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1621
2	Taiwan	492
3	United States	154
4	Peru	76
5	Brazil	73
6	India	69
7	Argentina	58
8	South Korea	53
9	Mexico	48
10	Iran	41

Suspected Bot List [2013-08-22]

detection period: 2013-08-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 359

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.178.17	Bulgaria
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	180.188.225.21	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	190.232.218.104	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States

List from greylisting:

Botnet Statistics [2013-08-22]

detection period: 2013-08-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3774
number of botnet IPs notified to network operators: 3418
number of spam blocked: 80693
recipient count of spam blocked: 2667461

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	979
2	HINET-NET	588
3	UNICOM-GD	215
4	CHINANET-GD	190
5	CHINASKYNET	175
6	CTTNET	159
7	ZTWL	55
8	CHINANET-FJ	30
9	UNICOM-LN	29
10	CMNET	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2072
2	Taiwan	601
3	United States	141
4	Brazil	70
5	Peru	55
6	India	53
7	Argentina	46
8	Spain	39
9	Colombia	39
10	Mexico	37

Suspected Bot List [2013-08-21]

detection period: 2013-08-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 298

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.178.17	Bulgaria
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
IT	95.248.90.62	Italy
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SA	94.77.203.22	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States

List from greylisting:

Botnet Statistics [2013-08-21]

detection period: 2013-08-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3876
number of botnet IPs notified to network operators: 3581
number of spam blocked: 104043
recipient count of spam blocked: 3351042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	975
2	CHINANET-JS	886
3	CHINANET-GD	190
4	UNICOM-GD	185
5	CHINASKYNET	155
6	CTTNET	152
7	ZTWL	42
8	CHINANET-FJ	37
9	UNICOM-LN	25
10	PE-TPSA-LACNIC	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1886
2	Taiwan	992
3	United States	169
4	Brazil	55
5	Peru	48
6	Argentina	45
7	India	40
8	United Kingdom	38
9	Italy	37
10	Spain	33

Suspected Bot List [2013-08-20]

detection period: 2013-08-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 275

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.178.17	Bulgaria
BG	95.111.38.156	Bulgaria
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	85.133.185.49	Iran
IR	91.98.36.84	Iran
IT	95.248.90.62	Italy
LB	194.126.140.246	Lebanon
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-20]

detection period: 2013-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 3812
number of botnet IPs notified to network operators: 3539
number of spam blocked: 93694
recipient count of spam blocked: 2937693

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	995
2	CHINANET-JS	776
3	UNICOM-GD	234
4	CHINANET-GD	204
5	CTTNET	154
6	CHINASKYNET	141
7	ZTWL	51
8	CHINANET-FJ	44
9	UNICOM-LN	26
10	AR-CASA10-LACNIC	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1809
2	Taiwan	1009
3	United States	172
4	United Kingdom	61
5	Brazil	60
6	Italy	40
7	Russian Federation	38
8	Peru	36
9	Argentina	36
10	Mexico	34

Suspected Bot List [2013-08-19]

detection period: 2013-08-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 196

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.178.17	Bulgaria
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	85.133.185.49	Iran
IR	91.98.36.84	Iran
IT	95.248.90.62	Italy
LB	194.126.140.246	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-19]

detection period: 2013-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3032
number of botnet IPs notified to network operators: 2840
number of spam blocked: 57403
recipient count of spam blocked: 1901102

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	854
2	HINET-NET	247
3	UNICOM-GD	217
4	CHINANET-GD	217
5	CTTNET	169
6	CHINASKYNET	105
7	ZTWL	59
8	CHINANET-FJ	56
9	CRTC	28
10	UNICOM-LN	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1908
2	Taiwan	261
3	United States	156
4	Brazil	66
5	Russian Federation	45
6	Argentina	31
7	Italy	30
8	Peru	29
9	Iran	28
10	Spain	28

Suspected Bot List [2013-08-18]

detection period: 2013-08-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 164

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.178.17	Bulgaria
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
IL	94.188.146.81	Israel
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
IT	95.248.90.62	Italy
LB	194.126.140.246	Lebanon
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-18]

detection period: 2013-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2410
number of botnet IPs notified to network operators: 2248
number of spam blocked: 51080
recipient count of spam blocked: 1758124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	380
2	CHINANET-GD	240
3	CTTNET	229
4	UNICOM-GD	216
5	CRTC	163
6	CHINASKYNET	87
7	ZTWL	60
8	HINET-NET	32
9	UNICOM-LN	25
10	NTMTV	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1635
2	United States	112
3	Brazil	52
4	Russian Federation	51
5	Taiwan	42
6	Argentina	37
7	Iran	25
8	Spain	24
9	Germany	24
10	India	22

Suspected Bot List [2013-08-17]

detection period: 2013-08-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 190

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-17]

detection period: 2013-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2005
number of botnet IPs notified to network operators: 1816
number of spam blocked: 51097
recipient count of spam blocked: 1581498

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	242
2	CTTNET	218
3	UNICOM-GD	217
4	CRTC	184
5	CHINASKYNET	99
6	ZTWL	43
7	UNICOM-LN	28
8	HINET-NET	21
9	UNICOM-SD	19
10	AR-CASA10-LACNIC	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1274
2	United States	78
3	Brazil	49
4	Russian Federation	43
5	Argentina	42
6	India	32
7	Colombia	31
8	Taiwan	27
9	Peru	24
10	Italy	24

Suspected Bot List [2013-08-16]

detection period: 2013-08-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 340

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.158	Albania
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-16]

detection period: 2013-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2795
number of botnet IPs notified to network operators: 2458
number of spam blocked: 62024
recipient count of spam blocked: 2154488

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	391
2	CHINANET-JS	328
3	CHINANET-GD	291
4	UNICOM-GD	173
5	CTTNET	130
6	UNICOM-LN	26
7	AR-CASA10-LACNIC	21
8	CHINASKYNET	17
9	UNICOM-SD	16
10	CRTC	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1232
2	Taiwan	404
3	United States	213
4	Brazil	85
5	Argentina	61
6	Russian Federation	52
7	India	45
8	United Kingdom	41
9	Peru	34
10	Spain	34

Suspected Bot List [2013-08-15]

detection period: 2013-08-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 263

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-15]

detection period: 2013-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3351
number of botnet IPs notified to network operators: 3093
number of spam blocked: 83577
recipient count of spam blocked: 2537693

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	619
2	HINET-NET	440
3	CHINANET-GD	317
4	CTTNET	272
5	CRTC	254
6	UNICOM-GD	179
7	CHINANET-FJ	30
8	UNICOM-LN	26
9	PE-TPSA-LACNIC	21
10	CMNET	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1929
2	Taiwan	450
3	United States	169
4	Brazil	61
5	Peru	46
6	Russian Federation	40
7	India	39
8	Spain	39
9	Argentina	35
10	Colombia	34

Suspected Bot List [2013-08-14]

detection period: 2013-08-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 183

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AL	80.78.75.158	Albania
AO	196.223.13.230	Angola
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
LB	212.36.193.187	Lebanon
LB	213.175.188.158	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
RS	178.149.63.175	Serbia
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-14]

detection period: 2013-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2534
number of botnet IPs notified to network operators: 2352
number of spam blocked: 120431
recipient count of spam blocked: 2396831

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	592
2	HINET-NET	334
3	CHINANET-GD	183
4	CTTNET	151
5	CRTC	134
6	UNICOM-GD	68
7	CHINANET-FJ	52
8	UNICOM-LN	24
9	CMNET	24
10	ZTWL	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1471
2	Taiwan	342
3	United States	125
4	Brazil	53
5	Russian Federation	36
6	Argentina	30
7	Spain	28
8	Peru	27
9	Colombia	25
10	Iran	22

Suspected Bot List [2013-08-13]

detection period: 2013-08-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 210

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AO	196.223.13.230	Angola
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	86.111.144.194	Iraq
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
LB	213.175.188.158	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
RS	178.149.63.175	Serbia
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-13]

detection period: 2013-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3272
number of botnet IPs notified to network operators: 3065
number of spam blocked: 126656
recipient count of spam blocked: 3344008

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	1018
2	HINET-NET	929
3	CHINANET-GD	166
4	CTTNET	78
5	CHINANET-FJ	54
6	UNICOM-GD	31
7	UNICOM-LN	29
8	KORNET-KR	27
9	BSNLNET	19
10	CMNET	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1613
2	Taiwan	938
3	United States	124
4	India	57
5	Brazil	52
6	South Korea	50
7	Russian Federation	39
8	Viet Nam	26
9	Peru	23
10	United Kingdom	23

Suspected Bot List [2013-08-12]

detection period: 2013-08-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 255

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AO	196.223.13.230	Angola
CA	174.142.186.121	Canada
EG	62.117.58.109	Egypt
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IQ	86.111.144.194	Iraq
IR	94.183.138.253	Iran
LB	194.126.140.247	Lebanon
LB	212.36.193.187	Lebanon
MX	177.228.74.25	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
SA	94.77.199.148	Saudi Arabia
TN	41.226.11.117	Tunisia
TR	82.222.189.43	Turkey
US	24.182.136.146	United States
US	50.159.67.200	United States
US	206.81.103.58	United States
ZW	41.220.19.50	Zimbabwe
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-08-12]

detection period: 2013-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2772
number of botnet IPs notified to network operators: 2517
number of spam blocked: 98880
recipient count of spam blocked: 2650882

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	636
2	CHINANET-JS	515
3	CHINANET-GD	179
4	CHINANET-FJ	56
5	CMNET	44
6	CTTNET	35
7	UNICOM-LN	34
8	UNICOM-GD	29
9	UNICOM-SD	26
10	CRTC	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1202
2	Taiwan	652
3	United States	172
4	Brazil	61
5	Argentina	46
6	Italy	36
7	India	36
8	Russian Federation	32
9	Peru	31
10	Spain	30

Suspected Bots' IP List for August 2013

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2013-08-01]
Suspected Bots IP [2013-08-02]
Suspected Bots IP [2013-08-03]
Suspected Bots IP [2013-08-04]
Suspected Bots IP [2013-08-05]
Suspected Bots IP [2013-08-06]
Suspected Bots IP [2013-08-07]
Suspected Bots IP [2013-08-08]
Suspected Bots IP [2013-08-09]
Suspected Bots IP [2013-08-10]
Suspected Bots IP [2013-08-11]
Suspected Bots IP [2013-08-12]
Suspected Bots IP [2013-08-13]
Suspected Bots IP [2013-08-14]
Suspected Bots IP [2013-08-15]
Suspected Bots IP [2013-08-16]
Suspected Bots IP [2013-08-17]
Suspected Bots IP [2013-08-18]
Suspected Bots IP [2013-08-19]
Suspected Bots IP [2013-08-20]
Suspected Bots IP [2013-08-21]
Suspected Bots IP [2013-08-22]
Suspected Bots IP [2013-08-23]
Suspected Bots IP [2013-08-24]
Suspected Bots IP [2013-08-25]
Suspected Bots IP [2013-08-26]
Suspected Bots IP [2013-08-27]
Suspected Bots IP [2013-08-28]
Suspected Bots IP [2013-08-29]
Suspected Bots IP [2013-08-30]
Suspected Bots IP [2013-08-31]

Suspected Bot List [2013-08-11】

detection period: 2013-08-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 174

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
AO	196.223.13.230	Angola
CN	150.255.1.177	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.180.96.110	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IR	94.183.138.253	Iran
LB	194.126.140.247	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.40.63.221	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
SA	94.77.199.148	Saudi Arabia
US	50.159.67.200	United States
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-08-11]

detection period: 2013-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2557
number of botnet IPs notified to network operators: 2383
number of spam blocked: 84754
recipient count of spam blocked: 2649495

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1103
2	CHINANET-GD	194
3	CTTNET	148
4	CMNET	83
5	CHINANET-JS	53
6	CRTC	48
7	CHINANET-FJ	42
8	UNICOM-GD	36
9	UNICOM-HA	31
10	UNICOM-LN	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1118
2	China	922
3	Argentina	47
4	United States	46
5	Brazil	34
6	Spain	29
7	Russian Federation	24
8	Mexico	20
9	India	20
10	Germany	19

Suspected Bot List [2013-08-10]

detection period: 2013-08-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CN	150.255.32.240	China
MO	122.100.228.244	Macau

List from greylisting:

Botnet Statistics [2013-08-10]

detection period: 2013-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2226
number of botnet IPs notified to network operators: 2080
number of spam blocked: 54266
recipient count of spam blocked: 1602805

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	800
2	CTTNET	252
3	CHINANET-GD	173
4	CRTC	112
5	CMNET	59
6	CHINANET-FJ	50
7	UNICOM-GD	28
8	CHINANET-JS	26
9	UNICOM-SD	21
10	UNICOM-HA	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1009
2	Taiwan	819
3	United States	41
4	Argentina	39
5	Spain	32
6	Italy	23
7	Colombia	23
8	Peru	17
9	India	14
10	Germany	13

Suspected Bot List [2013-08-09]

detection period: 2013-08-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 282

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BR	150.161.30.7	Brazil
CN	150.255.204.108	China
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
LB	213.175.188.158	Lebanon
MO	60.246.228.3	Macau
MX	187.174.173.18	Mexico
PE	190.187.168.186	Peru
PE	190.232.218.146	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	82.222.189.43	Turkey
US	206.81.103.58	United States

List from greylisting:

Botnet Statistics [2013-08-09]

detection period: 2013-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2643
number of botnet IPs notified to network operators: 2362
number of spam blocked: 53177
recipient count of spam blocked: 1828162

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	441
2	CTTNET	194
3	CHINANET-JS	170
4	CHINANET-GD	158
5	CRTC	152
6	CMNET	75
7	KORNET-KR	46
8	CHINANET-FJ	42
9	UNICOM-SD	39
10	UNICOM-LN	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1294
2	Taiwan	460
3	United States	152
4	South Korea	76
5	Brazil	57
6	India	46
7	Argentina	42
8	Peru	34
9	Spain	34
10	Colombia	34

Suspected Bot List [2013-08-08]

detection period: 2013-08-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 273

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.111.92.120	Arab Emirates
BG	93.183.155.80	Bulgaria
BG	95.111.38.156	Bulgaria
BR	150.161.30.7	Brazil
CA	174.142.186.121	Canada
GB	193.164.207.16	United Kingdom
IN	117.218.129.170	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IR	94.183.138.253	Iran
LB	212.36.193.187	Lebanon
LB	213.175.188.158	Lebanon
MO	122.100.224.211	Macau
MX	187.174.173.18	Mexico
PE	190.187.168.186	Peru
PE	190.232.218.146	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	195.168.85.26	Slovakia
TR	82.222.189.43	Turkey
TW	119.77.206.88	Taiwan
US	206.81.103.58	United States

List from greylisting: