Suspected Bot List [2013-09-29]

detection period: 2013-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 200

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	174.142.186.121	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IQ	109.224.20.138	Iraq
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
US	204.144.184.11	United States

List from greylisting:

Botnet Statistics [2013-09-29]

detection period: 2013-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2074
number of botnet IPs notified to network operators: 1874
number of spam blocked: 85554
recipient count of spam blocked: 3005339

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	880
2	CHINANET-GD	151
3	CTTNET	123
4	UNICOM-GD	119
5	CHINANET-FJ	36
6	CRTC	27
7	UNICOM-LN	26
8	KORNET-KR	16
9	PE-TPSA-LACNIC	12
10	TELEKOM-BB-NET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	887
2	China	636
3	Brazil	43
4	United States	39
5	South Korea	37
6	Russian Federation	35
7	India	27
8	Iran	23
9	Peru	21
10	Ukraine	20

Suspected Bot List [2013-09-28]

detection period: 2013-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 435

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
CA	174.142.186.121	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-28]

detection period: 2013-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2692
number of botnet IPs notified to network operators: 2257
number of spam blocked: 91236
recipient count of spam blocked: 3095974

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	890
2	UNICOM-GD	182
3	CHINANET-GD	103
4	CTTNET	94
5	CHINANET-FJ	38
6	PE-TPSA-LACNIC	31
7	UNICOM-LN	27
8	CRTC	24
9	AR-CASA10-LACNIC	24
10	BSNLNET	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	904
2	China	683
3	United States	81
4	Argentina	73
5	Iran	68
6	Peru	63
7	India	63
8	Spain	58
9	Brazil	57
10	Russian Federation	48

Suspected Bot List [2013-09-27]

detection period: 2013-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 395

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	174.142.186.121	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-27]

detection period: 2013-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2574
number of botnet IPs notified to network operators: 2179
number of spam blocked: 93006
recipient count of spam blocked: 3143633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	902
2	UNICOM-GD	178
3	CHINANET-GD	95
4	CTTNET	71
5	UNICOM-LN	27
6	PE-TPSA-LACNIC	27
7	CRTC	24
8	PE-PETD2-LACNIC	20
9	AR-CASA10-LACNIC	19
10	CO-ACSA-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	914
2	China	614
3	United States	122
4	Peru	74
5	Argentina	66
6	India	55
7	Brazil	55
8	Colombia	49
9	Italy	38
10	United Kingdom	38

Suspected Bot List [2013-09-26]

detection period: 2013-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 508

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
CA	174.142.186.121	Canada
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
PK	124.109.47.66	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-26]

detection period: 2013-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3175
number of botnet IPs notified to network operators: 2668
number of spam blocked: 106762
recipient count of spam blocked: 3684361

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	908
2	UNICOM-GD	194
3	CHINANET-GD	108
4	CTTNET	66
5	CHINASKYNET	35
6	UNICOM-LN	25
7	PE-TPSA-LACNIC	25
8	CHINANET-FJ	23
9	BSNLNET	21
10	AR-CASA10-LACNIC	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	926
2	China	723
3	United States	277
4	United Kingdom	103
5	Brazil	81
6	India	69
7	Spain	60
8	Colombia	56
9	Peru	54
10	Argentina	54

Suspected Bot List [2013-09-25]

detection period: 2013-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 459

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-25]

detection period: 2013-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2900
number of botnet IPs notified to network operators: 2442
number of spam blocked: 106767
recipient count of spam blocked: 3645525

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	858
2	UNICOM-GD	178
3	CHINANET-GD	117
4	CTTNET	56
5	ZTWL	33
6	CHINANET-FJ	32
7	UNICOM-LN	25
8	AR-CASA10-LACNIC	24
9	CHINANET-JS	19
10	PE-TPSA-LACNIC	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	872
2	China	700
3	United States	239
4	United Kingdom	87
5	Brazil	81
6	Argentina	64
7	Iran	54
8	India	51
9	Italy	50
10	Spain	46

Suspected Bot List [2013-09-24]

detection period: 2013-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 469

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-24]

detection period: 2013-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2891
number of botnet IPs notified to network operators: 2422
number of spam blocked: 129760
recipient count of spam blocked: 4631934

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	839
2	UNICOM-GD	184
3	CTTNET	117
4	CHINANET-GD	105
5	CHINANET-HE	49
6	KORNET-KR	38
7	CHINANET-FJ	35
8	UNICOM-LN	24
9	CRTC	24
10	PE-PETD2-LACNIC	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	859
2	China	745
3	United States	196
4	Brazil	70
5	India	66
6	Peru	58
7	South Korea	58
8	Iran	55
9	United Kingdom	54
10	Argentina	52

Suspected Bot List [2013-09-23]

detection period: 2013-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 415

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-23]

detection period: 2013-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2732
number of botnet IPs notified to network operators: 2317
number of spam blocked: 87186
recipient count of spam blocked: 2988543

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	871
2	UNICOM-GD	148
3	CHINANET-GD	104
4	CTTNET	99
5	CHINANET-HE	66
6	CHINANET-FJ	40
7	UNICOM-LN	24
8	CRTC	24
9	AR-CASA10-LACNIC	20
10	PE-TPSA-LACNIC	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	885
2	China	686
3	United States	191
4	Italy	59
5	United Kingdom	58
6	Brazil	56
7	Argentina	56
8	Spain	54
9	India	47
10	Peru	43

Suspected Bot List [2013-09-22]

detection period: 2013-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 262

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
AR	190.181.113.2	Argentina
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
PK	111.68.104.132	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey

List from greylisting:

Botnet Statistics [2013-09-22]

detection period: 2013-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2324
number of botnet IPs notified to network operators: 2062
number of spam blocked: 81131
recipient count of spam blocked: 2711069

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	864
2	UNICOM-GD	165
3	CTTNET	141
4	CHINANET-GD	84
5	CHINANET-HE	68
6	CHINANET-FJ	45
7	CRTC	28
8	UNICOM-LN	22
9	AR-CASA10-LACNIC	19
10	CHINANET-JS	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	872
2	China	754
3	United States	59
4	Argentina	50
5	Iran	47
6	Brazil	45
7	Spain	33
8	Russian Federation	30
9	Peru	28
10	Italy	24

Suspected Bot List [2013-09-21]

detection period: 2013-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 290

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.181.113.2	Argentina
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PH	122.54.171.253	Philippines
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-21]

detection period: 2013-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2181
number of botnet IPs notified to network operators: 1891
number of spam blocked: 83653
recipient count of spam blocked: 2839389

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	843
2	UNICOM-GD	122
3	CHINANET-GD	105
4	CTTNET	71
5	CHINANET-FJ	37
6	CHINANET-HE	31
7	UNICOM-LN	26
8	AR-CASA10-LACNIC	18
9	KORNET-KR	15
10	AR-TEAR7-LACNIC	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	850
2	China	561
3	United States	67
4	Iran	54
5	Brazil	50
6	Argentina	48
7	Russian Federation	32
8	South Korea	32
9	Colombia	32
10	Peru	26

Suspected Bots' IP List for September 2013

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2013-09-01]
Suspected Bots IP [2013-09-02]
Suspected Bots IP [2013-09-03]
Suspected Bots IP [2013-09-04]
Suspected Bots IP [2013-09-05]
Suspected Bots IP [2013-09-06]
Suspected Bots IP [2013-09-07]
Suspected Bots IP [2013-09-08]
Suspected Bots IP [2013-09-09]
Suspected Bots IP [2013-09-10]
Suspected Bots IP [2013-09-11]
Suspected Bots IP [2013-09-12]
Suspected Bots IP [2013-09-13]
Suspected Bots IP [2013-09-14]
Suspected Bots IP [2013-09-15]
Suspected Bots IP [2013-09-16]
Suspected Bots IP [2013-09-17]
Suspected Bots IP [2013-09-18]
Suspected Bots IP [2013-09-19]
Suspected Bots IP [2013-09-20]
Suspected Bots IP [2013-09-21]
Suspected Bots IP [2013-09-22]
Suspected Bots IP [2013-09-23]
Suspected Bots IP [2013-09-24]
Suspected Bots IP [2013-09-25]
Suspected Bots IP [2013-09-26]
Suspected Bots IP [2013-09-27]
Suspected Bots IP [2013-09-28]
Suspected Bots IP [2013-09-29]
Suspected Bots IP [2013-09-30]

Suspected Bot List [2013-09-20]

detection period: 2013-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 260

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.218.129.170	India
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-20]

detection period: 2013-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2334
number of botnet IPs notified to network operators: 2074
number of spam blocked: 83715
recipient count of spam blocked: 2766319

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	850
2	UNICOM-GD	184
3	CTTNET	113
4	CHINANET-GD	101
5	CHINASKYNET	61
6	CHINANET-FJ	42
7	AR-CASA10-LACNIC	22
8	UNICOM-LN	21
9	CRTC	19
10	PE-TPSA-LACNIC	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	858
2	China	681
3	United States	86
4	Brazil	52
5	Argentina	52
6	Peru	42
7	Colombia	34
8	Mexico	32
9	Italy	30
10	Russian Federation	29

Suspected Bot List [2013-09-19]

detection period: 2013-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 339

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	69.24.192.18	United States

List from greylisting:

Botnet Statistics [2013-09-19]

detection period: 2013-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2606
number of botnet IPs notified to network operators: 2267
number of spam blocked: 87180
recipient count of spam blocked: 2937507

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	861
2	UNICOM-GD	164
3	CHINANET-GD	105
4	CHINASKYNET	89
5	CTTNET	78
6	CHINANET-FJ	43
7	ZTWL	27
8	UNICOM-LN	19
9	AR-CASA10-LACNIC	18
10	PE-TPSA-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	868
2	China	679
3	United States	160
4	Spain	62
5	Brazil	55
6	United Kingdom	50
7	Italy	48
8	India	48
9	Colombia	44
10	Argentina	43

Suspected Bot List [2013-09-18]

detection period: 2013-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 430

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.181.113.2	Argentina
CA	174.142.186.121	Canada
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey

List from greylisting:

Botnet Statistics [2013-09-18]

detection period: 2013-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2901
number of botnet IPs notified to network operators: 2471
number of spam blocked: 94578
recipient count of spam blocked: 3217547

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	814
2	UNICOM-GD	185
3	CHINASKYNET	141
4	CHINANET-GD	124
5	CTTNET	69
6	ZTWL	40
7	CHINANET-FJ	25
8	CBC-CM-4	23
9	UNICOM-LN	22
10	CCCH3-4	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	829
2	China	779
3	United States	297
4	Brazil	72
5	Argentina	55
6	United Kingdom	53
7	Italy	51
8	Spain	50
9	Peru	46
10	Iran	44

Suspected Bot List [2013-09-17]

detection period: 2013-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 317

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.181.113.2	Argentina
AR	200.55.57.214	Argentina
BO	200.87.98.235	Bolivia
CA	174.142.186.121	Canada
CN	150.255.225.129	China
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.6.198	India
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	91.98.117.30	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TN	196.203.198.130	Tunisia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	178.213.110.115	Ukraine
US	98.126.249.106	United States

List from greylisting:

Botnet Statistics [2013-09-17]

detection period: 2013-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2927
number of botnet IPs notified to network operators: 2610
number of spam blocked: 95880
recipient count of spam blocked: 3236627

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	812
2	UNICOM-GD	172
3	CHINANET-GD	137
4	CMNET	84
5	CHINASKYNET	83
6	CTTNET	81
7	CHINANET-FJ	63
8	CRTC	36
9	UNICOM-LN	30
10	ZTWL	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1099
2	Taiwan	826
3	United States	228
4	United Kingdom	63
5	Brazil	56
6	Italy	39
7	Argentina	39
8	Spain	38
9	India	37
10	Russian Federation	30

Suspected Bot List [2013-09-16]

detection period: 2013-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 375

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.14.170.249	Argentina
AR	190.181.113.2	Argentina
AR	200.55.57.214	Argentina
BO	200.87.98.235	Bolivia
CO	190.7.128.44	Colombia
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.6.198	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.117.30	Iran
IS	79.134.233.195	Iceland
KZ	109.229.189.175	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.207.126	Macau
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.110.35.150	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TN	196.203.198.130	Tunisia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States
US	98.126.249.106	United States

List from greylisting:

Botnet Statistics [2013-09-16]

detection period: 2013-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3351
number of botnet IPs notified to network operators: 2980
number of spam blocked: 108893
recipient count of spam blocked: 3704628

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	831
2	CHINANET-GD	170
3	UNICOM-GD	165
4	CMNET	115
5	CHINANET-FJ	66
6	CRTC	54
7	CTTNET	52
8	UNICOM-LN	42
9	UNICOM-HE	39
10	CHINANET-JS	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1269
2	Taiwan	849
3	United States	232
4	United Kingdom	67
5	Brazil	66
6	Spain	61
7	Iran	52
8	Argentina	52
9	Italy	51
10	Russian Federation	46

Suspected Bot List [2013-09-15]

detection period: 2013-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 239

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.128.44	Colombia
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
KZ	109.229.189.175	Kazakhstan
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PE	200.110.35.150	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RU	87.103.170.65	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	46.164.139.27	Ukraine
US	69.24.192.18	United States
US	98.126.249.106	United States

List from greylisting:

Botnet Statistics [2013-09-15]

detection period: 2013-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2676
number of botnet IPs notified to network operators: 2439
number of spam blocked: 63135
recipient count of spam blocked: 1966077

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	805
2	CHINANET-GD	211
3	UNICOM-GD	177
4	CMNET	135
5	CTTNET	57
6	CRTC	57
7	CHINANET-FJ	57
8	UNICOM-LN	33
9	CHINANET-JS	33
10	UNICOM-SD	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1158
2	Taiwan	819
3	United States	71
4	Brazil	46
5	Argentina	44
6	Spain	38
7	Russian Federation	33
8	Peru	33
9	Iran	33
10	Mexico	25

Suspected Bot List [2013-09-14]

detection period: 2013-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 134

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	200.73.31.157	Colombia
IN	111.93.9.67	India
IQ	86.111.144.194	Iraq
IR	93.126.2.130	Iran
IT	150.145.38.60	Italy
MX	201.116.83.230	Mexico
MX	201.151.142.39	Mexico
PH	119.92.60.115	Philippines
TR	193.255.143.62	Turkey
US	69.64.52.154	United States
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-09-14]

detection period: 2013-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2109
number of botnet IPs notified to network operators: 1977
number of spam blocked: 44243
recipient count of spam blocked: 1102959

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	822
2	CHINANET-GD	221
3	UNICOM-GD	197
4	CHINANET-FJ	58
5	CTTNET	39
6	CMNET	39
7	ZTWL	22
8	CHINANET-JS	15
9	CRTC	11
10	CHINANET-JX	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	826
2	China	763
3	United States	92
4	Russian Federation	33
5	Argentina	30
6	Brazil	28
7	Spain	25
8	Colombia	19
9	Peru	17
10	United Kingdom	17

Suspected Bot List [2013-09-13]

detection period: 2013-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 401

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	77.246.20.2	United Kingdom
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
IL	85.64.57.22	Israel
IN	59.90.134.181	India
IN	59.95.165.58	India
IN	59.97.149.93	India
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	182.72.149.50	India
IN	202.63.105.226	India
IR	89.165.113.118	Iran
IR	91.98.117.30	Iran
LU	83.99.46.118	Luxembourg
MO	60.246.144.199	Macau
MO	202.175.66.29	Macau
MX	177.227.90.49	Mexico
MX	187.174.173.18	Mexico
PE	190.12.65.146	Peru
PE	190.81.5.134	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.179.92	Peru
PE	200.37.197.148	Peru
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RU	87.242.77.115	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States
US	98.137.201.177	United States
US	100.44.250.4	United States

List from greylisting:

Botnet Statistics [2013-09-13]

detection period: 2013-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3386
number of botnet IPs notified to network operators: 2986
number of spam blocked: 68855
recipient count of spam blocked: 2090371

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	891
2	CHINANET-GD	239
3	UNICOM-GD	181
4	CMNET	139
5	CTTNET	70
6	CRTC	59
7	CHINANET-FJ	41
8	BSNLNET	30
9	UNICOM-LN	28
10	CBC-CM-4	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1177
2	Taiwan	915
3	United States	352
4	United Kingdom	88
5	India	78
6	Brazil	68
7	South Korea	48
8	Russian Federation	38
9	Italy	37
10	Argentina	35

Suspected Bot List [2013-09-12]

detection period: 2013-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 371

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.58.250	Bolivia
BO	190.129.203.74	Bolivia
CA	64.15.152.137	Canada
CO	200.73.31.157	Colombia
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
IL	85.64.57.22	Israel
IN	117.240.239.120	India
IN	117.254.234.54	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IN	202.134.156.39	India
IR	82.99.246.10	Iran
IR	89.165.113.118	Iran
IR	91.98.117.30	Iran
IR	212.33.205.180	Iran
IT	88.41.204.171	Italy
MX	187.174.173.18	Mexico
PE	190.12.65.146	Peru
PE	190.81.5.134	Peru
PE	190.81.193.8	Peru
PE	190.116.50.12	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.179.92	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RU	91.204.228.59	Russian Federation
RU	91.211.209.137	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TH	118.175.28.3	Thailand
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States
US	98.126.249.106	United States
US	98.137.201.177	United States
US	173.254.233.237	United States

List from greylisting:

Botnet Statistics [2013-09-12]

detection period: 2013-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2846
number of botnet IPs notified to network operators: 2477
number of spam blocked: 72133
recipient count of spam blocked: 2369457

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	863
2	CHINANET-GD	219
3	CTTNET	75
4	CMNET	52
5	UNICOM-GD	46
6	CHINANET-FJ	39
7	CHINANET-GX	28
8	PE-TPSA-LACNIC	24
9	UNICOM-LN	23
10	CHINANET-JX	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	874
2	China	718
3	United States	211
4	Brazil	66
5	United Kingdom	63
6	India	61
7	Peru	53
8	Spain	50
9	Argentina	47
10	Italy	46

Suspected Bot List [2013-09-11]

detection period: 2013-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 480

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	95.111.38.156	Bulgaria
BO	190.129.58.250	Bolivia
BO	200.87.98.235	Bolivia
CA	64.15.152.137	Canada
CO	190.90.2.30	Colombia
CU	200.55.159.122	Cuba
ES	213.97.71.246	Spain
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
ID	27.131.2.210	Indonesia
IL	85.64.57.22	Israel
IN	27.5.183.11	India
IN	27.6.19.140	India
IN	59.90.81.251	India
IN	59.92.3.10	India
IN	59.93.55.59	India
IN	59.93.212.130	India
IN	59.94.222.27	India
IN	111.93.6.198	India
IN	117.195.95.193	India
IN	117.240.239.120	India
IN	117.254.10.18	India
IN	117.254.234.54	India
IN	122.183.99.146	India
IN	182.73.111.162	India
IN	202.63.105.226	India
IN	202.134.156.242	India
IR	82.99.246.10	Iran
IR	91.98.89.206	Iran
IR	91.98.117.30	Iran
IT	88.41.204.171	Italy
MX	187.174.173.18	Mexico
PE	190.81.193.8	Peru
PE	190.81.196.147	Peru
PE	190.116.50.12	Peru
PE	190.187.168.186	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RS	88.150.226.132	Serbia
RS	91.232.107.59	Serbia
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TN	196.203.198.130	Tunisia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
US	72.34.181.170	United States
US	98.126.249.106	United States
US	98.137.201.177	United States

List from greylisting:

Botnet Statistics [2013-09-11]

detection period: 2013-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3549
number of botnet IPs notified to network operators: 3069
number of spam blocked: 71051
recipient count of spam blocked: 2164301

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	886
2	CHINANET-GD	235
3	UNICOM-GD	208
4	CTTNET	134
5	CMNET	40
6	CHINANET-FJ	37
7	CBC-CM-4	29
8	ZTWL	27
9	CHINANET-JX	22
10	UNICOM-LN	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	964
2	Taiwan	904
3	United States	398
4	United Kingdom	111
5	India	94
6	Brazil	61
7	Italy	60
8	Argentina	55
9	Peru	54
10	Russian Federation	46

Suspected Bot List [2013-09-10]

detection period: 2013-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 285

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	200.87.98.235	Bolivia
CA	174.142.75.243	Canada
GB	109.104.104.122	United Kingdom
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
ID	27.131.2.210	Indonesia
IN	14.96.139.16	India
IN	14.96.182.174	India
IN	14.98.96.85	India
IN	14.98.213.43	India
IN	27.0.55.135	India
IN	59.89.9.30	India
IN	59.93.201.186	India
IN	59.94.210.39	India
IN	59.96.243.71	India
IN	116.73.211.147	India
IN	117.199.151.231	India
IN	117.240.239.120	India
IN	117.242.81.137	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IN	202.78.235.226	India
IN	202.134.157.28	India
IN	210.212.209.150	India
IR	91.98.89.206	Iran
IR	91.98.117.30	Iran
IR	212.33.205.180	Iran
IT	88.41.204.171	Italy
KZ	109.229.189.175	Kazakhstan
LB	212.36.193.187	Lebanon
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.81.193.8	Peru
PE	190.81.196.147	Peru
PE	190.187.168.186	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RU	88.151.89.108	Russian Federation
RU	91.149.98.50	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
TN	196.203.198.130	Tunisia
TR	82.222.189.43	Turkey
TW	202.154.192.28	Taiwan
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States
US	72.34.181.170	United States
US	98.137.201.177	United States

List from greylisting:

Botnet Statistics [2013-09-10]

detection period: 2013-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 6439
number of botnet IPs notified to network operators: 6155
number of spam blocked: 106362
recipient count of spam blocked: 3552742

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	3025
2	HINET-NET	892
3	CHINANET-GD	336
4	CTTNET	202
5	UNICOM-GD	176
6	CRTC	147
7	CMNET	64
8	CHINANET-FJ	49
9	CHINANET-GX	45
10	UNICOM-LN	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4288
2	Taiwan	907
3	United States	281
4	United Kingdom	79
5	India	61
6	Brazil	54
7	Russian Federation	49
8	Spain	45
9	Germany	40
10	Argentina	39

Suspected Bot List [2013-09-09]

detection period: 2013-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 154

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	193.164.207.16	United Kingdom
GQ	41.222.115.225	Equatorial Guinea
HN	190.107.140.77	Honduras
IN	117.240.239.120	India
IN	122.183.99.146	India
IN	202.63.105.226	India
IN	210.212.224.197	India
IR	89.165.113.118	Iran
IR	91.98.117.30	Iran
IT	88.41.204.171	Italy
MX	177.227.90.49	Mexico
MX	187.174.173.18	Mexico
MX	200.92.57.205	Mexico
PE	190.187.168.186	Peru
PE	190.232.218.6	Peru
PE	190.235.148.90	Peru
PE	200.31.105.172	Peru
PE	200.37.197.148	Peru
PK	111.68.104.132	Pakistan
PK	115.186.59.70	Pakistan
RO	89.120.75.51	Romania
RS	89.216.113.127	Serbia
SA	94.77.199.148	Saudi Arabia
SK	62.197.209.93	Slovakia
SK	93.184.71.66	Slovakia
TR	82.222.189.43	Turkey
TR	193.255.143.62	Turkey
UA	178.213.110.115	Ukraine
US	69.24.192.18	United States
US	98.137.201.177	United States
US	174.140.163.107	United States
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2013-09-09]

detection period: 2013-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 5903
number of botnet IPs notified to network operators: 5749
number of spam blocked: 120672
recipient count of spam blocked: 3984474

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	2916
2	HINET-NET	898
3	CHINANET-GD	308
4	CRTC	230
5	UNICOM-GD	210
6	CTTNET	183
7	CMNET	64
8	CHINANET-FJ	46
9	CHINASKYNET	35
10	ZTWL	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4250
2	Taiwan	907
3	United States	241
4	Brazil	47
5	United Kingdom	46
6	Russian Federation	33
7	India	25
8	Iran	20
9	Canada	20
10	Peru	15