Suspected Bot List [2014-01-30]

detection period: 2014-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.100.224	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.203.143.59	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.133.78	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.133.98	Taiwan
TW	119.77.158.102	Taiwan
TW	119.77.215.247	Taiwan
TW	119.77.224.212	Taiwan
TW	119.77.246.78	Taiwan
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-01-30]

detection period: 2014-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 7383
number of botnet IPs notified to network operators: 7238
number of spam blocked: 124023
recipient count of spam blocked: 2942059

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	624
2	UNICOM-SD	591
3	CHINANET-JS	414
4	UNICOM-HA	358
5	UNICOM-HE	353
6	UNICOM-LN	285
7	CRTC	259
8	CHINANET-GD	227
9	UNICOM-HL	188
10	UNICOM-SX	181

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6566
2	Taiwan	157
3	United States	74
4	France	57
5	United Kingdom	51
6	India	28
7	Brazil	27
8	Peru	25
9	Russian Federation	20
10	Indonesia	20

Suspected Bot List [2014-01-29]

detection period: 2014-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 247

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PK	115.186.59.70	Pakistan
PK	210.2.170.42	Pakistan
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-01-29]

detection period: 2014-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2511
number of botnet IPs notified to network operators: 2264
number of spam blocked: 65998
recipient count of spam blocked: 1795451

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-SD	105
2	CMNET	105
3	HINET-NET	95
4	CHINANET-JS	79
5	CHINANET-GD	73
6	CRTC	72
7	UNICOM-HA	65
8	UNICOM-LN	61
9	UNICOM-HE	50
10	CHINANET-XJ	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1401
2	Taiwan	120
3	India	72
4	United States	64
5	France	57
6	United Kingdom	48
7	Brazil	41
8	Indonesia	39
9	Singapore	35
10	Kazakhstan	31

Suspected Bot List [2014-01-28]

detection period: 2014-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
PK	115.186.59.70	Pakistan
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	119.77.158.102	Taiwan
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-28]

detection period: 2014-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1695
number of botnet IPs notified to network operators: 1591
number of spam blocked: 50633
recipient count of spam blocked: 1504334

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	125
2	CHINANET-GD	91
3	UNICOM-SD	83
4	HINET-NET	65
5	CHINANET-JS	61
6	CRTC	58
7	UNICOM-LN	56
8	UNICOM-HE	49
9	UNICOM-HA	41
10	UNICOM-JL	33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1104
2	Taiwan	80
3	United States	49
4	Brazil	37
5	United Kingdom	27
6	France	27
7	Italy	20
8	India	19
9	Russian Federation	18
10	Spain	18

Suspected Bot List [2014-01-27]

detection period: 2014-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 150

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BO	190.129.12.162	Bolivia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.149.176	Macau
MX	187.174.173.18	Mexico
PK	115.186.59.70	Pakistan
PK	210.2.170.42	Pakistan
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-27]

detection period: 2014-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3551
number of botnet IPs notified to network operators: 3401
number of spam blocked: 74449
recipient count of spam blocked: 1908724

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	298
2	UNICOM-SD	213
3	CRTC	143
4	CHINANET-JS	143
5	CHINANET-GD	127
6	UNICOM-HE	125
7	UNICOM-LN	106
8	UNICOM-HL	101
9	UNICOM-JL	95
10	UNICOM-HA	91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2642
2	Taiwan	99
3	United States	98
4	France	79
5	United Kingdom	62
6	India	41
7	Italy	26
8	Brazil	25
9	Mexico	23
10	Colombia	20

Suspected Bot List [2014-01-26]

detection period: 2014-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 63

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.205.136	China
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
IN	117.218.13.176	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.180.199	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	61.64.27.123	Taiwan
TW	119.77.237.2	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-26]

detection period: 2014-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3689
number of botnet IPs notified to network operators: 3626
number of spam blocked: 92581
recipient count of spam blocked: 2286264

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	316
2	UNICOM-SD	274
3	CHINANET-JS	184
4	CHINANET-GD	154
5	CRTC	150
6	UNICOM-HE	147
7	UNICOM-LN	141
8	UNICOM-HA	139
9	UNICOM-HL	107
10	CHINANET-XJ	107

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3315
2	Taiwan	104
3	Brazil	26
4	United States	24
5	Italy	16
6	United Kingdom	16
7	Ukraine	13
8	Indonesia	13
9	India	12
10	Germany	11

Suspected Bot List [2014-01-25]

detection period: 2014-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	46.55.147.50	Bulgaria
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.218.13.176	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.147.49	Macau
MO	60.246.163.224	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-25]

detection period: 2014-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3336
number of botnet IPs notified to network operators: 3294
number of spam blocked: 51022
recipient count of spam blocked: 1525992

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	339
2	UNICOM-SD	213
3	CRTC	188
4	CHINANET-GD	150
5	CHINANET-JS	146
6	UNICOM-HE	140
7	UNICOM-HA	114
8	UNICOM-LN	107
9	HINET-NET	103
10	UNICOM-JL	94

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2965
2	Taiwan	125
3	Brazil	25
4	United States	19
5	Indonesia	15
6	Russian Federation	14
7	Ukraine	12
8	Iran	11
9	Germany	11
10	India	10

Suspected Bot List [2014-01-24]

detection period: 2014-01-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 191

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.193.236	China
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.183.43	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.214.39	Taiwan
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-24]

detection period: 2014-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 3579
number of botnet IPs notified to network operators: 3388
number of spam blocked: 50587
recipient count of spam blocked: 1580958

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	283
2	CRTC	168
3	UNICOM-SD	156
4	CHINANET-GD	148
5	CHINANET-JS	146
6	HINET-NET	129
7	UNICOM-HE	112
8	UNICOM-HA	106
9	UNICOM-LN	76
10	CHINANET-XJ	70

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2471
2	Taiwan	163
3	United States	80
4	India	80
5	France	63
6	United Kingdom	42
7	Indonesia	39
8	Italy	38
9	Singapore	35
10	Viet Nam	28

Suspected Bot List [2014-01-23]

detection period: 2014-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 178

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.247.128	China
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
IN	117.203.136.244	India
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.154.115	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-23]

detection period: 2014-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3519
number of botnet IPs notified to network operators: 3341
number of spam blocked: 54788
recipient count of spam blocked: 1596032

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	281
2	UNICOM-SD	169
3	CRTC	167
4	CHINANET-GD	129
5	CHINANET-JS	126
6	UNICOM-HE	118
7	UNICOM-LN	101
8	UNICOM-HA	98
9	HINET-NET	96
10	UNICOM-HL	75

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2523
2	Taiwan	126
3	United States	96
4	France	83
5	United Kingdom	70
6	India	52
7	Italy	28
8	Brazil	28
9	South Korea	25
10	Indonesia	23

Suspected Bot List [2014-01-22]

detection period: 2014-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 108

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MO	60.246.155.71	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-22]

detection period: 2014-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2425
number of botnet IPs notified to network operators: 2317
number of spam blocked: 44257
recipient count of spam blocked: 1390357

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	190
2	UNICOM-SD	129
3	CRTC	107
4	CHINANET-JS	99
5	UNICOM-HE	76
6	UNICOM-LN	75
7	HINET-NET	62
8	CHINANET-GD	61
9	UNICOM-HA	57
10	UNICOM-HL	54

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1720
2	United States	82
3	Taiwan	81
4	France	56
5	United Kingdom	44
6	Brazil	32
7	India	29
8	Russian Federation	23
9	Colombia	20
10	Mexico	19

Suspected Bot List [2014-01-21]

detection period: 2014-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 200

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.120.113	China
CN	150.255.194.173	China
CN	150.255.203.28	China
CN	150.255.205.166	China
CN	150.255.208.231	China
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MO	60.246.178.161	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-21]

detection period: 2014-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 6996
number of botnet IPs notified to network operators: 6796
number of spam blocked: 72741
recipient count of spam blocked: 2153545

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	492
2	UNICOM-SD	454
3	CHINANET-JS	338
4	UNICOM-HE	270
5	CRTC	257
6	UNICOM-LN	247
7	CHINANET-GD	239
8	UNICOM-JL	209
9	UNICOM-HA	208
10	UNICOM-HL	184

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	5950
2	Taiwan	146
3	United States	99
4	France	70
5	United Kingdom	53
6	Brazil	49
7	Italy	48
8	Spain	42
9	India	35
10	Russian Federation	30

Suspected Bot List [2014-01-20]

detection period: 2014-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 72

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting:

Botnet Statistics [2014-01-20]

detection period: 2014-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2594
number of botnet IPs notified to network operators: 2522
number of spam blocked: 38276
recipient count of spam blocked: 1366367

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	187
2	UNICOM-HB	172
3	UNICOM-SD	148
4	CMNET	124
5	UNICOM-LN	107
6	CHINANET-JS	94
7	UNICOM-HA	75
8	CRTC	72
9	UNICOM-HL	71
10	UNICOM-HE	69

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2087
2	Taiwan	70
3	United States	38
4	India	35
5	Brazil	32
6	Russian Federation	28
7	France	27
8	United Kingdom	25
9	Indonesia	19
10	Italy	12

Suspected Bot List [2014-01-19]

detection period: 2014-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.1.110	China
CN	150.255.177.73	China
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MO	60.246.148.42	Macau
MX	187.174.173.18	Mexico
PE	200.31.105.172	Peru
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-19]

detection period: 2014-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2609
number of botnet IPs notified to network operators: 2558
number of spam blocked: 54729
recipient count of spam blocked: 1470582

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	172
2	UNICOM-SD	164
3	CMNET	158
4	CHINANET-JS	139
5	CRTC	107
6	UNICOM-LN	103
7	UNICOM-HA	96
8	UNICOM-HE	90
9	UNICOM-HL	70
10	UNICOM-SX	63

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2246
2	Taiwan	76
3	Brazil	27
4	United States	21
5	Russian Federation	21
6	Italy	19
7	Ukraine	12
8	Poland	10
9	South Korea	10
10	Indonesia	10

Suspected Bot List [2014-01-18]

detection period: 2014-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 59

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.179.215	Macau
MX	187.174.173.18	Mexico
PK	210.2.170.42	Pakistan
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-18]

detection period: 2014-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 3004
number of botnet IPs notified to network operators: 2945
number of spam blocked: 62803
recipient count of spam blocked: 1589305

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	317
2	UNICOM-HB	206
3	UNICOM-SD	178
4	CMNET	154
5	CHINANET-GD	129
6	CHINANET-JS	121
7	UNICOM-HA	105
8	CRTC	101
9	UNICOM-LN	96
10	UNICOM-HE	91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2613
2	Taiwan	91
3	Brazil	28
4	United States	25
5	Russian Federation	23
6	Italy	19
7	India	15
8	South Korea	11
9	Indonesia	11
10	Turkey	10

Suspected Bot List [2014-01-17]

detection period: 2014-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 90

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.195.170	China
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.146.129	Macau
MX	187.174.173.18	Mexico
PE	190.232.218.209	Peru
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-17]

detection period: 2014-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3455
number of botnet IPs notified to network operators: 3365
number of spam blocked: 57578
recipient count of spam blocked: 1633009

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	293
2	UNICOM-HB	201
3	UNICOM-SD	183
4	CMNET	159
5	CHINANET-GD	139
6	UNICOM-HA	113
7	CRTC	106
8	CHINANET-JS	106
9	UNICOM-LN	103
10	UNICOM-HE	94

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2754
2	Taiwan	85
3	United States	73
4	France	53
5	Brazil	36
6	Russian Federation	34
7	India	32
8	United Kingdom	30
9	Indonesia	21
10	South Korea	19

Suspected Bot List [2014-01-16]

detection period: 2014-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 171

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
ES	188.87.211.12	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
PE	190.232.218.209	Peru
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-16]

detection period: 2014-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2808
number of botnet IPs notified to network operators: 2637
number of spam blocked: 39143
recipient count of spam blocked: 1437298

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	148
2	CMNET	133
3	UNICOM-SD	129
4	CRTC	97
5	UNICOM-HA	87
6	CHINANET-JS	85
7	UNICOM-LN	81
8	UNICOM-HL	75
9	UNICOM-HE	69
10	HINET-NET	64

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1916
2	United States	125
3	Taiwan	82
4	Brazil	49
5	France	48
6	India	45
7	Russian Federation	39
8	United Kingdom	35
9	Spain	23
10	Italy	22

Suspected Bot List [2014-01-15]

detection period: 2014-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 125

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
CO	190.90.2.30	Colombia
GB	193.164.207.16	United Kingdom
GH	212.96.12.199	Ghana
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
PE	200.31.105.172	Peru
PK	124.109.47.66	Pakistan
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
US	184.82.162.122	United States

List from greylisting:

Botnet Statistics [2014-01-15]

detection period: 2014-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2312
number of botnet IPs notified to network operators: 2187
number of spam blocked: 35381
recipient count of spam blocked: 1300918

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	145
2	CMNET	134
3	UNICOM-SD	105
4	CRTC	96
5	CHINANET-JS	66
6	UNICOM-HA	64
7	UNICOM-LN	60
8	UNICOM-HE	53
9	HINET-NET	52
10	UNICOM-HL	49

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1597
2	United States	86
3	Taiwan	68
4	France	60
5	India	51
6	Brazil	37
7	Russian Federation	31
8	United Kingdom	31
9	Indonesia	21
10	Ukraine	17

Suspected Bot List [2014-01-14]

detection period: 2014-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 184

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BG	46.55.147.50	Bulgaria
BO	190.129.12.162	Bolivia
DO	190.94.63.166	Dominican Republic
GB	193.164.207.16	United Kingdom
GH	212.96.12.199	Ghana
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.28	Iran
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
MX	187.174.173.18	Mexico
PK	124.109.47.66	Pakistan
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States
US	184.82.162.122	United States

List from greylisting:

Botnet Statistics [2014-01-14]

detection period: 2014-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2557
number of botnet IPs notified to network operators: 2373
number of spam blocked: 38115
recipient count of spam blocked: 1409887

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	144
2	CRTC	143
3	CMNET	137
4	CTTNET	88
5	UNICOM-SD	78
6	CHINANET-JS	62
7	UNICOM-HE	58
8	IP2000-ADSL-BAS	56
9	CHINANET-FJ	56
10	UNICOM-LN	54

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1484
2	United States	213
3	France	155
4	United Kingdom	74
5	Taiwan	59
6	India	52
7	Brazil	38
8	Russian Federation	35
9	Indonesia	22
10	South Korea	21

Suspected Bot List [2014-01-13]

detection period: 2014-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 135

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.73.111.2	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
MN	183.177.98.154	Mongolia
MX	187.174.173.18	Mexico
PE	190.81.249.18	Peru
PE	200.31.105.172	Peru
PK	124.109.47.66	Pakistan
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States
US	184.82.162.122	United States

List from greylisting:

Botnet Statistics [2014-01-13]

detection period: 2014-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2062
number of botnet IPs notified to network operators: 1927
number of spam blocked: 36899
recipient count of spam blocked: 1375295

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	194
2	CHINANET-GD	156
3	CMNET	129
4	CHINANET-JS	58
5	UNICOM-SD	53
6	UNICOM-LN	53
7	HINET-NET	48
8	UNICOM-HE	45
9	CHINANET-FJ	45
10	CTTNET	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1318
2	France	115
3	United States	102
4	Taiwan	57
5	India	46
6	Brazil	34
7	Russian Federation	25
8	South Korea	21
9	Indonesia	21
10	United Kingdom	21

Suspected Bot List [2014-01-12]

detection period: 2014-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.73.111.2	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
MN	183.177.98.154	Mongolia
MO	60.246.203.195	Macau
MX	187.174.173.18	Mexico
PE	190.81.249.18	Peru
PK	124.109.47.66	Pakistan
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-12]

detection period: 2014-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1378
number of botnet IPs notified to network operators: 1347
number of spam blocked: 12642
recipient count of spam blocked: 456072

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	132
2	CMNET	103
3	CRTC	75
4	UNICOM-SD	67
5	UNICOM-HE	45
6	CHINANET-JS	42
7	UNICOM-LN	41
8	CHINANET-FJ	37
9	UNICOM-HA	36
10	HINET-NET	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1122
2	Taiwan	46
3	United States	36
4	Brazil	23
5	Russian Federation	15
6	Ukraine	10
7	South Korea	9
8	India	9
9	Indonesia	8
10	Hong Kong	6

Suspected Bots' IP List for January 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-01-31]
Suspected Bots IP [2014-01-30]
Suspected Bots IP [2014-01-29]
Suspected Bots IP [2014-01-28]
Suspected Bots IP [2014-01-27]
Suspected Bots IP [2014-01-26]
Suspected Bots IP [2014-01-25]
Suspected Bots IP [2014-01-24]
Suspected Bots IP [2014-01-23]
Suspected Bots IP [2014-01-22]
Suspected Bots IP [2014-01-21]
Suspected Bots IP [2014-01-20]
Suspected Bots IP [2014-01-19]
Suspected Bots IP [2014-01-18]
Suspected Bots IP [2014-01-17]
Suspected Bots IP [2014-01-16]
Suspected Bots IP [2014-01-15]
Suspected Bots IP [2014-01-14]
Suspected Bots IP [2014-01-13]
Suspected Bots IP [2014-01-12]
Suspected Bots IP [2014-01-11]
Suspected Bots IP [2014-01-10]
Suspected Bots IP [2014-01-09]
Suspected Bots IP [2014-01-08]
Suspected Bots IP [2014-01-07]
Suspected Bots IP [2014-01-06]
Suspected Bots IP [2014-01-05]
Suspected Bots IP [2014-01-04]
Suspected Bots IP [2014-01-03]
Suspected Bots IP [2014-01-02]
Suspected Bots IP [2014-01-01]

Suspected Bot List [2014-01-11]

detection period: 2014-01-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 156

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.102.244	China
DO	190.94.63.166	Dominican Republic
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	112.133.209.36	India
IN	122.160.239.39	India
IN	182.73.111.2	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
MO	60.246.144.75	Macau
MO	60.246.203.22	Macau
MX	187.174.173.18	Mexico
PE	200.31.105.172	Peru
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-11]

detection period: 2014-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2332
number of botnet IPs notified to network operators: 2176
number of spam blocked: 34159
recipient count of spam blocked: 1255490

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	163
2	CHINANET-GD	134
3	CRTC	118
4	HINET-NET	93
5	UNICOM-SD	88
6	CHINANET-JS	68
7	UNICOM-HE	65
8	UNICOM-LN	55
9	CTTNET	47
10	CHINANET-FJ	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1447
2	Taiwan	121
3	United States	107
4	India	50
5	France	45
6	Russian Federation	34
7	Kazakhstan	34
8	United Kingdom	26
9	Viet Nam	25
10	Brazil	25

Botnet Statistics for the year of 2013

detection period: 2013-01-01 00:00 - 2013-12-31 23:59 UTC
total number of suspected botnet IPs: 778866
number of blocked spams: 28179569
recipient count of blocked spams: 955885959
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	369154
2	Taiwan	102278
3	Belarus	46978
4	United States	35984
5	Kazakhstan	17177
6	India	15853
7	Ukraine	12413
8	Viet Nam	11292
9	Spain	10118
10	Argentina	9909
11	Peru	9839
12	Russian Federation	8655
13	Colombia	7655
14	Italy	7523
15	United Kingdom	6824
16	Mexico	6634
17	Iran	6276
18	Brazil	5781
19	Germany	5725
20	Poland	5161
21	Romania	4212
22	Canada	3955
23	South Korea	3898
24	Chile	3857
25	Turkey	3822

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	6339165
2	China	5870709
3	Brazil	2849191
4	United States	2275300
5	Russian Federation	1560085
6	United Kingdom	691147
7	Iran	515977
8	India	509058
9	Ukraine	483038
10	South Korea	470287
11	France	415739
12	Colombia	328107
13	Germany	300302
14	Indonesia	293460
15	Thailand	268891
16	Peru	267810
17	Poland	245957
18	Argentina	236023
19	Mexico	233041
20	Kuwait	222378
21	Saudi Arabia	179580
22	Pakistan	157184
23	Hong Kong	157036
24	Philippines	154559
25	Israel	150750

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics for December 2013

detection period: 2013-12-01 00:00 - 2013-12-31 23:59 UTC
total number of suspected botnet IPs: 43949
number of blocked spams: 1569918
recipient count of blocked spams: 53876753

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	24876
2	Taiwan	7844
3	United States	1542
4	India	630
5	Spain	555
6	Argentina	484
7	Italy	478
8	United Kingdom	461
9	France	461
10	Peru	383
11	Brazil	351
12	Colombia	313
13	Mexico	312
14	Iran	273
15	Germany	244
16	Turkey	241
17	Singapore	225
18	South Korea	223
19	Israel	222
20	Indonesia	219
21	Chile	207
22	Hong Kong	196
23	Russian Federation	193
24	Romania	184
25	Viet Nam	178

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	490656
2	China	418397
3	Brazil	121751
4	Russian Federation	64126
5	United States	45722
6	India	24217
7	United Kingdom	23474
8	Saudi Arabia	22135
9	Indonesia	20984
10	Colombia	20351
11	Ukraine	19165
12	South Korea	18552
13	Iran	17700
14	Germany	16925
15	Poland	16324
16	Philippines	16270
17	Israel	15745
18	Hong Kong	12432
19	Ivory Coast	12308
20	Mexico	11075
21	Turkey	11050
22	Peru	10822
23	Republic of Maldives	10358
24	Romania	10356
25	Argentina	8443

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2014-01-10]

detection period: 2014-01-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 259

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
ES	188.85.187.227	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	112.133.209.36	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	182.73.111.2	India
IN	182.74.135.74	India
IN	202.63.105.226	India
IR	91.98.117.30	Iran
IR	94.182.248.19	Iran
MN	183.177.98.154	Mongolia
MX	187.174.173.18	Mexico
PE	200.31.105.172	Peru
PK	210.2.170.42	Pakistan
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	61.64.21.68	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-01-10]

detection period: 2014-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2326
number of botnet IPs notified to network operators: 2067
number of spam blocked: 40564
recipient count of spam blocked: 1499581

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	132
2	CMNET	72
3	CRTC	63
4	HINET-NET	61
5	UNICOM-SD	43
6	CHINANET-JS	38
7	CHINANET-FJ	37
8	UNICOM-LN	33
9	UNICOM-HA	33
10	IP2000-ADSL-BAS	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	832
2	United States	290
3	France	113
4	Taiwan	86
5	India	74
6	United Kingdom	62
7	Singapore	40
8	Hong Kong	38
9	Viet Nam	37
10	Russian Federation	34