Suspected Bot List [2014-02-27]

detection period: 2014-02-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CA	67.205.67.7	Canada
CN	150.255.132.35	China
CN	150.255.250.53	China
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IN	210.212.174.78	India
KZ	176.98.192.143	Kazakhstan
MX	187.174.173.18	Mexico
MX	187.174.216.162	Mexico
MX	189.204.49.66	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	119.77.135.183	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-27]

detection period: 2014-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 5366
number of botnet IPs notified to network operators: 5316
number of spam blocked: 53579
recipient count of spam blocked: 1663578

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	684
2	CRTC	521
3	CHINANET-GD	436
4	UNICOM-SD	302
5	CHINANET-JS	230
6	UNICOM-HE	172
7	CTTNET	170
8	UNICOM-HA	154
9	UNICOM-LN	151
10	UNICOM-HL	108

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4907
2	Taiwan	145
3	United States	32
4	France	22
5	Brazil	19
6	India	17
7	Ukraine	15
8	Russian Federation	15
9	South Korea	13
10	Italy	13

Suspected Bot List [2014-02-26]

detection period: 2014-02-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 89

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CN	150.255.242.40	China
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	210.212.174.78	India
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	119.77.135.183	Taiwan
TW	119.77.139.166	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-26]

detection period: 2014-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 4720
number of botnet IPs notified to network operators: 4631
number of spam blocked: 43964
recipient count of spam blocked: 1422102

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	590
2	CRTC	410
3	CHINANET-GD	409
4	UNICOM-SD	201
5	CTTNET	197
6	CHINANET-JS	182
7	UNICOM-LN	142
8	UNICOM-HE	126
9	UNICOM-HA	112
10	UNICOM-HL	105

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4125
2	Taiwan	120
3	United States	46
4	Italy	34
5	Brazil	31
6	Russian Federation	28
7	Turkey	22
8	France	20
9	Poland	18
10	United Kingdom	17

Suspected Bot List [2014-02-25]

detection period: 2014-02-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 80

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AO	196.223.13.230	Angola
BO	190.129.12.162	Bolivia
CA	67.205.67.7	Canada
CN	150.255.116.146	China
CN	150.255.182.49	China
CN	150.255.190.13	China
CN	150.255.252.67	China
CN	202.197.224.233	China
CN	202.198.70.197	China
GB	193.164.207.16	United Kingdom
HK	103.6.86.43	Hong Kong
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.125.29	Macau
MO	60.246.153.147	Macau
MO	60.246.181.80	Macau
MO	60.246.251.216	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	113.61.177.248	Taiwan
TW	211.76.94.73	Taiwan
UA	91.201.84.146	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-25]

detection period: 2014-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 6593
number of botnet IPs notified to network operators: 6513
number of spam blocked: 77081
recipient count of spam blocked: 2052808

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	784
2	CRTC	630
3	CHINANET-GD	491
4	CHINANET-JS	314
5	UNICOM-SD	302
6	CTTNET	253
7	UNICOM-HA	220
8	UNICOM-HE	194
9	UNICOM-LN	183
10	UNICOM-HL	160

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6042
2	Taiwan	136
3	United States	41
4	Brazil	27
5	India	25
6	Russian Federation	24
7	Ukraine	21
8	France	19
9	Indonesia	13
10	United Kingdom	13

Suspected Bot List [2014-02-24]

detection period: 2014-02-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CN	150.255.185.253	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IR	91.98.117.28	Iran
LB	213.175.188.158	Lebanon
MO	60.246.30.48	Macau
MO	60.246.35.169	Macau
MO	60.246.178.71	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-24]

detection period: 2014-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 4191
number of botnet IPs notified to network operators: 4145
number of spam blocked: 46826
recipient count of spam blocked: 1551717

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	486
2	CRTC	368
3	CHINANET-GD	367
4	CHINANET-JS	184
5	UNICOM-SD	183
6	CTTNET	149
7	UNICOM-HA	105
8	UNICOM-LN	98
9	UNICOM-HE	88
10	UNICOM-HL	86

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3724
2	Taiwan	120
3	Brazil	33
4	United States	28
5	Russian Federation	21
6	Ukraine	16
7	France	16
8	Turkey	15
9	Italy	15
10	India	15

Suspected Bot List [2014-02-23]

detection period: 2014-02-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CN	150.255.154.187	China
CN	202.142.20.8	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IR	91.98.36.84	Iran
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.35.169	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	211.76.90.134	Taiwan
TW	211.76.90.162	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-23]

detection period: 2014-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 4264
number of botnet IPs notified to network operators: 4229
number of spam blocked: 47248
recipient count of spam blocked: 1572807

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	480
2	CHINANET-GD	349
3	CRTC	288
4	UNICOM-SD	236
5	CHINANET-JS	191
6	CTTNET	144
7	UNICOM-LN	122
8	UNICOM-HE	109
9	UNICOM-HA	104
10	HINET-NET	99

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3884
2	Taiwan	138
3	United States	26
4	Russian Federation	20
5	Indonesia	17
6	Ukraine	16
7	Brazil	16
8	South Korea	12
9	Israel	8
10	France	8

Suspected Bot List [2014-02-22]

detection period: 2014-02-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
CN	202.142.20.8	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.153.4	Macau
MO	60.246.229.8	Macau
MX	187.174.173.18	Mexico
MX	187.174.216.162	Mexico
MX	189.204.49.66	Mexico
PH	124.107.165.60	Philippines
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-22]

detection period: 2014-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2604
number of botnet IPs notified to network operators: 2554
number of spam blocked: 40308
recipient count of spam blocked: 1398757

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	363
2	CRTC	240
3	CTTNET	164
4	CHINANET-GD	157
5	CHINANET-JS	97
6	UNICOM-SD	88
7	HINET-NET	83
8	UNICOM-HA	73
9	UNICOM-HL	55
10	CHINANET-FJ	55

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2239
2	Taiwan	111
3	United States	28
4	Indonesia	17
5	Russian Federation	16
6	Brazil	15
7	Ukraine	12
8	Germany	12
9	South Korea	11
10	India	10

Suspected Bot List [2014-02-21]

detection period: 2014-02-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 86

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CA	184.107.208.122	Canada
CN	150.255.60.123	China
CN	150.255.63.108	China
CN	150.255.171.183	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	210.212.174.78	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.122.166	Macau
MO	60.246.144.18	Macau
MO	60.246.158.81	Macau
MO	60.246.229.8	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	211.76.89.138	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-21]

detection period: 2014-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 6996
number of botnet IPs notified to network operators: 6910
number of spam blocked: 87088
recipient count of spam blocked: 2376374

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	827
2	CRTC	629
3	CHINANET-GD	361
4	CHINANET-JS	346
5	UNICOM-SD	314
6	CTTNET	296
7	UNICOM-HA	237
8	UNICOM-HE	202
9	CHINANET-XJ	183
10	UNICOM-LN	149

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6448
2	Taiwan	155
3	United States	39
4	Brazil	34
5	Italy	30
6	Russian Federation	19
7	Spain	19
8	India	17
9	Germany	17
10	Ukraine	14

Suspected Bot List [2014-02-20]

detection period: 2014-02-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 92

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CA	184.107.208.122	Canada
CN	202.100.111.147	China
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	210.212.174.78	India
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.73.111	Macau
MO	60.246.76.81	Macau
MO	60.246.156.32	Macau
MO	60.246.254.33	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
TW	115.165.208.61	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-20]

detection period: 2014-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 4294
number of botnet IPs notified to network operators: 4202
number of spam blocked: 48417
recipient count of spam blocked: 1594111

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	577
2	CRTC	403
3	CHINANET-GD	223
4	UNICOM-SD	179
5	CTTNET	176
6	CHINANET-JS	175
7	UNICOM-HE	140
8	UNICOM-HA	135
9	UNICOM-LN	123
10	UNICOM-SX	118

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3779
2	Taiwan	121
3	Brazil	46
4	Italy	38
5	United States	36
6	Spain	22
7	Russian Federation	20
8	Poland	14
9	Indonesia	14
10	Turkey	12

Suspected Bot List [2014-02-19]

detection period: 2014-02-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 265

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.56.202	China
CN	150.255.200.8	China
CN	202.100.111.147	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	210.212.174.78	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.57.214	Macau
MO	60.246.146.206	Macau
MO	60.246.213.175	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	115.165.206.247	Taiwan
TW	119.77.135.183	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-19]

detection period: 2014-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 4893
number of botnet IPs notified to network operators: 4628
number of spam blocked: 37586
recipient count of spam blocked: 1200741

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	544
2	CRTC	304
3	UNICOM-SD	205
4	CHINANET-JS	194
5	CHINANET-GD	183
6	CTTNET	151
7	UNICOM-HA	148
8	UNICOM-LN	125
9	UNICOM-HE	116
10	HINET-NET	102

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3690
2	Italy	244
3	Taiwan	128
4	Brazil	120
5	Spain	84
6	Turkey	51
7	United States	50
8	Poland	36
9	Russian Federation	29
10	Argentina	29

Suspected Bot List [2014-02-18]

detection period: 2014-02-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 119

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CA	184.107.208.122	Canada
CN	150.255.57.84	China
CN	150.255.100.239	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	117.247.241.27	India
IN	122.160.239.39	India
IN	180.151.38.242	India
IN	182.72.57.212	India
IN	182.74.135.74	India
IN	210.212.174.78	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.33.76	Macau
MO	60.246.173.64	Macau
MO	60.246.176.225	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.135.183	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-18]

detection period: 2014-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 4429
number of botnet IPs notified to network operators: 4312
number of spam blocked: 44351
recipient count of spam blocked: 1427833

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	570
2	CRTC	339
3	CHINANET-JS	253
4	UNICOM-SD	204
5	CHINANET-GD	196
6	CTTNET	156
7	UNICOM-LN	130
8	UNICOM-HE	114
9	UNICOM-HA	111
10	UNICOM-HL	98

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3841
2	Taiwan	102
3	United States	41
4	Brazil	30
5	Turkey	29
6	Italy	29
7	Russian Federation	25
8	India	20
9	Germany	18
10	Indonesia	16

Suspected Bot List [2014-02-17]

detection period: 2014-02-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 141

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	217.165.160.68	Arab Emirates
AR	181.165.13.25	Argentina
BD	180.234.4.32	Bangladesh
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
BO	200.87.201.146	Bolivia
CA	184.107.208.122	Canada
CR	201.196.50.10	Costa Rica
ES	46.25.161.162	Spain
ES	95.122.70.138	Spain
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	27.251.177.239	India
IN	117.240.239.120	India
IN	117.247.241.27	India
IN	122.160.239.39	India
IN	122.166.124.194	India
IN	180.151.38.242	India
IN	182.72.57.212	India
IN	182.74.135.74	India
IN	202.62.67.250	India
IN	210.212.174.78	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	60.246.39.9	Macau
MO	60.246.75.44	Macau
MX	187.163.137.184	Mexico
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
TW	119.77.135.183	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
US	205.209.152.114	United States
US	207.225.36.128	United States
VE	190.39.82.232	Venezuela
ZA	197.245.3.103	South Africa

List from greylisting:

Botnet Statistics [2014-02-17]

detection period: 2014-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3696
number of botnet IPs notified to network operators: 3555
number of spam blocked: 41756
recipient count of spam blocked: 1398512

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	429
2	CRTC	221
3	CHINANET-JS	200
4	UNICOM-SD	189
5	CHINANET-GD	169
6	CTTNET	108
7	UNICOM-HE	103
8	HINET-NET	102
9	UNICOM-HA	91
10	UNICOM-LN	82

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2955
2	Taiwan	132
3	United States	43
4	Italy	41
5	Brazil	39
6	India	35
7	Russian Federation	26
8	Germany	21
9	Kazakhstan	20
10	Ukraine	19

Suspected Bot List [2014-02-16]

detection period: 2014-02-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	217.165.160.68	Arab Emirates
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
BO	200.87.201.146	Bolivia
CA	184.107.208.122	Canada
CN	150.255.20.92	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	202.62.67.250	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.128.28	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	115.165.205.198	Taiwan
TW	115.165.254.28	Taiwan
TW	119.77.133.98	Taiwan
US	50.201.42.106	United States
US	205.209.152.114	United States
VE	190.39.82.232	Venezuela
ZA	105.236.129.208	South Africa
ZA	197.245.3.103	South Africa

List from greylisting:

Botnet Statistics [2014-02-16]

detection period: 2014-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3822
number of botnet IPs notified to network operators: 3782
number of spam blocked: 47880
recipient count of spam blocked: 1583988

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	427
2	CRTC	316
3	UNICOM-SD	220
4	CHINANET-GD	192
5	CTTNET	151
6	CHINANET-JS	150
7	UNICOM-LN	128
8	UNICOM-HE	121
9	UNICOM-HA	109
10	CHINANET-XJ	103

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3491
2	Taiwan	116
3	United States	22
4	Brazil	21
5	Indonesia	11
6	Ukraine	10
7	South Korea	10
8	Russian Federation	9
9	India	9
10	Iran	8

Suspected Bot List [2014-02-15]

detection period: 2014-02-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.15.98.130	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.202.166	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	122.160.239.39	India
IN	122.166.124.194	India
IR	91.98.36.84	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.154.103	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.135.183	Taiwan
US	50.201.42.106	United States
US	205.209.152.114	United States
US	207.225.36.128	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-15]

detection period: 2014-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3407
number of botnet IPs notified to network operators: 3350
number of spam blocked: 45749
recipient count of spam blocked: 1563543

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	420
2	CRTC	312
3	CHINANET-GD	186
4	UNICOM-SD	185
5	CHINANET-JS	166
6	CTTNET	132
7	UNICOM-HE	123
8	HINET-NET	102
9	UNICOM-HA	95
10	UNICOM-LN	90

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2991
2	Taiwan	133
3	Brazil	37
4	United States	28
5	Indonesia	15
6	Russian Federation	12
7	Italy	12
8	South Korea	11
9	Ukraine	10
10	Iran	10

Suspected Bot List [2014-02-14]

detection period: 2014-02-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 250

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.59.133	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MO	60.246.152.177	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	119.77.135.183	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-14]

detection period: 2014-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 4321
number of botnet IPs notified to network operators: 4071
number of spam blocked: 43755
recipient count of spam blocked: 1481662

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	442
2	CRTC	264
3	CHINANET-GD	199
4	UNICOM-SD	177
5	CHINANET-JS	164
6	UNICOM-LN	127
7	CTTNET	115
8	HINET-NET	114
9	UNICOM-HE	112
10	UNICOM-HA	84

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2982
2	Taiwan	162
3	India	118
4	France	87
5	United States	84
6	United Kingdom	58
7	Italy	49
8	Indonesia	49
9	Hong Kong	47
10	Singapore	46

Suspected Bot List [2014-02-13]

detection period: 2014-02-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	119.77.133.98	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-13]

detection period: 2014-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3576
number of botnet IPs notified to network operators: 3483
number of spam blocked: 42282
recipient count of spam blocked: 1442151

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	403
2	CRTC	233
3	CHINANET-JS	212
4	UNICOM-SD	193
5	CHINANET-GD	179
6	UNICOM-HE	123
7	UNICOM-LN	101
8	CTTNET	101
9	UNICOM-HA	93
10	UNICOM-HL	82

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3002
2	Taiwan	112
3	United States	52
4	Brazil	40
5	France	26
6	Russian Federation	22
7	United Kingdom	22
8	Indonesia	18
9	Italy	17
10	Colombia	17

Suspected Bot List [2014-02-12]

detection period: 2014-02-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	180.151.38.242	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.150.162	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
TW	119.77.133.98	Taiwan
TW	211.76.94.73	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-12]

detection period: 2014-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2925
number of botnet IPs notified to network operators: 2874
number of spam blocked: 41766
recipient count of spam blocked: 1457506

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	262
2	CRTC	168
3	CHINANET-GD	160
4	UNICOM-SD	159
5	CHINANET-JS	151
6	UNICOM-HE	105
7	UNICOM-LN	97
8	UNICOM-HA	82
9	HINET-NET	74
10	CTTNET	66

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2476
2	Taiwan	100
3	United States	37
4	Brazil	24
5	Russian Federation	23
6	Indonesia	21
7	France	16
8	South Korea	14
9	India	14
10	Turkey	12

Suspected Bots' IP List for February 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-02-28]
Suspected Bots IP [2014-02-27]
Suspected Bots IP [2014-02-26]
Suspected Bots IP [2014-02-25]
Suspected Bots IP [2014-02-24]
Suspected Bots IP [2014-02-23]
Suspected Bots IP [2014-02-22]
Suspected Bots IP [2014-02-21]
Suspected Bots IP [2014-02-20]
Suspected Bots IP [2014-02-19]
Suspected Bots IP [2014-02-18]
Suspected Bots IP [2014-02-17]
Suspected Bots IP [2014-02-16]
Suspected Bots IP [2014-02-15]
Suspected Bots IP [2014-02-14]
Suspected Bots IP [2014-02-13]
Suspected Bots IP [2014-02-12]
Suspected Bots IP [2014-02-11]
Suspected Bots IP [2014-02-10]
Suspected Bots IP [2014-02-09]
Suspected Bots IP [2014-02-08]
Suspected Bots IP [2014-02-07]
Suspected Bots IP [2014-02-06]
Suspected Bots IP [2014-02-05]
Suspected Bots IP [2014-02-04]
Suspected Bots IP [2014-02-03]
Suspected Bots IP [2014-02-02]
Suspected Bots IP [2014-02-01]

Suspected Bot List [2014-02-11]

detection period: 2014-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 111

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.114.250	China
CN	150.255.119.178	China
CN	150.255.243.188	China
GB	193.164.207.16	United Kingdom
IN	180.151.38.242	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.150.71	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-11]

detection period: 2014-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3415
number of botnet IPs notified to network operators: 3304
number of spam blocked: 39356
recipient count of spam blocked: 1367376

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	332
2	UNICOM-SD	216
3	CRTC	184
4	CHINANET-GD	162
5	CHINANET-JS	141
6	UNICOM-HA	115
7	UNICOM-LN	106
8	UNICOM-HE	104
9	UNICOM-HL	99
10	HINET-NET	87

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2767
2	Taiwan	108
3	United States	53
4	Italy	31
5	Brazil	28
6	Russian Federation	27
7	Indonesia	27
8	Israel	22
9	India	20
10	Poland	19

Suspected Bot List [2014-02-10]

detection period: 2014-02-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.116.78	China
CN	150.255.170.39	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.147.209	Macau
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-10]

detection period: 2014-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 6634
number of botnet IPs notified to network operators: 6585
number of spam blocked: 119162
recipient count of spam blocked: 2954768

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	667
2	UNICOM-SD	447
3	CHINANET-JS	400
4	CRTC	377
5	CHINANET-GD	273
6	UNICOM-HA	272
7	UNICOM-HE	244
8	UNICOM-LN	210
9	UNICOM-HL	182
10	CTTNET	171

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6218
2	Taiwan	158
3	United States	26
4	Indonesia	24
5	Brazil	24
6	Russian Federation	18
7	South Korea	8
8	Iran	8
9	France	8
10	India	7

Suspected Bot List [2014-02-09]

detection period: 2014-02-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.189.113	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.193.157.62	United States
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-09]

detection period: 2014-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2699
number of botnet IPs notified to network operators: 2658
number of spam blocked: 44849
recipient count of spam blocked: 1499785

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	263
2	CRTC	189
3	UNICOM-SD	161
4	CHINANET-JS	136
5	CHINANET-GD	134
6	UNICOM-HE	98
7	UNICOM-HA	90
8	UNICOM-LN	88
9	HINET-NET	82
10	CHINANET-FJ	64

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2370
2	Taiwan	99
3	United States	28
4	Brazil	23
5	Indonesia	19
6	Russian Federation	16
7	Iran	9
8	India	9
9	South Korea	8
10	Hong Kong	8

Suspected Bot List [2014-02-08]

detection period: 2014-02-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IN	180.151.38.242	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.215.133	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-08]

detection period: 2014-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 2289
number of botnet IPs notified to network operators: 2244
number of spam blocked: 38734
recipient count of spam blocked: 1191668

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	224
2	CRTC	129
3	CHINANET-JS	126
4	UNICOM-SD	119
5	CHINANET-GD	114
6	UNICOM-LN	79
7	UNICOM-HE	73
8	HINET-NET	71
9	UNICOM-HA	70
10	UNICOM-HL	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1956
2	Taiwan	93
3	United States	22
4	Brazil	22
5	Indonesia	16
6	Russian Federation	14
7	South Korea	10
8	Turkey	9
9	Italy	9
10	Ukraine	8

Suspected Bot List [2014-02-07]

detection period: 2014-02-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 79

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-07]

detection period: 2014-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2060
number of botnet IPs notified to network operators: 1981
number of spam blocked: 48300
recipient count of spam blocked: 1121740

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	188
2	CHINANET-JS	122
3	UNICOM-SD	105
4	CHINANET-GD	104
5	CRTC	97
6	UNICOM-LN	71
7	CHINANET-FJ	71
8	UNICOM-HE	67
9	HINET-NET	67
10	UNICOM-HA	64

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1697
2	Taiwan	86
3	United States	37
4	Brazil	20
5	South Korea	18
6	India	16
7	Indonesia	11
8	Russian Federation	10
9	France	10
10	Peru	8

Suspected Bot List [2014-02-06]

detection period: 2014-02-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 189

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.12.162	Bolivia
GB	193.164.207.16	United Kingdom
IN	117.239.29.114	India
IN	117.240.239.120	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	115.165.232.28	Taiwan
TW	211.76.88.176	Taiwan
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-06]

detection period: 2014-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 3865
number of botnet IPs notified to network operators: 3691
number of spam blocked: 61455
recipient count of spam blocked: 1566952

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	402
2	UNICOM-SD	261
3	CHINANET-JS	175
4	CRTC	154
5	CHINANET-GD	142
6	UNICOM-HA	124
7	UNICOM-HE	122
8	UNICOM-LN	120
9	UNICOM-HL	104
10	CHINANET-HB	96

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3171
2	Taiwan	118
3	United States	55
4	France	51
5	Italy	31
6	Brazil	30
7	India	26
8	United Kingdom	24
9	Peru	22
10	Spain	19

Suspected Bot List [2014-02-05]

detection period: 2014-02-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 134

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BO	190.129.12.162	Bolivia
CA	184.107.208.122	Canada
CN	150.255.112.26	China
GB	193.164.207.16	United Kingdom
IN	117.240.239.120	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-05]

detection period: 2014-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 6151
number of botnet IPs notified to network operators: 6017
number of spam blocked: 64986
recipient count of spam blocked: 1776529

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	592
2	UNICOM-SD	447
3	CHINANET-JS	314
4	CRTC	272
5	UNICOM-HE	247
6	CHINANET-GD	231
7	UNICOM-HA	224
8	UNICOM-LN	208
9	UNICOM-JL	170
10	UNICOM-HL	164

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	5372
2	Taiwan	206
3	India	41
4	United States	36
5	Singapore	29
6	Russian Federation	28
7	Indonesia	27
8	Italy	26
9	Kazakhstan	24
10	Brazil	24

Suspected Bot List [2014-02-04]

detection period: 2014-02-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 169

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CA	184.107.208.122	Canada
CN	150.255.11.31	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.239.29.114	India
IN	117.240.239.120	India
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
KZ	176.98.192.143	Kazakhstan
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	119.77.133.98	Taiwan
TW	119.77.146.239	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States

List from greylisting: