Custom Search

Monday, March 31, 2014

Suspected Bot List [2014-03-30]

detection period: 2014-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
ES80.35.117.49Spain
ES83.54.106.204Spain
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN202.62.67.250India
IQ95.170.214.44Iraq
IT85.159.181.210Italy
IT95.227.34.226Italy
MX201.158.203.50Mexico
PH124.107.165.60Philippines
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
SK178.41.127.179Slovakia
TR195.244.39.195Turkey
TW211.76.94.85Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US204.195.104.31United States
UZ217.30.171.169Uzbekistan
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-30]

detection period: 2014-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2986
number of botnet IPs notified to network operators: 2934
number of spam blocked: 64107
recipient count of spam blocked: 1890870

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET534
2CRTC377
3CHINANET-GD266
4CTTNET129
5CHINANET-JS101
6HINET-NET80
7UNICOM-SD71
8CHINANET-FJ62
9CHINANET-CQ48
10UNICOM-HN44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2574
2Taiwan114
3United States55
4Russian Federation30
5Indonesia22
6Ukraine18
7Brazil17
8Germany11
9Iran8
10Poland7

Sunday, March 30, 2014

Suspected Bot List [2014-03-29]

detection period: 2014-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
ES80.35.117.49Spain
ES83.54.106.204Spain
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN202.62.67.250India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
MO60.246.45.54Macau
MX201.158.203.50Mexico
PH124.107.165.60Philippines
PK59.103.212.124Pakistan
PL95.160.64.100Poland
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW119.77.138.79Taiwan
TW211.76.94.85Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US204.195.104.31United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-29]

detection period: 2014-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3225
number of botnet IPs notified to network operators: 3161
number of spam blocked: 64464
recipient count of spam blocked: 1959141

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET600
2CRTC396
3CHINANET-GD319
4CHINANET-JS144
5CTTNET142
6HINET-NET108
7UNICOM-SD61
8CHINANET-SD60
9CHINANET-XJ55
10CHINANET-FJ50

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2749
2Taiwan153
3United States59
4Russian Federation29
5Brazil21
6Ukraine17
7Indonesia17
8Italy12
9Turkey10
10Spain9

Saturday, March 29, 2014

Suspected Bot List [2014-03-28]

detection period: 2014-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.179.137.8Argentina
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
ES80.35.117.49Spain
ES83.54.106.204Spain
ID27.131.4.6Indonesia
IN117.192.60.98India
IN117.201.226.112India
IN117.203.131.125India
IN117.243.209.190India
IN171.49.42.77India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
MX201.158.203.50Mexico
PK182.189.179.69Pakistan
PL95.160.64.100Poland
RS188.2.93.77Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.226.3Taiwan
TW119.77.138.79Taiwan
TW211.76.92.91Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-28]

detection period: 2014-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2735
number of botnet IPs notified to network operators: 2673
number of spam blocked: 68436
recipient count of spam blocked: 1985148

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET525
2CRTC291
3CHINANET-GD208
4CTTNET134
5CHINANET-JS116
6HINET-NET104
7UNICOM-SD54
8UNICOM-HA46
9CHINANET-CQ41
10CHINANET-XJ39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2287
2Taiwan139
3United States43
4Italy31
5Russian Federation27
6Brazil22
7Indonesia16
8Germany12
9Ukraine11
10India9

Friday, March 28, 2014

Suspected Bot List [2014-03-27]

detection period: 2014-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 56

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
BO190.129.58.252Bolivia
CN150.255.232.38China
CZ80.188.121.251Czech Republic
ES80.35.117.49Spain
ES83.54.106.204Spain
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN117.203.135.79India
IN117.242.24.180India
IN202.62.67.250India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
MO60.246.241.130Macau
MX201.158.203.50Mexico
PH124.107.165.60Philippines
PL95.160.64.100Poland
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.194.94Taiwan
TW115.165.226.3Taiwan
TW119.77.133.52Taiwan
TW211.76.93.74Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US98.126.248.10United States
US184.82.162.122United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-27]

detection period: 2014-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2802
number of botnet IPs notified to network operators: 2746
number of spam blocked: 62965
recipient count of spam blocked: 1930756

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET538
2CRTC325
3CTTNET145
4CHINANET-GD117
5HINET-NET91
6UNICOM-SD89
7CHINANET-JS85
8UNICOM-HN56
9UNICOM-HE54
10CHINANET-XJ46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2398
2Taiwan128
3United States43
4Russian Federation31
5Brazil20
6Indonesia17
7Ukraine13
8Viet Nam10
9India10
10Turkey7

Suspected Bot List [2014-03-26]

detection period: 2014-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 118

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
BO190.129.58.252Bolivia
CN150.255.229.180China
CZ80.188.121.251Czech Republic
EG41.33.169.36Egypt
ES83.54.106.204Spain
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN117.242.24.180India
IN202.62.67.250India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
MX201.158.203.50Mexico
PH124.107.165.60Philippines
PL95.160.64.100Poland
RS188.2.93.77Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.220.66Taiwan
TW211.76.94.85Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US98.126.248.10United States
US204.195.104.31United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-26]

detection period: 2014-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3271
number of botnet IPs notified to network operators: 3153
number of spam blocked: 65439
recipient count of spam blocked: 1864177

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET498
2CRTC384
3CHINANET-GD255
4CTTNET126
5UNICOM-SD108
6CHINANET-JS104
7HINET-NET80
8UNICOM-FJ64
9UNICOM-HN62
10CHINANET-FJ58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2699
2Taiwan115
3United States67
4Russian Federation32
5France28
6Brazil24
7South Korea17
8Indonesia17
9United Kingdom17
10Ukraine16

Wednesday, March 26, 2014

Suspected Bot List [2014-03-25]

detection period: 2014-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 209

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AF180.94.69.66Afghanistan
AF180.94.69.68Afghanistan
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CN150.255.6.182China
CO190.60.39.186Colombia
CZ80.188.121.251Czech Republic
EG41.33.169.36Egypt
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN111.93.9.67India
IN122.180.61.107India
IN182.72.131.50India
IN202.62.67.250India
IN210.212.97.139India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
MA197.128.27.22Morocco
NL89.248.172.46Netherlands
NP202.79.52.53Nepal
PH124.107.165.60Philippines
PL95.160.64.100Poland
RS89.216.21.136Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TR193.255.143.62Turkey
TR193.255.143.63Turkey
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
US204.195.104.31United States
VE186.24.34.179Venezuela
VE190.39.82.232Venezuela
VE190.111.122.3Venezuela
VE190.202.116.101Venezuela
ZA165.233.62.202South Africa
ZW41.220.28.138Zimbabwe

List from greylisting:

Botnet Statistics [2014-03-25]

detection period: 2014-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1819
number of botnet IPs notified to network operators: 1611
number of spam blocked: 42489
recipient count of spam blocked: 1412835

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-GD328
2CRTC177
3CMNET79
4CHINANET-JS45
5CHINANET-FJ43
6UNICOM-HN38
7UNICOM25
8CTTNET21
9HINET-NET19
10UNICOM-SD18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1064
2United States85
3France53
4Brazil53
5Taiwan48
6Russian Federation42
7Italy32
8United Kingdom30
9South Korea27
10Argentina20

Tuesday, March 25, 2014

Suspected Bot List [2014-03-24]

detection period: 2014-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AF180.94.69.66Afghanistan
AF180.94.69.68Afghanistan
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.179.169.37Argentina
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
BO190.129.58.252Bolivia
CO190.60.39.186Colombia
CZ80.188.121.251Czech Republic
EG41.33.169.36Egypt
HN190.107.140.77Honduras
ID27.131.4.6Indonesia
IN111.93.9.67India
IN122.180.61.107India
IN182.72.131.50India
IN202.62.67.250India
IN210.212.97.139India
IN210.212.183.231India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
NL89.248.172.46Netherlands
NP202.79.52.53Nepal
PH124.107.165.60Philippines
PL95.160.64.100Poland
RO212.146.101.154Romania
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TR193.255.143.62Turkey
TR193.255.143.63Turkey
TW211.76.90.160Taiwan
US50.201.42.106United States
US69.64.48.57United States
US96.44.179.105United States
VE186.24.34.179Venezuela
VE190.39.82.232Venezuela
VE190.111.122.3Venezuela
ZA165.233.62.202South Africa
ZW41.220.28.138Zimbabwe

List from greylisting:

Botnet Statistics [2014-03-24]

detection period: 2014-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2878
number of botnet IPs notified to network operators: 2796
number of spam blocked: 47678
recipient count of spam blocked: 1529495

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET544
2CRTC371
3CHINANET-GD334
4CTTNET131
5UNICOM-HN71
6HINET-NET68
7UNICOM-SD61
8CHINANET-JS60
9UNICOM55
10CHINANET-FJ39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2363
2Taiwan103
3United States59
4Brazil46
5Russian Federation30
6Italy18
7Indonesia17
8Ukraine15
9South Korea14
10Spain14

Monday, March 24, 2014

Suspected Bot List [2014-03-23]

detection period: 2014-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
EG41.33.169.36Egypt
ID27.131.4.6Indonesia
IN202.62.67.250India
IN210.212.183.231India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
NL89.248.172.46Netherlands
PH124.107.165.60Philippines
PL95.160.64.100Poland
RO212.146.101.154Romania
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.229.159Taiwan
TW211.76.90.160Taiwan
US50.201.42.106United States
US69.64.48.57United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-23]

detection period: 2014-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2928
number of botnet IPs notified to network operators: 2876
number of spam blocked: 48534
recipient count of spam blocked: 1517689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET610
2CRTC418
3CHINANET-GD267
4CTTNET147
5HINET-NET93
6UNICOM-SD70
7CHINANET-JS60
8CHINANET-FJ54
9UNICOM-HN51
10UNICOM-HE41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2490
2Taiwan139
3United States50
4Russian Federation28
5Brazil21
6Indonesia17
7Ukraine16
8Italy11
9Germany10
10Colombia10

Sunday, March 23, 2014

Suspected Bot List [2014-03-22]

detection period: 2014-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
BO190.129.58.252Bolivia
CN150.255.128.143China
CZ80.188.121.251Czech Republic
ID27.131.4.6Indonesia
IN117.242.24.45India
IN202.62.67.250India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
IT95.253.67.148Italy
NL89.248.172.46Netherlands
PH124.107.165.60Philippines
PL95.160.64.100Poland
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
TW119.77.139.166Taiwan
TW119.77.158.84Taiwan
TW211.76.90.160Taiwan
US50.201.42.106United States
US69.64.48.57United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-22]

detection period: 2014-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3259
number of botnet IPs notified to network operators: 3209
number of spam blocked: 53190
recipient count of spam blocked: 1649928

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET664
2CRTC444
3CHINANET-GD388
4CTTNET180
5HINET-NET108
6UNICOM-SD85
7CHINANET-JS67
8UNICOM-HN54
9UNICOM51
10CHINANET-FJ47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2870
2Taiwan142
3United States29
4Russian Federation23
5Ukraine16
6Indonesia16
7Brazil14
8Colombia9
9South Korea8
10Italy8

Saturday, March 22, 2014

Suspected Bot List [2014-03-21]

detection period: 2014-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 114

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
ID27.131.4.6Indonesia
IN117.211.62.143India
IN117.217.234.89India
IN117.242.24.45India
IN202.62.67.250India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
MO122.100.234.176Macau
NL89.248.172.46Netherlands
PH124.107.165.60Philippines
PL95.160.64.100Poland
SA94.77.199.148Saudi Arabia
TW211.76.80.68Taiwan
TW211.76.90.160Taiwan
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-21]

detection period: 2014-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 4009
number of botnet IPs notified to network operators: 3895
number of spam blocked: 107520
recipient count of spam blocked: 2708891

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET748
2CRTC520
3CHINANET-GD209
4CTTNET190
5CHINANET-JS139
6HINET-NET122
7UNICOM-SD92
8CHINANET-XJ65
9UNICOM-HE60
10VNPT-VNNIC-VN59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China3288
2Taiwan166
3Viet Nam74
4United States57
5South Korea36
6Brazil35
7Italy30
8Russian Federation28
9Indonesia26
10India24

Friday, March 21, 2014

Suspected Bot List [2014-03-20]

detection period: 2014-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 65

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
HN190.107.140.77Honduras
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT85.159.181.210Italy
IT95.227.34.226Italy
LB213.175.188.158Lebanon
NL89.248.172.46Netherlands
PH122.3.148.123Philippines
PH124.107.165.60Philippines
PL95.160.64.100Poland
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
TW119.77.139.166Taiwan
TW119.77.251.103Taiwan
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-20]

detection period: 2014-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2633
number of botnet IPs notified to network operators: 2568
number of spam blocked: 41490
recipient count of spam blocked: 1358570

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET494
2CRTC318
3CHINANET-GD260
4CTTNET115
5CHINANET-JS76
6HINET-NET64
7UNICOM-HN55
8UNICOM-SD53
9UNICOM53
10CHINANET-FJ44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2150
2Taiwan102
3United States44
4Russian Federation28
5Viet Nam23
6Brazil21
7Italy20
8South Korea19
9Ukraine17
10Indonesia15

Thursday, March 20, 2014

Suspected Bot List [2014-03-19]

detection period: 2014-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
HN190.107.140.77Honduras
IN59.97.139.158India
IQ95.170.214.44Iraq
IR91.98.36.84Iran
IT95.227.34.226Italy
LB213.175.188.158Lebanon
PH122.3.148.123Philippines
PH124.107.165.60Philippines
RO212.146.101.154Romania
RS188.2.93.77Serbia
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
TW119.77.139.166Taiwan
US50.201.42.106United States
US184.82.162.122United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-19]

detection period: 2014-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2599
number of botnet IPs notified to network operators: 2548
number of spam blocked: 40850
recipient count of spam blocked: 1310706

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET512
2CRTC381
3CHINANET-GD233
4CTTNET125
5CHINANET-JS94
6CHINANET-FJ62
7UNICOM-SD57
8HINET-NET57
9UNICOM40
10UNICOM-HN39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2190
2Taiwan84
3United States55
4Brazil23
5Russian Federation22
6Indonesia19
7Ukraine16
8Italy15
9Germany13
10United Kingdom11

Wednesday, March 19, 2014

Suspected Bot List [2014-03-18]

detection period: 2014-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 78

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
BO190.129.12.162Bolivia
CN150.255.225.141China
CZ80.188.121.251Czech Republic
IR91.98.36.84Iran
IT95.227.34.226Italy
KZ176.98.192.143Kazakhstan
LB213.175.188.158Lebanon
PH124.107.165.60Philippines
PL95.160.64.100Poland
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW211.76.90.135Taiwan
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-18]

detection period: 2014-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2724
number of botnet IPs notified to network operators: 2646
number of spam blocked: 37920
recipient count of spam blocked: 1251947

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET598
2CRTC479
3CHINANET-GD174
4CTTNET162
5HINET-NET68
6UNICOM-SD60
7CHINANET-JS59
8CHINANET-FJ50
9UNICOM-HE35
10UNICOM-HA30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2265
2Taiwan93
3United States48
4Italy22
5Brazil21
6Russian Federation20
7Indonesia18
8Ukraine17
9United Kingdom17
10France16

Tuesday, March 18, 2014

Suspected Bot List [2014-03-17]

detection period: 2014-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 109

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BO190.129.12.162Bolivia
CZ80.188.121.251Czech Republic
IR91.98.36.84Iran
IT95.227.34.226Italy
KW195.39.163.225Kuwait
KZ176.98.192.143Kazakhstan
LB213.175.188.158Lebanon
MO122.100.166.197Macau
PL95.160.64.100Poland
RS188.2.93.77Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW119.77.132.140Taiwan
TW211.76.90.135Taiwan
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-17]

detection period: 2014-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2563
number of botnet IPs notified to network operators: 2454
number of spam blocked: 41515
recipient count of spam blocked: 1328436

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET495
2CRTC380
3CTTNET139
4CHINANET-GD99
5UNICOM-SD85
6HINET-NET82
7CHINANET-JS72
8UNICOM-HE42
9UNICOM-JL34
10UNICOM-HL29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2035
2Taiwan110
3United States40
4Brazil33
5Italy24
6France23
7Argentina21
8United Kingdom18
9Ukraine16
10Indonesia16

Monday, March 17, 2014

Suspected Bot List [2014-03-16]

detection period: 2014-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BO190.129.12.162Bolivia
CN150.255.137.138China
CZ80.188.121.251Czech Republic
HN190.107.140.77Honduras
IR91.98.36.84Iran
IT95.227.34.226Italy
KW195.39.163.225Kuwait
LB213.175.188.158Lebanon
MO60.246.146.178Macau
MO60.246.255.163Macau
MO122.100.166.197Macau
MO122.100.233.242Macau
MX187.174.216.162Mexico
PH124.107.165.60Philippines
PL95.160.64.100Poland
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-16]

detection period: 2014-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2221
number of botnet IPs notified to network operators: 2181
number of spam blocked: 37189
recipient count of spam blocked: 1207140

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET564
2CRTC330
3CTTNET132
4CHINANET-GD103
5HINET-NET102
6UNICOM-SD64
7CHINANET-JS49
8CHINANET-FJ31
9UNICOM-HE28
10CHINANET-SC26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China1910
2Taiwan132
3United States18
4Indonesia15
5Russian Federation14
6Ukraine10
7Brazil10
8Poland7
9Japan6
10Serbia5

Sunday, March 16, 2014

Botnet Statistics for February 2014

detection period: 2014-02-01 00:00 - 2014-02-28 23:59 UTC
total number of suspected botnet IPs: 116384
number of blocked spams: 1674878
recipient count of blocked spams: 47853412

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China106604
2Taiwan2546
3Italy597
4United States552
5India453
6France413
7United Kingdom286
8Brazil272
9Turkey244
10Spain236
11Russian Federation226
12Germany205
13Poland200
14Argentina199
15Kazakhstan193
16Indonesia192
17Singapore159
18South Korea139
19Viet Nam132
20Hong Kong129
21Ukraine120
22Japan118
23Mexico111
24Israel106
25Peru104

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China1138538
2Taiwan68441
3Brazil67123
4Indonesia35302
5United States33581
6Russian Federation31850
7Colombia23683
8Saudi Arabia22795
9Ukraine22154
10South Korea20196
11Hong Kong16577
12Iran14016
13India12683
14Viet Nam12177
15Mexico11200
16Ivory Coast10798
17Philippines9581
18Republic of Maldives9168
19Malaysia8552
20Poland8441
21United Kingdom7429
22Germany6093
23Italy5804
24Romania5363
25Thailand5276

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2014-03-15]

detection period: 2014-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BO190.129.12.162Bolivia
CO200.80.43.248Colombia
CZ80.188.121.251Czech Republic
HN190.107.140.77Honduras
IR91.98.36.84Iran
IT95.227.34.226Italy
MO60.246.135.203Macau
MO60.246.178.110Macau
MO122.100.242.160Macau
MX187.174.216.162Mexico
PH124.107.165.60Philippines
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.229.80Taiwan
TW115.165.250.155Taiwan
TW211.76.83.29Taiwan
US50.201.42.106United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-15]

detection period: 2014-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 4621
number of botnet IPs notified to network operators: 4573
number of spam blocked: 102548
recipient count of spam blocked: 2590926

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET988
2CRTC470
3CTTNET285
4UNICOM-SD228
5CHINANET-GD174
6CHINANET-JS166
7HINET-NET155
8UNICOM-HE121
9UNICOM-HL99
10UNICOM-JL93

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China4164
2Taiwan198
3United States41
4Russian Federation19
5Ukraine14
6Indonesia14
7Brazil13
8South Korea11
9Turkey8
10United Kingdom8

Saturday, March 15, 2014

Suspected Bot List [2014-03-14]

detection period: 2014-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AL80.78.75.134Albania
AR186.122.44.13Argentina
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BO190.129.12.162Bolivia
CO200.80.43.248Colombia
CZ80.188.121.251Czech Republic
HN190.107.140.77Honduras
IN202.62.67.250India
IQ130.193.147.227Iraq
IR91.98.36.84Iran
IT95.227.34.226Italy
LB213.175.188.158Lebanon
MO60.246.150.115Macau
MO122.100.196.24Macau
PH124.107.165.60Philippines
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SK93.184.71.66Slovakia
TW122.100.84.15Taiwan
US50.201.42.106United States
US184.82.162.122United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-14]

detection period: 2014-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3104
number of botnet IPs notified to network operators: 3003
number of spam blocked: 51728
recipient count of spam blocked: 1507929

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET572
2CRTC373
3CHINANET-GD152
4CTTNET147
5HINET-NET132
6UNICOM-SD129
7CHINANET-JS129
8UNICOM-HE51
9UNICOM-HL49
10CHINANET-FJ46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2540
2Taiwan157
3United States51
4Italy33
5Indonesia21
6Argentina21
7Russian Federation20
8Brazil17
9India16
10Ukraine13

Friday, March 14, 2014

Suspected Bot List [2014-03-13]

detection period: 2014-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 74

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AE83.110.81.150Arab Emirates
AL80.78.75.103Albania
AL80.78.75.134Albania
AR181.15.98.130Argentina
AR190.179.47.46Argentina
AR190.182.225.42Argentina
AR200.63.19.165Argentina
AR200.123.254.11Argentina
BO190.129.12.162Bolivia
BO200.87.201.146Bolivia
CN123.137.137.52China
CO200.80.43.248Colombia
CR201.196.50.10Costa Rica
CR201.197.180.34Costa Rica
CZ80.188.121.251Czech Republic
ES2.138.31.178Spain
ES188.85.104.103Spain
HN190.107.140.77Honduras
IN27.251.177.239India
IN202.62.67.250India
IR91.98.36.84Iran
IT95.227.34.226Italy
LB213.175.188.158Lebanon
MO60.246.44.4Macau
MO60.246.180.220Macau
MX201.151.46.145Mexico
PA190.5.230.178Panama
PE190.116.62.70Peru
PL95.160.64.100Poland
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW122.100.84.15Taiwan
US50.201.42.106United States
US68.188.72.60United States
US74.143.13.134United States
US74.222.3.249United States
VE190.39.82.232Venezuela
ZA105.236.11.111South Africa
ZA105.236.128.237South Africa
ZA197.245.3.36South Africa

List from greylisting:

Botnet Statistics [2014-03-13]

detection period: 2014-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2657
number of botnet IPs notified to network operators: 2583
number of spam blocked: 37974
recipient count of spam blocked: 1246047

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET433
2CRTC407
3CHINANET-GD155
4CTTNET126
5HINET-NET88
6CHINANET-JS82
7UNICOM-SD74
8CHINANET-FJ49
9UNICOM-LN38
10UNICOM-HE34

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2134
2Taiwan114
3United States68
4France38
5Brazil25
6Indonesia20
7India15
8Russian Federation14
9Spain13
10Ukraine11

Thursday, March 13, 2014

Suspected Bot List [2014-03-12]

detection period: 2014-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AE83.110.81.150Arab Emirates
AL80.78.75.103Albania
AL80.78.75.134Albania
AR186.135.17.129Argentina
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BD180.234.4.32Bangladesh
BO190.129.12.162Bolivia
BO200.87.201.146Bolivia
CO200.80.43.248Colombia
CR201.196.50.10Costa Rica
CR201.197.180.34Costa Rica
CR201.205.77.146Costa Rica
CZ80.188.121.251Czech Republic
ES2.138.31.178Spain
IN27.251.177.239India
IN122.160.239.39India
IR91.98.36.84Iran
IT95.227.34.226Italy
LB213.175.188.158Lebanon
MO60.246.179.180Macau
MO122.100.241.71Macau
MX201.151.46.145Mexico
NL5.255.87.156Netherlands
PA190.5.230.178Panama
PL95.160.64.100Poland
RS89.216.21.136Serbia
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.217.213Singapore
TW122.100.84.15Taiwan
US50.201.42.106United States
US68.188.72.60United States
US74.222.3.249United States
US97.89.65.98United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-12]

detection period: 2014-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 3732
number of botnet IPs notified to network operators: 3645
number of spam blocked: 75100
recipient count of spam blocked: 2024694

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET608
2CRTC439
3CHINANET-GD244
4CTTNET172
5CHINANET-JS159
6UNICOM-SD119
7HINET-NET118
8CHINANET-AH66
9CHINANET-FJ60
10UNICOM-HE59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China3163
2Taiwan154
3United States70
4Indonesia26
5Brazil20
6India18
7Russian Federation17
8Ukraine16
9France16
10Turkey11

Wednesday, March 12, 2014

Suspected Bots' IP List for March 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-03-31]
Suspected Bots IP [2014-03-30]
Suspected Bots IP [2014-03-29]
Suspected Bots IP [2014-03-28]
Suspected Bots IP [2014-03-27]
Suspected Bots IP [2014-03-26]
Suspected Bots IP [2014-03-25]
Suspected Bots IP [2014-03-24]
Suspected Bots IP [2014-03-23]
Suspected Bots IP [2014-03-22]
Suspected Bots IP [2014-03-21]
Suspected Bots IP [2014-03-20]
Suspected Bots IP [2014-03-19]
Suspected Bots IP [2014-03-18]
Suspected Bots IP [2014-03-17]
Suspected Bots IP [2014-03-16]
Suspected Bots IP [2014-03-15]
Suspected Bots IP [2014-03-14]
Suspected Bots IP [2014-03-13]
Suspected Bots IP [2014-03-12]
Suspected Bots IP [2014-03-11]
Suspected Bots IP [2014-03-10]
Suspected Bots IP [2014-03-09]
Suspected Bots IP [2014-03-08]
Suspected Bots IP [2014-03-07]
Suspected Bots IP [2014-03-06]
Suspected Bots IP [2014-03-05]
Suspected Bots IP [2014-03-04]
Suspected Bots IP [2014-03-03]
Suspected Bots IP [2014-03-02]
Suspected Bots IP [2014-03-01]

Suspected Bot List [2014-03-11]

detection period: 2014-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AL80.78.75.103Albania
AR186.135.17.129Argentina
AR190.182.225.42Argentina
AR200.63.19.165Argentina
BO190.129.12.162Bolivia
CN150.255.143.95China
CN150.255.190.131China
CO200.80.43.248Colombia
CZ80.188.121.251Czech Republic
ES88.22.145.56Spain
HN190.107.140.77Honduras
IN122.160.239.39India
IR91.98.36.84Iran
IT95.227.34.226Italy
LB213.175.188.158Lebanon
MO122.100.204.138Macau
MX187.163.137.184Mexico
RU95.188.112.11Russian Federation
SA94.77.199.148Saudi Arabia
SG116.251.211.100Singapore
SG116.251.217.213Singapore
SK93.184.71.66Slovakia
TW115.165.252.42Taiwan
TW119.77.139.166Taiwan
TW122.100.84.15Taiwan
US50.201.42.106United States
US74.222.3.249United States
VE190.39.82.232Venezuela

List from greylisting:

Botnet Statistics [2014-03-11]

detection period: 2014-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2999
number of botnet IPs notified to network operators: 2898
number of spam blocked: 39360
recipient count of spam blocked: 1260493

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CMNET542
2CRTC492
3CHINANET-GD199
4CTTNET157
5HINET-NET113
6CHINANET-JS80
7UNICOM-SD73
8CHINANET-FJ64
9CHINANET-SC35
10UNICOM-HA32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China2393
2Taiwan146
3France55
4United States41
5Russian Federation27
6Argentina22
7Brazil21
8Indonesia17
9Ukraine15
10Turkey14