Suspected Bot List [2014-05-30]

detection period: 2014-05-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 106

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
CL	186.67.57.82	Chile
CL	186.67.60.155	Chile
CL	200.111.103.67	Chile
CL	200.111.103.73	Chile
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
ES	88.6.176.64	Spain
ES	88.26.235.134	Spain
GB	176.35.77.154	United Kingdom
GH	41.189.167.27	Ghana
HN	190.107.140.77	Honduras
IN	27.251.106.249	India
IN	122.160.239.46	India
IN	182.72.131.50	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.109.4	Iran
IR	94.182.162.242	Iran
IT	95.227.105.203	Italy
KE	41.207.65.165	Kenya
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
NP	202.79.52.53	Nepal
PH	58.69.100.234	Philippines
PH	58.71.94.176	Philippines
PL	213.92.171.169	Poland
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	112.140.187.201	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	146.148.246.2	United States
US	174.139.83.170	United States
US	207.224.134.32	United States
UZ	91.229.165.114	Uzbekistan
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	200.84.109.84	Venezuela

List from greylisting:

Botnet Statistics [2014-05-30]

detection period: 2014-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1133
number of botnet IPs notified to network operators: 1027
number of spam blocked: 37980
recipient count of spam blocked: 1361212

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	242
2	CRTC	59
3	CHINANET-FJ	23
4	CTTNET	20
5	UNICOM-GD	18
6	CHINANET-HB	16
7	idc-csloxinfo	14
8	SA-BAYANAT-20050428	13
9	SEEHU	11
10	KORNET-KR	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	576
2	Russian Federation	60
3	Brazil	54
4	United States	43
5	Italy	29
6	Indonesia	27
7	India	23
8	Thailand	21
9	Ukraine	19
10	South Korea	17

Suspected Bot List [2014-05-29]

detection period: 2014-05-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 135

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
AR	200.63.169.61	Argentina
CL	186.67.57.82	Chile
CL	186.67.60.155	Chile
CL	200.111.103.67	Chile
CO	190.60.39.186	Colombia
EC	186.42.225.189	Ecuador
EC	186.47.122.61	Ecuador
GB	176.35.77.154	United Kingdom
ID	36.72.231.85	Indonesia
ID	103.20.166.12	Indonesia
ID	103.228.81.34	Indonesia
ID	103.228.81.67	Indonesia
ID	111.68.123.154	Indonesia
ID	118.97.75.51	Indonesia
ID	118.97.95.185	Indonesia
ID	118.97.190.91	Indonesia
ID	124.40.252.54	Indonesia
ID	175.103.49.38	Indonesia
ID	175.158.32.252	Indonesia
ID	180.250.133.50	Indonesia
ID	182.23.39.226	Indonesia
ID	202.137.230.45	Indonesia
ID	202.137.230.127	Indonesia
ID	202.159.6.146	Indonesia
ID	203.57.24.25	Indonesia
ID	203.77.210.226	Indonesia
ID	203.128.94.165	Indonesia
IN	27.251.106.249	India
IN	59.90.91.95	India
IN	122.160.239.46	India
IN	182.72.131.50	India
IN	182.73.104.228	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
KE	41.207.65.165	Kenya
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
NP	202.79.52.53	Nepal
PH	58.69.100.234	Philippines
PH	58.71.94.176	Philippines
PK	58.27.226.231	Pakistan
PK	121.52.159.236	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	112.140.187.201	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	146.148.246.2	United States
US	174.139.83.170	United States
US	207.224.134.32	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	190.206.211.168	Venezuela
VE	200.84.109.84	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-29]

detection period: 2014-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1338
number of botnet IPs notified to network operators: 1203
number of spam blocked: 55397
recipient count of spam blocked: 1750448

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	197
2	CTTNET	159
3	CRTC	73
4	UNICOM-GD	35
5	CHINANET-FJ	24
6	CHINANET-HB	23
7	idc-csloxinfo	18
8	CHINANET-JS	15
9	SA-BAYANAT-20050428	13
10	CMNET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	737
2	Russian Federation	71
3	United States	56
4	Brazil	43
5	Thailand	29
6	United Kingdom	24
7	India	23
8	Indonesia	21
9	Viet Nam	19
10	South Korea	17

Suspected Bot List [2014-05-28]

detection period: 2014-05-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 176

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.228.175.82	Argentina
AR	200.63.169.61	Argentina
BO	190.129.58.252	Bolivia
CH	141.255.166.38	Switzerland
CI	41.66.24.224	Ivory Coast
CL	186.67.57.82	Chile
CL	186.67.60.155	Chile
CL	200.111.103.67	Chile
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
DZ	41.191.253.146	Algeria
EG	41.33.169.36	Egypt
EG	62.117.58.109	Egypt
ES	88.6.176.64	Spain
ES	88.26.235.134	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.251.106.249	India
IN	59.90.91.95	India
IN	59.95.36.240	India
IN	111.93.9.67	India
IN	117.194.205.106	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	182.72.131.50	India
IN	182.73.104.228	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.36.84	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
KE	41.207.65.165	Kenya
LB	194.126.140.247	Lebanon
MX	187.240.115.183	Mexico
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
NP	202.79.52.53	Nepal
PH	58.69.100.234	Philippines
PH	58.71.94.176	Philippines
PK	58.27.226.231	Pakistan
PK	121.52.159.236	Pakistan
RU	5.19.221.219	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	112.140.187.201	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	174.139.83.170	United States
US	184.82.236.67	United States
US	207.224.134.32	United States
VE	186.24.34.179	Venezuela
VE	186.95.37.54	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	190.206.211.168	Venezuela
VE	200.84.109.84	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-28]

detection period: 2014-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1902
number of botnet IPs notified to network operators: 1726
number of spam blocked: 57889
recipient count of spam blocked: 1811526

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	399
2	CTTNET	144
3	CRTC	93
4	UNICOM-GD	46
5	CHINANET-FJ	42
6	CHINANET-HB	25
7	UNICOM-HN	22
8	CHINANET-JS	20
9	VNPT-VNNIC-VN	19
10	idc-csloxinfo	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1023
2	United States	78
3	Russian Federation	76
4	Brazil	65
5	United Kingdom	38
6	Indonesia	35
7	France	35
8	Ukraine	33
9	Italy	33
10	India	33

Suspected Bot List [2014-05-27]

detection period: 2014-05-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 117

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.58.252	Bolivia
CH	141.255.166.38	Switzerland
CL	186.67.57.82	Chile
CL	200.111.103.67	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
DZ	41.191.253.146	Algeria
EG	41.33.169.36	Egypt
EG	62.117.58.109	Egypt
ES	88.26.235.134	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.90.11.34	India
IN	111.93.9.67	India
IN	117.254.248.213	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
MX	189.208.57.239	Mexico
PE	190.81.193.8	Peru
PH	58.69.100.234	Philippines
PK	58.27.226.231	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	109.251.17.225	Ukraine
US	50.201.42.106	United States
US	65.23.154.86	United States
US	68.189.142.171	United States
US	174.139.83.170	United States
US	184.82.236.67	United States
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-27]

detection period: 2014-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1416
number of botnet IPs notified to network operators: 1299
number of spam blocked: 47128
recipient count of spam blocked: 1481787

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	228
2	CTTNET	168
3	CRTC	89
4	UNICOM-GD	34
5	CHINANET-FJ	34
6	CHINANET-HB	33
7	UNICOM	21
8	VNPT-VNNIC-VN	17
9	CHINANET-SH	15
10	CHINANET-JS	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	796
2	Russian Federation	45
3	United States	42
4	Brazil	41
5	India	40
6	France	36
7	Italy	33
8	Ukraine	30
9	Viet Nam	28
10	Indonesia	23

Suspected Bot List [2014-05-26]

detection period: 2014-05-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 112

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.219.133	Egypt
EG	62.117.58.109	Egypt
ES	88.6.49.98	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
PK	58.27.226.231	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	98.126.70.18	United States
US	174.139.83.170	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-26]

detection period: 2014-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1247
number of botnet IPs notified to network operators: 1135
number of spam blocked: 40315
recipient count of spam blocked: 1375774

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	298
2	CTTNET	144
3	CRTC	77
4	CHINANET-FJ	29
5	VNPT-VNNIC-VN	27
6	UNICOM-GD	27
7	CHINANET-JS	15
8	UNICOM-BJ	12
9	CMNET	10
10	CHINANET-SH	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	737
2	United States	68
3	Russian Federation	39
4	India	37
5	Viet Nam	35
6	Brazil	26
7	Turkey	19
8	Indonesia	18
9	Ukraine	17
10	United Kingdom	17

Suspected Bot List [2014-05-25]

detection period: 2014-05-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 59

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.169.36	Egypt
EG	62.117.58.109	Egypt
ES	84.124.18.129	Spain
ES	88.6.49.98	Spain
ES	194.140.150.248	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.36.84	Iran
KZ	89.218.47.226	Kazakhstan
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
PK	58.27.226.231	Pakistan
RS	188.2.93.77	Serbia
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	174.139.83.170	United States
US	184.82.162.122	United States
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-05-25]

detection period: 2014-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1258
number of botnet IPs notified to network operators: 1199
number of spam blocked: 40458
recipient count of spam blocked: 1427403

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	403
2	CTTNET	203
3	CRTC	72
4	CHINANET-FJ	44
5	UNICOM-GD	27
6	NETBLK-NOBIS-TECHNOLOGY-GROUP-17	21
7	CHINANET-SH	14
8	CHINANET-JS	14
9	GC04	12
10	UNICOM-BJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	917
2	United States	77
3	Russian Federation	37
4	Brazil	26
5	Indonesia	23
6	Ukraine	15
7	India	13
8	Hong Kong	13
9	Iran	10
10	Thailand	9

Suspected Bot List [2014-05-24]

detection period: 2014-05-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.58.252	Bolivia
CL	186.67.57.82	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
ES	88.6.49.98	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	111.93.44.186	India
IN	117.247.241.27	India
IN	122.160.52.15	India
IN	122.160.239.46	India
IN	182.48.218.108	India
IN	182.48.252.72	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.36.84	Iran
IR	91.98.109.4	Iran
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
PH	58.69.100.234	Philippines
PK	58.27.226.231	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	37.247.107.82	Turkey
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	68.115.37.153	United States
US	98.126.70.18	United States
US	174.139.43.202	United States
US	174.139.83.170	United States
US	184.82.162.122	United States
VE	190.153.98.24	Venezuela
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-05-24]

detection period: 2014-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1166
number of botnet IPs notified to network operators: 1079
number of spam blocked: 44614
recipient count of spam blocked: 1579226

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	308
2	CTTNET	183
3	CRTC	73
4	CHINANET-FJ	29
5	CHINANET-JS	14
6	UNICOM-GD	11
7	CHINANET-SH	9
8	AOL-DTC	9
9	UNICOM-BJ	8
10	HICHINA	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	769
2	United States	54
3	Russian Federation	41
4	Brazil	37
5	Indonesia	19
6	Italy	17
7	Spain	17
8	Ukraine	16
9	India	13
10	Germany	13

Suspected Bot List [2014-05-23]

detection period: 2014-05-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.70.116	Bolivia
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
EG	41.33.219.133	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.199.190	India
IN	117.239.241.147	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	202.63.105.51	India
IN	203.90.114.228	India
IN	203.194.103.195	India
LB	194.126.140.247	Lebanon
PE	190.81.193.8	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	58.27.226.231	Pakistan
PK	121.52.159.236	Pakistan
PL	95.160.208.75	Poland
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
RU	188.75.234.254	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	68.115.37.153	United States
US	68.189.142.171	United States
US	98.126.70.18	United States
US	174.139.43.202	United States
US	174.139.56.83	United States
US	174.139.83.170	United States
US	184.82.162.122	United States
UZ	217.29.114.86	Uzbekistan
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-23]

detection period: 2014-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1268
number of botnet IPs notified to network operators: 1193
number of spam blocked: 44750
recipient count of spam blocked: 1510000

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	280
2	CTTNET	217
3	CRTC	71
4	CHINANET-FJ	61
5	UNICOM-HN	35
6	UNICOM-GD	25
7	UNICOM	25
8	HICHINA	12
9	CHINANET-JS	11
10	CMNET	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	895
2	Russian Federation	43
3	United States	37
4	Brazil	32
5	Indonesia	24
6	India	22
7	Ukraine	16
8	South Korea	16
9	Taiwan	10
10	Germany	10

Suspected Bot List [2014-05-22]

detection period: 2014-05-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 97

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
BO	190.129.70.116	Bolivia
CL	186.67.57.82	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.219.133	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	114.79.166.169	India
IN	116.74.71.175	India
IN	117.239.241.147	India
IN	117.242.109.174	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	58.27.226.231	Pakistan
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	174.139.43.202	United States
US	174.139.83.170	United States
US	184.82.162.122	United States
US	184.82.177.78	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-22]

detection period: 2014-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1097
number of botnet IPs notified to network operators: 1001
number of spam blocked: 43958
recipient count of spam blocked: 1477140

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CTTNET	209
2	CHINANET-GD	149
3	CHINANET-FJ	38
4	UNICOM-GD	25
5	CRTC	23
6	CHINANET-JS	14
7	CHINANET-SH	13
8	UNICOM-BJ	12
9	NETBLK-NOBIS-TECHNOLOGY-GROUP-18	10
10	HICHINA	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	659
2	United States	68
3	Brazil	44
4	Russian Federation	39
5	Italy	23
6	Indonesia	21
7	Ukraine	17
8	Germany	14
9	India	13
10	Colombia	13

Suspected Bot List [2014-05-21]

detection period: 2014-05-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.219.133	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.5.97.88	India
IN	59.92.103.184	India
IN	59.95.2.29	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.242.109.174	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
MK	89.185.193.135	Macedonia
PH	58.69.100.234	Philippines
PK	58.27.226.231	Pakistan
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	109.251.197.101	Ukraine
US	50.201.42.106	United States
US	174.139.83.170	United States
UZ	217.29.114.86	Uzbekistan
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-21]

detection period: 2014-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1390
number of botnet IPs notified to network operators: 1286
number of spam blocked: 47890
recipient count of spam blocked: 1596891

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	430
2	CTTNET	152
3	CHINANET-FJ	34
4	UNICOM-GD	22
5	CRTC	21
6	HINET-NET	16
7	UNICOM	11
8	CHINANET-ZJ	11
9	CHINANET-JS	11
10	UNICOM-HN	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	849
2	United States	66
3	Russian Federation	41
4	United Kingdom	32
5	Brazil	32
6	India	24
7	Ukraine	21
8	Taiwan	21
9	South Korea	18
10	Indonesia	18

Suspected Bot List [2014-05-20]

detection period: 2014-05-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.228.175.82	Argentina
BO	190.129.58.252	Bolivia
CL	186.67.57.82	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
ES	2.138.31.178	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.5.97.88	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.247.241.27	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
PE	190.81.193.8	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	109.251.197.101	Ukraine
US	50.201.42.106	United States
US	174.139.83.170	United States
US	184.82.236.67	United States
UZ	217.29.114.86	Uzbekistan
VE	190.202.116.101	Venezuela
ZA	105.236.237.181	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-20]

detection period: 2014-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1442
number of botnet IPs notified to network operators: 1355
number of spam blocked: 45811
recipient count of spam blocked: 1471952

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	406
2	CRTC	91
3	CTTNET	83
4	CHINANET-FJ	76
5	UNICOM-GD	24
6	HINET-NET	15
7	HICHINA	15
8	CHINANET-ZJ	14
9	CHINANET-JS	14
10	SINGNET-SG	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	888
2	Russian Federation	52
3	Brazil	42
4	United States	35
5	Indonesia	31
6	Taiwan	21
7	Turkey	21
8	Ukraine	20
9	France	20
10	Viet Nam	19

Suspected Bot List [2014-05-19]

detection period: 2014-05-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 121

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
CL	186.67.57.82	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.219.133	Egypt
ES	2.138.31.178	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.247.241.27	India
IN	202.62.67.250	India
IN	210.212.97.139	India
LB	194.126.140.247	Lebanon
MX	201.132.52.129	Mexico
PE	190.81.193.8	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	89.216.21.136	Serbia
SA	94.77.199.148	Saudi Arabia
SK	78.98.80.154	Slovakia
SK	91.127.7.154	Slovakia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	50.244.253.9	United States
US	174.139.83.170	United States
US	184.82.236.67	United States
UZ	217.30.171.169	Uzbekistan
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	105.236.237.181	South Africa
ZA	105.237.137.36	South Africa
ZA	196.28.31.245	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-19]

detection period: 2014-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1315
number of botnet IPs notified to network operators: 1197
number of spam blocked: 41577
recipient count of spam blocked: 1318214

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	330
2	CRTC	146
3	CHINANET-FJ	33
4	CTTNET	30
5	UNICOM-GD	24
6	CHINANET-JS	17
7	KORNET-KR	12
8	CHINANET-SH	12
9	003.420.926/0002-05	12
10	CMNET	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	724
2	United States	63
3	Brazil	49
4	Russian Federation	44
5	Italy	27
6	Indonesia	22
7	South Korea	19
8	Spain	19
9	Ukraine	18
10	Turkey	18

Suspected Bot List [2014-05-18]

detection period: 2014-05-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	200.80.43.248	Colombia
ES	88.3.102.164	Spain
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	202.62.67.250	India
IN	210.212.97.139	India
IR	91.98.28.220	Iran
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
PE	190.81.193.8	Peru
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	174.139.83.170	United States
US	205.209.173.252	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-18]

detection period: 2014-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 999
number of botnet IPs notified to network operators: 951
number of spam blocked: 34535
recipient count of spam blocked: 1062411

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	308
2	CRTC	151
3	CHINANET-FJ	40
4	UNICOM-GD	32
5	CTTNET	28
6	CHINANET-SH	9
7	CHINANET-JS	9
8	HICHINA	8
9	UNICOM-SD	6
10	KORNET-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	693
2	Russian Federation	36
3	United States	35
4	Brazil	24
5	Indonesia	20
6	South Korea	13
7	Ukraine	12
8	India	11
9	Hong Kong	11
10	Germany	11

Suspected Bot List [2014-05-17]

detection period: 2014-05-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 61

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
CL	186.67.57.82	Chile
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
CO	200.80.43.248	Colombia
ES	88.3.102.164	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.5.97.88	India
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	62.122.106.141	Ukraine
US	50.201.42.106	United States
US	174.139.83.170	United States
US	205.209.173.252	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-17]

detection period: 2014-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 918
number of botnet IPs notified to network operators: 857
number of spam blocked: 34486
recipient count of spam blocked: 1050086

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	198
2	CRTC	121
3	CHINANET-FJ	45
4	CTTNET	28
5	UNICOM-GD	13
6	UNICOM	12
7	CHINANET-JS	10
8	CMNET	9
9	CHINANET-SH	8
10	UNICOM-BJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	554
2	Brazil	46
3	Russian Federation	35
4	United States	28
5	Indonesia	23
6	Italy	19
7	Spain	15
8	Ukraine	13
9	South Korea	13
10	Turkey	11

Suspected Bot List [2014-05-16]

detection period: 2014-05-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 72

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.183.155.80	Bulgaria
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
CO	200.80.43.248	Colombia
EG	41.33.169.36	Egypt
EG	41.33.219.133	Egypt
ES	88.3.102.164	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.93.134.179	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.242.240.172	India
IN	117.254.227.220	India
IN	122.160.239.46	India
IN	202.134.157.25	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
PE	190.81.193.8	Peru
PK	121.52.159.236	Pakistan
RU	188.75.234.196	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	62.122.106.141	Ukraine
US	50.201.42.106	United States
US	174.139.83.170	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-16]

detection period: 2014-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1082
number of botnet IPs notified to network operators: 1010
number of spam blocked: 37783
recipient count of spam blocked: 1176735

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	259
2	CRTC	156
3	CTTNET	44
4	CHINANET-FJ	44
5	UNICOM-GD	24
6	CHINANET-JS	16
7	KORNET-KR	14
8	UNICOM-BJ	11
9	CMNET	11
10	BSNLNET	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	688
2	Russian Federation	41
3	United States	40
4	Brazil	29
5	India	28
6	South Korea	20
7	Indonesia	20
8	Ukraine	16
9	Iran	13
10	United Kingdom	13

Suspected Bot List [2014-05-15]

detection period: 2014-05-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 73

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.77.34	Albania
AL	109.69.6.107	Albania
BG	93.183.155.80	Bulgaria
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
EG	41.33.219.133	Egypt
ES	88.3.102.164	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.0.54.173	India
IN	59.93.192.100	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IR	91.98.28.220	Iran
KZ	89.218.179.155	Kazakhstan
LB	194.126.140.247	Lebanon
PK	121.52.159.236	Pakistan
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	109.201.249.56	Ukraine
US	50.201.42.106	United States
US	66.214.186.192	United States
US	174.139.83.170	United States
US	199.101.116.212	United States
VE	186.24.34.179	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-15]

detection period: 2014-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1089
number of botnet IPs notified to network operators: 1016
number of spam blocked: 33234
recipient count of spam blocked: 1025064

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	289
2	CRTC	144
3	CHINANET-FJ	47
4	CTTNET	32
5	UNICOM-GD	18
6	KORNET-KR	13
7	CMNET	12
8	CHINANET-SH	12
9	CHINANET-JS	12
10	UNICOM-SD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	696
2	United States	43
3	Russian Federation	38
4	Brazil	27
5	South Korea	23
6	Indonesia	23
7	India	20
8	United Kingdom	18
9	Ukraine	17
10	Iran	11

Suspected Bot List [2014-05-14]

detection period: 2014-05-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.77.34	Albania
AL	109.69.6.107	Albania
AR	190.228.175.82	Argentina
BG	93.183.155.80	Bulgaria
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.96.167.20	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	122.181.10.166	India
IN	202.62.67.250	India
IN	210.212.85.35	India
IR	91.98.36.84	Iran
KZ	89.218.47.226	Kazakhstan
LB	194.126.140.247	Lebanon
MX	201.158.203.50	Mexico
PE	190.81.193.8	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	37.247.107.82	Turkey
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	109.201.246.60	Ukraine
US	50.201.42.106	United States
US	66.214.186.192	United States
US	96.44.172.108	United States
US	199.101.116.212	United States
VE	186.24.34.179	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-14]

detection period: 2014-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1050
number of botnet IPs notified to network operators: 993
number of spam blocked: 37812
recipient count of spam blocked: 1210371

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	288
2	CRTC	162
3	CHINANET-FJ	47
4	CTTNET	30
5	UNICOM-GD	18
6	CHINANET-JS	15
7	CMNET	12
8	UNICOM-BJ	10
9	KORNET-KR	9
10	CHINANET-SH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	707
2	Russian Federation	38
3	United States	32
4	Brazil	28
5	Indonesia	25
6	South Korea	16
7	India	16
8	Ukraine	15
9	Taiwan	12
10	Iran	11

Suspected Bot List [2014-05-13]

detection period: 2014-05-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.77.34	Albania
AL	109.69.6.107	Albania
BG	93.183.155.80	Bulgaria
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.219.133	Egypt
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	122.181.10.166	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IN	210.212.85.35	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
MX	201.158.203.50	Mexico
PE	190.81.196.71	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RU	193.107.17.81	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	37.247.107.82	Turkey
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	66.214.186.192	United States
US	68.189.142.171	United States
US	96.44.172.108	United States
US	98.126.57.100	United States
US	174.139.83.170	United States
US	199.101.116.212	United States
VE	186.24.34.179	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-13]

detection period: 2014-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1048
number of botnet IPs notified to network operators: 988
number of spam blocked: 44439
recipient count of spam blocked: 1346626

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	253
2	CRTC	133
3	CHINANET-FJ	60
4	CTTNET	31
5	CHINANET-JS	22
6	UNICOM-GD	20
7	MSFT-GFS	19
8	UNICOM-BJ	12
9	MICROSOFT-GLOBAL-NET	10
10	CMNET	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	656
2	United States	67
3	Russian Federation	43
4	Brazil	31
5	Indonesia	22
6	Ukraine	18
7	India	17
8	Iran	12
9	Hong Kong	12
10	Turkey	11

Suspected Bot List [2014-05-12]

detection period: 2014-05-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.77.34	Albania
AL	109.69.6.107	Albania
BG	93.183.155.80	Bulgaria
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
EG	41.33.169.36	Egypt
EG	41.33.219.133	Egypt
HN	190.107.140.77	Honduras
IN	59.96.165.2	India
IN	111.93.9.67	India
IN	117.247.241.27	India
IN	117.254.120.68	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
LB	194.126.140.247	Lebanon
MX	189.205.184.161	Mexico
MX	201.158.203.50	Mexico
PE	190.81.193.8	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PH	122.49.217.2	Philippines
PH	124.107.165.60	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
SA	94.77.199.148	Saudi Arabia
TR	37.247.107.82	Turkey
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
US	184.82.162.122	United States
VE	186.24.34.179	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-05-12]

detection period: 2014-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1091
number of botnet IPs notified to network operators: 1039
number of spam blocked: 46503
recipient count of spam blocked: 1407202

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	283
2	CRTC	137
3	CHINANET-FJ	37
4	CTTNET	29
5	UNICOM-HN	27
6	UNICOM-GD	24
7	CHINANET-JS	19
8	UNICOM-BJ	13
9	UNICOM	12
10	MSFT-GFS	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	711
2	United States	57
3	Russian Federation	39
4	Brazil	26
5	Indonesia	23
6	Iran	15
7	Germany	14
8	South Korea	13
9	India	13
10	United Kingdom	13

Botnet Statistics for April 2014

detection period: 2014-04-01 00:00 - 2014-04-30 23:59 UTC
total number of suspected botnet IPs: 29916
number of blocked spams: 1461434
recipient count of blocked spams: 46936448

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	24453
2	Taiwan	1006
3	United States	728
4	India	290
5	Viet Nam	270
6	Russian Federation	208
7	Italy	175
8	Brazil	175
9	France	170
10	United Kingdom	156
11	Ukraine	135
12	South Korea	131
13	Turkey	124
14	Germany	121
15	Indonesia	118
16	Poland	108
17	Argentina	91
18	Hong Kong	79
19	Spain	77
20	Japan	66
21	Colombia	55
22	Singapore	54
23	Thailand	53
24	Kazakhstan	52
25	Mexico	50

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	613349
2	Russian Federation	97119
3	United States	83364
4	Brazil	79404
5	Indonesia	79231
6	Taiwan	44644
7	Ukraine	35757
8	United Kingdom	30586
9	South Korea	27964
10	India	26588
11	Iran	21114
12	Saudi Arabia	21043
13	Thailand	20555
14	Italy	19551
15	Colombia	18453
16	Turkey	16953
17	Viet Nam	13842
18	Germany	13113
19	Ivory Coast	11609
20	Hong Kong	11597
21	Bangladesh	11496
22	Malaysia	10841
23	France	9745
24	Poland	8909
25	Venezuela	8413

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: