Suspected Bot List [2014-10-30]

detection period: 2014-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 122

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IN	59.180.233.90	India
IN	117.211.42.53	India
IR	91.99.36.85	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	62.84.79.245	Lebanon
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
US	192.161.180.146	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-10-30]

detection period: 2014-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1680
number of botnet IPs notified to network operators: 1558
number of spam blocked: 138642
recipient count of spam blocked: 4054893

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	836
2	CHINANET-HB	40
3	CHINANET-GD	40
4	UNICOM-BJ	16
5	UNICOM-HA	14
6	BHARTI-IN	14
7	VNPT-VNNIC-VN	12
8	BORANET-KR	11
9	ALIBABA-US-CDN	11
10	KORNET-KR	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	842
2	China	216
3	United States	82
4	India	66
5	Russian Federation	51
6	Indonesia	32
7	South Korea	30
8	Viet Nam	28
9	Hong Kong	21
10	South Africa	20

Suspected Bot List [2014-10-29]

detection period: 2014-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 109

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
MX	201.116.227.163	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
US	192.161.180.146	United States
UZ	89.236.219.106	Uzbekistan
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-10-29]

detection period: 2014-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1725
number of botnet IPs notified to network operators: 1616
number of spam blocked: 136646
recipient count of spam blocked: 4352167

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	931
2	CHINANET-GD	40
3	CHINANET-HB	26
4	KORNET-KR	18
5	BORANET-KR	18
6	ALIBABA-US-CDN	15
7	UNICOM-BJ	14
8	HICHINA	10
9	VNPT-VNNIC-VN	7
10	UNICOM-GD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	938
2	China	200
3	United States	86
4	Russian Federation	61
5	South Korea	44
6	India	37
7	Indonesia	27
8	Viet Nam	20
9	Hong Kong	20
10	Arab Emirates	20

Suspected Bot List [2014-10-28]

detection period: 2014-10-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IR	194.33.124.42	Iran
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
US	192.161.180.146	United States

List from greylisting:

Botnet Statistics [2014-10-28]

detection period: 2014-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1531
number of botnet IPs notified to network operators: 1444
number of spam blocked: 133486
recipient count of spam blocked: 4302945

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	883
2	CHINANET-GD	58
3	CHINANET-HB	25
4	UNICOM-GD	14
5	BHARTI-IN	12
6	ALIBABA-US-CDN	12
7	UNICOM-BJ	11
8	HICHINA	9
9	VNPT-VNNIC-VN	8
10	SINGNET-SG	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	885
2	China	215
3	United States	90
4	India	47
5	Indonesia	29
6	Viet Nam	20
7	South Korea	20
8	Hong Kong	20
9	South Korea	17
10	Brazil	15

Suspected Bot List [2014-10-27]

detection period: 2014-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.99.3.199	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
US	192.161.180.146	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-10-27]

detection period: 2014-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1594
number of botnet IPs notified to network operators: 1532
number of spam blocked: 135635
recipient count of spam blocked: 4341394

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	912
2	CHINANET-GD	132
3	CHINANET-HB	23
4	UNICOM-BJ	18
5	ALIBABA-US-CDN	13
6	UNICOM-GD	12
7	CHINANET-JX	9
8	HICHINA	8
9	CMNET	8
10	CHINANET-JS	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	921
2	China	290
3	United States	77
4	India	30
5	Indonesia	27
6	Hong Kong	20
7	Russian Federation	19
8	Viet Nam	18
9	Iran	16
10	South Africa	15

Suspected Bot List [2014-10-26]

detection period: 2014-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
IN	117.247.241.27	India
IR	91.98.234.195	Iran
IR	91.99.3.199	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.59	Taiwan
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-10-26]

detection period: 2014-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1400
number of botnet IPs notified to network operators: 1360
number of spam blocked: 134056
recipient count of spam blocked: 4323902

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	893
2	CHINANET-GD	87
3	CHINANET-HB	38
4	ALIBABA-US-CDN	19
5	UNICOM-GD	15
6	UNICOM-BJ	14
7	CMNET	7
8	CHINANET-JS	7
9	UNICOM-SD	6
10	HICHINA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	896
2	China	241
3	United States	66
4	Iran	19
5	Indonesia	18
6	Hong Kong	16
7	Russian Federation	15
8	Brazil	10
9	Ukraine	8
10	India	7

Suspected Bot List [2014-10-25]

detection period: 2014-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	200.87.35.170	Bolivia
CA	184.107.73.239	Canada
CL	200.111.103.69	Chile
IN	117.218.50.134	India
IN	117.247.241.27	India
IR	91.98.234.195	Iran
IR	91.99.3.199	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-10-25]

detection period: 2014-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1454
number of botnet IPs notified to network operators: 1401
number of spam blocked: 143577
recipient count of spam blocked: 4608260

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	927
2	CHINANET-GD	92
3	CHINANET-HB	35
4	ALIBABA-US-CDN	24
5	MSFT-GFS	9
6	CHINANET-JX	6
7	CHINANET-JS	6
8	HICHINA	5
9	UNICOM-HA	4
10	UNICOM-BJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	929
2	China	220
3	United States	80
4	Indonesia	19
5	India	18
6	Hong Kong	17
7	Brazil	16
8	Russian Federation	15
9	Iran	12
10	Viet Nam	10

Suspected Bot List [2014-10-24]

detection period: 2014-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	200.87.35.170	Bolivia
CL	200.111.103.69	Chile
IN	117.218.50.134	India
IN	117.247.241.27	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-10-24]

detection period: 2014-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1532
number of botnet IPs notified to network operators: 1482
number of spam blocked: 141665
recipient count of spam blocked: 4544951

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	937
2	CHINANET-GD	84
3	CHINANET-HB	43
4	ALIBABA-US-CDN	24
5	CHINANET-JX	12
6	CHINANET-JS	8
7	UNICOM-SD	7
8	VNPT-VNNIC-VN	6
9	UNICOM-HA	5
10	MTN_ADSL	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	940
2	China	231
3	United States	81
4	Indonesia	25
5	Russian Federation	16
6	Brazil	15
7	Viet Nam	14
8	Hong Kong	14
9	South Africa	12
10	Iran	12

Suspected Bot List [2014-10-23]

detection period: 2014-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 59

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.59.134.43	Argentina
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
IN	117.218.50.134	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-10-23]

detection period: 2014-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1724
number of botnet IPs notified to network operators: 1665
number of spam blocked: 140054
recipient count of spam blocked: 4472654

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	981
2	UNICOM-ZJ	144
3	CHINANET-GD	49
4	CHINANET-HB	31
5	ALIBABA-US-CDN	24
6	UNICOM-GD	21
7	UNICOM-BJ	15
8	SINGNET-SG	11
9	UNICOM-SD	10
10	KORNET-KR	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	985
2	China	366
3	United States	92
4	Indonesia	23
5	Brazil	21
6	South Korea	16
7	Viet Nam	14
8	Hong Kong	14
9	Singapore	13
10	Iran	13

Suspected Bot List [2014-10-22]

detection period: 2014-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 154

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.59.134.43	Argentina
AR	200.63.169.61	Argentina
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-10-22]

detection period: 2014-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2158
number of botnet IPs notified to network operators: 2004
number of spam blocked: 129210
recipient count of spam blocked: 3984083

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1094
2	UNICOM-ZJ	175
3	CHINANET-GD	49
4	VNPT-VNNIC-VN	48
5	CHINANET-HB	33
6	UNICOM-FJ	25
7	UNICOM-GD	22
8	VIETEL-VNNIC-VN	12
9	UNICOM-SD	12
10	KORNET-KR	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1104
2	China	424
3	Viet Nam	76
4	United States	55
5	India	29
6	Russian Federation	28
7	Brazil	28
8	Turkey	27
9	South Korea	27
10	Indonesia	27

Suspected Bot List [2014-10-21]

detection period: 2014-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.59.134.43	Argentina
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-10-21]

detection period: 2014-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1834
number of botnet IPs notified to network operators: 1765
number of spam blocked: 103298
recipient count of spam blocked: 3164584

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1116
2	UNICOM-ZJ	122
3	UNICOM-FJ	88
4	CHINANET-GD	38
5	CHINANET-HB	25
6	UNICOM-SD	15
7	UNICOM-CN	14
8	UNICOM-BJ	14
9	UNICOM-GD	10
10	CHINANET-JX	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1119
2	China	413
3	United States	39
4	Brazil	22
5	Indonesia	21
6	Russian Federation	19
7	Turkey	15
8	Iran	12
9	Hong Kong	12
10	Viet Nam	11

Suspected Bot List [2014-10-20]

detection period: 2014-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 84

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CL	200.111.103.69	Chile
MX	201.116.227.163	Mexico

List from greylisting:

Botnet Statistics [2014-10-20]

detection period: 2014-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1888
number of botnet IPs notified to network operators: 1804
number of spam blocked: 54204
recipient count of spam blocked: 1615528

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1164
2	UNICOM-ZJ	141
3	CHINANET-GD	64
4	CHINANET-HB	42
5	UNICOM-FJ	38
6	UNICOM-GD	14
7	UNICOM-BJ	14
8	UNICOM-SD	13
9	BHARTI-IN	10
10	VNPT-VNNIC-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1170
2	China	373
3	India	38
4	United States	28
5	Russian Federation	26
6	South Korea	25
7	Viet Nam	20
8	Turkey	17
9	Indonesia	13
10	Brazil	12

Suspected Bot List [2014-10-19]

detection period: 2014-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	201.116.227.163	Mexico

List from greylisting:

Botnet Statistics [2014-10-19]

detection period: 2014-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 756
number of botnet IPs notified to network operators: 734
number of spam blocked: 28271
recipient count of spam blocked: 838748

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	461
2	CHINANET-GD	49
3	UNICOM-ZJ	43
4	CHINANET-HB	29
5	UNICOM-GD	14
6	UNICOM-BJ	10
7	UNICOM-SD	6
8	CHINANET-SH	3
9	AMEN-FR-NETWORK	3
10	AE-EMIRNET-20050420	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	461
2	China	185
3	United States	11
4	United Kingdom	7
5	France	7
6	India	6
7	Russian Federation	5
8	South Korea	5
9	Viet Nam	4
10	Hong Kong	4

Suspected Bot List [2014-10-18]

detection period: 2014-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	201.116.227.163	Mexico

List from greylisting:

Botnet Statistics [2014-10-18]

detection period: 2014-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 970
number of botnet IPs notified to network operators: 931
number of spam blocked: 40537
recipient count of spam blocked: 1208971

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	720
2	CHINANET-GD	36
3	UNICOM-BJ	17
4	CHINANET-HB	14
5	yueyangcnc	6
6	UNICOM-GD	3
7	RCOM	3
8	CMNET	3
9	BHARTI-IN	3
10	AMEN-FR-NETWORK	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	723
2	China	100
3	United States	14
4	India	14
5	Brazil	13
6	Viet Nam	6
7	Turkey	6
8	United Kingdom	6
9	Ukraine	5
10	Hong Kong	5

Suspected Bot List [2014-10-17]

detection period: 2014-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-17]

detection period: 2014-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1354
number of botnet IPs notified to network operators: 1287
number of spam blocked: 52260
recipient count of spam blocked: 1554325

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	844
2	CHINANET-GD	65
3	CHINANET-HB	28
4	UNICOM-BJ	21
5	UNICOM-GD	13
6	UNICOM-SD	7
7	HICHINA	6
8	KORNET-KR	5
9	003.420.926/0002-05	5
10	TATAINDICOM-IN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	852
2	China	197
3	United States	47
4	India	26
5	Brazil	19
6	South Africa	14
7	Turkey	13
8	Italy	12
9	United Kingdom	12
10	Iran	11

Suspected Bot List [2014-10-16]

detection period: 2014-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	63.246.128.42	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-16]

detection period: 2014-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1849
number of botnet IPs notified to network operators: 1744
number of spam blocked: 94951
recipient count of spam blocked: 2883564

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1135
2	CHINANET-GD	97
3	CHINANET-HB	36
4	UNICOM-BJ	21
5	VNPT-VNNIC-VN	17
6	UNICOM-GD	11
7	UNICOM-SD	10
8	BSNLNET	7
9	CHINANET-SH	6
10	003.420.926/0002-05	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1143
2	China	255
3	United States	51
4	India	40
5	Brazil	33
6	Viet Nam	26
7	Indonesia	21
8	Russian Federation	19
9	Italy	18
10	United Kingdom	17

Suspected Bot List [2014-10-15]

detection period: 2014-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-15]

detection period: 2014-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2082
number of botnet IPs notified to network operators: 1981
number of spam blocked: 115514
recipient count of spam blocked: 3602515

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1241
2	UNICOM-ZJ	144
3	CHINANET-GD	77
4	UNICOM-FJ	41
5	CHINANET-HB	41
6	UNICOM-GD	11
7	UNICOM-BJ	10
8	CHINANET-JS	8
9	VNPT-VNNIC-VN	7
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1250
2	China	412
3	United States	56
4	India	41
5	Russian Federation	36
6	Brazil	23
7	Viet Nam	20
8	Turkey	19
9	Indonesia	16
10	Italy	14

Suspected Bot List [2014-10-14]

detection period: 2014-10-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-14]

detection period: 2014-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2055
number of botnet IPs notified to network operators: 2016
number of spam blocked: 200626
recipient count of spam blocked: 4538837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1244
2	UNICOM-ZJ	201
3	CHINANET-GD	192
4	UNICOM-FJ	30
5	CHINANET-HB	29
6	UNICOM-GD	14
7	UNICOM-BJ	13
8	UNICOM-SD	8
9	CHINANET-JS	7
10	UNICOM-CN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1249
2	China	554
3	United States	44
4	Brazil	18
5	Indonesia	16
6	Hong Kong	14
7	Russian Federation	12
8	Iran	11
9	Viet Nam	8
10	Ukraine	8

Suspected Bot List [2014-10-13]

detection period: 2014-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-13]

detection period: 2014-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2185
number of botnet IPs notified to network operators: 2080
number of spam blocked: 189812
recipient count of spam blocked: 4553808

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1242
2	UNICOM-ZJ	138
3	CHINANET-GD	136
4	CHINANET-HB	52
5	UNICOM-FJ	38
6	BHARTI-IN	15
7	UNICOM-GD	12
8	UNICOM-BJ	11
9	CHINANET-JS	9
10	MINDSPRING-DEDA-C300	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1249
2	China	466
3	India	61
4	Russian Federation	49
5	United States	48
6	Turkey	26
7	Indonesia	22
8	Viet Nam	20
9	Brazil	20
10	Ukraine	15

Suspected Bot List [2014-10-12]

detection period: 2014-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan
ZA	209.203.59.30	South Africa

List from greylisting:

Botnet Statistics [2014-10-12]

detection period: 2014-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1679
number of botnet IPs notified to network operators: 1656
number of spam blocked: 148515
recipient count of spam blocked: 4345018

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1246
2	CHINANET-GD	42
3	UNICOM-FJ	32
4	CHINANET-HB	12
5	UNICOM-GD	11
6	UNICOM-BJ	9
7	VPSQUAN-323	6
8	CHINANET-JS	6
9	UNICOM-CN	5
10	HICHINA	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1251
2	China	190
3	United States	66
4	Russian Federation	17
5	Indonesia	15
6	Brazil	12
7	Viet Nam	10
8	Ukraine	8
9	Iran	8
10	Hong Kong	8

Suspected Bots' IP List for October 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-10-31]
Suspected Bots IP [2014-10-30]
Suspected Bots IP [2014-10-29]
Suspected Bots IP [2014-10-28]
Suspected Bots IP [2014-10-27]
Suspected Bots IP [2014-10-26]
Suspected Bots IP [2014-10-25]
Suspected Bots IP [2014-10-24]
Suspected Bots IP [2014-10-23]
Suspected Bots IP [2014-10-22]
Suspected Bots IP [2014-10-21]
Suspected Bots IP [2014-10-20]
Suspected Bots IP [2014-10-19]
Suspected Bots IP [2014-10-18]
Suspected Bots IP [2014-10-17]
Suspected Bots IP [2014-10-16]
Suspected Bots IP [2014-10-15]
Suspected Bots IP [2014-10-14]
Suspected Bots IP [2014-10-13]
Suspected Bots IP [2014-10-12]
Suspected Bots IP [2014-10-11]
Suspected Bots IP [2014-10-10]
Suspected Bots IP [2014-10-09]
Suspected Bots IP [2014-10-08]
Suspected Bots IP [2014-10-07]
Suspected Bots IP [2014-10-06]
Suspected Bots IP [2014-10-05]
Suspected Bots IP [2014-10-04]
Suspected Bots IP [2014-10-03]
Suspected Bots IP [2014-10-02]
Suspected Bots IP [2014-10-01]

Suspected Bot List [2014-10-11]

detection period: 2014-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	63.246.128.42	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan
ZA	209.203.59.30	South Africa

List from greylisting:

Botnet Statistics [2014-10-11]

detection period: 2014-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1806
number of botnet IPs notified to network operators: 1771
number of spam blocked: 185909
recipient count of spam blocked: 4788500

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1218
2	UNICOM-ZJ	110
3	CHINANET-GD	48
4	CHINANET-HB	45
5	UNICOM-BJ	15
6	UNICOM-GD	14
7	UNICOM-FJ	13
8	HICHINA	9
9	MINDSPRING-DEDA-C300	8
10	VPSQUAN-323	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1221
2	China	318
3	United States	84
4	Russian Federation	17
5	Brazil	16
6	Indonesia	15
7	Iran	11
8	Ukraine	8
9	Italy	8
10	Hong Kong	8

Suspected Bot List [2014-10-10]

detection period: 2014-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 91

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	200.80.43.248	Colombia
IR	81.31.224.171	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States
US	69.165.75.131	United States
US	69.165.75.134	United States
US	69.165.75.135	United States
US	69.165.75.136	United States
US	69.165.75.139	United States
US	69.165.75.148	United States
US	69.165.75.149	United States
US	69.165.75.151	United States
US	69.165.75.152	United States
US	69.165.75.153	United States
US	69.165.75.154	United States
US	69.165.75.157	United States
US	69.165.75.160	United States
US	69.165.75.161	United States
US	69.165.75.165	United States
US	69.165.75.168	United States
US	69.165.75.170	United States
US	69.165.75.174	United States
US	69.165.75.189	United States
US	69.165.75.190	United States
US	69.165.75.193	United States
US	69.165.75.194	United States
US	69.165.75.195	United States
US	69.165.75.199	United States
US	69.165.75.206	United States
US	69.165.75.207	United States
US	69.165.75.210	United States
US	69.165.75.211	United States
US	69.165.75.213	United States
US	69.165.75.215	United States
US	69.165.75.222	United States
US	69.165.75.225	United States
US	69.165.75.227	United States
US	69.165.75.232	United States
US	69.165.75.235	United States
US	69.165.75.238	United States
US	69.165.75.244	United States
US	69.197.128.170	United States
UZ	89.236.219.106	Uzbekistan
ZA	209.203.59.30	South Africa

List from greylisting:

Botnet Statistics [2014-10-10]

detection period: 2014-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1952
number of botnet IPs notified to network operators: 1861
number of spam blocked: 177071
recipient count of spam blocked: 4636611

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1224
2	UNICOM-ZJ	165
3	UNKNOWN	37
4	CHINANET-HB	34
5	CHINANET-GD	31
6	UNICOM-HA	16
7	UNICOM-GD	16
8	UNICOM-BJ	13
9	MINDSPRING-DEDA-C300	7
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1230
2	China	371
3	United States	113
4	Russian Federation	27
5	Brazil	23
6	India	15
7	Indonesia	15
8	Viet Nam	14
9	Iran	10
10	Turkey	9

Suspected Bot List [2014-10-09]

detection period: 2014-10-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	200.80.43.248	Colombia
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TR	193.255.143.62	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-09]

detection period: 2014-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1941
number of botnet IPs notified to network operators: 1897
number of spam blocked: 183041
recipient count of spam blocked: 4536689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1226
2	UNICOM-ZJ	190
3	CHINANET-GD	77
4	ZJU-CN	53
5	CHINANET-HB	26
6	UNICOM-BJ	19
7	UNICOM-GD	15
8	HICHINA	7
9	CHINANET-JS	7
10	UNICOM-HA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1231
2	China	472
3	United States	66
4	Brazil	24
5	Russian Federation	15
6	Indonesia	14
7	Viet Nam	9
8	Turkey	8
9	Iran	8
10	Hong Kong	8

Suspected Bot List [2014-10-08]

detection period: 2014-10-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	200.80.43.248	Colombia
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-10-08]

detection period: 2014-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1951
number of botnet IPs notified to network operators: 1898
number of spam blocked: 180592
recipient count of spam blocked: 4588128

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1200
2	UNICOM-ZJ	147
3	ZJU-CN	93
4	CHINANET-GD	54
5	CHINANET-HB	27
6	UNICOM-BJ	22
7	UNICOM-GD	16
8	HICHINA	8
9	CHINANET-JS	7
10	UNICOM-HA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1209
2	China	447
3	United States	66
4	Russian Federation	23
5	Brazil	17
6	Indonesia	15
7	Italy	11
8	Iran	11
9	Viet Nam	10
10	South Korea	10

Suspected Bot List [2014-10-07]

detection period: 2014-10-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	200.80.43.248	Colombia
CZ	80.188.121.251	Czech Republic
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
LV	85.9.201.199	Latvia
PE	200.110.35.150	Peru
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States
US	68.114.102.5	United States
US	71.91.111.68	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-07]

detection period: 2014-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2011
number of botnet IPs notified to network operators: 1953
number of spam blocked: 153667
recipient count of spam blocked: 4385332

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1210
2	UNICOM-ZJ	106
3	CHINANET-GD	73
4	ZJU-CN	50
5	CRTC	26
6	CHINANET-JS	20
7	UNICOM-GD	16
8	UNICOM-BJ	16
9	CHINANET-HB	14
10	CHINANET-LN	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1220
2	China	432
3	United States	61
4	Russian Federation	46
5	Indonesia	26
6	Brazil	19
7	Viet Nam	14
8	Iran	14
9	Hong Kong	14
10	South Korea	10

Suspected Bot List [2014-10-06]

detection period: 2014-10-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AM	178.78.163.52	Armenia
AR	181.16.161.33	Argentina
AR	190.0.109.237	Argentina
AR	190.11.106.227	Argentina
AR	191.103.50.211	Argentina
AR	201.219.181.198	Argentina
BD	203.76.147.70	Bangladesh
BG	95.111.23.132	Bulgaria
CL	181.43.34.164	Chile
CL	190.91.92.204	Chile
CO	200.80.43.248	Colombia
CZ	80.188.121.251	Czech Republic
IN	106.216.224.76	India
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	62.18.148.104	Italy
IT	79.50.132.140	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.132.170.35	Mexico
PE	190.12.65.146	Peru
PE	200.110.35.150	Peru
PK	103.4.92.88	Pakistan
PT	78.130.75.207	Portugal
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	68.114.102.5	United States
US	68.184.59.98	United States
US	71.91.111.68	United States
US	74.128.103.194	United States
UZ	89.236.219.106	Uzbekistan

List from greylisting:

Botnet Statistics [2014-10-06]

detection period: 2014-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 2028
number of botnet IPs notified to network operators: 1941
number of spam blocked: 139322
recipient count of spam blocked: 4180922

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1166
2	CHINANET-GD	90
3	CRTC	67
4	CHINANET-SN	27
5	CHINANET-JS	27
6	ZJU-CN	21
7	CHINANET-LN	19
8	UNICOM-GD	12
9	VNPT-VNNIC-VN	11
10	UNICOM-BJ	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1171
2	China	398
3	United States	85
4	Russian Federation	44
5	Brazil	34
6	Indonesia	25
7	Viet Nam	21
8	Argentina	16
9	Poland	13
10	Iran	13