Suspected Bot List [2014-11-29]

detection period: 2014-11-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CM	195.24.217.58	Cameroon
GB	176.35.77.154	United Kingdom
IN	59.176.110.228	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
LB	62.84.79.242	Lebanon
PH	58.69.100.234	Philippines
RU	193.107.19.105	Russian Federation
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	68.188.75.219	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela

List from greylisting:

Botnet Statistics [2014-11-29]

detection period: 2014-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1156
number of botnet IPs notified to network operators: 1122
number of spam blocked: 68899
recipient count of spam blocked: 2335274

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	577
2	CHINANET-GD	62
3	BROADRIVER	54
4	UNICOM-SD	15
5	UNICOM-GD	14
6	UNICOM-HA	13
7	CHINANET-ZJ	8
8	UNICOM-HL	7
9	KORNET-KR	7
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	587
2	China	227
3	United States	117
4	Russian Federation	28
5	Indonesia	18
6	Iran	12
7	Brazil	12
8	South Korea	11
9	Viet Nam	10
10	Ukraine	10

Suspected Bot List [2014-11-28]

detection period: 2014-11-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
CM	195.24.217.58	Cameroon
IN	59.90.91.95	India
IN	59.176.110.228	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela

List from greylisting:

Botnet Statistics [2014-11-28]

detection period: 2014-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1338
number of botnet IPs notified to network operators: 1298
number of spam blocked: 82818
recipient count of spam blocked: 2808792

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	782
2	BROADRIVER	51
3	CHINANET-GD	27
4	UNICOM-HA	20
5	UNICOM-SD	17
6	UNICOM-HL	12
7	UNICOM-GD	12
8	CHINANET-JX	11
9	UNICOM-SC	7
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	787
2	China	225
3	United States	104
4	Russian Federation	28
5	Brazil	15
6	South Korea	12
7	Indonesia	12
8	India	11
9	Hong Kong	9
10	Poland	8

Suspected Bot List [2014-11-27]

detection period: 2014-11-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
CM	195.24.217.58	Cameroon
DZ	41.98.143.249	Algeria
IN	59.90.91.95	India
IN	59.176.110.228	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-27]

detection period: 2014-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1364
number of botnet IPs notified to network operators: 1333
number of spam blocked: 86979
recipient count of spam blocked: 2961276

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	803
2	BROADRIVER	51
3	UNICOM-FJ	41
4	CHINANET-GD	41
5	UNICOM-SD	15
6	CHINANET-JX	12
7	UNICOM-HA	9
8	UNICOM-CN	9
9	UNICOM-HL	8
10	CHINANET-ZJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	807
2	China	246
3	United States	105
4	Russian Federation	23
5	Brazil	18
6	Indonesia	13
7	France	10
8	Viet Nam	9
9	Poland	9
10	India	9

Suspected Bot List [2014-11-26]

detection period: 2014-11-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BI	197.231.251.3	Burundi
CL	200.111.103.69	Chile
CM	195.24.217.58	Cameroon
GB	176.35.77.154	United Kingdom
IN	59.176.110.228	India
IN	210.212.119.74	India
IR	82.99.220.219	Iran
IR	91.99.8.141	Iran
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
LB	62.84.79.242	Lebanon
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-26]

detection period: 2014-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1440
number of botnet IPs notified to network operators: 1385
number of spam blocked: 81089
recipient count of spam blocked: 2744579

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	769
2	CHINANET-GD	63
3	BROADRIVER	51
4	CHINANET-JX	24
5	UNICOM-SD	19
6	UNICOM-HA	18
7	UNICOM-FJ	17
8	CHINANET-AH	12
9	UNICOM-HL	10
10	CHINANET-ZJ	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	779
2	China	289
3	United States	104
4	Russian Federation	23
5	India	20
6	Brazil	18
7	Indonesia	17
8	Hong Kong	13
9	Iran	12
10	South Africa	11

Suspected Bot List [2014-11-25]

detection period: 2014-11-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IN	59.176.110.228	India
IR	82.99.220.219	Iran
IR	91.99.8.141	Iran
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
LB	62.84.79.242	Lebanon
PH	58.69.100.234	Philippines
RU	193.107.19.105	Russian Federation
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-25]

detection period: 2014-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1457
number of botnet IPs notified to network operators: 1395
number of spam blocked: 82090
recipient count of spam blocked: 2721024

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	766
2	CHINANET-GD	94
3	BROADRIVER	42
4	UNICOM-HA	18
5	UNICOM-SD	17
6	CHINANET-JX	12
7	CHINANET-ZJ	10
8	CMNET	9
9	CHINANET-AH	9
10	UNICOM-GD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	780
2	China	270
3	United States	94
4	Russian Federation	35
5	India	30
6	Indonesia	21
7	South Korea	15
8	South Africa	14
9	Viet Nam	14
10	Ukraine	13

Suspected Bot List [2014-11-24]

detection period: 2014-11-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CZ	88.83.233.160	Czech Republic
IN	59.176.110.228	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MX	200.76.251.78	Mexico
PH	58.69.100.234	Philippines
PL	212.109.162.83	Poland
RU	91.230.72.214	Russian Federation
RU	193.107.19.105	Russian Federation
TR	88.247.164.136	Turkey
UA	37.57.153.98	Ukraine
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.134.10.103	United States
VE	190.202.116.101	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-24]

detection period: 2014-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 935
number of botnet IPs notified to network operators: 858
number of spam blocked: 34734
recipient count of spam blocked: 1184491

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	299
2	CHINANET-GD	52
3	BROADRIVER	32
4	UNICOM-HA	25
5	UNICOM-SD	15
6	CMNET	14
7	UNICOM-FJ	13
8	UNKNOWN	11
9	UNICOM-HL	9
10	UNICOM-GD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	309
2	China	252
3	United States	82
4	Russian Federation	26
5	India	24
6	Indonesia	22
7	South Korea	17
8	Viet Nam	14
9	Brazil	14
10	South Africa	11

Suspected Bot List [2014-11-23]

detection period: 2014-11-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2014-11-23]

detection period: 2014-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 502
number of botnet IPs notified to network operators: 502
number of spam blocked: 33710
recipient count of spam blocked: 1003787

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	502

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	502

Suspected Bot List [2014-11-22]

detection period: 2014-11-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2014-11-22]

detection period: 2014-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1080
number of botnet IPs notified to network operators: 1055
number of spam blocked: 54446
recipient count of spam blocked: 1616962

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	780
2	CHINANET-GD	49
3	UNICOM-FJ	38
4	UNICOM-GD	10
5	KORNET-KR	6
6	UNICOM-CN	5
7	MSFT-GFS	5
8	HICHINA	5
9	CHINANET-AH	5
10	UNICOM-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	783
2	China	154
3	United States	26
4	India	15
5	Ukraine	9
6	Viet Nam	7
7	Russian Federation	7
8	South Korea	6
9	France	6
10	Spain	5

Suspected Bot List [2014-11-21]

detection period: 2014-11-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	194.33.124.42	Iran
PH	58.69.100.234	Philippines
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-21]

detection period: 2014-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1220
number of botnet IPs notified to network operators: 1151
number of spam blocked: 55223
recipient count of spam blocked: 1637480

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	794
2	CHINANET-GD	47
3	UNICOM-GD	14
4	UNICOM-HA	10
5	KORNET-KR	8
6	HICHINA	8
7	BSNLNET	6
8	VNPT-VNNIC-VN	5
9	BHARTI-IN	5
10	MSFT-GFS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	799
2	China	136
3	United States	33
4	India	28
5	Russian Federation	27
6	Indonesia	20
7	South Korea	15
8	Viet Nam	12
9	Turkey	11
10	Brazil	9

Suspected Bot List [2014-11-20]

detection period: 2014-11-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-20]

detection period: 2014-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1232
number of botnet IPs notified to network operators: 1198
number of spam blocked: 67792
recipient count of spam blocked: 2082388

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	807
2	CHINANET-GD	88
3	UNICOM-GD	12
4	HICHINA	12
5	CHINANET-JX	10
6	UNICOM-HA	9
7	UNICOM-SD	4
8	CHINANET-SH	4
9	CHINANET-JS	4
10	VNPT-VNNIC-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	814
2	China	194
3	United States	33
4	Russian Federation	28
5	Brazil	17
6	Indonesia	14
7	Viet Nam	10
8	South Korea	8
9	Iran	8
10	Poland	6

Suspected Bot List [2014-11-19]

detection period: 2014-11-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-19]

detection period: 2014-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1293
number of botnet IPs notified to network operators: 1246
number of spam blocked: 78457
recipient count of spam blocked: 2503081

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	839
2	CHINANET-GD	72
3	UNICOM-GD	14
4	CHINANET-JX	14
5	HICHINA	11
6	KORNET-KR	7
7	VNPT-VNNIC-VN	5
8	UNICOM-SD	5
9	TFN-NET	5
10	CHINANET-SH	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	847
2	China	189
3	United States	30
4	Russian Federation	22
5	Brazil	16
6	South Korea	15
7	India	15
8	Indonesia	13
9	Viet Nam	11
10	Iran	8

Suspected Bot List [2014-11-18]

detection period: 2014-11-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IR	194.33.124.42	Iran
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-18]

detection period: 2014-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1388
number of botnet IPs notified to network operators: 1339
number of spam blocked: 83228
recipient count of spam blocked: 2738221

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	823
2	CHINANET-GD	138
3	UNICOM-GD	19
4	MSFT-GFS	17
5	CHINANET-JX	9
6	UNICOM-FJ	8
7	HICHINA	8
8	KORNET-KR	7
9	AE-EMIRNET-20040120	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	828
2	China	245
3	United States	55
4	Russian Federation	28
5	Indonesia	23
6	India	17
7	Viet Nam	16
8	Brazil	16
9	Arab Emirates	14
10	Turkey	12

Suspected Bot List [2014-11-17]

detection period: 2014-11-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-17]

detection period: 2014-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1301
number of botnet IPs notified to network operators: 1237
number of spam blocked: 89832
recipient count of spam blocked: 2986033

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	817
2	CHINANET-GD	56
3	VNPT-VNNIC-VN	40
4	UNICOM-GD	14
5	UNICOM-SD	8
6	BHARTI-IN	8
7	VIETEL-VNNIC-VN	7
8	HICHINA	7
9	TFN-NET	6
10	TELKOMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	834
2	China	153
3	Viet Nam	55
4	United States	38
5	Indonesia	25
6	India	18
7	Russian Federation	17
8	Brazil	13
9	Argentina	13
10	Iran	8

Suspected Bot List [2014-11-16]

detection period: 2014-11-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 80

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	194.33.124.42	Iran
LB	62.84.79.245	Lebanon
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-16]

detection period: 2014-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1507
number of botnet IPs notified to network operators: 1427
number of spam blocked: 94822
recipient count of spam blocked: 3163432

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	824
2	VNPT-VNNIC-VN	103
3	CHINANET-GD	63
4	VIETEL-VNNIC-VN	18
5	CHINANET-HB	16
6	UNICOM-GD	11
7	UNICOM-SD	8
8	CHINANET-JS	6
9	ADSL-CUSTOMER-CONNECTION	6
10	CHINANET-SH	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	839
2	China	168
3	Viet Nam	143
4	United States	33
5	Poland	22
6	Brazil	20
7	Indonesia	19
8	United Kingdom	19
9	India	18
10	Russian Federation	17

Suspected Bot List [2014-11-15]

detection period: 2014-11-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 68

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	59.176.110.228	India
IN	117.218.50.134	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.20	Italy
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
UZ	89.236.219.106	Uzbekistan
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
ZA	197.245.7.103	South Africa

List from greylisting:

Botnet Statistics [2014-11-15]

detection period: 2014-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1346
number of botnet IPs notified to network operators: 1278
number of spam blocked: 99139
recipient count of spam blocked: 3296272

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	820
2	CHINANET-GD	35
3	CHINANET-HB	26
4	UNICOM-FJ	24
5	UNICOM-SD	13
6	VNPT-VNNIC-VN	12
7	UNICOM-GD	6
8	CHINANET-JS	6
9	BHARTI-IN	5
10	VIETEL-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	829
2	China	179
3	United States	43
4	Viet Nam	26
5	Indonesia	24
6	Brazil	21
7	Russian Federation	20
8	India	14
9	Argentina	13
10	Iran	12

Suspected Bot List [2014-11-14]

detection period: 2014-11-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 86

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	59.176.110.228	India
IN	117.218.50.134	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
UZ	89.236.219.106	Uzbekistan
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela

List from greylisting:

Botnet Statistics [2014-11-14]

detection period: 2014-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1471
number of botnet IPs notified to network operators: 1385
number of spam blocked: 81431
recipient count of spam blocked: 2574819

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	846
2	CHINANET-GD	62
3	CHINANET-HB	42
4	UNICOM-SD	25
5	UNICOM-GD	10
6	TFN-NET	7
7	KORNET-KR	7
8	HICHINA	7
9	RCOM	6
10	CL-ECSA-LACNIC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	859
2	China	231
3	Russian Federation	51
4	United States	42
5	India	28
6	Indonesia	27
7	Viet Nam	18
8	Turkey	17
9	South Korea	15
10	Iran	15

Suspected Bot List [2014-11-12]

detection period: 2014-11-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
GB	176.35.77.154	United Kingdom
IR	91.98.234.195	Iran
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-12]

detection period: 2014-11-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1274
number of botnet IPs notified to network operators: 1245
number of spam blocked: 92465
recipient count of spam blocked: 3039577

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	817
2	CHINANET-GD	108
3	CHINANET-HB	39
4	UNICOM-GD	14
5	UNICOM-SD	5
6	UNICOM-BJ	5
7	TFN-NET	5
8	HICHINA	5
9	CHINANET-JX	5
10	UNICOM-HN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	825
2	China	248
3	United States	48
4	Indonesia	17
5	Viet Nam	12
6	Brazil	12
7	Russian Federation	11
8	Poland	10
9	Hong Kong	8
10	United Kingdom	8

Suspected Bots' IP List for November 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-11-30]
Suspected Bots IP [2014-11-29]
Suspected Bots IP [2014-11-28]
Suspected Bots IP [2014-11-27]
Suspected Bots IP [2014-11-26]
Suspected Bots IP [2014-11-25]
Suspected Bots IP [2014-11-24]
Suspected Bots IP [2014-11-23]
Suspected Bots IP [2014-11-22]
Suspected Bots IP [2014-11-21]
Suspected Bots IP [2014-11-20]
Suspected Bots IP [2014-11-19]
Suspected Bots IP [2014-11-18]
Suspected Bots IP [2014-11-17]
Suspected Bots IP [2014-11-16]
Suspected Bots IP [2014-11-15]
Suspected Bots IP [2014-11-14]
Suspected Bots IP [2014-11-12]
Suspected Bots IP [2014-11-11]
Suspected Bots IP [2014-11-10]
Suspected Bots IP [2014-11-09]
Suspected Bots IP [2014-11-08]
Suspected Bots IP [2014-11-07]
Suspected Bots IP [2014-11-06]
Suspected Bots IP [2014-11-05]
Suspected Bots IP [2014-11-04]
Suspected Bots IP [2014-11-03]
Suspected Bots IP [2014-11-02]
Suspected Bots IP [2014-11-01]

Suspected Bot List [2014-11-11]

detection period: 2014-11-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	91.98.234.195	Iran
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
SD	196.202.153.146	Sudan
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-11]

detection period: 2014-11-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1504
number of botnet IPs notified to network operators: 1409
number of spam blocked: 98484
recipient count of spam blocked: 3264212

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	801
2	CHINANET-GD	73
3	CHINANET-HB	42
4	UNICOM-FJ	16
5	UNICOM-SD	15
6	CHINANET-JX	13
7	KORNET-KR	12
8	UNICOM-GD	8
9	HICHINA	7
10	MX-USCV4-LACNIC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	810
2	China	260
3	United States	80
4	Russian Federation	42
5	South Korea	25
6	Indonesia	17
7	Brazil	16
8	Turkey	15
9	Chile	15
10	Mexico	13

Suspected Bot List [2014-11-10]

detection period: 2014-11-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	91.98.234.195	Iran
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
SD	196.202.153.146	Sudan
US	23.88.2.15	United States
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	201.248.227.12	Venezuela
ZA	209.203.59.30	South Africa

List from greylisting:

Botnet Statistics [2014-11-10]

detection period: 2014-11-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1526
number of botnet IPs notified to network operators: 1449
number of spam blocked: 117473
recipient count of spam blocked: 3487669

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	795
2	CHINANET-GD	69
3	CHINANET-HB	52
4	KORNET-KR	30
5	UNICOM-SD	14
6	CHINANET-JX	14
7	BORANET-KR	14
8	VNPT-VNNIC-VN	11
9	UNICOM-GD	10
10	AE-EMIRNET-20040120	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	808
2	China	260
3	South Korea	58
4	United States	54
5	Russian Federation	46
6	Indonesia	31
7	India	29
8	Viet Nam	28
9	Arab Emirates	17
10	Hong Kong	14

Suspected Bot List [2014-11-09]

detection period: 2014-11-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
CL	200.111.103.69	Chile
EG	62.117.58.109	Egypt
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	117.240.116.226	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
SD	196.202.153.146	Sudan
SG	116.251.209.66	Singapore
TR	88.247.164.136	Turkey
US	23.88.2.15	United States
US	23.245.213.51	United States
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	200.84.152.112	Venezuela
VE	201.248.227.12	Venezuela
ZA	209.203.59.30	South Africa

List from greylisting:

Botnet Statistics [2014-11-09]

detection period: 2014-11-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1263
number of botnet IPs notified to network operators: 1228
number of spam blocked: 116346
recipient count of spam blocked: 3448893

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	770
2	CHINANET-GD	73
3	CHINANET-HB	36
4	UNICOM-SD	19
5	ALIBABA-US-CDN	12
6	UNICOM-BJ	11
7	HICHINA	8
8	CHINANET-JX	8
9	UNICOM-HA	6
10	UNICOM-GD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	775
2	China	253
3	United States	54
4	Russian Federation	21
5	Indonesia	18
6	Hong Kong	16
7	Brazil	11
8	United Kingdom	10
9	Viet Nam	9
10	Iran	9

Suspected Bot List [2014-11-08]

detection period: 2014-11-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.109.53.240	Argentina
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
EG	62.117.58.109	Egypt
GB	176.35.77.154	United Kingdom
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
LB	62.84.79.245	Lebanon
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
RU	95.188.112.11	Russian Federation
SD	196.202.153.146	Sudan
SG	116.251.209.66	Singapore
TR	88.247.164.136	Turkey
US	23.89.232.22	United States
US	23.245.213.51	United States
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
UZ	89.236.219.106	Uzbekistan
VE	200.84.152.112	Venezuela
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-08]

detection period: 2014-11-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1222
number of botnet IPs notified to network operators: 1185
number of spam blocked: 119653
recipient count of spam blocked: 3480424

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	765
2	CHINANET-GD	66
3	CHINANET-HB	28
4	ALIBABA-US-CDN	15
5	UNICOM-BJ	10
6	HICHINA	6
7	CHINANET-JX	6
8	UNICOM-SD	5
9	UNICOM-HA	5
10	CHINANET-JS	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	769
2	China	205
3	United States	65
4	Russian Federation	20
5	Indonesia	17
6	Hong Kong	16
7	Iran	11
8	Brazil	11
9	United Kingdom	10
10	Viet Nam	9

Suspected Bot List [2014-11-07]

detection period: 2014-11-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
GB	176.35.77.154	United Kingdom
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
LB	62.84.79.245	Lebanon
LB	194.126.140.247	Lebanon
PH	58.69.100.234	Philippines
PK	202.154.226.90	Pakistan
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	75.133.246.119	United States
US	174.139.8.82	United States
UZ	89.236.219.106	Uzbekistan
VE	201.248.227.12	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-11-07]

detection period: 2014-11-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1259
number of botnet IPs notified to network operators: 1225
number of spam blocked: 116892
recipient count of spam blocked: 3397091

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	780
2	CHINANET-GD	78
3	CHINANET-HB	19
4	UNICOM-HA	11
5	UNICOM-BJ	9
6	ALIBABA-US-CDN	9
7	UNICOM-SD	7
8	HICHINA	7
9	TFN-NET	5
10	TELKOMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	788
2	China	215
3	United States	69
4	Indonesia	21
5	Russian Federation	20
6	Hong Kong	16
7	Brazil	13
8	United Kingdom	12
9	Viet Nam	11
10	Iran	9

Suspected Bot List [2014-11-06]

detection period: 2014-11-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
LB	62.84.79.245	Lebanon
LB	194.126.140.247	Lebanon
PK	202.154.226.90	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-06]

detection period: 2014-11-06 00:00-23:59 UTC
total number of suspected botnet IPs: 1373
number of botnet IPs notified to network operators: 1322
number of spam blocked: 119083
recipient count of spam blocked: 3505193

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	781
2	CHINANET-GD	94
3	CHINANET-HB	34
4	CHINANET-JX	15
5	UNICOM-HA	13
6	UNICOM-BJ	13
7	UNICOM-SD	12
8	ALIBABA-US-CDN	7
9	UNICOM-GD	6
10	HICHINA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	786
2	China	276
3	United States	67
4	Russian Federation	26
5	Indonesia	22
6	Hong Kong	15
7	Viet Nam	14
8	Brazil	14
9	India	11
10	United Kingdom	11

Suspected Bot List [2014-11-05]

detection period: 2014-11-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	190.60.39.186	Colombia
IN	59.180.233.90	India
IR	91.98.234.195	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-05]

detection period: 2014-11-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1425
number of botnet IPs notified to network operators: 1388
number of spam blocked: 111521
recipient count of spam blocked: 3033116

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	857
2	CHINANET-GD	79
3	CHINANET-HB	42
4	MSFT-GFS	17
5	UNICOM-BJ	16
6	UNICOM-HA	15
7	UNICOM-SD	14
8	ALIBABA-US-CDN	11
9	UNICOM-GD	8
10	TFN-NET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	865
2	China	260
3	United States	95
4	Indonesia	21
5	Russian Federation	18
6	United Kingdom	14
7	Brazil	14
8	Hong Kong	12
9	Viet Nam	11
10	Iran	10

Suspected Bot List [2014-11-04]

detection period: 2014-11-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2014-11-04]

detection period: 2014-11-04 00:00-23:59 UTC
total number of suspected botnet IPs: 1465
number of botnet IPs notified to network operators: 1396
number of spam blocked: 111163
recipient count of spam blocked: 2922192

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	892
2	CHINANET-GD	57
3	CHINANET-HB	45
4	UNICOM-BJ	15
5	UNICOM-HA	14
6	CHINANET-JX	10
7	UNICOM-SD	9
8	ALIBABA-US-CDN	9
9	UNICOM-GD	6
10	HICHINA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	897
2	China	226
3	United States	73
4	India	32
5	Russian Federation	20
6	Indonesia	19
7	United Kingdom	16
8	Brazil	16
9	South Korea	13
10	Viet Nam	12

Suspected Bot List [2014-11-03]

detection period: 2014-11-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
IN	59.180.233.90	India
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LB	62.84.79.245	Lebanon
MX	201.116.227.163	Mexico
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela
VE	201.248.227.12	Venezuela

List from greylisting:

Botnet Statistics [2014-11-03]

detection period: 2014-11-03 00:00-23:59 UTC
total number of suspected botnet IPs: 1529
number of botnet IPs notified to network operators: 1452
number of spam blocked: 110217
recipient count of spam blocked: 2959572

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	892
2	CHINANET-GD	69
3	CHINANET-HB	50
4	UNICOM-FJ	16
5	UNICOM-HA	14
6	ALIBABA-US-CDN	9
7	VNPT-VNNIC-VN	7
8	HICHINA	7
9	CHINANET-JX	7
10	BT-CENTRAL-PLUS	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	901
2	China	245
3	United States	67
4	United Kingdom	31
5	India	27
6	Russian Federation	20
7	Indonesia	20
8	Viet Nam	19
9	Brazil	16
10	South Korea	15