Suspected Bot List [2015-01-30]

detection period: 2015-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 85

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	200.87.111.202	Bolivia
EC	201.219.60.85	Ecuador
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.46.10	Indonesia
ID	182.30.250.88	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	203.190.116.11	Indonesia
ID	203.201.172.162	Indonesia
IN	27.251.38.135	India
IN	117.247.244.167	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
US	69.197.135.216	United States
ZA	196.201.7.31	South Africa

List from greylisting:

Botnet Statistics [2015-01-30]

detection period: 2015-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 975
number of botnet IPs notified to network operators: 890
number of spam blocked: 40246
recipient count of spam blocked: 1548170

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	200
2	CHINANET-GD	116
3	UNICOM-GD	108
4	KORNET-KR	20
5	UNICOM-FJ	19
6	BORANET-KR	10
7	CHINANET-FJ	8
8	VNPT-VNNIC-VN	7
9	CMNET	7
10	UNICOM-HA	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	380
2	Taiwan	210
3	Russian Federation	54
4	United States	46
5	South Korea	43
6	Indonesia	31
7	Viet Nam	16
8	Brazil	14
9	Hong Kong	13
10	India	11

Suspected Bot List [2015-01-29]

detection period: 2015-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	182.30.250.88	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	203.190.116.11	Indonesia
IN	27.251.38.135	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	69.197.135.216	United States

List from greylisting:

Botnet Statistics [2015-01-29]

detection period: 2015-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1152
number of botnet IPs notified to network operators: 1109
number of spam blocked: 33751
recipient count of spam blocked: 1077326

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	636
2	CHINANET-GD	157
3	UNICOM-GD	92
4	HICHINA	6
5	UNICOM-BJ	4
6	CRTC	4
7	CHINANET-ZJ	4
8	CHINANET-FJ	4
9	UNICOM-HA	3
10	UNICOM-FJ	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	638
2	China	340
3	United States	29
4	Indonesia	18
5	Russian Federation	9
6	Iran	9
7	Viet Nam	8
8	Hong Kong	8
9	Germany	8
10	Brazil	8

Suspected Bot List [2015-01-28]

detection period: 2015-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
CA	167.114.71.58	Canada
GT	190.4.19.250	Guatemala
ID	119.82.240.46	Indonesia
ID	180.250.46.10	Indonesia
ID	202.77.108.60	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
IR	94.183.247.79	Iran
NG	41.73.20.98	Nigeria

List from greylisting:

Botnet Statistics [2015-01-28]

detection period: 2015-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 778
number of botnet IPs notified to network operators: 751
number of spam blocked: 50734
recipient count of spam blocked: 1498734

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	345
2	CHINANET-GD	133
3	UNICOM-GD	79
4	UNICOM-FJ	22
5	CMNET	9
6	HICHINA	7
7	UNICOM-CN	6
8	UNICOM-SD	4
9	CHINANET-ZJ	4
10	VNPT-VNNIC-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	348
2	China	312
3	United States	19
4	South Korea	10
5	Viet Nam	9
6	Iran	7
7	Indonesia	6
8	Brazil	6
9	Russian Federation	5
10	India	5

Suspected Bot List [2015-01-27]

detection period: 2015-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
CA	167.114.71.58	Canada
GT	190.4.19.250	Guatemala
ID	119.82.240.46	Indonesia
ID	180.250.46.10	Indonesia
ID	202.77.108.60	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
IR	94.183.247.79	Iran
NG	41.73.20.98	Nigeria

List from greylisting:

Botnet Statistics [2015-01-27]

detection period: 2015-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 519
number of botnet IPs notified to network operators: 485
number of spam blocked: 102118
recipient count of spam blocked: 3020283

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	117
2	UNICOM-GD	109
3	UNICOM-FJ	43
4	HINET-NET	40
5	CMNET	9
6	CHINANET-JS	6
7	UNICOM-SD	5
8	UNICOM-HA	4
9	HICHINA	4
10	CHINANET-FJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	343
2	Taiwan	44
3	United States	27
4	Russian Federation	20
5	Indonesia	8
6	Iran	6
7	India	6
8	Brazil	5
9	Ukraine	4
10	South Korea	4

Suspected Bot List [2015-01-26]

detection period: 2015-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
CA	167.114.71.58	Canada
GT	190.4.19.250	Guatemala
ID	119.82.240.46	Indonesia
ID	180.250.46.10	Indonesia
ID	202.77.108.60	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	223.165.7.34	Indonesia
IR	94.183.247.79	Iran
NG	41.73.20.98	Nigeria

List from greylisting:

Botnet Statistics [2015-01-26]

detection period: 2015-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 615
number of botnet IPs notified to network operators: 584
number of spam blocked: 75969
recipient count of spam blocked: 2248276

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	189
2	UNICOM-GD	112
3	HINET-NET	34
4	VNPT-VNNIC-VN	15
5	CMNET	9
6	UNICOM-FJ	8
7	UNICOM-SD	6
8	KORNET-KR	6
9	CHINANET-JX	6
10	HICHINA	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	401
2	Taiwan	40
3	Viet Nam	28
4	United States	26
5	South Korea	14
6	Iran	8
7	Indonesia	8
8	Russian Federation	5
9	Spain	5
10	Brazil	5

Suspected Bot List [2015-01-25]

detection period: 2015-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
CA	167.114.71.58	Canada
GT	190.4.19.250	Guatemala
ID	119.82.240.46	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	223.165.7.34	Indonesia
IR	94.183.247.79	Iran

List from greylisting:

Botnet Statistics [2015-01-25]

detection period: 2015-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 473
number of botnet IPs notified to network operators: 453
number of spam blocked: 80049
recipient count of spam blocked: 2368845

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	122
2	UNICOM-GD	111
3	HINET-NET	39
4	HICHINA	10
5	CHINANET-JX	10
6	SUDJAM01-CUST-GAGGLE	9
7	CMNET	9
8	UNICOM-BJ	6
9	UNICOM-SD	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	321
2	Taiwan	40
3	United States	30
4	Iran	10
5	Indonesia	7
6	Brazil	7
7	Hong Kong	5
8	Viet Nam	4
9	Russian Federation	4
10	France	4

Suspected Bot List [2015-01-24]

detection period: 2015-01-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
BD	203.76.147.70	Bangladesh
CA	167.114.71.58	Canada
ID	114.6.45.106	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	223.165.7.34	Indonesia
IN	117.247.244.167	India
IR	194.33.124.42	Iran
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States

List from greylisting:

Botnet Statistics [2015-01-24]

detection period: 2015-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 626
number of botnet IPs notified to network operators: 589
number of spam blocked: 86332
recipient count of spam blocked: 2562902

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	225
2	UNICOM-GD	113
3	HINET-NET	40
4	CMNET	9
5	VNPT-VNNIC-VN	8
6	HICHINA	7
7	UNICOM-SD	5
8	CHINANET-JX	5
9	KORNET-KR	4
10	CHINANET-JS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	431
2	Taiwan	44
3	United States	30
4	Viet Nam	14
5	Indonesia	10
6	Russian Federation	9
7	South Korea	7
8	Iran	7
9	Brazil	6
10	Bangladesh	5

Suspected Bot List [2015-01-23]

detection period: 2015-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 71

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	167.114.71.58	Canada
ID	114.6.45.106	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	182.30.250.242	Indonesia
ID	182.253.25.5	Indonesia
ID	202.77.108.60	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	223.165.7.34	Indonesia
IN	117.247.244.167	India
IR	194.33.124.42	Iran
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
PL	94.42.81.51	Poland
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States
US	198.1.98.214	United States

List from greylisting:

Botnet Statistics [2015-01-23]

detection period: 2015-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 820
number of botnet IPs notified to network operators: 749
number of spam blocked: 100971
recipient count of spam blocked: 3097027

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	186
2	CRTC	127
3	UNICOM-GD	110
4	HINET-NET	29
5	OCN	14
6	CMNET	13
7	VNPT-VNNIC-VN	7
8	ERX-NETBLOCK	7
9	UNICOM-SD	6
10	HICHINA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	523
2	Taiwan	41
3	United States	36
4	Japan	24
5	Viet Nam	15
6	Indonesia	15
7	Brazil	13
8	South Korea	12
9	Spain	12
10	Poland	8

Suspected Bot List [2015-01-22]

detection period: 2015-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
BD	203.76.147.70	Bangladesh
CA	167.114.71.58	Canada
ID	114.6.45.106	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.242	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	223.165.7.34	Indonesia
IN	117.247.244.167	India
IR	94.183.247.79	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
MX	187.163.164.233	Mexico
NG	41.73.20.98	Nigeria
PH	58.69.100.234	Philippines
PK	125.209.116.29	Pakistan
PL	91.192.206.101	Poland
PL	94.42.81.51	Poland
RU	95.188.112.11	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States

List from greylisting:

Botnet Statistics [2015-01-22]

detection period: 2015-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 702
number of botnet IPs notified to network operators: 656
number of spam blocked: 100875
recipient count of spam blocked: 3363668

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	109
2	CHINANET-GD	108
3	UNICOM-GD	92
4	UNICOM-FJ	48
5	HINET-NET	25
6	CMNET	20
7	UNICOM-CN	10
8	KORNET-KR	7
9	CHINANET-FJ	7
10	UNICOM-SD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	487
2	United States	35
3	Taiwan	30
4	Indonesia	15
5	South Korea	12
6	Iran	12
7	Russian Federation	9
8	Brazil	8
9	Viet Nam	7
10	Poland	7

Suspected Bot List [2015-01-21]

detection period: 2015-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.191.198	Bangladesh
BD	203.76.147.70	Bangladesh
CA	167.114.71.58	Canada
EG	41.33.238.163	Egypt
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.242	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	223.165.7.34	Indonesia
IN	117.247.244.167	India
IR	94.183.247.79	Iran
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
MX	187.163.164.233	Mexico
NG	41.73.20.98	Nigeria
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States
VN	103.27.236.144	Viet Nam

List from greylisting:

Botnet Statistics [2015-01-21]

detection period: 2015-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 725
number of botnet IPs notified to network operators: 677
number of spam blocked: 94274
recipient count of spam blocked: 3244900

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	159
2	UNICOM-GD	83
3	CHINANET-GD	72
4	UNICOM-FJ	56
5	HINET-NET	20
6	CMNET	19
7	HICHINA	10
8	KORNET-KR	8
9	CHINANET-JS	8
10	UNICOM-SD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	508
2	United States	34
3	Taiwan	29
4	Indonesia	16
5	South Korea	13
6	Iran	11
7	Brazil	11
8	Russian Federation	8
9	Hong Kong	7
10	Viet Nam	6

Suspected Bot List [2015-01-20]

detection period: 2015-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.242	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	223.165.7.34	Indonesia
IN	117.247.244.167	India
IR	94.183.247.79	Iran
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
MX	187.210.37.36	Mexico
NG	41.73.20.98	Nigeria
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
RU	95.188.112.11	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States

List from greylisting:

Botnet Statistics [2015-01-20]

detection period: 2015-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 756
number of botnet IPs notified to network operators: 708
number of spam blocked: 86918
recipient count of spam blocked: 3099176

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	152
2	CHINANET-GD	96
3	UNICOM-GD	76
4	UNICOM-FJ	54
5	CMNET	17
6	HINET-NET	13
7	MSFT-GFS	10
8	HICHINA	10
9	KORNET-KR	7
10	MSFT	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	506
2	United States	59
3	Taiwan	24
4	Indonesia	19
5	South Korea	14
6	Brazil	13
7	Iran	11
8	Viet Nam	9
9	Russian Federation	9
10	Ukraine	6

Suspected Bot List [2015-01-19]

detection period: 2015-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 92

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.138	Indonesia
ID	182.30.250.242	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	223.165.7.34	Indonesia
IN	1.186.80.26	India
IN	117.244.15.248	India
IN	117.247.244.167	India
IR	94.183.247.79	Iran
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
MX	187.163.164.233	Mexico
MX	187.210.37.36	Mexico
NG	41.73.20.98	Nigeria
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
RU	95.188.112.11	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States

List from greylisting:

Botnet Statistics [2015-01-19]

detection period: 2015-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1029
number of botnet IPs notified to network operators: 937
number of spam blocked: 78124
recipient count of spam blocked: 2912862

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	218
2	CRTC	185
3	UNICOM-GD	71
4	UNICOM-FJ	46
5	HINET-NET	17
6	CMNET	16
7	KORNET-KR	8
8	HICHINA	8
9	BSNLNET	8
10	UNICOM-CN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	663
2	United States	51
3	Taiwan	31
4	Indonesia	19
5	Viet Nam	18
6	Spain	17
7	Brazil	17
8	India	14
9	South Korea	13
10	Italy	13

Suspected Bot List [2015-01-18]

detection period: 2015-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.138	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	223.165.7.34	Indonesia
IN	1.186.80.26	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
MX	187.163.164.233	Mexico
MX	187.210.37.36	Mexico
NG	41.73.20.98	Nigeria
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
RU	95.188.112.11	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	96.44.166.162	United States

List from greylisting:

Botnet Statistics [2015-01-18]

detection period: 2015-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 854
number of botnet IPs notified to network operators: 802
number of spam blocked: 73973
recipient count of spam blocked: 2770678

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	228
2	CHINANET-GD	215
3	UNICOM-GD	62
4	CHINANET-HN	17
5	HINET-NET	15
6	CHINANET-JS	10
7	HICHINA	8
8	CMNET	8
9	KORNET-KR	7
10	UNICOM-SD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	627
2	United States	30
3	Taiwan	20
4	Indonesia	19
5	Brazil	13
6	South Korea	11
7	Iran	11
8	Viet Nam	9
9	Russian Federation	9
10	Argentina	7

Suspected Bot List [2015-01-17]

detection period: 2015-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AM	37.252.89.174	Armenia
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.73.2	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.138	Indonesia
ID	182.30.251.165	Indonesia
ID	182.30.251.251	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	223.165.7.34	Indonesia
IN	1.186.80.26	India
IN	117.218.50.134	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
PL	178.217.34.134	Poland
RU	95.188.112.11	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	69.197.135.216	United States
US	96.44.166.162	United States
US	198.1.98.214	United States

List from greylisting:

Botnet Statistics [2015-01-17]

detection period: 2015-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 667
number of botnet IPs notified to network operators: 617
number of spam blocked: 73197
recipient count of spam blocked: 2754953

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	189
2	CRTC	66
3	UNICOM-GD	61
4	HINET-NET	13
5	KORNET-KR	10
6	HICHINA	8
7	CMNET	7
8	CHINANET-JX	7
9	CHINANET-JS	6
10	UNICOM-SD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	445
2	United States	29
3	Indonesia	23
4	Taiwan	19
5	Brazil	16
6	Russian Federation	14
7	Viet Nam	13
8	South Korea	13
9	Iran	12
10	Ukraine	9

Suspected Bot List [2015-01-16]

detection period: 2015-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 111

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.46.10	Indonesia
ID	180.250.73.2	Indonesia
ID	182.30.251.165	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	203.153.100.83	Indonesia
ID	203.190.116.11	Indonesia
ID	223.165.7.34	Indonesia
IN	1.186.80.26	India
IN	117.218.50.134	India
IN	117.247.244.167	India
IR	94.182.162.73	Iran
IR	194.33.124.42	Iran
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
PL	178.217.34.134	Poland
RU	95.188.112.11	Russian Federation
SG	116.251.209.170	Singapore
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	69.197.135.216	United States
US	96.44.166.162	United States
US	198.1.98.214	United States
ZA	196.201.7.31	South Africa

List from greylisting:

Botnet Statistics [2015-01-16]

detection period: 2015-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 986
number of botnet IPs notified to network operators: 875
number of spam blocked: 74918
recipient count of spam blocked: 2825399

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	120
2	CHINANET-GD	79
3	UNICOM-GD	70
4	UNICOM-FJ	65
5	HINET-NET	18
6	KORNET-KR	14
7	HICHINA	9
8	CHINANET-JS	9
9	CMNET	8
10	UNICOM-CN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	477
2	Russian Federation	59
3	United States	52
4	Indonesia	32
5	Taiwan	27
6	South Korea	25
7	Ukraine	24
8	India	22
9	Viet Nam	20
10	Turkey	19

Suspected Bot List [2015-01-15]

detection period: 2015-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.252.166.100	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.46.10	Indonesia
ID	180.250.73.2	Indonesia
ID	202.124.205.101	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	203.135.182.250	Indonesia
ID	203.153.100.83	Indonesia
ID	203.190.116.11	Indonesia
ID	222.124.146.108	Indonesia
ID	223.165.7.34	Indonesia
IN	103.225.204.32	India
IN	117.247.244.167	India
IN	121.247.68.156	India
IR	194.33.124.42	Iran
IR	94.182.162.73	Iran
MN	203.91.119.146	Mongolia
PL	178.217.34.134	Poland
PL	91.192.206.101	Poland
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	198.1.98.214	United States
US	68.188.75.219	United States

List from greylisting:

Botnet Statistics [2015-01-15]

detection period: 2015-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 898
number of botnet IPs notified to network operators: 848
number of spam blocked: 74978
recipient count of spam blocked: 2767140

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	239
2	CRTC	92
3	UNICOM-GD	71
4	HINET-NET	59
5	UNICOM-FJ	53
6	CHINANET-HN	13
7	HICHINA	11
8	CHINANET-JS	11
9	CMNET	10
10	UNICOM-CN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	606
2	Taiwan	68
3	United States	42
4	Indonesia	24
5	Viet Nam	14
6	Brazil	13
7	South Korea	12
8	Russian Federation	11
9	Iran	9
10	Ukraine	7

Suspected Bot List [2015-01-14]

detection period: 2015-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 88

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	200.87.111.202	Bolivia
CZ	109.238.208.242	Czech Republic
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.252.166.100	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.167.131	Indonesia
ID	180.250.46.10	Indonesia
ID	182.30.251.55	Indonesia
ID	202.124.205.101	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	202.77.108.60	Indonesia
ID	203.135.182.250	Indonesia
ID	203.190.116.11	Indonesia
ID	223.165.7.34	Indonesia
IN	103.225.204.32	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
MN	203.91.119.146	Mongolia
PL	178.217.34.134	Poland
PL	91.192.206.101	Poland
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	174.139.238.172	United States
US	198.1.98.214	United States
US	68.188.75.219	United States

List from greylisting:

Botnet Statistics [2015-01-14]

detection period: 2015-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1166
number of botnet IPs notified to network operators: 1078
number of spam blocked: 142018
recipient count of spam blocked: 4709587

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	334
2	CRTC	217
3	HINET-NET	68
4	UNICOM-GD	51
5	UNICOM-FJ	31
6	CHINANET-JS	10
7	HICHINA	9
8	VNPT-VNNIC-VN	8
9	KORNET-KR	8
10	CHINANET-SH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	758
2	Taiwan	76
3	United States	41
4	Viet Nam	28
5	Indonesia	23
6	Brazil	22
7	Italy	15
8	Germany	15
9	South Korea	12
10	Poland	11

Suspected Bot List [2015-01-13]

detection period: 2015-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	200.87.111.202	Bolivia
CZ	109.238.208.242	Czech Republic
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.175.114	Indonesia
ID	118.98.117.75	Indonesia
ID	119.252.166.100	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.167.131	Indonesia
ID	180.250.46.10	Indonesia
ID	180.250.73.2	Indonesia
ID	182.30.251.55	Indonesia
ID	202.124.205.101	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	203.190.116.11	Indonesia
ID	223.165.7.34	Indonesia
IN	103.225.204.32	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	178.217.34.134	Poland
PL	91.192.206.101	Poland
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	174.139.238.172	United States
US	198.1.98.214	United States
US	68.188.75.219	United States

List from greylisting:

Botnet Statistics [2015-01-13]

detection period: 2015-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 942
number of botnet IPs notified to network operators: 893
number of spam blocked: 157507
recipient count of spam blocked: 5103765

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	229
2	CRTC	191
3	HINET-NET	61
4	UNICOM-GD	51
5	UNICOM-FJ	23
6	NETBLK-NOBIS-TECHNOLOGY-GROUP-18	23
7	CHINANET-JX	16
8	UNICOM-SD	8
9	UNICOM-HA	8
10	KORNET-KR	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	643
2	Taiwan	68
3	United States	60
4	Indonesia	23
5	Viet Nam	18
6	Brazil	11
7	South Korea	10
8	Iran	8
9	Hong Kong	8
10	UNKNOWN	6

Suspected Bot List [2015-01-12]

detection period: 2015-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CZ	109.238.208.242	Czech Republic
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.146.106	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.46.10	Indonesia
ID	180.250.73.2	Indonesia
ID	182.30.250.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.124.205.101	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	202.182.185.194	Indonesia
ID	203.135.182.250	Indonesia
ID	203.190.116.11	Indonesia
ID	223.165.7.34	Indonesia
IN	117.218.50.134	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	95.227.105.203	Italy
MN	203.91.119.146	Mongolia
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
PL	178.217.34.134	Poland
TR	88.247.164.136	Turkey
TW	180.176.90.186	Taiwan
US	68.188.75.219	United States
US	174.139.238.172	United States
US	198.154.63.131	United States

List from greylisting:

Botnet Statistics [2015-01-12]

detection period: 2015-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 875
number of botnet IPs notified to network operators: 822
number of spam blocked: 148247
recipient count of spam blocked: 4895914

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	182
2	CRTC	121
3	UNICOM-GD	58
4	HINET-NET	56
5	CHINANET-FJ	27
6	NETBLK-NOBIS-TECHNOLOGY-GROUP-18	23
7	UNICOM-FJ	20
8	UNICOM-HA	16
9	VNPT-VNNIC-VN	10
10	CHINANET-SH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	573
2	Taiwan	64
3	United States	55
4	Indonesia	25
5	Viet Nam	22
6	Russian Federation	11
7	Brazil	11
8	Iran	10
9	UNKNOWN	8
10	Hong Kong	7

Suspected Bots' IP List for January 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-01-31]
Suspected Bots IP [2015-01-30]
Suspected Bots IP [2015-01-29]
Suspected Bots IP [2015-01-28]
Suspected Bots IP [2015-01-27]
Suspected Bots IP [2015-01-26]
Suspected Bots IP [2015-01-25]
Suspected Bots IP [2015-01-24]
Suspected Bots IP [2015-01-23]
Suspected Bots IP [2015-01-22]
Suspected Bots IP [2015-01-21]
Suspected Bots IP [2015-01-20]
Suspected Bots IP [2015-01-19]
Suspected Bots IP [2015-01-18]
Suspected Bots IP [2015-01-17]
Suspected Bots IP [2015-01-16]
Suspected Bots IP [2015-01-15]
Suspected Bots IP [2015-01-14]
Suspected Bots IP [2015-01-13]
Suspected Bots IP [2015-01-12]
Suspected Bots IP [2015-01-11]
Suspected Bots IP [2015-01-10]
Suspected Bots IP [2015-01-09]
Suspected Bots IP [2015-01-08]
Suspected Bots IP [2015-01-07]
Suspected Bots IP [2015-01-06]
Suspected Bots IP [2015-01-05]
Suspected Bots IP [2015-01-04]
Suspected Bots IP [2015-01-03]
Suspected Bots IP [2015-01-02]
Suspected Bots IP [2015-01-01]

Suspected Bot List [2015-01-11]

detection period: 2015-01-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CZ	109.238.208.242	Czech Republic
ID	114.6.45.106	Indonesia
ID	118.97.146.106	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	180.250.46.10	Indonesia
ID	180.250.73.2	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.124.205.101	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.150.132.58	Indonesia
ID	202.150.139.134	Indonesia
ID	203.135.182.250	Indonesia
ID	203.190.116.11	Indonesia
ID	222.124.146.108	Indonesia
ID	223.165.7.34	Indonesia
IN	117.218.50.134	India
IN	117.247.244.167	India
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
MN	203.91.119.146	Mongolia
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
PL	178.217.34.134	Poland
TR	88.247.164.136	Turkey
US	68.188.75.219	United States
US	69.197.135.216	United States
US	198.154.63.131	United States

List from greylisting:

Botnet Statistics [2015-01-11]

detection period: 2015-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 805
number of botnet IPs notified to network operators: 758
number of spam blocked: 144253
recipient count of spam blocked: 4804323

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	180
2	CRTC	117
3	UNICOM-GD	53
4	HINET-NET	53
5	CHINANET-FJ	45
6	UNICOM-HA	13
7	CHINANET-HN	8
8	CHINANET-SN	7
9	CHINANET-JX	7
10	ALISOFT	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	528
2	Taiwan	59
3	United States	44
4	Indonesia	20
5	Viet Nam	18
6	Russian Federation	11
7	Iran	10
8	Brazil	10
9	South Korea	7
10	Hong Kong	7

Botnet Statistics for the year of 2014

detection period: 2014-01-01 00:00 - 2014-12-31 23:59 UTC
total number of suspected botnet IPs: 476581
number of blocked spams: 26490538
recipient count of blocked spams: 847739355
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	331136
2	Taiwan	63427
3	United States	8916
4	Viet Nam	8791
5	India	5983
6	Russian Federation	5008
7	Argentina	2991
8	Italy	2559
9	South Korea	2511
10	Brazil	2506
11	United Kingdom	2464
12	Peru	2401
13	France	2220
14	Indonesia	1651
15	Spain	1609
16	Chile	1565
17	Germany	1479
18	Colombia	1464
19	Poland	1424
20	Turkey	1367
21	Mexico	1272
22	Ukraine	1175
23	Iran	1134
24	Isreal	1049
25	Kazakhstan	1034

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	12013880
2	China	6660858
3	United States	1149260
4	Brazil	749321
5	Russian Federation	715848
6	Indonesia	663566
7	Hong Kong	332272
8	Saudi Arabia	300162
9	Iran	272697
10	Ukraine	269034
11	India	189967
12	South Korea	184997
13	Viet Nam	179720
14	Poland	169709
15	United Kingdom	154353
16	Malaysia	150996
17	Turkey	149129
18	Colombia	148257
19	Ivory Coast	135947
20	Italy	129012
21	Thailand	117765
22	Germany	102325
23	Bangladesh	102004
24	Philippines	83772
25	France	74414

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: