Suspected Bot List [2015-02-27]

detection period: 2015-02-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.118	Ecuador
ID	103.11.23.2	Indonesia
ID	114.6.45.106	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.96.120	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.218.50.134	India
IN	117.239.146.215	India
IN	121.247.68.156	India
IN	202.63.113.12	India
IN	219.65.189.63	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.135.216	United States
US	96.35.58.176	United States
US	208.69.30.211	United States
US	208.69.31.250	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-02-27]

detection period: 2015-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1350
number of botnet IPs notified to network operators: 1295
number of spam blocked: 115083
recipient count of spam blocked: 4121553

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	905
2	CHINANET-GD	68
3	UNICOM-FJ	27
4	KORNET-KR	6
5	CHINANET-JS	6
6	VNPT-VNNIC-VN	5
7	UNICOM-SD	4
8	CHINANET-ZJ	4
9	CHINANET-SH	4
10	002.558.134/0001-58	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	911
2	China	190
3	United States	38
4	Russian Federation	25
5	Indonesia	19
6	South Korea	15
7	Viet Nam	14
8	Brazil	13
9	Hong Kong	12
10	India	10

Suspected Bot List [2015-02-26]

detection period: 2015-02-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 175

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.11.23.2	Indonesia
ID	114.6.45.106	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.218.50.134	India
IN	121.247.68.156	India
IN	219.65.189.63	India
IR	82.99.220.219	Iran
IR	212.33.217.69	Iran
LV	85.9.201.199	Latvia
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TW	180.218.34.245	Taiwan
US	69.197.135.216	United States
US	96.35.58.176	United States
US	192.232.241.137	United States
US	198.20.229.61	United States
US	208.69.30.211	United States
US	208.69.31.250	United States
US	208.73.202.157	United States

List from greylisting:

Botnet Statistics [2015-02-26]

detection period: 2015-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1658
number of botnet IPs notified to network operators: 1483
number of spam blocked: 114457
recipient count of spam blocked: 4155817

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	859
2	CHINANET-GD	88
3	VNPT-VNNIC-VN	53
4	KORNET-KR	12
5	BHARTI-IN	12
6	UNICOM-FJ	11
7	VIETEL-VNNIC-VN	10
8	UNICOM-GD	8
9	TurkTelekom	7
10	TR-TELEKOM-20051027	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	873
2	China	206
3	Viet Nam	77
4	India	45
5	United States	44
6	Indonesia	32
7	Turkey	30
8	Italy	23
9	Spain	23
10	Brazil	22

Suspected Bot List [2015-02-25]

detection period: 2015-02-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 190

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.11.23.2	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
IN	115.111.107.110	India
IN	117.218.50.134	India
IN	117.240.116.226	India
IR	82.99.220.219	Iran
IR	212.33.217.69	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	96.35.58.176	United States
US	198.20.229.61	United States
US	208.69.30.211	United States
US	208.69.31.250	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-02-25]

detection period: 2015-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1690
number of botnet IPs notified to network operators: 1500
number of spam blocked: 115804
recipient count of spam blocked: 4145862

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	878
2	CHINANET-GD	85
3	VNPT-VNNIC-VN	50
4	KORNET-KR	14
5	TR-TELEKOM-20051027	11
6	RIMA	8
7	CHINANET-JS	8
8	BHARTI-IN	8
9	MX-MSCV17-LACNIC	7
10	AR-CASA10-LACNIC	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	885
2	China	195
3	Viet Nam	62
4	United States	43
5	Brazil	36
6	India	34
7	Indonesia	34
8	Turkey	28
9	South Korea	25
10	Spain	25

Suspected Bot List [2015-02-24]

detection period: 2015-02-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 190

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.11.23.2	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	117.211.27.2	India
IN	117.218.50.134	India
IN	117.240.116.226	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.176.90.186	Taiwan
US	96.35.58.176	United States
US	192.232.241.137	United States
US	198.20.229.61	United States
US	208.69.30.211	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-24]

detection period: 2015-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1716
number of botnet IPs notified to network operators: 1526
number of spam blocked: 111883
recipient count of spam blocked: 4044600

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	830
2	CHINANET-GD	73
3	VNPT-VNNIC-VN	51
4	BHARTI-IN	16
5	KORNET-KR	15
6	VIETEL-VNNIC-VN	11
7	BM-ID	9
8	TR-TELEKOM-20051027	8
9	CO-EPME1-LACNIC	8
10	TurkTelekom	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	846
2	China	159
3	Viet Nam	75
4	United States	69
5	India	45
6	Indonesia	43
7	Spain	34
8	Russian Federation	30
9	Brazil	30
10	Turkey	26

Suspected Bot List [2015-02-23]

detection period: 2015-02-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 160

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.10.105.60	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	121.247.68.156	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.176.90.186	Taiwan
US	96.35.58.176	United States
US	192.232.241.137	United States
US	198.20.229.61	United States
US	208.69.30.211	United States
US	208.69.31.250	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-02-23]

detection period: 2015-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1662
number of botnet IPs notified to network operators: 1502
number of spam blocked: 111172
recipient count of spam blocked: 4087908

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	817
2	CHINANET-GD	64
3	VNPT-VNNIC-VN	34
4	RIMA	13
5	BHARTI-IN	11
6	KORNET-KR	10
7	AR-CASA10-LACNIC	9
8	VIETEL-VNNIC-VN	7
9	TR-TELEKOM-20051027	7
10	CHINANET-JS	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	833
2	China	152
3	United States	55
4	Viet Nam	52
5	Russian Federation	48
6	India	42
7	Brazil	35
8	Italy	32
9	Spain	30
10	Indonesia	24

Suspected Bot List [2015-02-22]

detection period: 2015-02-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.119	Ecuador
ID	103.10.105.60	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.142.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	119.252.166.100	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	117.239.146.215	India
IN	117.240.116.226	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.176.90.186	Taiwan
TW	180.218.34.245	Taiwan
US	96.35.58.176	United States
US	198.20.229.61	United States
US	208.69.31.250	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-02-22]

detection period: 2015-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1250
number of botnet IPs notified to network operators: 1204
number of spam blocked: 120015
recipient count of spam blocked: 4257877

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	895
2	CHINANET-GD	62
3	KORNET-KR	9
4	CHINANET-JS	5
5	HICHINA	4
6	BSNLNET	4
7	VOCUS-AS-AP	3
8	UNICOM-SD	3
9	UNICOM-HA	3
10	UNICOM-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	902
2	China	145
3	United States	28
4	Indonesia	20
5	Russian Federation	16
6	South Korea	14
7	Iran	11
8	Brazil	10
9	Ukraine	9
10	Hong Kong	8

Suspected Bot List [2015-02-21]

detection period: 2015-02-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
ID	103.10.105.60	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.142.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	117.218.2.168	India
IN	117.240.116.226	India
IN	202.153.44.72	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	98.126.1.18	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-21]

detection period: 2015-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1289
number of botnet IPs notified to network operators: 1240
number of spam blocked: 118428
recipient count of spam blocked: 4201728

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	870
2	CHINANET-GD	126
3	KORNET-KR	6
4	CHINANET-JS	6
5	VNPT-VNNIC-VN	5
6	HICHINA	5
7	IR-DCC-20041125	4
8	CMNET	4
9	002.558.134/0001-58	4
10	VOCUS-AS-AP	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	878
2	China	208
3	United States	32
4	Indonesia	16
5	South Korea	12
6	Russian Federation	11
7	Iran	11
8	Viet Nam	9
9	Brazil	9
10	Ukraine	8

Suspected Bot List [2015-02-20]

detection period: 2015-02-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 107

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	213.172.86.5	Azerbaijan
BD	203.76.147.70	Bangladesh
ID	103.10.105.60	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.142.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	117.218.2.168	India
IN	202.153.44.72	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	91.192.206.101	Poland
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	98.126.1.18	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-20]

detection period: 2015-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1333
number of botnet IPs notified to network operators: 1226
number of spam blocked: 112308
recipient count of spam blocked: 4153281

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	786
2	CHINANET-GD	67
3	KORNET-KR	10
4	BSNLNET	7
5	CHINANET-JS	6
6	BHARTI-IN	6
7	VNPT-VNNIC-VN	5
8	TR-TELEKOM-20051027	5
9	TurkTelekom	4
10	MINDSPRING-DEDA-C300	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	793
2	China	133
3	Russian Federation	70
4	United States	36
5	India	36
6	Turkey	23
7	Indonesia	20
8	South Korea	17
9	Ukraine	13
10	Chile	13

Suspected Bot List [2015-02-19]

detection period: 2015-02-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 76

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	213.172.86.5	Azerbaijan
BD	203.76.147.70	Bangladesh
ID	103.10.105.60	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.142.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	117.218.2.168	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	212.175.86.45	Turkey
TW	180.218.34.245	Taiwan
US	98.126.1.18	United States
US	198.20.229.61	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-19]

detection period: 2015-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1363
number of botnet IPs notified to network operators: 1231
number of spam blocked: 115434
recipient count of spam blocked: 4238027

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	817
2	CHINANET-GD	97
3	KORNET-KR	11
4	VNPT-VNNIC-VN	9
5	NWT-NET	8
6	UNICOM-GD	6
7	TR-TELEKOM-20051027	6
8	CHINANET-JS	6
9	HICHINA	5
10	UNICOM-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	827
2	China	197
3	United States	38
4	Russian Federation	34
5	Indonesia	22
6	South Korea	19
7	Viet Nam	17
8	Hong Kong	16
9	India	14
10	Turkey	12

Suspected Bot List [2015-02-18]

detection period: 2015-02-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 68

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.10.105.60	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.142.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.248.109.68	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	202.182.185.194	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	117.211.27.2	India
IN	117.218.2.168	India
IN	117.240.116.226	India
IR	82.99.220.219	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
SG	203.175.170.81	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	212.175.86.45	Turkey
TW	180.218.34.245	Taiwan
US	96.35.58.176	United States
US	98.126.1.18	United States
US	198.20.229.61	United States

List from greylisting:

Botnet Statistics [2015-02-18]

detection period: 2015-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1291
number of botnet IPs notified to network operators: 1223
number of spam blocked: 113862
recipient count of spam blocked: 4150790

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	816
2	CHINANET-GD	84
3	VNPT-VNNIC-VN	12
4	KORNET-KR	11
5	NWT-NET	9
6	HICHINA	6
7	CHINANET-JX	5
8	CHINANET-JS	5
9	UNICOM-HA	4
10	UNICOM-AH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	827
2	China	171
3	United States	36
4	Indonesia	21
5	South Korea	20
6	Viet Nam	17
7	India	17
8	Hong Kong	16
9	Turkey	12
10	Russian Federation	12

Suspected Bot List [2015-02-17]

detection period: 2015-02-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 94

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.10.105.60	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	202.43.93.190	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
IN	117.218.50.134	India
IR	82.99.220.219	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
US	96.35.58.176	United States
US	174.139.8.82	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-17]

detection period: 2015-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1372
number of botnet IPs notified to network operators: 1278
number of spam blocked: 122658
recipient count of spam blocked: 4401740

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	843
2	CHINANET-GD	33
3	NWT-NET	8
4	KORNET-KR	8
5	AR-TEAR7-LACNIC	6
6	TurkTelekom	5
7	HICHINA	5
8	BORANET-KR	5
9	VNPT-VNNIC-VN	4
10	UNICOM-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	854
2	China	105
3	Russian Federation	73
4	United States	33
5	Indonesia	25
6	Ukraine	24
7	South Korea	20
8	Turkey	17
9	Hong Kong	13
10	India	12

Suspected Bot List [2015-02-16]

detection period: 2015-02-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 123

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.10.105.60	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.125	Indonesia
ID	202.43.93.190	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
IN	117.218.50.134	India
IR	82.99.220.219	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.135.216	United States
US	96.35.58.176	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2015-02-16]

detection period: 2015-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1591
number of botnet IPs notified to network operators: 1468
number of spam blocked: 129147
recipient count of spam blocked: 4563423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	908
2	CHINANET-GD	33
3	BORANET-KR	12
4	KORNET-KR	11
5	NWT-NET	8
6	MX-USCV4-LACNIC	8
7	MX-ASCV9-LACNIC	7
8	CMNET	7
9	VNPT-VNNIC-VN	6
10	YITAIFENG	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	917
2	China	122
3	Russian Federation	62
4	United States	51
5	South Korea	32
6	Mexico	31
7	Indonesia	23
8	India	20
9	Hong Kong	20
10	Ukraine	18

Suspected Bot List [2015-02-15]

detection period: 2015-02-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.125	Indonesia
ID	202.77.108.60	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
IN	115.111.107.110	India
IN	121.247.68.156	India
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan

List from greylisting:

Botnet Statistics [2015-02-15]

detection period: 2015-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1445
number of botnet IPs notified to network operators: 1378
number of spam blocked: 130433
recipient count of spam blocked: 4624035

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	888
2	CHINANET-GD	210
3	NWT-NET	5
4	UNICOM-SD	4
5	KORNET-KR	4
6	YITAIFENG	3
7	VOCUS-AS-AP	3
8	IR-DCC-20041125	3
9	GZGH	3
10	CHINANET-SN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	892
2	China	278
3	United States	31
4	Russian Federation	30
5	Indonesia	18
6	Iran	14
7	Hong Kong	14
8	Brazil	10
9	Argentina	10
10	Viet Nam	8

Suspected Bot List [2015-02-14]

detection period: 2015-02-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.141.178	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.125	Indonesia
ID	202.77.108.60	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.135.216	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-14]

detection period: 2015-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1470
number of botnet IPs notified to network operators: 1413
number of spam blocked: 119759
recipient count of spam blocked: 4414252

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	833
2	CHINANET-GD	286
3	VNPT-VNNIC-VN	6
4	NWT-NET	5
5	UNICOM-SD	4
6	MF-MGSM	4
7	YITAIFENG	3
8	WEBSTREAM	3
9	VOCUS-AS-AP	3
10	UNICOM-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	837
2	China	353
3	Russian Federation	47
4	United States	29
5	Indonesia	19
6	Ukraine	14
7	Hong Kong	13
8	Viet Nam	12
9	Iran	11
10	Brazil	11

Suspected Bot List [2015-02-13]

detection period: 2015-02-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 82

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.141.178	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.125	Indonesia
ID	202.77.108.60	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.208	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
IN	115.111.107.110	India
IN	121.247.68.156	India
MN	203.91.119.146	Mongolia
PL	91.192.206.101	Poland
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.135.216	United States
US	174.139.8.82	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-13]

detection period: 2015-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1578
number of botnet IPs notified to network operators: 1496
number of spam blocked: 118944
recipient count of spam blocked: 4370738

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	852
2	CHINANET-GD	207
3	KORNET-KR	20
4	BORANET-KR	19
5	UNICOM-GD	13
6	TECH-HK	7
7	VNPT-VNNIC-VN	6
8	broadNnet-KR	5
9	NWT-NET	5
10	UNICOM-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	861
2	China	304
3	Russian Federation	53
4	South Korea	50
5	United States	40
6	Indonesia	24
7	India	20
8	UNKNOWN	19
9	Hong Kong	19
10	Viet Nam	18

Suspected Bots' IP List for February 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-02-28]
Suspected Bots IP [2015-02-27]
Suspected Bots IP [2015-02-26]
Suspected Bots IP [2015-02-25]
Suspected Bots IP [2015-02-24]
Suspected Bots IP [2015-02-23]
Suspected Bots IP [2015-02-22]
Suspected Bots IP [2015-02-21]
Suspected Bots IP [2015-02-20]
Suspected Bots IP [2015-02-19]
Suspected Bots IP [2015-02-18]
Suspected Bots IP [2015-02-17]
Suspected Bots IP [2015-02-16]
Suspected Bots IP [2015-02-15]
Suspected Bots IP [2015-02-14]
Suspected Bots IP [2015-02-13]
Suspected Bots IP [2015-02-12]
Suspected Bots IP [2015-02-11]
Suspected Bots IP [2015-02-10]
Suspected Bots IP [2015-02-09]
Suspected Bots IP [2015-02-08]
Suspected Bots IP [2015-02-07]
Suspected Bots IP [2015-02-06]
Suspected Bots IP [2015-02-05]
Suspected Bots IP [2015-02-04]
Suspected Bots IP [2015-02-03]
Suspected Bots IP [2015-02-02]

Suspected Bot List [2015-02-12]

detection period: 2015-02-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 97

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
EC	201.219.60.119	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	115.69.221.90	Indonesia
ID	116.68.251.238	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	182.30.250.253	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	121.247.68.156	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	67.198.166.27	United States
US	96.35.58.176	United States
US	174.139.8.82	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-12]

detection period: 2015-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1762
number of botnet IPs notified to network operators: 1665
number of spam blocked: 112601
recipient count of spam blocked: 4188217

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	861
2	CHINANET-GD	373
3	KORNET-KR	15
4	BORANET-KR	12
5	HICHINA	9
6	TECH-HK	8
7	VNPT-VNNIC-VN	7
8	UNICOM-GD	7
9	NWT-NET	7
10	BSNLNET	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	866
2	China	475
3	Russian Federation	40
4	United States	35
5	South Korea	35
6	Indonesia	25
7	UNKNOWN	20
8	Viet Nam	17
9	Hong Kong	17
10	India	14

Suspected Bot List [2015-02-11]

detection period: 2015-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 56

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	36.82.235.189	Indonesia
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	118.97.141.178	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.138.249.215	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	125.21.245.146	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	67.198.166.27	United States
US	96.35.58.176	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-11]

detection period: 2015-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1569
number of botnet IPs notified to network operators: 1513
number of spam blocked: 115805
recipient count of spam blocked: 4157686

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	897
2	CHINANET-GD	280
3	HICHINA	12
4	TECH-HK	8
5	KORNET-KR	7
6	UNICOM-GD	6
7	NWT-NET	5
8	MINDSPRING-DEDA-C300	5
9	CHINANET-JS	5
10	broadNnet-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	906
2	China	387
3	United States	46
4	Russian Federation	29
5	UNKNOWN	20
6	Indonesia	18
7	South Korea	17
8	Hong Kong	14
9	Iran	11
10	Viet Nam	9

Suspected Bot List [2015-02-10]

detection period: 2015-02-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 81

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	119.82.240.46	Indonesia
ID	202.77.108.60	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	115.111.107.110	India
IN	125.21.245.146	India
IR	82.99.220.219	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
US	67.198.166.27	United States
US	174.139.8.82	United States
US	208.69.31.250	United States

List from greylisting:

Botnet Statistics [2015-02-10]

detection period: 2015-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1910
number of botnet IPs notified to network operators: 1829
number of spam blocked: 125646
recipient count of spam blocked: 4406261

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1034
2	CHINANET-GD	343
3	KORNET-KR	13
4	HICHINA	8
5	TECH-HK	7
6	CL-TEEM-LACNIC	6
7	CHINANET-JS	6
8	BORANET-KR	6
9	VNPT-VNNIC-VN	5
10	AE-EMIRNET-20040120	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1046
2	China	433
3	Russian Federation	56
4	United States	40
5	South Korea	32
6	Ukraine	28
7	Chile	17
8	UNKNOWN	16
9	India	15
10	Mexico	13

Suspected Bot List [2015-02-09]

detection period: 2015-02-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 150

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.85	Ecuador
ID	103.11.23.2	Indonesia
ID	103.16.115.14	Indonesia
ID	114.6.45.106	Indonesia
ID	118.97.175.114	Indonesia
ID	119.82.240.46	Indonesia
ID	180.250.133.50	Indonesia
ID	202.77.108.60	Indonesia
ID	202.95.148.206	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.162.213.162	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.50.134	India
IN	125.21.245.146	India
IR	82.99.220.219	Iran
IR	194.33.124.42	Iran
IR	212.33.199.155	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PH	58.69.100.234	Philippines
PL	91.192.206.101	Poland
PL	178.217.34.134	Poland
PS	85.114.97.66	Occupied Palestinian Territory
RU	95.188.112.11	Russian Federation
RU	193.107.17.59	Russian Federation
SG	27.34.180.25	Singapore
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.176.90.186	Taiwan
US	67.198.166.27	United States
US	174.139.8.82	United States

List from greylisting:

Botnet Statistics [2015-02-09]

detection period: 2015-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1989
number of botnet IPs notified to network operators: 1839
number of spam blocked: 123322
recipient count of spam blocked: 4350490

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	983
2	CHINANET-GD	215
3	UNICOM-FJ	39
4	KORNET-KR	15
5	HICHINA	8
6	VNPT-VNNIC-VN	7
7	TECH-HK	7
8	BORANET-KR	7
9	BHARTI-IN	7
10	TR-TELEKOM-20051027	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	994
2	China	374
3	Russian Federation	67
4	United States	57
5	South Korea	38
6	India	30
7	Turkey	23
8	Iran	23
9	Indonesia	23
10	Ukraine	22