Suspected Bot List [2015-05-30]

detection period: 2015-05-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-30]

detection period: 2015-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1202
number of botnet IPs notified to network operators: 1179
number of spam blocked: 144671
recipient count of spam blocked: 3282650

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1010
2	CHINANET-GD	21
3	CHINANET-JS	12
4	UNICOM-SD	7
5	CHINANET-HN	6
6	CHINANET-SX	4
7	CHINANET-SN	4
8	BSNLNET	4
9	VNPT-VNNIC-VN	3
10	TFN-NET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1014
2	China	80
3	Russian Federation	16
4	United States	15
5	India	12
6	Viet Nam	5
7	South Korea	5
8	Argentina	5
9	Ukraine	4
10	Iran	4

Suspected Bot List [2015-05-29]

detection period: 2015-05-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-29]

detection period: 2015-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1151
number of botnet IPs notified to network operators: 1129
number of spam blocked: 119561
recipient count of spam blocked: 2916083

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	928
2	CHINANET-GD	36
3	VNPT-VNNIC-VN	9
4	CHINANET-SC	8
5	CHINANET-JS	8
6	CHINANET-HN	7
7	UNICOM-BJ	6
8	UNICOM-SD	4
9	GIANT	4
10	CHINANET-SN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	931
2	China	108
3	Russian Federation	20
4	United States	19
5	Viet Nam	13
6	India	12
7	Poland	4
8	Ukraine	3
9	Turkey	3
10	Thailand	3

Suspected Bot List [2015-05-28]

detection period: 2015-05-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-28]

detection period: 2015-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1441
number of botnet IPs notified to network operators: 1372
number of spam blocked: 135998
recipient count of spam blocked: 3021968

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	960
2	VNPT-VNNIC-VN	70
3	CHINANET-GD	24
4	CHINANET-JS	17
5	CHINANET-HN	14
6	WASU-BB	12
7	PE-TPSA-LACNIC	11
8	AR-TEAR7-LACNIC	11
9	VIETEL-VNNIC-VN	10
10	ETC-VNNIC-VN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	967
2	China	138
3	Viet Nam	114
4	Argentina	25
5	India	23
6	United States	22
7	Peru	17
8	South Korea	13
9	Mexico	10
10	Spain	8

Suspected Bot List [2015-05-27]

detection period: 2015-05-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 78

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-27]

detection period: 2015-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1448
number of botnet IPs notified to network operators: 1370
number of spam blocked: 146479
recipient count of spam blocked: 3206751

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1017
2	CHINANET-GD	21
3	VNPT-VNNIC-VN	16
4	UNICOM-BJ	12
5	WASU	10
6	CHINANET-JS	10
7	AR-TEAR7-LACNIC	10
8	CHINANET-HN	8
9	MX-USCV4-LACNIC	7
10	CO-EPME1-LACNIC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1022
2	China	114
3	Viet Nam	30
4	United States	23
5	Argentina	23
6	Mexico	16
7	India	16
8	Colombia	14
9	Peru	13
10	Ukraine	11

Suspected Bot List [2015-05-26]

detection period: 2015-05-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-26]

detection period: 2015-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1760
number of botnet IPs notified to network operators: 1659
number of spam blocked: 136131
recipient count of spam blocked: 3387532

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1031
2	CHINANET-GD	26
3	UNICOM-BJ	22
4	CHINANET-JS	15
5	TurkTelekom	13
6	CHINANET-HN	12
7	CHINANET-YN	11
8	CHINANET-SX	11
9	CCCH3-4	11
10	WASU	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1034
2	China	158
3	United States	112
4	Turkey	48
5	France	41
6	United Kingdom	26
7	Spain	22
8	India	16
9	Germany	16
10	South Africa	14

Suspected Bot List [2015-05-25]

detection period: 2015-05-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-25]

detection period: 2015-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1339
number of botnet IPs notified to network operators: 1319
number of spam blocked: 119088
recipient count of spam blocked: 3519978

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1058
2	CHINANET-GD	35
3	CHINANET-JS	15
4	UNICOM-BJ	14
5	CHINANET-LN	12
6	WASU-BB	11
7	CHINANET-SX	10
8	WASU	9
9	CHINANET-HN	8
10	VNPT-VNNIC-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1062
2	China	162
3	United States	23
4	Russian Federation	14
5	Viet Nam	10
6	Italy	7
7	India	4
8	South Africa	3
9	Poland	3
10	United Kingdom	3

Suspected Bot List [2015-05-24]

detection period: 2015-05-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-24]

detection period: 2015-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1329
number of botnet IPs notified to network operators: 1317
number of spam blocked: 113530
recipient count of spam blocked: 3374404

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1047
2	CHINANET-GD	39
3	CHINANET-JS	35
4	CHINANET-SX	17
5	UNICOM-BJ	15
6	CHINANET-SN	11
7	CHINANET-LN	10
8	CHINANET-YN	9
9	CHINANET-HN	9
10	WASU	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1048
2	China	200
3	United States	20
4	France	6
5	Russian Federation	5
6	South Korea	4
7	United Kingdom	4
8	Germany	4
9	Viet Nam	3
10	Malaysia	3

Suspected Bot List [2015-05-23]

detection period: 2015-05-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-23]

detection period: 2015-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1504
number of botnet IPs notified to network operators: 1464
number of spam blocked: 122543
recipient count of spam blocked: 3639921

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1088
2	CHINANET-JS	34
3	CHINANET-GD	25
4	UNICOM-BJ	14
5	CHINANET-HN	14
6	VNPT-VNNIC-VN	8
7	CHINANET-SX	8
8	CHINANET-ZJ-HZ	7
9	CHINANET-HA	7
10	KORNET-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1090
2	China	175
3	United States	56
4	Russian Federation	14
5	Viet Nam	11
6	Turkey	11
7	South Korea	9
8	France	8
9	Brazil	8
10	Spain	7

Suspected Bot List [2015-05-22]

detection period: 2015-05-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 129

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-22]

detection period: 2015-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2074
number of botnet IPs notified to network operators: 1945
number of spam blocked: 160200
recipient count of spam blocked: 3767911

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1106
2	CHINANET-JS	56
3	UNICOM-SD	31
4	UNICOM-BJ	24
5	CCCH3-4	23
6	CHINANET-GD	15
7	CBC-CM-4	15
8	IP2000-ADSL-BAS	11
9	CHINANET-HN	11
10	TurkTelekom	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1110
2	United States	251
3	China	219
4	France	47
5	Canada	38
6	Mexico	37
7	Turkey	36
8	India	20
9	United Kingdom	19
10	Germany	19

Suspected Bot List [2015-05-21]

detection period: 2015-05-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-21]

detection period: 2015-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1779
number of botnet IPs notified to network operators: 1702
number of spam blocked: 132046
recipient count of spam blocked: 3545989

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1052
2	CHINANET-JS	66
3	UNICOM-SD	42
4	CHINANET-GD	42
5	UNICOM-BJ	28
6	CHINANET-SX	13
7	CHINANET-HN	11
8	CHINANET-JX	10
9	CHINANET-LN	9
10	CHINANET-SN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1056
2	China	289
3	United States	131
4	France	25
5	Russian Federation	19
6	Mexico	16
7	Spain	16
8	Turkey	15
9	South Korea	15
10	India	13

Suspected Bot List [2015-05-20]

detection period: 2015-05-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-20]

detection period: 2015-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1606
number of botnet IPs notified to network operators: 1572
number of spam blocked: 171334
recipient count of spam blocked: 3852466

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1007
2	UNICOM-SD	94
3	CHINANET-JS	53
4	CHINANET-GD	39
5	UNICOM-BJ	35
6	CHINANET-HN	16
7	CHINANET-JX	14
8	CHINANET-SX	11
9	CHINANET-LN	8
10	WASU-BB	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1011
2	China	351
3	United States	42
4	Russian Federation	20
5	India	12
6	France	11
7	Turkey	9
8	Germany	9
9	Italy	8
10	Japan	7

Suspected Bot List [2015-05-19]

detection period: 2015-05-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 184

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-19]

detection period: 2015-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2479
number of botnet IPs notified to network operators: 2295
number of spam blocked: 224117
recipient count of spam blocked: 4204974

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1045
2	CHINANET-JS	90
3	UNICOM-SD	84
4	CHINANET-GD	48
5	UNICOM-BJ	31
6	CCCH3-4	23
7	ATT	16
8	MX-USCV4-LACNIC	13
9	IP2000-ADSL-BAS	12
10	CBC-CM-5	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1047
2	United States	383
3	China	368
4	Mexico	56
5	France	52
6	Canada	43
7	United Kingdom	28
8	Russian Federation	27
9	India	22
10	South Africa	21

Suspected Bot List [2015-05-18]

detection period: 2015-05-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 166

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-05-18]

detection period: 2015-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2331
number of botnet IPs notified to network operators: 2165
number of spam blocked: 231674
recipient count of spam blocked: 4245906

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1040
2	CHINANET-GD	47
3	CHINANET-JS	22
4	CCCH3-4	20
5	NETBLK-CHARTER-NET	18
6	CBC-CM-4	17
7	VNPT-VNNIC-VN	16
8	UNICOM-BJ	16
9	VIS-BLOCK	14
10	ATT	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1048
2	United States	377
3	China	189
4	France	70
5	Russian Federation	43
6	Mexico	36
7	India	28
8	Germany	27
9	Viet Nam	25
10	United Kingdom	25

Suspected Bot List [2015-05-17]

detection period: 2015-05-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
ID	202.162.213.162	Indonesia
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
PL	217.153.237.58	Poland

List from greylisting:

Botnet Statistics [2015-05-17]

detection period: 2015-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1348
number of botnet IPs notified to network operators: 1324
number of spam blocked: 278809
recipient count of spam blocked: 4841288

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1032
2	CHINANET-GD	40
3	UNICOM-BJ	15
4	UNICOM-GD	12
5	CHINANET-JS	12
6	WASU-BB	6
7	CHINANET-SX	6
8	UNICOM-SD	5
9	CHINANET-LN	5
10	WASU	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1035
2	China	179
3	United States	29
4	Russian Federation	10
5	Viet Nam	8
6	Indonesia	8
7	Brazil	7
8	India	5
9	Iran	4
10	Argentina	4

Suspected Bot List [2015-05-16]

detection period: 2015-05-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
IN	117.218.175.121	India
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
PL	217.153.237.58	Poland

List from greylisting:

Botnet Statistics [2015-05-16]

detection period: 2015-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1341
number of botnet IPs notified to network operators: 1312
number of spam blocked: 302364
recipient count of spam blocked: 5164313

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1057
2	CHINANET-GD	27
3	UNICOM-GD	15
4	UNICOM-BJ	8
5	CHINANET-JS	8
6	CMNET	6
7	GIANT	5
8	CHINANET-HN	5
9	ALISOFT	4
10	XINWEI-NET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1058
2	China	148
3	United States	34
4	Poland	7
5	Indonesia	7
6	Russian Federation	6
7	Brazil	6
8	Viet Nam	5
9	Argentina	5
10	Saudi Arabia	4

Suspected Bot List [2015-05-15]

detection period: 2015-05-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
IN	117.218.175.121	India
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
PL	217.153.237.58	Poland

List from greylisting:

Botnet Statistics [2015-05-15]

detection period: 2015-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1516
number of botnet IPs notified to network operators: 1480
number of spam blocked: 325202
recipient count of spam blocked: 5473374

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1049
2	UNICOM-GD	74
3	CHINANET-GD	36
4	UNICOM-BJ	29
5	XINWEI-NET	19
6	WASU	14
7	VNPT-VNNIC-VN	7
8	ALISOFT	6
9	WASU-BB	5
10	BHARTI-IN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1052
2	China	271
3	United States	24
4	Russian Federation	17
5	Viet Nam	16
6	South Korea	10
7	India	10
8	Ukraine	9
9	Brazil	9
10	Turkey	7

Suspected Bot List [2015-05-14]

detection period: 2015-05-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
IN	117.218.175.121	India
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
PL	217.153.237.58	Poland
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-14]

detection period: 2015-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2190
number of botnet IPs notified to network operators: 2085
number of spam blocked: 361883
recipient count of spam blocked: 5953513

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1082
2	UNICOM-GD	99
3	CHINANET-GD	56
4	UNICOM-SD	27
5	UNICOM-BJ	25
6	XINWEI-NET	24
7	CBC-CM-4	17
8	CCCH3-4	15
9	VNPT-VNNIC-VN	14
10	NETBLK-CHARTER-NET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1085
2	China	351
3	United States	267
4	Viet Nam	32
5	Canada	29
6	Mexico	25
7	Spain	23
8	India	20
9	Turkey	19
10	Italy	19

Suspected Bot List [2015-05-13]

detection period: 2015-05-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 134

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
IN	117.218.175.121	India
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-13]

detection period: 2015-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2181
number of botnet IPs notified to network operators: 2047
number of spam blocked: 278107
recipient count of spam blocked: 5216361

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1185
2	CHINANET-GD	71
3	UNICOM-GD	68
4	UNICOM-BJ	17
5	TR-TELEKOM-20051027	15
6	TurkTelekom	14
7	CHINANET-ZJ-HZ	14
8	XINWEI-NET	13
9	TR-TELEKOM-20040920	11
10	IP2000-ADSL-BAS	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1187
2	China	308
3	United States	151
4	Turkey	63
5	France	39
6	India	34
7	Mexico	32
8	Spain	22
9	Germany	21
10	United Kingdom	20

Suspected Bots' IP List for May 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-05-31]
Suspected Bots IP [2015-05-30]
Suspected Bots IP [2015-05-29]
Suspected Bots IP [2015-05-28]
Suspected Bots IP [2015-05-27]
Suspected Bots IP [2015-05-26]
Suspected Bots IP [2015-05-25]
Suspected Bots IP [2015-05-24]
Suspected Bots IP [2015-05-23]
Suspected Bots IP [2015-05-22]
Suspected Bots IP [2015-05-21]
Suspected Bots IP [2015-05-20]
Suspected Bots IP [2015-05-19]
Suspected Bots IP [2015-05-18]
Suspected Bots IP [2015-05-17]
Suspected Bots IP [2015-05-16]
Suspected Bots IP [2015-05-15]
Suspected Bots IP [2015-05-14]
Suspected Bots IP [2015-05-13]
Suspected Bots IP [2015-05-12]
Suspected Bots IP [2015-05-11]
Suspected Bots IP [2015-05-10]
Suspected Bots IP [2015-05-09]
Suspected Bots IP [2015-05-08]
Suspected Bots IP [2015-05-07]
Suspected Bots IP [2015-05-06]
Suspected Bots IP [2015-05-05]
Suspected Bots IP [2015-05-04]
Suspected Bots IP [2015-05-03]
Suspected Bots IP [2015-05-02]
Suspected Bots IP [2015-05-01]

Suspected Bot List [2015-05-12]

detection period: 2015-05-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-12]

detection period: 2015-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1918
number of botnet IPs notified to network operators: 1851
number of spam blocked: 125294
recipient count of spam blocked: 3894073

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1217
2	CHINANET-GD	45
3	CHINANET-ZJ-HZ	20
4	UNICOM-BJ	15
5	WASU-BB	11
6	TR-TELEKOM-20051027	10
7	BT-CENTRAL-PLUS	8
8	WASU	7
9	CMNET	7
10	CHINANET-FJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1219
2	China	224
3	United States	93
4	Turkey	30
5	United Kingdom	19
6	Russian Federation	17
7	France	16
8	Spain	15
9	South Africa	14
10	Indonesia	14

Suspected Bot List [2015-05-11]

detection period: 2015-05-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 125

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-11]

detection period: 2015-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2082
number of botnet IPs notified to network operators: 1957
number of spam blocked: 130769
recipient count of spam blocked: 3800865

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1173
2	CHINANET-GD	47
3	UNICOM-BJ	17
4	CHINANET-ZJ-HZ	16
5	CHINANET-FJ	11
6	WASU	10
7	UNICOM-GD	10
8	CHINANET-JS	10
9	VNPT-VNNIC-VN	9
10	CHINANET-SN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1180
2	China	259
3	United States	144
4	Turkey	30
5	Germany	29
6	Russian Federation	21
7	Mexico	21
8	United Kingdom	19
9	France	19
10	Viet Nam	18

Suspected Bot List [2015-05-10]

detection period: 2015-05-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.50.134	India
MX	200.94.141.149	Mexico
PH	58.69.100.238	Philippines
UA	193.238.111.14	Ukraine
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-10]

detection period: 2015-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1289
number of botnet IPs notified to network operators: 1261
number of spam blocked: 125036
recipient count of spam blocked: 3483162

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	959
2	CHINANET-GD	30
3	UNICOM-GD	10
4	UNICOM-BJ	8
5	CHINANET-ZJ-HZ	8
6	WASU	6
7	CMNET	6
8	CHINANET-ZJ	6
9	CHINANET-SH	5
10	CHINANET-HN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	964
2	China	169
3	United States	35
4	Indonesia	11
5	Brazil	8
6	Ukraine	7
7	Russian Federation	7
8	Viet Nam	6
9	Hong Kong	6
10	Saudi Arabia	5

Suspected Bot List [2015-05-09]

detection period: 2015-05-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
EC	201.219.60.119	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.175.121	India
MX	200.94.141.149	Mexico
MX	201.116.227.163	Mexico
PH	58.69.100.238	Philippines
US	50.130.89.197	United States
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-09]

detection period: 2015-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1348
number of botnet IPs notified to network operators: 1317
number of spam blocked: 138461
recipient count of spam blocked: 3959897

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1000
2	CHINANET-GD	42
3	CHINANET-ZJ-HZ	11
4	CHINANET-FJ	10
5	UNICOM-GD	8
6	UNICOM-BJ	8
7	CHINANET-HN	8
8	CHINANET-ZJ-ZX	5
9	ALISOFT	5
10	CHINANET-LN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1001
2	China	175
3	United States	37
4	Brazil	14
5	Russian Federation	11
6	Indonesia	10
7	Viet Nam	7
8	Thailand	7
9	Poland	6
10	South Korea	6

Botnet Statistics for April 2015

detection period: 2015-04-01 00:00 - 2015-04-30 23:59 UTC
total number of suspected botnet IPs: 36857
number of blocked spams: 3808707
recipient count of blocked spams: 122729877

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	20033
2	China	5007
3	United States	3009
4	Russian Federation	756
5	Turkey	553
6	Viet Nam	541
7	India	403
8	France	373
9	Canada	367
10	South Korea	357
11	Spain	352
12	Mexico	278
13	United Kingdom	258
14	Argentina	245
15	Germany	208
16	Malaysia	182
17	Italy	182
18	Chile	162
19	Arab Emirates	155
20	Ukraine	152
21	Romania	150
22	Brazil	148
23	Indonesia	135
24	Colombia	135
25	Australia	134

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2867234
2	China	277120
3	United States	155622
4	Indonesia	54791
5	Iran	37433
6	Hong Kong	37039
7	Brazil	33030
8	South Korea	28799
9	Bangladesh	25814
10	Malaysia	23645
11	Israel	21208
12	Poland	18770
13	Ivory Coast	16710
14	Japan	13594
15	Russian Federation	13452
16	Ecuador	13083
17	Italy	12772
18	Serbia	11703
19	Australia	11262
20	India	11192
21	Turkey	10516
22	Ukraine	10103
23	Mongolia	9995
24	Viet Nam	9626
25	South Africa	8904

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2015-05-08]

detection period: 2015-05-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	117.239.29.114	India
MX	200.94.141.149	Mexico
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
US	50.201.42.106	United States
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-08]

detection period: 2015-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1968
number of botnet IPs notified to network operators: 1866
number of spam blocked: 131717
recipient count of spam blocked: 4039451

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1025
2	WORLDSITE-SAYFA	54
3	TR-RADORE-20110526	50
4	CHINANET-GD	39
5	UNICOM-LN	22
6	UNICOM-GD	16
7	UNICOM-BJ	10
8	CMNET	9
9	BHARTI-IN	9
10	KORNET-KR	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1029
2	China	232
3	United States	214
4	Turkey	72
5	India	33
6	Germany	25
7	Brazil	21
8	South Korea	20
9	Italy	18
10	Poland	17

Suspected Bot List [2015-05-07]

detection period: 2015-05-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 217

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
MX	200.94.141.149	Mexico
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
NL	193.110.157.151	Netherlands
PH	58.69.100.238	Philippines
US	50.201.42.106	United States
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-07]

detection period: 2015-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2569
number of botnet IPs notified to network operators: 2354
number of spam blocked: 134710
recipient count of spam blocked: 4269659

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1002
2	WORLDSITE-SAYFA	94
3	TR-RADORE-20110526	87
4	CHINANET-GD	31
5	UNICOM-LN	22
6	UNICOM-GD	17
7	KORNET-KR	17
8	IP2000-ADSL-BAS	16
9	CBC-CM-4	14
10	TurkTelekom	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1006
2	United States	375
3	China	224
4	Turkey	132
5	India	55
6	France	48
7	Mexico	47
8	South Korea	35
9	Germany	34
10	Spain	31

Suspected Bot List [2015-05-06]

detection period: 2015-05-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 211

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
AR	190.120.123.2	Argentina
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
ID	202.137.230.220	Indonesia
MX	200.94.141.149	Mexico
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
NL	193.110.157.151	Netherlands
PH	58.69.100.238	Philippines
US	50.201.42.106	United States
US	66.240.236.121	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-05-06]

detection period: 2015-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 2556
number of botnet IPs notified to network operators: 2346
number of spam blocked: 123759
recipient count of spam blocked: 3864026

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1016
2	TR-RADORE-20110526	71
3	CHINANET-GD	65
4	WORLDSITE-SAYFA	60
5	UNICOM-LN	23
6	CCCH3-4	22
7	UNICOM-BJ	19
8	KORNET-KR	15
9	AE-EMIRNET-20040120	14
10	TR-TELEKOM-20040920	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1021
2	United States	329
3	China	266
4	Turkey	134
5	France	53
6	Russian Federation	42
7	South Korea	41
8	Mexico	39
9	United Kingdom	36
10	Spain	34

Suspected Bot List [2015-05-05]

detection period: 2015-05-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 160

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
AR	190.120.123.2	Argentina
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	218.248.4.101	India
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
NL	193.110.157.151	Netherlands
US	50.201.42.106	United States
US	69.197.156.227	United States
US	174.45.152.26	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2015-05-05]

detection period: 2015-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 2138
number of botnet IPs notified to network operators: 1978
number of spam blocked: 136270
recipient count of spam blocked: 4187887

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1002
2	CHINANET-GD	53
3	WORLDSITE-SAYFA	32
4	TR-RADORE-20110526	30
5	UNICOM-LN	22
6	CCCH3-4	21
7	UNICOM-BJ	20
8	CHINANET-JS	19
9	UNICOM-GD	11
10	MX-USCV4-LACNIC	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1007
2	United States	279
3	China	245
4	Turkey	50
5	Mexico	43
6	Spain	31
7	France	29
8	Germany	27
9	Brazil	26
10	Canada	25

Suspected Bot List [2015-05-04]

detection period: 2015-05-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 165

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
AR	190.120.123.2	Argentina
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	218.248.4.101	India
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
NL	193.110.157.151	Netherlands
US	50.201.42.106	United States
US	69.197.156.227	United States
US	174.45.152.26	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2015-05-04]

detection period: 2015-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 2208
number of botnet IPs notified to network operators: 2043
number of spam blocked: 133693
recipient count of spam blocked: 4010350

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1010
2	CHINANET-GD	38
3	CHINANET-JS	33
4	UNICOM-SD	31
5	UNICOM-BJ	30
6	UNICOM-LN	23
7	TurkTelekom	17
8	WORLDSITE-SAYFA	16
9	RIMA	16
10	IP2000-ADSL-BAS	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1014
2	China	260
3	United States	237
4	Turkey	74
5	France	56
6	Spain	51
7	Germany	37
8	Mexico	33
9	Canada	30
10	Italy	24

Suspected Bot List [2015-05-03]

detection period: 2015-05-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
AR	190.120.123.2	Argentina
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CO	200.80.43.248	Colombia
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
MX	201.116.227.163	Mexico
NL	178.21.118.159	Netherlands
NL	193.110.157.151	Netherlands
US	50.201.42.106	United States
US	66.240.236.121	United States
US	69.197.156.227	United States
US	174.45.152.26	United States
US	209.239.112.104	United States

List from greylisting:

Botnet Statistics [2015-05-03]

detection period: 2015-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 1380
number of botnet IPs notified to network operators: 1355
number of spam blocked: 121357
recipient count of spam blocked: 3634548

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1036
2	CHINANET-GD	40
3	UNICOM-LN	21
4	CHINANET-JS	10
5	WORLDSITE-SAYFA	6
6	CMNET	6
7	ALISOFT	6
8	UNICOM-GD	5
9	CHINANET-LN	5
10	CHINANET-ZJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1039
2	China	163
3	United States	44
4	Brazil	14
5	Indonesia	11
6	Russian Federation	10
7	Poland	8
8	Germany	7
9	Ukraine	5
10	Turkey	4