Custom Search

Monday, February 29, 2016

Suspected Bot List [2016-02-28]

detection period: 2016-02-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
MO60.246.58.65Macau

List from greylisting:

country codeIP addressCountry
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
EG41.32.191.122Egypt
EG193.227.49.83Egypt
IL213.57.90.10Israel
IN59.90.111.127India
IN117.244.41.87India
IN125.16.12.146India
IN203.192.212.52India
IN203.194.109.142India
IN223.227.141.37India
MX189.211.231.62Mexico
MX200.94.75.212Mexico
RS89.216.126.28Serbia

Botnet Statistics [2016-02-28]

detection period: 2016-02-28 00:00-23:59 UTC
total number of suspected botnet IPs: 919
number of botnet IPs notified to network operators: 903
number of spam blocked: 2547
recipient count of spam blocked: 60328

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET131
2UNICOM-ZJ91
3WASU75
4SONET-NET64
5WASU-BB44
6CHINANET-ZJ33
7CHINANET-GD27
8VNPT-VNNIC-VN25
9NCICNET-NET20
10CHINANET-SH16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China400
2Taiwan239
3Viet Nam56
4United States26
5Brazil24
6Russian Federation22
7Thailand16
8South Korea13
9Indonesia12
10India10

Sunday, February 28, 2016

Suspected Bot List [2016-02-27]

detection period: 2016-02-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR186.138.82.251Argentina
IL213.57.90.10Israel
MO60.246.58.65Macau

List from greylisting:

country codeIP addressCountry
AR190.19.203.150Argentina
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
BW168.167.88.5Botswana
CR201.202.246.162Costa Rica
EG193.227.49.83Egypt
IL213.57.90.10Israel
IN59.90.111.127India
IN61.0.154.131India
IN112.133.245.25India
IN112.133.249.13India
IN117.202.158.213India
IN117.223.94.199India
IN117.244.15.243India
IN117.253.227.196India
IN122.163.150.95India
IN122.172.39.33India
IN125.16.12.146India
IN202.142.126.186India
IN203.192.212.52India
IN203.194.109.142India
MG41.63.129.101Madagascar
MX200.94.75.212Mexico
PK39.54.186.155Pakistan
RO109.102.64.55Romania
RS89.216.126.28Serbia
SG49.213.16.207Singapore
TR109.235.251.130Turkey
UZ213.230.93.156Uzbekistan
VE200.11.228.84Venezuela

Botnet Statistics [2016-02-27]

detection period: 2016-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 965
number of botnet IPs notified to network operators: 933
number of spam blocked: 3240
recipient count of spam blocked: 81163

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET136
2WASU114
3SONET-NET83
4UNICOM-ZJ64
5WASU-BB42
6VNPT-VNNIC-VN37
7CHINANET-ZJ29
8CHINANET-GD23
9NCICNET-NET18
10UNICOM-HA14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China370
2Taiwan256
3Viet Nam76
4Brazil37
5United States29
6India25
7Thailand22
8Russian Federation20
9Indonesia14
10Romania9

Saturday, February 27, 2016

Suspected Bot List [2016-02-26]

detection period: 2016-02-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

country codeIP addressCountry
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
DZ213.140.59.151Algeria
ID202.162.214.116Indonesia
IN117.99.164.162India
IN117.218.118.245India
IN122.164.185.163India
IN122.168.199.145India
IN122.170.68.88India
IN125.18.236.210India
IN203.192.212.52India
IN203.194.109.142India
MX200.94.75.212Mexico
PH122.3.14.94Philippines
PL188.146.89.207Poland
RO109.100.247.188Romania
TR85.105.20.121Turkey
TR85.105.223.152Turkey
TR85.105.248.165Turkey
TR109.235.251.130Turkey

Botnet Statistics [2016-02-26]

detection period: 2016-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1232
number of botnet IPs notified to network operators: 1212
number of spam blocked: 3170
recipient count of spam blocked: 72703

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET228
2UNICOM-ZJ169
3WASU155
4SONET-NET152
5WASU-BB102
6NCICNET-NET38
7CHINANET-JS33
8CHINANET-ZJ32
9CHINANET-GD30
10VNPT-VNNIC-VN20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China590
2Taiwan440
3Viet Nam55
4Brazil17
5United States14
6Thailand13
7India11
8Indonesia10
9Russian Federation7
10South Korea7

Friday, February 26, 2016

Suspected Bot List [2016-02-25]

detection period: 2016-02-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
MO60.246.58.65Macau

List from greylisting:

country codeIP addressCountry
AR200.41.178.234Argentina
AR200.127.100.46Argentina
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
EG193.227.49.83Egypt
ES87.235.177.251Spain
IL213.57.90.10Israel
IN59.90.111.127India
IN117.223.1.15India
IN117.239.196.29India
IN117.244.15.243India
IN122.160.202.109India
IN122.170.105.219India
IN125.99.93.6India
IN180.211.126.178India
IN182.56.5.137India
IN182.64.49.216India
IN182.68.72.79India
IN182.74.209.118India
IN182.75.110.30India
IN202.164.59.83India
IN203.192.212.52India
IN203.192.251.237India
IN203.194.109.142India
MX187.177.172.13Mexico
MX200.94.75.212Mexico
RO86.34.170.206Romania
TR78.189.108.188Turkey
TR85.105.45.172Turkey
TR109.235.251.130Turkey
TR212.156.85.182Turkey
UY167.62.47.91Uruguay
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-25]

detection period: 2016-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1141
number of botnet IPs notified to network operators: 1106
number of spam blocked: 14916
recipient count of spam blocked: 88030

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNICOM-ZJ163
2WASU119
3HINET-NET111
4WASU-BB93
5CHINANET-JS81
6SONET-NET68
7VNPT-VNNIC-VN25
8CHINANET-GD24
9CHINANET-SH23
10NCICNET-NET15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China607
2Taiwan209
3Viet Nam58
4Brazil34
5India26
6Russian Federation25
7United States24
8Thailand13
9Turkey12
10Indonesia10

Thursday, February 25, 2016

Suspected Bot List [2016-02-24]

detection period: 2016-02-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IL213.57.90.10Israel
MO60.246.58.65Macau

List from greylisting:

country codeIP addressCountry
AR200.41.178.234Argentina
AR201.177.76.231Argentina
BG217.9.224.141Bulgaria
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
DZ105.96.202.44Algeria
EG193.227.49.83Egypt
ES47.61.102.233Spain
IL213.57.90.10Israel
IN61.3.125.228India
IN117.194.203.250India
IN117.204.145.86India
IN117.213.116.204India
IN117.215.36.28India
IN117.221.75.117India
IN117.241.23.17India
IN117.244.15.243India
IN117.247.81.12India
IN117.248.72.153India
IN117.248.101.58India
IN120.60.79.81India
IN122.162.10.75India
IN122.170.105.219India
IN122.171.176.8India
IN122.173.88.132India
IN150.129.67.79India
IN180.211.126.178India
IN182.72.170.10India
IN182.75.202.214India
IN203.192.212.52India
IN203.194.109.142India
KE197.237.158.148Kenya
MX200.94.75.212Mexico
PK119.152.34.241Pakistan
RO92.84.88.129Romania
RO109.102.151.136Romania
RO109.103.215.36Romania
TR85.105.153.157Turkey
TR109.235.251.130Turkey
US174.45.173.197United States
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-24]

detection period: 2016-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1228
number of botnet IPs notified to network operators: 1185
number of spam blocked: 29409
recipient count of spam blocked: 179899

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNICOM-ZJ139
2HINET-NET125
3WASU103
4VNPT-VNNIC-VN78
5WASU-BB75
6SONET-NET65
7CHINANET-JS50
8CHINANET-GD35
9NCICNET-NET29
10HINET21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China511
2Taiwan249
3Viet Nam137
4Brazil33
5India31
6Russian Federation30
7United States29
8Thailand28
9Indonesia21
10Ukraine13

Wednesday, February 24, 2016

Suspected Bot List [2016-02-23]

detection period: 2016-02-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IL213.57.90.10Israel
US96.37.145.122United States

List from greylisting:

country codeIP addressCountry
AL213.207.47.78Albania
AR190.30.241.192Argentina
AR190.136.183.88Argentina
AR190.172.68.131Argentina
AR200.41.178.234Argentina
AZ91.135.246.97Azerbaijan
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
DZ193.194.64.68Algeria
EG41.32.191.122Egypt
EG193.227.49.83Egypt
ES87.235.177.251Spain
ID103.254.105.98Indonesia
ID202.162.214.116Indonesia
IL213.57.90.10Israel
IN1.39.49.108India
IN1.39.84.27India
IN27.4.176.106India
IN59.90.92.192India
IN61.2.72.219India
IN61.12.20.178India
IN117.197.67.45India
IN117.197.104.132India
IN117.205.215.52India
IN117.206.129.202India
IN117.215.166.183India
IN117.217.159.240India
IN117.218.52.180India
IN117.244.15.243India
IN117.250.119.248India
IN120.57.251.185India
IN120.62.62.245India
IN122.163.104.192India
IN122.169.215.211India
IN122.170.44.137India
IN122.170.105.219India
IN122.171.65.113India
IN122.172.16.161India
IN122.172.47.13India
IN122.176.33.98India
IN122.178.23.177India
IN182.71.142.106India
IN202.142.70.122India
IN203.192.212.52India
IN203.194.109.142India
ME46.161.124.98Montenegro
MO122.100.136.74Macau
MX200.94.75.212Mexico
PK39.32.49.81Pakistan
PK175.107.196.135Pakistan
PL188.146.7.182Poland
RO89.165.206.194Romania
RO109.97.107.160Romania
RO109.98.165.125Romania
RO109.102.91.85Romania
RS77.105.24.43Serbia
SV190.86.253.9El Salvador
TH112.143.17.7Thailand
TR94.78.83.137Turkey
TR109.235.251.130Turkey
US98.126.12.226United States
US174.139.17.34United States
US174.139.28.146United States
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-23]

detection period: 2016-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1327
number of botnet IPs notified to network operators: 1261
number of spam blocked: 31459
recipient count of spam blocked: 85906

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-JS128
2WASU123
3UNICOM-ZJ123
4WASU-BB118
5VNPT-VNNIC-VN85
6HINET-NET69
7SONET-NET37
8CHINANET-SH25
9NCICNET-NET19
10CHINANET-GD18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China647
2Viet Nam156
3Taiwan137
4Brazil56
5India44
6United States31
7Thailand29
8Russian Federation22
9Ukraine18
10Indonesia17

Tuesday, February 23, 2016

Suspected Bot List [2016-02-22]

detection period: 2016-02-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.0.163.135Argentina

List from greylisting:

country codeIP addressCountry
AR181.29.185.42Argentina
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
DZ193.194.64.68Algeria
EG41.32.191.122Egypt
EG193.227.49.83Egypt
ID103.254.105.98Indonesia
ID202.162.214.116Indonesia
IL213.57.90.10Israel
IN59.90.111.127India
IN59.92.165.60India
IN59.177.202.223India
IN110.224.197.236India
IN114.79.157.196India
IN117.199.64.43India
IN117.215.177.139India
IN117.218.50.134India
IN117.218.121.171India
IN117.218.232.51India
IN117.222.97.107India
IN117.239.196.29India
IN117.244.15.243India
IN117.245.26.205India
IN122.170.105.219India
IN182.65.104.238India
IN203.192.212.52India
IN203.194.109.142India
MX200.94.75.212Mexico
PH122.54.175.195Philippines
TR109.235.251.130Turkey
UZ213.230.91.11Uzbekistan
VE200.11.228.84Venezuela

Botnet Statistics [2016-02-22]

detection period: 2016-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 788
number of botnet IPs notified to network operators: 754
number of spam blocked: 27291
recipient count of spam blocked: 171754

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNICOM-ZJ66
2WASU65
3WASU-BB50
4VNPT-VNNIC-VN47
5CHINANET-JS40
6CHINANET-SH20
7CHINANET-GD17
8HINET-NET16
9ETC-VNNIC-VN12
10BSNLNET11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China371
2Viet Nam98
3Brazil37
4India29
5United States28
6Thailand28
7Russian Federation23
8Taiwan20
9Mexico11
10Indonesia10

Monday, February 22, 2016

Suspected Bot List [2016-02-21]

detection period: 2016-02-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.0.163.135Argentina
ES88.7.109.9Spain
ES88.15.127.127Spain
IL213.57.90.10Israel
TR85.99.248.158Turkey

List from greylisting:

country codeIP addressCountry
AL213.207.33.19Albania
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
CM197.159.0.70Cameroon
CR201.202.246.162Costa Rica
DZ193.194.92.3Algeria
DZ197.116.169.141Algeria
EG193.227.49.83Egypt
IL213.57.90.10Israel
IN150.242.150.125India
IN203.192.212.52India
IN203.194.109.142India
MO122.100.136.74Macau
MX200.94.75.212Mexico
PK175.107.196.135Pakistan
SI212.18.43.95Slovenia
TR85.105.173.52Turkey
TR109.235.251.130Turkey

Botnet Statistics [2016-02-21]

detection period: 2016-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 437
number of botnet IPs notified to network operators: 415
number of spam blocked: 1799
recipient count of spam blocked: 48288

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN24
2CHINANET-GD16
3002.558.157/0001-6210
4CHINANET-ZJ9
5ALISOFT9
6VIETEL-VNNIC-VN8
7CHINANET-JS8
8ETC-VNNIC-VN7
9MX-MSCV17-LACNIC6
10HICHINA6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China127
2Viet Nam64
3United States28
4Brazil26
5Russian Federation21
6Thailand15
7Indonesia13
8India12
9Mexico9
10Taiwan7

Sunday, February 21, 2016

Suspected Bot List [2016-02-20]

detection period: 2016-02-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
ES88.7.109.9Spain
TW123.194.54.162Taiwan

List from greylisting:

country codeIP addressCountry
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
CM197.159.0.70Cameroon
IL213.57.90.10Israel
IN27.5.21.210India
IN59.90.111.127India
IN59.99.92.60India
IN59.177.49.67India
IN59.180.163.251India
IN117.196.159.71India
IN117.218.50.134India
IN117.221.6.127India
IN117.241.15.136India
IN117.241.56.38India
IN120.57.13.150India
IN122.170.105.219India
IN122.172.254.48India
IN125.19.97.126India
IN182.71.111.130India
IN182.74.215.162India
IN182.77.57.4India
IN182.77.62.7India
IN203.76.185.110India
IN203.192.212.52India
IN203.194.109.142India
KW188.70.7.189Kuwait
MX187.177.172.13Mexico
MX200.94.75.212Mexico
PH122.53.178.100Philippines
TR88.249.62.171Turkey
TR88.249.174.103Turkey
TR109.235.251.130Turkey
US75.132.198.73United States
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-20]

detection period: 2016-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 569
number of botnet IPs notified to network operators: 532
number of spam blocked: 2995
recipient count of spam blocked: 81375

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN65
2CHINANET-GD18
3VIETEL-VNNIC-VN15
4FPT-VN15
5VIETEL-VN13
6HINET-NET12
7CHINANET-ZJ9
8MX-MSCV17-LACNIC8
9ETC-VNNIC-VN8
10ALISOFT8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Viet Nam134
2China126
3India35
4Brazil33
5Thailand26
6United States24
7Russian Federation19
8Taiwan18
9Mexico15
10Romania13

Saturday, February 20, 2016

Suspected Bot List [2016-02-19]

detection period: 2016-02-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR186.138.82.251Argentina
IL213.57.90.10Israel
TW123.194.54.162Taiwan

List from greylisting:

country codeIP addressCountry
AR179.36.150.224Argentina
AR181.171.122.246Argentina
AR186.61.60.178Argentina
AR186.137.50.211Argentina
AR186.190.131.83Argentina
AR190.30.12.206Argentina
AR200.41.19.200Argentina
AR201.251.18.14Argentina
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
EG193.227.49.83Egypt
ID103.254.105.98Indonesia
ID202.162.214.116Indonesia
IL213.57.90.10Israel
IN59.90.111.127India
IN59.178.153.62India
IN117.244.15.243India
IN122.170.105.219India
IN203.192.212.52India
IN203.194.109.142India
IT188.15.55.239Italy
KH117.20.117.40Cambodia
MX189.206.1.194Mexico
MX200.94.75.212Mexico
RU77.232.152.130Russian Federation
RU213.33.175.27Russian Federation
TR78.187.124.81Turkey
TR81.213.174.250Turkey
TR88.225.222.82Turkey
TR109.235.251.130Turkey
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-19]

detection period: 2016-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 450
number of botnet IPs notified to network operators: 416
number of spam blocked: 2072
recipient count of spam blocked: 55630

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-JS37
2CHINANET-GD21
3VNPT-VNNIC-VN10
4MX-MSCV17-LACNIC10
5ALISOFT9
6CHINANET-ZJ8
7002.558.157/0001-628
8TOT-AS-AP5
9MX-USCV4-LACNIC5
10HICHINA5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China157
2Brazil30
3Viet Nam29
4United States26
5Russian Federation22
6Mexico20
7Thailand19
8India12
9Indonesia9
10Argentina9

Friday, February 19, 2016

Suspected Bot List [2016-02-18]

detection period: 2016-02-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR186.138.82.251Argentina
IT84.221.238.46Italy

List from greylisting:

country codeIP addressCountry
AF180.94.70.98Afghanistan
AR190.112.93.223Argentina
AR200.41.178.234Argentina
AZ95.86.182.238Azerbaijan
CR201.202.246.162Costa Rica
ES87.235.177.251Spain
IL213.57.90.10Israel
IN42.104.70.5India
IN49.156.150.72India
IN59.90.111.127India
IN59.94.35.97India
IN117.193.211.110India
IN117.198.117.37India
IN122.164.207.108India
IN122.165.22.97India
IN122.169.13.138India
IN122.178.103.81India
IN182.64.106.4India
IN202.164.54.194India
IN203.192.212.52India
IN203.194.109.142India
IN210.7.65.75India
KE196.101.186.116Kenya
MX200.94.75.212Mexico
NI209.124.106.140Nicaragua
PH110.55.106.196Philippines
PH119.93.33.21Philippines
PH122.3.115.77Philippines
PH122.53.121.38Philippines
PK39.41.232.50Pakistan
RO89.121.160.237Romania
RO92.84.1.247Romania
RO109.103.177.124Romania
RU213.33.175.27Russian Federation
TR109.235.251.130Turkey
UZ213.230.91.11Uzbekistan
VE200.11.228.84Venezuela

Botnet Statistics [2016-02-18]

detection period: 2016-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 560
number of botnet IPs notified to network operators: 521
number of spam blocked: 7439
recipient count of spam blocked: 74644

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-JS60
2VNPT-VNNIC-VN27
3CHINANET-GD13
4CHINANET-ZJ10
5CHINANET-SH9
6ALISOFT9
7VIETEL-VNNIC-VN8
8002.558.157/0001-628
9HICHINA7
10CMNET5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China183
2Viet Nam53
3Brazil38
4United States35
5India32
6Russian Federation26
7Indonesia16
8Thailand15
9Romania12
10South Korea9

Thursday, February 18, 2016

Suspected Bot List [2016-02-17]

detection period: 2016-02-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 72

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
TH103.22.183.222Thailand

List from greylisting:

country codeIP addressCountry
AE83.110.97.192Arab Emirates
AL109.69.7.130Albania
AR190.112.93.223Argentina
AR191.81.65.139Argentina
AR200.41.178.234Argentina
BD116.58.205.137Bangladesh
BD150.242.104.214Bangladesh
BO186.27.126.130Bolivia
BO200.87.177.155Bolivia
CO190.90.22.122Colombia
CR201.202.246.162Costa Rica
EG41.32.191.122Egypt
EG193.227.49.83Egypt
EG196.219.96.39Egypt
ES80.59.199.213Spain
ES87.235.177.251Spain
GA41.211.167.183Gabon
GR91.140.66.7Greece
ID103.254.105.98Indonesia
IE79.97.93.30Ireland
IL213.57.90.10Israel
IN45.115.180.18India
IN59.90.111.127India
IN59.92.227.30India
IN59.178.195.99India
IN61.0.66.253India
IN61.3.140.111India
IN116.73.202.155India
IN117.99.162.51India
IN117.199.136.9India
IN117.201.73.66India
IN117.206.122.85India
IN117.208.143.238India
IN117.214.110.227India
IN117.241.158.118India
IN117.244.15.243India
IN120.57.152.11India
IN120.62.14.69India
IN122.170.105.219India
IN125.17.242.26India
IN182.64.56.74India
IN182.69.8.2India
IN182.69.8.61India
IN203.192.212.52India
IN203.194.109.142India
IN223.227.140.75India
MA41.137.56.4Morocco
MG41.74.28.182Madagascar
MX187.163.158.132Mexico
MX189.211.231.62Mexico
MX200.78.98.189Mexico
MX200.94.41.31Mexico
MX200.94.75.212Mexico
NG197.242.116.245Nigeria
NI209.124.106.140Nicaragua
PK39.32.237.46Pakistan
PK39.37.146.175Pakistan
PK175.107.50.157Pakistan
PK182.178.209.145Pakistan
PK182.185.114.215Pakistan
PK182.185.173.167Pakistan
RO92.80.194.113Romania
RS188.2.181.150Serbia
RU109.167.136.199Russian Federation
RU213.33.175.27Russian Federation
TR46.1.94.45Turkey
TR109.235.251.130Turkey
TR188.124.17.23Turkey
VE200.11.228.84Venezuela
ZA197.245.169.68South Africa
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-17]

detection period: 2016-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 706
number of botnet IPs notified to network operators: 634
number of spam blocked: 6812
recipient count of spam blocked: 68142

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-JS94
2VNPT-VNNIC-VN35
3CHINANET-SH21
4MX-MSCV17-LACNIC19
5ETC-VNNIC-VN13
6CHINANET-GD13
7BSNLNET11
8CHINANET-ZJ10
9002.558.157/0001-6210
10TOT-NET8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China223
2Viet Nam76
3Mexico39
4India38
5Brazil37
6United States28
7Thailand25
8Russian Federation20
9Turkey16
10Indonesia14

Wednesday, February 17, 2016

Suspected Bot List [2016-02-16]

detection period: 2016-02-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.0.163.135Argentina
TH103.22.183.222Thailand
UY179.25.198.175Uruguay

List from greylisting:

country codeIP addressCountry
AR181.24.136.16Argentina
AR181.30.50.138Argentina
AR181.118.108.75Argentina
AR186.23.164.78Argentina
AR190.210.204.15Argentina
AR200.41.178.234Argentina
AZ91.135.246.253Azerbaijan
BO186.27.126.130Bolivia
CR201.202.246.162Costa Rica
DZ105.98.175.181Algeria
DZ197.116.72.185Algeria
EG41.32.191.122Egypt
EG193.227.49.83Egypt
IL213.57.90.10Israel
IN59.90.111.127India
IN59.181.132.45India
IN59.182.183.241India
IN61.0.158.86India
IN117.192.45.102India
IN117.195.194.138India
IN117.200.186.61India
IN117.206.118.75India
IN117.208.47.104India
IN117.218.108.57India
IN117.244.15.243India
IN117.247.184.253India
IN122.162.0.116India
IN122.164.152.7India
IN122.164.229.171India
IN122.167.168.183India
IN122.170.105.219India
IN122.178.24.71India
IN125.21.255.126India
IN180.211.126.178India
IN182.59.180.240India
IN182.64.251.222India
IN203.192.212.52India
IN203.194.109.142India
IN203.217.145.165India
IT95.246.1.233Italy
KE197.237.10.135Kenya
MX187.177.172.13Mexico
MX200.94.75.212Mexico
NI209.124.106.140Nicaragua
RO92.80.123.161Romania
RO92.84.151.164Romania
RO109.98.161.132Romania
RS178.148.24.115Serbia
RU89.23.193.43Russian Federation
RU213.33.175.27Russian Federation
TR31.155.233.3Turkey
US75.132.198.73United States
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-16]

detection period: 2016-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 738
number of botnet IPs notified to network operators: 681
number of spam blocked: 7430
recipient count of spam blocked: 105716

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN75
2CHINANET-JS56
3FPT-VN17
4MX-MSCV17-LACNIC14
5VIETEL-VNNIC-VN13
6VIETEL-VN13
7ALISOFT13
8CHINANET-SH12
9CHINANET-ZJ10
10BSNLNET10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China183
2Viet Nam147
3Thailand38
4Russian Federation37
5India37
6Brazil36
7United States29
8Mexico22
9Indonesia16
10Turkey13

Tuesday, February 16, 2016

Suspected Bot List [2016-02-15]

detection period: 2016-02-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

country codeIP addressCountry
AR181.14.245.234Argentina
AR181.30.50.138Argentina
AR190.210.204.15Argentina
AR200.41.178.234Argentina
BO186.27.126.130Bolivia
CM197.159.0.70Cameroon
CR201.202.246.162Costa Rica
EG193.227.49.83Egypt
ES87.235.177.251Spain
HN161.0.213.28Honduras
IL213.57.90.10Israel
IN59.90.111.127India
IN61.0.163.248India
IN117.207.151.45India
IN117.207.237.6India
IN117.218.50.134India
IN117.244.15.243India
IN122.166.102.163India
IN122.170.105.219India
IN122.174.218.24India
IN171.49.152.178India
IN180.211.126.178India
IN182.64.32.233India
IN202.142.118.228India
IN203.192.212.52India
IN203.194.109.142India
KE196.200.26.82Kenya
MX200.94.75.212Mexico
RS24.135.33.195Serbia
RU213.33.175.27Russian Federation
TR109.235.251.130Turkey
TW123.195.63.138Taiwan
US66.189.137.35United States
VE200.11.228.84Venezuela

Botnet Statistics [2016-02-15]

detection period: 2016-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 491
number of botnet IPs notified to network operators: 457
number of spam blocked: 3066
recipient count of spam blocked: 69762

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN31
2MX-MSCV17-LACNIC19
3ALISOFT10
4CHINANET-ZJ9
5CHINANET-JS9
6002.558.157/0001-629
7FPT-VN7
8CMNET7
9VIETEL-VNNIC-VN6
10BSNLNET6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China103
2Viet Nam62
3Brazil34
4Russian Federation32
5Mexico26
6India26
7United States24
8Thailand17
9Indonesia15
10Hong Kong12

Monday, February 15, 2016

Suspected Bot List [2016-02-14]

detection period: 2016-02-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IL213.57.90.10Israel
UY186.50.218.208Uruguay

List from greylisting:

country codeIP addressCountry
AR181.14.245.234Argentina
AR190.17.159.223Argentina
AR190.210.204.15Argentina
AR190.247.142.77Argentina
BO186.27.126.130Bolivia
CM197.159.0.70Cameroon
CR201.202.246.162Costa Rica
IL213.57.90.10Israel
IN61.1.73.38India
IN117.196.197.230India
IN117.218.191.178India
IN117.244.15.243India
IN122.170.105.219India
IN180.211.126.178India
IN203.192.212.52India
IR89.165.72.163Iran
RO86.104.145.8Romania
RS89.216.185.53Serbia
RU213.33.175.27Russian Federation
SG116.251.222.217Singapore
TR78.40.226.103Turkey
UY179.29.49.58Uruguay
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-14]

detection period: 2016-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 376
number of botnet IPs notified to network operators: 351
number of spam blocked: 5039
recipient count of spam blocked: 132537

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN33
2MX-MSCV17-LACNIC16
3HINET-NET14
4CHINANET-GD12
5ALISOFT9
6CHINANET-JS8
7002.558.157/0001-628
8VIETEL-VNNIC-VN7
9CHINANET-ZJ7
10VIETEL-VN6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China92
2Viet Nam68
3Brazil26
4United States20
5Russian Federation20
6Mexico20
7Taiwan15
8India11
9Thailand9
10Indonesia9

Sunday, February 14, 2016

Suspected Bots' IP List for January 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-01-01]
Suspected Bots IP [2016-01-02]
Suspected Bots IP [2016-01-03]
Suspected Bots IP [2016-01-04]
Suspected Bots IP [2016-01-05]
Suspected Bots IP [2016-01-06]
Suspected Bots IP [2016-01-07]
Suspected Bots IP [2016-01-08]
Suspected Bots IP [2016-01-09]
Suspected Bots IP [2016-01-10]
Suspected Bots IP [2016-01-11]
Suspected Bots IP [2016-01-12]
Suspected Bots IP [2016-01-13]
Suspected Bots IP [2016-01-14]
Suspected Bots IP [2016-01-15]
Suspected Bots IP [2016-01-16]
Suspected Bots IP [2016-01-17]
Suspected Bots IP [2016-01-18]
Suspected Bots IP [2016-01-19]
Suspected Bots IP [2016-01-20]
Suspected Bots IP [2016-01-21]
Suspected Bots IP [2016-01-22]
Suspected Bots IP [2016-01-23]
Suspected Bots IP [2016-01-24]
Suspected Bots IP [2016-01-25]
Suspected Bots IP [2016-01-26]
Suspected Bots IP [2016-01-27]
Suspected Bots IP [2016-01-28]
Suspected Bots IP [2016-01-29]
Suspected Bots IP [2016-01-30]
Suspected Bots IP [2016-01-31]

Suspected Bot List [2016-02-13]

detection period: 2016-02-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IL213.57.90.10Israel
UY179.24.251.235Uruguay
UY179.24.253.127Uruguay
UY179.25.153.219Uruguay

List from greylisting:

country codeIP addressCountry
AR181.14.245.234Argentina
AR181.231.128.6Argentina
AR190.48.35.204Argentina
AR190.210.204.15Argentina
AR200.41.178.234Argentina
AZ91.135.246.51Azerbaijan
BO186.27.126.130Bolivia
CM197.159.0.70Cameroon
CR201.202.246.162Costa Rica
ID202.162.214.116Indonesia
ID202.162.219.83Indonesia
IL213.57.90.10Israel
IN59.89.182.100India
IN115.99.252.49India
IN117.199.136.0India
IN117.204.164.238India
IN117.241.78.110India
IN117.244.15.243India
IN122.170.105.219India
IN122.173.147.68India
IN122.174.244.17India
IN122.178.231.54India
IN180.211.126.178India
IN203.192.212.52India
IN203.192.223.29India
IN203.194.109.142India
ME62.4.55.184Montenegro
RO109.100.210.48Romania
RO109.102.91.85Romania
RU213.33.175.27Russian Federation
TR46.2.196.129Turkey
TR109.235.251.130Turkey
TR188.3.74.61Turkey
UY186.49.231.84Uruguay
VE200.11.228.84Venezuela
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-13]

detection period: 2016-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 476
number of botnet IPs notified to network operators: 437
number of spam blocked: 3818
recipient count of spam blocked: 110407

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET23
2VNPT-VNNIC-VN22
3CHINANET-GD12
4CHINANET-ZJ11
5CHINANET-JS9
6002.558.157/0001-629
7FPT-VN8
8ALISOFT6
9VIETEL-VNNIC-VN5
10TOT-NET5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China103
2Viet Nam58
3Brazil33
4Russian Federation28
5Taiwan25
6India22
7United States17
8Thailand17
9Ukraine14
10Indonesia12

Saturday, February 13, 2016

Suspected Bot List [2016-02-12]

detection period: 2016-02-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IL213.57.90.10Israel
UY179.25.205.102Uruguay
UY186.54.161.60Uruguay

List from greylisting:

country codeIP addressCountry
AR181.14.245.234Argentina
AR190.193.237.84Argentina
AR200.41.178.234Argentina
BG78.90.2.109Bulgaria
BG94.26.50.6Bulgaria
BO186.27.126.130Bolivia
BR150.164.26.101Brazil
CI41.66.37.171Ivory Coast
CM197.159.0.70Cameroon
CR201.202.246.162Costa Rica
EC190.90.220.245Ecuador
EG193.227.49.83Egypt
ES87.235.177.251Spain
GR46.190.48.19Greece
ID202.162.214.116Indonesia
ID202.162.219.83Indonesia
IL213.57.90.10Israel
IN27.5.217.21India
IN117.244.15.243India
IN122.164.159.152India
IN122.170.105.219India
IN180.211.126.178India
IN182.66.161.202India
IN182.77.25.174India
IN203.192.212.52India
IN203.194.109.142India
IT151.76.107.195Italy
MX187.177.172.13Mexico
NI209.124.106.140Nicaragua
PH122.53.178.100Philippines
PT78.130.92.197Portugal
RS89.216.204.151Serbia
RU213.33.175.27Russian Federation
TR109.235.251.130Turkey
VE200.11.228.84Venezuela

Botnet Statistics [2016-02-12]

detection period: 2016-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1114
number of botnet IPs notified to network operators: 1077
number of spam blocked: 61760
recipient count of spam blocked: 1814056

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET634
2MSFT26
3MX-MSCV17-LACNIC22
4VNPT-VNNIC-VN19
5MSFT-GFS16
6CHINANET-ZJ10
7ALISOFT10
8CHINANET-JS8
9002.558.157/0001-627
10CHINANET-GD6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan636
2China104
3United States64
4Viet Nam40
5Russian Federation36
6Brazil35
7Mexico30
8India17
9Thailand15
10Indonesia10

Friday, February 12, 2016

Suspected Bot List [2016-02-11]

detection period: 2016-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
CA167.114.135.195Canada
FR94.23.114.49France
IL213.57.90.10Israel
UY179.25.158.15Uruguay
UY179.25.253.108Uruguay

List from greylisting:

country codeIP addressCountry
AR179.38.76.53Argentina
AR181.14.245.234Argentina
AR181.169.213.213Argentina
AR190.7.9.194Argentina
AR190.210.204.15Argentina
AR200.41.178.234Argentina
BG94.26.8.52Bulgaria
BG94.26.50.6Bulgaria
BO186.27.126.130Bolivia
CR186.176.246.110Costa Rica
CR201.202.246.162Costa Rica
EG193.227.49.83Egypt
ES87.235.177.251Spain
ES95.120.14.214Spain
ID202.162.214.116Indonesia
ID202.162.219.83Indonesia
IL213.57.90.10Israel
IN61.2.82.228India
IN106.216.164.51India
IN112.133.244.35India
IN117.195.108.61India
IN117.197.120.11India
IN117.197.205.248India
IN117.214.29.201India
IN117.223.60.100India
IN117.244.15.243India
IN117.247.85.146India
IN117.248.28.65India
IN122.170.105.219India
IN122.173.35.115India
IN122.173.46.229India
IN180.211.126.178India
IN182.58.235.254India
IN182.71.75.246India
IN182.71.213.116India
IN202.164.49.210India
IN203.192.212.52India
IN203.194.109.142India
KE196.207.30.230Kenya
MR41.188.65.50Mauritania
PH122.53.178.100Philippines
PK39.33.130.214Pakistan
PK39.43.9.53Pakistan
PK182.185.217.121Pakistan
RU213.33.175.27Russian Federation
TR46.2.212.203Turkey
TR81.213.154.121Turkey
TR88.248.251.231Turkey
TR109.235.251.130Turkey
TR188.3.60.166Turkey
UY167.60.90.203Uruguay
UZ213.230.93.82Uzbekistan
ZW41.220.28.138Zimbabwe

Botnet Statistics [2016-02-11]

detection period: 2016-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1039
number of botnet IPs notified to network operators: 982
number of spam blocked: 53695
recipient count of spam blocked: 1592696

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET580
2MX-MSCV17-LACNIC24
3VNPT-VNNIC-VN12
4CHINANET-ZJ11
5BSNLNET9
6CHINANET-JS8
7ALISOFT8
8002.558.157/0001-628
9KORNET-KR5
10FPT-VN5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1Taiwan583
2China95
3Brazil33
4United States32
5India32
6Mexico31
7Viet Nam28
8Russian Federation24
9Indonesia16
10South Korea12