Custom Search

Wednesday, November 30, 2016

Suspected Bot List [2016-11-29]

detection period: 2016-11-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 238

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
AR190.195.255.164Argentina
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES88.28.206.137Spain
ES88.28.209.187Spain
FR62.210.188.185France
FR82.98.48.220France
FR85.203.80.206France
FR85.203.107.46France
FR85.203.114.1France
FR85.203.116.219France
FR85.203.120.51France
FR85.203.121.115France
FR85.203.123.53France
FR109.1.102.56France
FR193.252.26.9France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
GT181.209.254.17Guatemala
HT200.113.196.77Haiti
HT200.113.196.252Haiti
HT200.113.221.17Haiti
HT200.113.221.105Haiti
HT200.113.221.134Haiti
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.217.38India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
IT134.255.172.28Italy
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-29]

detection period: 2016-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1991
number of botnet IPs notified to network operators: 1753
number of spam blocked: 23345
recipient count of spam blocked: 29112

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN275
2CHINANET-HN161
3VIETEL-VNNIC-VN62
4FPT-VN53
5CHINANET-GD52
6BHARTI-IN50
7BSNLNET48
8VIETEL-VN37
9CMNET30
10CHINANET-JS29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China509
2Viet Nam500
3India178
4Brazil76
5Italy54
6Colombia48
7Mexico36
8Argentina31
9Antigua And Barbuda31
10South Korea29

Tuesday, November 29, 2016

Suspected Bot List [2016-11-28]

detection period: 2016-11-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 214

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
AR190.195.255.164Argentina
BD202.5.37.132Bangladesh
CM41.211.106.148Cameroon
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
FR82.98.48.220France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KH103.239.54.178Cambodia
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
PL185.125.4.249Poland
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-28]

detection period: 2016-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2096
number of botnet IPs notified to network operators: 1882
number of spam blocked: 22385
recipient count of spam blocked: 28267

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN323
2CHINANET-HN129
3VIETEL-VNNIC-VN81
4FPT-VN57
5BHARTI-IN55
6CHINANET-JS53
7VIETEL-VN50
8CHINANET-HB47
9CMNET41
10BSNLNET39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1Viet Nam614
2China592
3India160
4Brazil61
5Mexico38
6Italy38
7Colombia38
8South Korea32
9Antigua And Barbuda30
10Taiwan28

Monday, November 28, 2016

Suspected Bot List [2016-11-27]

detection period: 2016-11-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 158

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
AR190.195.255.164Argentina
BD180.211.159.98Bangladesh
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
EG41.33.33.146Egypt
ES88.28.199.74Spain
ES88.28.209.187Spain
FR82.98.48.220France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
GT181.209.238.69Guatemala
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
IT134.255.172.28Italy
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KZ89.218.26.142Kazakhstan
MY203.142.41.3Malaysia
MY203.142.41.4Malaysia
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-27]

detection period: 2016-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1487
number of botnet IPs notified to network operators: 1329
number of spam blocked: 305255
recipient count of spam blocked: 307085

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN169
2CHINANET-HN105
3CHINANET-GD49
4FPT-VN41
5UNICOM-ZJ40
6CHINANET-HB34
7VIETEL-VNNIC-VN32
8CMNET31
9BHARTI-IN31
10BSNLNET27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China537
2Viet Nam322
3India76
4Brazil39
5Argentina34
6South Korea30
7Antigua And Barbuda27
8Mexico25
9Russian Federation23
10Colombia22

Sunday, November 27, 2016

Suspected Bot List [2016-11-26]

detection period: 2016-11-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 86

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD118.179.158.218Bangladesh
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.217.38India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.163.67Cambodia
KZ89.218.26.142Kazakhstan
MY203.142.35.67Malaysia
MY203.142.41.4Malaysia
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.38.210Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
TZ41.77.194.182Tanzania

List from greylisting:

Botnet Statistics [2016-11-26]

detection period: 2016-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 812
number of botnet IPs notified to network operators: 726
number of spam blocked: 393290
recipient count of spam blocked: 398203

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN107
2CHINANET-GD53
3BHARTI-IN33
4CHINANET-HB30
5CMNET27
6UNICOM-HE23
7BSNLNET23
8UCOM-GPON15
9UNICOM-GD13
10UNICOM-JX12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China421
2India77
3Antigua And Barbuda23
4Viet Nam18
5Armenia15
6Taiwan14
7Russian Federation14
8South Korea14
9Brazil14
10Pakistan13

Saturday, November 26, 2016

Suspected Bot List [2016-11-25]

detection period: 2016-11-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 183

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
AR190.195.255.164Argentina
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.212.52India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KZ89.218.26.142Kazakhstan
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SA88.85.228.90Saudi Arabia
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-25]

detection period: 2016-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1302
number of botnet IPs notified to network operators: 1119
number of spam blocked: 477668
recipient count of spam blocked: 488368

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN134
2BHARTI-IN58
3BSNLNET54
4CHINANET-GD44
5CHINANET-HB36
6VNPT-VNNIC-VN28
7CMNET28
8UNICOM-HE20
9UCOM-GPON18
10CHINANET-AH16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China489
2India216
3Viet Nam73
4Pakistan34
5Antigua And Barbuda29
6Indonesia25
7Brazil23
8Russian Federation20
9Bangladesh18
10Armenia18

Friday, November 25, 2016

Suspected Bot List [2016-11-24]

detection period: 2016-11-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 173

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
FR82.98.48.220France
GA197.231.141.29Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.217.38India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN203.192.212.52India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
MY203.142.41.3Malaysia
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PH203.115.141.251Philippines
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.63.25Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SA88.85.228.90Saudi Arabia
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
US69.145.190.168United States

List from greylisting:

Botnet Statistics [2016-11-24]

detection period: 2016-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1286
number of botnet IPs notified to network operators: 1113
number of spam blocked: 195485
recipient count of spam blocked: 199921

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN148
2CHINANET-GD92
3BHARTI-IN47
4CHINANET-JS44
5UNICOM-JS43
6CHINANET-HB33
7BSNLNET32
8VNPT-VNNIC-VN24
9CMNET21
10UNICOM-HE19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China582
2India170
3Viet Nam61
4Pakistan28
5Colombia24
6Brazil24
7Iran23
8Indonesia23
9Italy21
10Antigua And Barbuda20

Thursday, November 24, 2016

Suspected Bot List [2016-11-23]

detection period: 2016-11-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 165

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD58.147.173.36Bangladesh
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.123Cape Verde
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GT181.209.252.97Guatemala
IN59.145.146.94India
IN125.17.80.106India
IN182.71.6.82India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.217.38India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.119.150India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KH103.239.54.178Cambodia
KZ89.218.26.142Kazakhstan
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PH203.115.141.251Philippines
PK110.36.32.105Pakistan
PK110.38.217.60Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-23]

detection period: 2016-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1311
number of botnet IPs notified to network operators: 1146
number of spam blocked: 19766
recipient count of spam blocked: 23587

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN165
2UNICOM-ZJ77
3BHARTI-IN48
4UNICOM-JS43
5WASU36
6BSNLNET33
7CHINANET-JS30
8CMNET27
9WASU-BB26
10CHINANET-HB25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China639
2India155
3Viet Nam56
4Iran35
5Russian Federation22
6Indonesia22
7Bangladesh22
8Brazil20
9Antigua And Barbuda19
10Colombia15

Wednesday, November 23, 2016

Suspected Bot List [2016-11-22]

detection period: 2016-11-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 110

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD202.5.37.132Bangladesh
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
GA197.231.141.29Gabon
GA197.231.143.122Gabon
IN59.145.146.94India
IN125.17.80.106India
IN182.71.6.82India
IN182.71.119.162India
IN182.72.36.34India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.205.202India
IN203.192.221.86India
IN203.192.221.87India
IT134.255.172.28Italy
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.38.217.60Pakistan
PK110.38.217.161Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-22]

detection period: 2016-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1050
number of botnet IPs notified to network operators: 940
number of spam blocked: 10170
recipient count of spam blocked: 16213

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN132
2UNICOM-ZJ74
3CHINANET-JS69
4UNICOM-JS48
5WASU43
6BHARTI-IN33
7WASU-BB31
8CHINANET-HB21
9UNICOM-HE16
10CMNET15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China590
2India102
3Viet Nam33
4Iran21
5Pakistan20
6Colombia17
7Bangladesh17
8Brazil16
9Russian Federation13
10Antigua And Barbuda13

Tuesday, November 22, 2016

Suspected Bot List [2016-11-21]

detection period: 2016-11-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD43.240.100.4Bangladesh
BD43.240.100.102Bangladesh
BD43.240.100.199Bangladesh
BD103.36.100.16Bangladesh
BD116.193.219.109Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
BD202.5.37.132Bangladesh
CR186.32.186.58Costa Rica
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
IN59.145.146.94India
IN125.17.80.106India
IN182.71.6.82India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.87India
KH103.239.54.178Cambodia
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PH203.115.141.251Philippines
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.38.216.74Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SA88.85.228.90Saudi Arabia
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-21]

detection period: 2016-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 941
number of botnet IPs notified to network operators: 837
number of spam blocked: 8635
recipient count of spam blocked: 13188

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN84
2CHINANET-JS50
3UNICOM-ZJ46
4UNICOM-JS41
5BHARTI-IN38
6WASU31
7CMNET28
8CHINANET-HB25
9WASU-BB21
10BSNLNET19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China512
2India111
3Viet Nam27
4Bangladesh16
5Russian Federation15
6Colombia15
7Brazil15
8Armenia14
9Taiwan13
10Pakistan13

Monday, November 21, 2016

Suspected Bot List [2016-11-20]

detection period: 2016-11-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 76

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
BD43.240.100.4Bangladesh
BD43.240.100.199Bangladesh
BD103.36.100.16Bangladesh
BD116.193.219.109Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.121Cape Verde
CV197.255.143.123Cape Verde
ES88.28.206.137Spain
ES88.28.209.187Spain
GA197.231.141.29Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.89.138India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.205.202India
IN203.192.221.87India
KH103.239.54.178Cambodia
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.133Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SA88.85.228.90Saudi Arabia
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-20]

detection period: 2016-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 781
number of botnet IPs notified to network operators: 705
number of spam blocked: 9995
recipient count of spam blocked: 20061

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN81
2UNICOM-ZJ70
3WASU50
4BHARTI-IN25
5CHINANET-HB23
6BSNLNET22
7CMNET21
8WASU-BB18
9UNICOM-HE17
10UCOM-GPON17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China423
2India59
3Russian Federation18
4Antigua And Barbuda18
5Armenia17
6Pakistan16
7Taiwan14
8Bangladesh14
9Brazil13
10Ukraine11

Sunday, November 20, 2016

Suspected Bot List [2016-11-19]

detection period: 2016-11-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR170.84.169.2Argentina
AR190.191.64.42Argentina
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.123Cape Verde
ES88.28.204.7Spain
ES88.28.206.137Spain
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.6.82India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.173.58India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN182.76.1.182India
IN203.192.212.52India
IN203.192.221.86India
IN203.192.221.87India
KH103.239.54.178Cambodia
NL213.34.69.164Netherlands
PH203.115.141.251Philippines
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.216.74Pakistan
PK110.38.217.60Pakistan
PK110.38.218.122Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
SA88.85.228.90Saudi Arabia
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
UG137.63.129.23Uganda

List from greylisting:

Botnet Statistics [2016-11-19]

detection period: 2016-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 639
number of botnet IPs notified to network operators: 565
number of spam blocked: 1338
recipient count of spam blocked: 4354

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNICOM-ZJ39
2BHARTI-IN33
3WASU-BB30
4WASU29
5CMNET25
6CHINANET-HB23
7UCOM-GPON18
8UNICOM-HE15
9BSNLNET14
10UNICOM-JX12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China310
2India59
3Armenia18
4Antigua And Barbuda18
5Viet Nam15
6Russian Federation13
7South Korea13
8El Salvador11
9United States10
10Brazil10

Saturday, November 19, 2016

Suspected Bot List [2016-11-18]

detection period: 2016-11-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD202.5.37.132Bangladesh
CM41.223.30.251Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
FR82.98.48.220France
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
IN59.145.146.94India
IN125.17.80.106India
IN182.71.6.82India
IN182.71.16.154India
IN182.71.25.62India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.173.58India
IN182.74.190.194India
IN182.74.203.226India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
KH103.239.54.178Cambodia
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PH203.115.141.251Philippines
PK110.36.35.128Pakistan
PK110.36.63.25Pakistan
PK110.38.217.60Pakistan
PK110.38.217.82Pakistan
PK110.38.218.122Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
SA88.85.228.90Saudi Arabia
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-11-18]

detection period: 2016-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1295
number of botnet IPs notified to network operators: 1226
number of spam blocked: 88120
recipient count of spam blocked: 91615

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1WASU528
2UNICOM-ZJ56
3WASU-BB39
4BHARTI-IN30
5CMNET27
6BSNLNET25
7UNICOM-HE22
8CHINANET-HB21
9UCOM-GPON18
10UNICOM-JS15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China893
2India69
3Viet Nam25
4Antigua And Barbuda24
5Armenia18
6Brazil17
7Taiwan16
8Russian Federation16
9South Korea14
10United States11

Friday, November 18, 2016

Suspected Bot List [2016-11-17]

detection period: 2016-11-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
IN182.71.6.82India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.149.230India
IN182.74.173.58India
IN182.75.77.50India
IN182.76.1.182India
IN203.192.212.52India
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.33.137El Salvador

List from greylisting:

Botnet Statistics [2016-11-17]

detection period: 2016-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1150
number of botnet IPs notified to network operators: 1127
number of spam blocked: 260772
recipient count of spam blocked: 268268

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1WASU654
2UNICOM-ZJ96
3CHINANET-HN91
4WASU-BB42
5CHINANET-JS34
6UNICOM-JS32
7CHINANET-HB14
8BHARTI-IN8
9CMNET7
10CHINANET-GD7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1046
2India17
3Brazil8
4Taiwan7
5Russian Federation7
6Turkey5
7El Salvador5
8South Korea5
9Hong Kong4
10United States3

Thursday, November 17, 2016

Suspected Bot List [2016-11-16]

detection period: 2016-11-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR170.84.169.2Argentina
IN203.192.212.52India
US47.50.130.58United States

List from greylisting:

Botnet Statistics [2016-11-16]

detection period: 2016-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 930
number of botnet IPs notified to network operators: 914
number of spam blocked: 220789
recipient count of spam blocked: 228909

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1WASU459
2CHINANET-HN95
3UNICOM-ZJ85
4WASU-BB41
5UNICOM-JS32
6CHINANET-JS31
7CHINANET-HB16
8CHINANET-AH13
9CHINANET-GD9
10UNICOM-NM7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China838
2Japan12
3United States11
4Taiwan6
5Italy6
6Turkey5
7Russian Federation5
8India4
9Argentina4
10Viet Nam3

Wednesday, November 16, 2016

Suspected Bot List [2016-11-15]

detection period: 2016-11-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.191.64.42Argentina
BD43.240.100.4Bangladesh
BD43.240.100.102Bangladesh
BD103.36.100.16Bangladesh
BD116.193.219.109Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
CM41.223.30.251Cameroon
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.123Cape Verde
GA197.231.141.29Gabon
IN59.145.146.94India
IN125.99.255.146India
IN182.71.6.82India
IN182.71.16.154India
IN182.71.118.138India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.190.194India
IN182.74.232.178India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.205.202India
IN182.76.1.182India
IN203.192.212.52India
IN203.192.221.86India
IN203.192.221.87India
KG81.88.196.175Kyrgyzstan
NL213.34.69.164Netherlands
NL213.34.69.176Netherlands
PH203.115.141.251Philippines
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.38.210Pakistan
PK110.38.216.74Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.218.122Pakistan
PK110.38.219.211Pakistan
PK182.191.81.191Pakistan
RO89.165.156.233Romania
RU213.33.205.6Russian Federation
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.10El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
UG137.63.129.23Uganda
US47.50.130.58United States

List from greylisting:

Botnet Statistics [2016-11-15]

detection period: 2016-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1371
number of botnet IPs notified to network operators: 1284
number of spam blocked: 18001
recipient count of spam blocked: 32596

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1WASU392
2CHINANET-HN113
3UNICOM-ZJ84
4WASU-BB47
5CHINANET-JS39
6UNICOM-JS37
7BHARTI-IN30
8CMNET27
9UCOM-GPON25
10CHINANET-HB24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China994
2India57
3United States28
4Armenia25
5Taiwan18
6Russian Federation18
7Antigua And Barbuda17
8South Korea16
9Pakistan13
10Ukraine12