Suspected Bot List [2017-02-27]

detection period: 2017-02-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-27]

detection period: 2017-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 878
number of botnet IPs notified to network operators: 844
number of spam blocked: 71358
recipient count of spam blocked: 1998124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	531
2	UNICOM-ZJ	65
3	WASU-BB	45
4	VNPT-VNNIC-VN	26
5	WASU	12
6	CMNET	7
7	CHINANET-GD	7
8	VIETEL-VNNIC-VN	6
9	FPT-VN	6
10	BHARTI-IN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	531
2	China	163
3	Viet Nam	45
4	India	18
5	Peru	9
6	Iran	9
7	Brazil	9
8	Mexico	8
9	Argentina	8
10	Thailand	7

Suspected Bot List [2017-02-26]

detection period: 2017-02-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-26]

detection period: 2017-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 792
number of botnet IPs notified to network operators: 765
number of spam blocked: 70041
recipient count of spam blocked: 1936138

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	502
2	UNICOM-ZJ	62
3	WASU-BB	33
4	VNPT-VNNIC-VN	19
5	WASU	10
6	CHINANET-GD	8
7	CMNET	7
8	VIETEL-VNNIC-VN	5
9	FPT-VN	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	502
2	China	151
3	Viet Nam	35
4	India	13
5	Iran	8
6	United States	7
7	Mexico	7
8	United Kingdom	6
9	Brazil	6
10	Saudi Arabia	4

Suspected Bot List [2017-02-25]

detection period: 2017-02-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
ID	103.56.207.212	Indonesia
IN	125.16.12.146	India
IN	203.192.212.52	India
IN	223.196.86.228	India
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-25]

detection period: 2017-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1205
number of botnet IPs notified to network operators: 1173
number of spam blocked: 72806
recipient count of spam blocked: 2036700

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	538
2	UNICOM-ZJ	91
3	WASU-BB	64
4	CHINANET-JS	33
5	UNICOM-SD	27
6	UNICOM-GX	24
7	VNPT-VNNIC-VN	21
8	CHINANET-CQ	15
9	CHINANET-GD	14
10	WASU	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	548
2	China	442
3	Viet Nam	47
4	United States	21
5	India	20
6	Brazil	15
7	Peru	9
8	Mexico	7
9	United Kingdom	6
10	Thailand	5

Suspected Bot List [2017-02-24]

detection period: 2017-02-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
CO	190.60.234.186	Colombia
ID	103.56.207.212	Indonesia
IN	125.16.12.146	India
IN	125.16.240.197	India
IN	203.192.212.52	India
MX	189.202.187.68	Mexico
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	123.193.126.130	Taiwan
TW	180.176.226.2	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-24]

detection period: 2017-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1108
number of botnet IPs notified to network operators: 1081
number of spam blocked: 67356
recipient count of spam blocked: 1940255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	514
2	UNICOM-ZJ	47
3	UNICOM-SD	40
4	CHINANET-JS	37
5	WASU-BB	28
6	UNICOM-GX	26
7	CHINANET-CQ	25
8	CHINANET-GD	18
9	UNICOM-SX	14
10	CMNET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	531
2	China	434
3	United States	29
4	Brazil	17
5	India	10
6	Italy	9
7	Colombia	8
8	Viet Nam	6
9	Russian Federation	6
10	South Korea	5

Suspected Bot List [2017-02-23]

detection period: 2017-02-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
GB	163.172.21.117	United Kingdom
IN	125.16.240.17	India
IN	125.16.240.197	India
IN	203.192.212.52	India
TW	123.193.126.130	Taiwan
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-23]

detection period: 2017-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1089
number of botnet IPs notified to network operators: 1065
number of spam blocked: 73591
recipient count of spam blocked: 2062793

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	489
2	UNICOM-ZJ	84
3	WASU-BB	52
4	CHINANET-JS	27
5	UNICOM-GX	19
6	CMNET	19
7	CHINANET-GD	19
8	UNICOM-SD	18
9	DEDFIBERCO	12
10	CHINANET-CQ	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	499
2	China	430
3	United States	30
4	Russian Federation	21
5	India	18
6	Brazil	13
7	Italy	8
8	South Korea	6
9	Colombia	5
10	Viet Nam	3

Suspected Bot List [2017-02-22]

detection period: 2017-02-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
GB	163.172.21.117	United Kingdom
IN	125.16.12.146	India
IN	125.16.240.17	India
IN	125.16.240.197	India
IN	203.192.212.52	India
SA	212.12.175.222	Saudi Arabia
TW	118.233.118.10	Taiwan
TW	123.193.126.130	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-22]

detection period: 2017-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1041
number of botnet IPs notified to network operators: 1015
number of spam blocked: 72550
recipient count of spam blocked: 2021150

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	520
2	UNICOM-ZJ	65
3	WASU-BB	47
4	CHINANET-GD	23
5	CHINANET-JS	20
6	UNICOM-SD	17
7	UNICOM-GX	17
8	CMNET	14
9	UNICOM-HA	9
10	CHINANET-ZJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	531
2	China	360
3	United States	29
4	Russian Federation	21
5	India	14
6	Brazil	11
7	Ukraine	8
8	South Korea	6
9	Italy	6
10	Colombia	6

Suspected Bot List [2017-02-21]

detection period: 2017-02-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-21]

detection period: 2017-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1099
number of botnet IPs notified to network operators: 1050
number of spam blocked: 110582
recipient count of spam blocked: 3232376

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	605
2	VNPT-VNNIC-VN	31
3	CMNET	20
4	CHINANET-GD	19
5	CHINANET-AH	12
6	BHARTI-IN	11
7	CHINANET-SN	9
8	CHINANET-JS	9
9	FPT-VN	7
10	DEDFIBERCO	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	607
2	China	176
3	Viet Nam	56
4	India	45
5	Russian Federation	26
6	Brazil	18
7	United States	16
8	Peru	11
9	South Korea	10
10	Ukraine	9

Suspected Bot List [2017-02-20]

detection period: 2017-02-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-20]

detection period: 2017-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 996
number of botnet IPs notified to network operators: 936
number of spam blocked: 135938
recipient count of spam blocked: 4008566

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	619
2	VNPT-VNNIC-VN	28
3	CHINANET-GD	23
4	MX-IPMS2-LACNIC	7
5	FPT-VN	7
6	CO-ACSA-LACNIC	7
7	PE-TPSA-LACNIC	6
8	VIETEL-VNNIC-VN	5
9	ETC-VNNIC-VN	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	621
2	China	61
3	Viet Nam	59
4	India	38
5	Mexico	20
6	Brazil	20
7	Iran	16
8	Colombia	16
9	Turkey	15
10	Peru	9

Suspected Bot List [2017-02-19]

detection period: 2017-02-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-19]

detection period: 2017-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1302
number of botnet IPs notified to network operators: 1207
number of spam blocked: 138991
recipient count of spam blocked: 4018936

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	616
2	VNPT-VNNIC-VN	38
3	CHINANET-GD	31
4	CHINANET-AH	20
5	CMNET	16
6	BSNLNET	14
7	CHINANET-JS	12
8	BHARTI-IN	10
9	FPT-VN	9
10	VIETEL-VNNIC-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	619
2	China	186
3	Viet Nam	74
4	India	73
5	Russian Federation	34
6	Mexico	24
7	Iran	24
8	Peru	15
9	Brazil	13
10	United States	12

Suspected Bots' IP List for January 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-01-01]
Suspected Bots IP [2017-01-02]
Suspected Bots IP [2017-01-03]
Suspected Bots IP [2017-01-04]
Suspected Bots IP [2017-01-05]
Suspected Bots IP [2017-01-06]
Suspected Bots IP [2017-01-07]
Suspected Bots IP [2017-01-08]
Suspected Bots IP [2017-01-09]
Suspected Bots IP [2017-01-10]
Suspected Bots IP [2017-01-11]
Suspected Bots IP [2017-01-12]
Suspected Bots IP [2017-01-13]
Suspected Bots IP [2017-01-14]
Suspected Bots IP [2017-01-15]
Suspected Bots IP [2017-01-16]
Suspected Bots IP [2017-01-17]
Suspected Bots IP [2017-01-18]
Suspected Bots IP [2017-01-19]
Suspected Bots IP [2017-01-20]
Suspected Bots IP [2017-01-21]
Suspected Bots IP [2017-01-22]
Suspected Bots IP [2017-01-23]
Suspected Bots IP [2017-01-24]
Suspected Bots IP [2017-01-25]
Suspected Bots IP [2017-01-26]
Suspected Bots IP [2017-01-27]
Suspected Bots IP [2017-01-28]
Suspected Bots IP [2017-01-29]
Suspected Bots IP [2017-01-30]
Suspected Bots IP [2017-01-31]

Suspected Bot List [2017-02-18]

detection period: 2017-02-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 132

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
CO	190.60.234.186	Colombia
IN	125.16.12.146	India
IN	125.16.240.17	India
IN	203.192.212.52	India
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-18]

detection period: 2017-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1510
number of botnet IPs notified to network operators: 1378
number of spam blocked: 131169
recipient count of spam blocked: 3739338

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	587
2	VNPT-VNNIC-VN	51
3	CHINANET-JS	27
4	UNICOM-SD	22
5	BSNLNET	18
6	FPT-VN	16
7	CHINANET-AH	15
8	UNICOM-GX	14
9	CMNET	14
10	CHINANET-GD	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	595
2	China	296
3	India	101
4	Viet Nam	100
5	Mexico	29
6	Iran	29
7	Russian Federation	25
8	Brazil	25
9	Colombia	22
10	Peru	20

Suspected Bot List [2017-02-17]

detection period: 2017-02-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.197	Colombia
IN	125.16.240.17	India
IN	125.16.240.197	India
IN	203.192.212.52	India
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	123.193.126.130	Taiwan
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-17]

detection period: 2017-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1173
number of botnet IPs notified to network operators: 1121
number of spam blocked: 126803
recipient count of spam blocked: 3705937

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	592
2	CHINANET-JS	25
3	CMNET	19
4	UNICOM-SD	18
5	CHINANET-GD	18
6	CHINANET-AH	15
7	BHARTI-IN	12
8	CHINANET-ZJ	10
9	KORNET-KR	9
10	UNICOM-GX	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	600
2	China	302
3	Russian Federation	44
4	India	34
5	United States	25
6	South Korea	15
7	Brazil	14
8	Ukraine	13
9	Mexico	10
10	Italy	10

Suspected Bot List [2017-02-16]

detection period: 2017-02-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.12.146	India
IN	125.16.240.197	India
SA	212.12.175.222	Saudi Arabia
US	206.125.41.139	United States
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-16]

detection period: 2017-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1005
number of botnet IPs notified to network operators: 973
number of spam blocked: 127175
recipient count of spam blocked: 3733398

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	581
2	CMNET	21
3	CHINANET-JS	16
4	CHINANET-GD	15
5	UNICOM-SD	13
6	CHINANET-AH	11
7	KORNET-KR	9
8	UNICOM-GX	8
9	CHINANET-ZJ	8
10	CHINANET-XJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	583
2	China	225
3	Russian Federation	38
4	United States	30
5	India	21
6	Italy	12
7	South Korea	10
8	Brazil	9
9	Colombia	6
10	Chile	6

Suspected Bot List [2017-02-15]

detection period: 2017-02-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.12.146	India
IN	125.16.240.17	India
IN	125.16.240.197	India
SA	212.12.175.222	Saudi Arabia
TW	123.193.126.130	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-15]

detection period: 2017-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1131
number of botnet IPs notified to network operators: 1095
number of spam blocked: 118449
recipient count of spam blocked: 3504063

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	565
2	CHINANET-GD	24
3	UNICOM-SD	20
4	CHINANET-JS	20
5	UNICOM-GX	19
6	CMNET	19
7	BHARTI-IN	17
8	BSNLNET	12
9	CHINANET-GZ	10
10	CHINANET-SN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	573
2	China	267
3	Russian Federation	71
4	India	47
5	United States	34
6	Italy	22
7	South Korea	13
8	Brazil	13
9	Ukraine	11
10	United Kingdom	6

Suspected Bot List [2017-02-14]

detection period: 2017-02-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
SA	212.12.175.222	Saudi Arabia
TW	123.193.126.130	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-14]

detection period: 2017-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1296
number of botnet IPs notified to network operators: 1268
number of spam blocked: 131629
recipient count of spam blocked: 3548115

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	576
2	CHINANET-HN	178
3	UNICOM-ZJ	92
4	WASU-BB	56
5	CHINANET-GD	14
6	CMNET	13
7	BSNLNET	13
8	UNICOM-SD	12
9	WASU	10
10	CHINANET-JS	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	580
2	China	499
3	Russian Federation	35
4	India	34
5	United States	21
6	Brazil	15
7	Italy	11
8	South Korea	10
9	Ukraine	9
10	United Kingdom	8

Suspected Bot List [2017-02-13]

detection period: 2017-02-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
RO	185.100.86.167	Romania
SA	212.12.175.222	Saudi Arabia
TW	123.193.126.130	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-13]

detection period: 2017-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1527
number of botnet IPs notified to network operators: 1512
number of spam blocked: 130878
recipient count of spam blocked: 3400995

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	745
2	CHINANET-HN	244
3	UNICOM-ZJ	89
4	WASU-BB	65
5	VNPT-VNNIC-VN	29
6	WASU	21
7	UNICOM-SD	21
8	CHINANET-JS	17
9	UNICOM-GX	16
10	CMNET	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	753
2	China	600
3	Viet Nam	48
4	United States	18
5	Brazil	15
6	Italy	12
7	India	8
8	Thailand	6
9	Colombia	6
10	Russian Federation	5

Suspected Bot List [2017-02-12]

detection period: 2017-02-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
RO	185.100.86.167	Romania
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.192.21.125	Taiwan
TW	123.193.126.130	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-12]

detection period: 2017-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1747
number of botnet IPs notified to network operators: 1727
number of spam blocked: 134213
recipient count of spam blocked: 3639704

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	902
2	CHINANET-HN	165
3	UNICOM-ZJ	61
4	CHINANET-JS	50
5	UNICOM-SD	48
6	WASU-BB	46
7	UNICOM-GX	42
8	UNICOM-LN	18
9	CHINANET-CQ	17
10	CHINANET-GD	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	934
2	China	693
3	United States	26
4	Italy	15
5	Brazil	14
6	Russian Federation	9
7	Germany	6
8	Colombia	6
9	India	4
10	United Kingdom	4

Suspected Bot List [2017-02-11]

detection period: 2017-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
RO	185.100.86.167	Romania
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.193.126.130	Taiwan
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-11]

detection period: 2017-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1238
number of botnet IPs notified to network operators: 1216
number of spam blocked: 90613
recipient count of spam blocked: 2178949

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	462
2	CHINANET-HN	302
3	UNICOM-SD	40
4	CHINANET-JS	40
5	UNICOM-GX	22
6	CHINANET-GD	19
7	CHINANET-CQ	13
8	CHINANET-ZJ	11
9	UNICOM-LN	10
10	CHINANET-ZJ-TZ	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	630
2	Taiwan	486
3	United States	31
4	Russian Federation	17
5	Brazil	11
6	Italy	8
7	India	7
8	South Korea	5
9	Germany	5
10	Colombia	5

Suspected Bot List [2017-02-10]

detection period: 2017-02-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
AR	191.85.137.112	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
RO	185.100.86.167	Romania
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-10]

detection period: 2017-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1574
number of botnet IPs notified to network operators: 1548
number of spam blocked: 104920
recipient count of spam blocked: 2629815

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	478
2	CHINANET-HN	308
3	UNICOM-SD	67
4	UNICOM-ZJ	53
5	CHINANET-JS	53
6	UNICOM-GX	37
7	WASU-BB	36
8	UNICOM-LN	26
9	UNICOM-HE	26
10	UNICOM-SX	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	947
2	Taiwan	505
3	United States	23
4	Russian Federation	15
5	Brazil	15
6	Italy	7
7	India	6
8	Ukraine	5
9	Germany	5
10	Colombia	5

Suspected Bot List [2017-02-09]

detection period: 2017-02-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
MO	27.109.160.130	Macau
RO	185.100.86.167	Romania
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
TW	123.195.196.105	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-09]

detection period: 2017-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1527
number of botnet IPs notified to network operators: 1506
number of spam blocked: 147670
recipient count of spam blocked: 3965010

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	516
2	CHINANET-HN	260
3	UNICOM-SD	72
4	UNICOM-GX	54
5	CHINANET-JS	50
6	UNICOM-ZJ	44
7	CHINANET-GD	23
8	CHINANET-GZ	21
9	UNICOM-LN	19
10	WASU-BB	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	848
2	Taiwan	556
3	Russian Federation	21
4	United States	16
5	Brazil	15
6	Italy	8
7	India	7
8	Germany	5
9	Colombia	5
10	Ukraine	3

Suspected Bot List [2017-02-08]

detection period: 2017-02-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
MO	60.246.96.247	Macau
RO	185.100.86.167	Romania
RU	91.197.234.102	Russian Federation
SA	212.12.175.222	Saudi Arabia
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-08]

detection period: 2017-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1194
number of botnet IPs notified to network operators: 1176
number of spam blocked: 177542
recipient count of spam blocked: 4693531

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	504
2	CHINANET-HN	251
3	UNICOM-SD	31
4	UNICOM-GX	27
5	CHINANET-JS	24
6	UNICOM-LN	15
7	CMNET	13
8	CHINANET-ZJ	13
9	UNICOM-HE	11
10	CHINANET-CQ	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	543
2	Taiwan	527
3	Brazil	18
4	United States	16
5	Russian Federation	9
6	Italy	9
7	India	8
8	Germany	5
9	Colombia	5
10	Chile	5

Suspected Bot List [2017-02-07]

detection period: 2017-02-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
RO	185.100.86.167	Romania
SA	212.12.175.222	Saudi Arabia
TW	118.233.116.192	Taiwan
US	206.125.47.7	United States
US	206.125.47.10	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-07]

detection period: 2017-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 954
number of botnet IPs notified to network operators: 939
number of spam blocked: 180484
recipient count of spam blocked: 4894340

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	496
2	CHINANET-HN	225
3	UNICOM-ZJ	40
4	WASU-BB	35
5	WASU	8
6	TencentCloud	6
7	RingLink	6
8	CMNET	6
9	CHINANET-GD	6
10	UNICOM-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	499
2	China	372
3	United States	16
4	Brazil	10
5	Ukraine	6
6	India	5
7	Russian Federation	4
8	Colombia	4
9	Romania	3
10	Germany	3

Suspected Bot List [2017-02-06]

detection period: 2017-02-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
SA	212.12.175.222	Saudi Arabia
TW	118.233.116.192	Taiwan
US	206.125.47.7	United States
US	206.125.47.10	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-06]

detection period: 2017-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 924
number of botnet IPs notified to network operators: 910
number of spam blocked: 160057
recipient count of spam blocked: 4462173

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	456
2	CHINANET-HN	140
3	UNICOM-ZJ	65
4	WASU-BB	46
5	WASU	42
6	CHINANET-GD	9
7	UNICOM-GD	6
8	RingLink	6
9	UNICOM-SD	5
10	TencentCloud	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	460
2	China	372
3	United States	18
4	Brazil	10
5	Colombia	7
6	Russian Federation	6
7	Italy	5
8	India	5
9	Ukraine	4
10	Pakistan	3

Suspected Bot List [2017-02-05]

detection period: 2017-02-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
MX	189.202.187.68	Mexico
TW	106.1.51.81	Taiwan
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
US	206.125.47.10	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-05]

detection period: 2017-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1172
number of botnet IPs notified to network operators: 1149
number of spam blocked: 107953
recipient count of spam blocked: 2840798

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	321
2	CHINANET-HN	204
3	CHINANET-JS	52
4	UNICOM-SD	45
5	UNICOM-ZJ	29
6	UNICOM-GX	25
7	UNICOM-LN	24
8	CHINANET-YN	19
9	WASU	17
10	CHINANET-AH	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	702
2	Taiwan	359
3	United States	19
4	Russian Federation	16
5	Brazil	14
6	Italy	5
7	Germany	5
8	Colombia	5
9	South Korea	4
10	United Kingdom	4

Suspected Bot List [2017-02-04]

detection period: 2017-02-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.197	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
SA	212.12.175.222	Saudi Arabia
TW	106.1.51.81	Taiwan
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-04]

detection period: 2017-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 953
number of botnet IPs notified to network operators: 934
number of spam blocked: 31874
recipient count of spam blocked: 512657

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	208
2	HINET-NET	70
3	CHINANET-JS	59
4	UNICOM-SD	55
5	UNICOM-GX	41
6	CHINANET-ZJ	24
7	CHINANET-YN	24
8	UNICOM-LN	22
9	UNICOM-HE	19
10	UNICOM-SX	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	724
2	Taiwan	119
3	United States	21
4	Brazil	20
5	Russian Federation	12
6	Germany	6
7	Colombia	6
8	Mexico	4
9	South Korea	4
10	United Kingdom	4

Suspected Bot List [2017-02-03]

detection period: 2017-02-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.197	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
KZ	185.19.194.234	Kazakhstan
TW	106.1.54.147	Taiwan
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-03]

detection period: 2017-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 487
number of botnet IPs notified to network operators: 466
number of spam blocked: 21135
recipient count of spam blocked: 485505

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-GX	42
2	HINET-NET	36
3	CHINANET-JS	29
4	UNICOM-SD	25
5	CHINANET-ZJ	11
6	CHINANET-CQ	11
7	UNICOM-ZJ	10
8	UNICOM-SX	10
9	UNICOM-GD	9
10	SEEDNET-NET	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	292
2	Taiwan	65
3	Brazil	21
4	United States	19
5	Russian Federation	16
6	Colombia	8
7	Germany	6
8	India	5
9	Spain	5
10	South Korea	4

Suspected Bot List [2017-02-02]

detection period: 2017-02-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.227	India
IN	223.196.86.228	India
KZ	185.19.194.234	Kazakhstan
RO	185.100.86.167	Romania
SA	212.12.175.222	Saudi Arabia
TW	106.1.54.147	Taiwan
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.138	United States
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-02]

detection period: 2017-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 813
number of botnet IPs notified to network operators: 784
number of spam blocked: 14404
recipient count of spam blocked: 390937

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	77
2	HINET-NET	70
3	UNICOM-SD	57
4	UNICOM-GX	39
5	CHINANET-GZ	27
6	UNICOM-LN	25
7	CHINANET-ZJ	19
8	CHINANET-CQ	19
9	UNICOM-ZJ	18
10	SEEDNET-NET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	554
2	Taiwan	126
3	United States	20
4	Russian Federation	15
5	Brazil	14
6	India	9
7	United Kingdom	6
8	Germany	6
9	Colombia	6
10	Argentina	6

Suspected Bot List [2017-02-01]

detection period: 2017-02-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
AR	200.42.131.70	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.220	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
KZ	185.19.194.234	Kazakhstan
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.232.56.63	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-01]

detection period: 2017-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 695
number of botnet IPs notified to network operators: 671
number of spam blocked: 14578
recipient count of spam blocked: 229960

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	81
2	CHINANET-JS	55
3	UNICOM-SD	49
4	UNICOM-GX	41
5	SEEDNET-NET	16
6	UNICOM-HE	15
7	CHINANET-YN	15
8	CHINANET-GZ	14
9	UNICOM-ZJ	13
10	UNICOM-LN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	448
2	Taiwan	130
3	United States	17
4	Brazil	16
5	Russian Federation	11
6	Germany	9
7	Colombia	8
8	India	6
9	Argentina	5
10	South Korea	4

Botnet Statistics for January 2017

detection period: 2017-01-01 00:00 - 2017-01-31 23:59 UTC
total number of suspected botnet IPs: 5730
number of blocked spams: 551596
recipient count of blocked spams: 2283929

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4192
2	Taiwan	520
3	United States	111
4	Brazil	100
5	Russian Federation	66
6	Italy	58
7	India	57
8	Viet Nam	50
9	Germany	38
10	Colombia	33
11	United Kingdom	30
12	Argentina	26
13	South Korea	24
14	Ukraine	22
15	Spain	22
16	Japan	20
17	Indonesia	19
18	Romania	17
19	Poland	17
20	Netherlands	17
21	Mexico	14
22	Armenia	14
23	France	13
24	Turkey	12
25	Pakistan	12

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	239181
2	China	167396
3	United States	112297
4	Poland	8544
5	Brazil	3225
6	Colombia	2519
7	India	2439
8	Russian Federation	1773
9	South Korea	1287
10	Chile	930
11	Macau	859
12	Italy	703
13	Bangladesh	620
14	Azerbaijan	578
15	Netherlands	543
16	South Africa	517
17	Cambodia	504
18	El Salvador	486
19	Ukraine	484
20	Pakistan	449
21	Kazakhstan	430
22	Bolivia	409
23	Saudi Arabia	404
24	Argentina	383
25	United Kingdom	368

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: