Botnet Statistics [2017-03-30]

detection period: 2017-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 260
number of botnet IPs notified to network operators: 223
number of spam blocked: 914
recipient count of spam blocked: 943

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	SINGLEHOP	14
2	CMNET	14
3	CHINANET-AH	9
4	VNPT-VNNIC-VN	8
5	CHINANET-GD	8
6	BHARTI-IN	6
7	UNICOM-BJ	5
8	Chinafic	5
9	CHINANET-JS	4
10	BSNLNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	80
2	United States	28
3	India	24
4	Viet Nam	13
5	Russian Federation	11
6	Mexico	11
7	Indonesia	9
8	Turkey	6
9	Peru	6
10	Saudi Arabia	5

Suspected Bot List [2017-03-30]

detection period: 2017-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-29]

detection period: 2017-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 279
number of botnet IPs notified to network operators: 250
number of spam blocked: 2394
recipient count of spam blocked: 32388

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	11
2	VNPT-VNNIC-VN	9
3	ALISOFT	8
4	CHINANET-JS	6
5	Chinafic	5
6	CHINANET-JX	5
7	CHINANET-GZ	5
8	CHINANET-AH	5
9	VIETEL-VNNIC-VN	4
10	UNICOM-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	109
2	Viet Nam	15
3	United States	14
4	Russian Federation	14
5	Mexico	9
6	Argentina	8
7	India	7
8	Indonesia	7
9	Brazil	6
10	Ukraine	5

Suspected Bot List [2017-03-29]

detection period: 2017-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.125.123.132	Argentina

List from greylisting:

Botnet Statistics [2017-03-28]

detection period: 2017-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 246
number of botnet IPs notified to network operators: 234
number of spam blocked: 2339
recipient count of spam blocked: 39216

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU-BB	18
2	UNICOM-ZJ	16
3	CMNET	13
4	CHINANET-GD	9
5	UNICOM-GD	6
6	CHINANET-JS	6
7	ALISOFT	6
8	UNICOM-SD	5
9	UNICOM-BJ	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	147
2	Russian Federation	16
3	United States	12
4	India	7
5	Viet Nam	6
6	South Korea	5
7	Taiwan	4
8	Japan	4
9	Pakistan	3
10	Mexico	3

Suspected Bot List [2017-03-28]

detection period: 2017-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
TW	123.194.225.45	Taiwan

List from greylisting:

Botnet Statistics [2017-03-27]

detection period: 2017-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 323
number of botnet IPs notified to network operators: 316
number of spam blocked: 1597
recipient count of spam blocked: 19780

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	59
2	WASU-BB	40
3	CMNET	13
4	CHINANET-JS	12
5	CHINANET-GD	10
6	CHINANET-AH	8
7	ALISOFT	6
8	WASU	5
9	UNICOM-BJ	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	223
2	Russian Federation	15
3	United States	14
4	South Korea	8
5	India	8
6	Ukraine	5
7	Mexico	4
8	Taiwan	3
9	Netherlands	2
10	Kazakhstan	2

Suspected Bot List [2017-03-27]

detection period: 2017-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Suspected Bot List [2017-03-26]

detection period: 2017-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
UY	167.57.56.100	Uruguay

List from greylisting:

Botnet Statistics [2017-03-26]

detection period: 2017-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 285
number of botnet IPs notified to network operators: 274
number of spam blocked: 1532
recipient count of spam blocked: 23294

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	50
2	WASU-BB	38
3	CMNET	9
4	ALISOFT	8
5	CHINANET-JS	6
6	CHINANET-AH	6
7	Chinafic	5
8	CHINANET-HN	5
9	CHINANET-HB	5
10	CHINANET-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	187
2	Russian Federation	17
3	United States	12
4	Viet Nam	9
5	Brazil	6
6	India	5
7	South Korea	4
8	Thailand	3
9	Mexico	3
10	Ukraine	2

Botnet Statistics [2017-03-25]

detection period: 2017-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 255
number of botnet IPs notified to network operators: 223
number of spam blocked: 684
recipient count of spam blocked: 684

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	48
2	WASU-BB	26
3	VNPT-VNNIC-VN	10
4	CHINANET-GD	7
5	Chinafic	5
6	CMNET	5
7	WASU	4
8	PE-TPSA-LACNIC	4
9	FPT-VN	4
10	PTCLBB-PK	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	120
2	Viet Nam	19
3	India	17
4	United States	8
5	Brazil	8
6	Mexico	7
7	Turkey	6
8	Saudi Arabia	6
9	Argentina	6
10	Peru	5

Suspected Bot List [2017-03-25]

detection period: 2017-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-24]

detection period: 2017-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 680
number of botnet IPs notified to network operators: 623
number of spam blocked: 2222
recipient count of spam blocked: 32469

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	129
2	WASU	62
3	WASU-BB	59
4	CMNET	16
5	CHINANET-GD	15
6	UNICOM-GX	14
7	VNPT-VNNIC-VN	13
8	CHINANET-JS	10
9	CHINANET-CQ	10
10	UNICOM-SD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	429
2	Viet Nam	30
3	India	23
4	Russian Federation	18
5	Mexico	17
6	United States	16
7	Taiwan	15
8	Brazil	11
9	Peru	8
10	South Korea	8

Suspected Bot List [2017-03-24]

detection period: 2017-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BJ	164.160.143.5	Benin
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
MV	202.1.197.227	Republic of Maldives
RU	91.197.234.102	Russian Federation
TW	118.233.120.41	Taiwan
TW	118.233.127.25	Taiwan
TW	123.194.125.182	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bot List [2017-03-23]

detection period: 2017-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 72

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BJ	197.234.219.53	Benin
BO	186.27.126.130	Bolivia
CL	186.79.165.175	Chile
CL	200.50.61.39	Chile
CN	58.211.143.130	China
CN	59.76.48.238	China
CN	59.110.70.226	China
CN	60.205.157.58	China
CN	120.25.166.199	China
CN	120.26.98.146	China
CN	120.55.64.90	China
CN	120.77.17.171	China
CN	121.31.64.106	China
CN	123.56.77.15	China
CN	123.56.191.65	China
CN	182.92.223.227	China
CN	221.231.97.123	China
CO	186.154.234.164	Colombia
CO	190.60.234.186	Colombia
EC	186.69.32.14	Ecuador
FR	178.32.6.67	France
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.227	India
IN	223.196.86.228	India
KR	61.14.208.52	South Korea
MX	200.39.24.109	Mexico
MX	201.144.15.227	Mexico
PE	190.117.120.241	Peru
RU	91.197.234.102	Russian Federation
RU	95.37.217.132	Russian Federation
TH	203.154.115.180	Thailand
TW	114.41.242.186	Taiwan
TW	123.194.125.182	Taiwan
UY	167.57.10.212	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-23]

detection period: 2017-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 747
number of botnet IPs notified to network operators: 675
number of spam blocked: 3151
recipient count of spam blocked: 52364

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	124
2	WASU-BB	63
3	WASU	63
4	CHINANET-JS	21
5	UNICOM-GX	19
6	CMNET	18
7	VNPT-VNNIC-VN	12
8	CHINANET-GD	11
9	CHINANET-ZJ	8
10	ALISOFT	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	471
2	India	28
3	Viet Nam	24
4	Russian Federation	23
5	United States	19
6	Brazil	16
7	Taiwan	15
8	South Korea	8
9	Peru	7
10	Mexico	7

Suspected Bot List [2017-03-22]

detection period: 2017-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
UY	167.57.10.212	Uruguay

List from greylisting:

Botnet Statistics [2017-03-22]

detection period: 2017-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 426
number of botnet IPs notified to network operators: 409
number of spam blocked: 1602
recipient count of spam blocked: 14257

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	107
2	WASU	77
3	WASU-BB	50
4	CHINANET-JS	9
5	CHINANET-GD	9
6	VNPT-VNNIC-VN	8
7	CMNET	7
8	BSNLNET	6
9	MAIL-ESSENTIALS-FRANCE	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	305
2	India	15
3	Viet Nam	13
4	United States	12
5	France	12
6	Mexico	7
7	Russian Federation	5
8	Pakistan	4
9	Brazil	4
10	Peru	3

Suspected Bot List [2017-03-21]

detection period: 2017-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-21]

detection period: 2017-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 473
number of botnet IPs notified to network operators: 447
number of spam blocked: 2442
recipient count of spam blocked: 34729

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	86
2	WASU	63
3	WASU-BB	53
4	CMNET	17
5	CHINANET-GD	13
6	VNPT-VNNIC-VN	9
7	BSNLNET	6
8	Chinafic	5
9	CHINANET-JS	5
10	MX-USCV4-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	295
2	India	21
3	Viet Nam	20
4	Mexico	16
5	United States	15
6	Russian Federation	12
7	Peru	6
8	Indonesia	5
9	Pakistan	4
10	Brazil	4

Suspected Bot List [2017-03-20]

detection period: 2017-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BJ	197.234.219.17	Benin
BJ	197.234.219.56	Benin
US	206.125.41.139	United States
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-20]

detection period: 2017-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 554
number of botnet IPs notified to network operators: 516
number of spam blocked: 1820
recipient count of spam blocked: 3157

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	111
2	WASU	70
3	WASU-BB	55
4	CMNET	18
5	CHINANET-GD	17
6	VNPT-VNNIC-VN	11
7	MSFT	6
8	BSNLNET	6
9	Chinafic	5
10	UNICOM-BJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	336
2	Viet Nam	23
3	United States	21
4	India	21
5	Russian Federation	15
6	Brazil	12
7	Peru	9
8	Mexico	9
9	Saudi Arabia	6
10	South Korea	6

Suspected Bot List [2017-03-19]

detection period: 2017-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
UY	167.57.159.41	Uruguay

List from greylisting:

Botnet Statistics [2017-03-19]

detection period: 2017-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 256
number of botnet IPs notified to network operators: 244
number of spam blocked: 1213
recipient count of spam blocked: 15253

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	94
2	WASU	24
3	WASU-BB	19
4	CMNET	8
5	CHINANET-GD	8
6	ALISOFT	8
7	Chinafic	5
8	TencentCloud	3
9	PTCLBB-PK	3
10	ZTWL	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	190
2	United States	10
3	Viet Nam	6
4	Russian Federation	5
5	Brazil	5
6	Mexico	4
7	India	4
8	Taiwan	3
9	Thailand	3
10	Pakistan	3

Suspected Bots' IP List for February 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-02-01]
Suspected Bots IP [2017-02-02]
Suspected Bots IP [2017-02-03]
Suspected Bots IP [2017-02-04]
Suspected Bots IP [2017-02-05]
Suspected Bots IP [2017-02-06]
Suspected Bots IP [2017-02-07]
Suspected Bots IP [2017-02-08]
Suspected Bots IP [2017-02-09]
Suspected Bots IP [2017-02-10]
Suspected Bots IP [2017-02-11]
Suspected Bots IP [2017-02-12]
Suspected Bots IP [2017-02-13]
Suspected Bots IP [2017-02-14]
Suspected Bots IP [2017-02-15]
Suspected Bots IP [2017-02-16]
Suspected Bots IP [2017-02-17]
Suspected Bots IP [2017-02-18]
Suspected Bots IP [2017-02-19]
Suspected Bots IP [2017-02-20]
Suspected Bots IP [2017-02-21]
Suspected Bots IP [2017-02-22]
Suspected Bots IP [2017-02-23]
Suspected Bots IP [2017-02-24]
Suspected Bots IP [2017-02-25]
Suspected Bots IP [2017-02-26]
Suspected Bots IP [2017-02-27]
Suspected Bots IP [2017-02-28]

Suspected Bot List [2017-03-18]

detection period: 2017-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BJ	197.234.219.75	Benin

List from greylisting:

Botnet Statistics [2017-03-18]

detection period: 2017-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 163
number of botnet IPs notified to network operators: 158
number of spam blocked: 736
recipient count of spam blocked: 736

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	96
2	CHINANET-GD	9
3	CMNET	3
4	CHINANET-SH	3
5	ZTWL	2
6	XLNET-ID	2
7	VNPT-VNNIC-VN	2
8	SRT	2
9	VOLGOGRAD-REGION-NET	1
10	UNICOM-HA	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	127
2	United States	8
3	Russian Federation	6
4	Viet Nam	3
5	Indonesia	3
6	Egypt	2
7	South Africa	1
8	Taiwan	1
9	Romania	1
10	Philippines	1

Suspected Bot List [2017-03-17]

detection period: 2017-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-17]

detection period: 2017-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 526
number of botnet IPs notified to network operators: 512
number of spam blocked: 21665
recipient count of spam blocked: 556239

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	254
2	UNICOM-ZJ	109
3	WASU-BB	18
4	CMNET	7
5	CHINANET-GD	6
6	Chinafic	5
7	CHINANET-JS	4
8	MSFT	3
9	KORNET-KR	3
10	CHINANET-SH	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	254
2	China	190
3	United States	16
4	Russian Federation	15
5	India	8
6	South Korea	5
7	Poland	3
8	Ukraine	2
9	Tanzania	2
10	Japan	2

Suspected Bot List [2017-03-16]

detection period: 2017-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-16]

detection period: 2017-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 873
number of botnet IPs notified to network operators: 860
number of spam blocked: 39541
recipient count of spam blocked: 994042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	473
2	UNICOM-ZJ	123
3	WASU-BB	67
4	CMNET	9
5	WASU	6
6	CHINANET-AH	6
7	UNICOM-HA	5
8	Chinafic	5
9	CHINANET-JS	5
10	UNICOM-BJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	474
2	China	293
3	Russian Federation	16
4	India	13
5	United States	12
6	Viet Nam	5
7	South Korea	5
8	Spain	4
9	Czech Republic	4
10	Argentina	4

Suspected Bot List [2017-03-15]

detection period: 2017-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	223.196.86.228	India
TW	118.232.57.120	Taiwan
TW	123.193.122.128	Taiwan
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-15]

detection period: 2017-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 876
number of botnet IPs notified to network operators: 859
number of spam blocked: 40028
recipient count of spam blocked: 1079211

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	516
2	UNICOM-ZJ	92
3	WASU-BB	73
4	CHINANET-JS	10
5	WASU	8
6	UNICOM-GX	7
7	Chinafic	5
8	CMNET	5
9	CHINANET-ZJ	5
10	CHINANET-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	521
2	China	278
3	India	15
4	United States	9
5	Russian Federation	7
6	Brazil	7
7	South Korea	4
8	Italy	3
9	Colombia	3
10	Viet Nam	2

Suspected Bot List [2017-03-14]

detection period: 2017-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BJ	197.234.219.81	Benin
NI	190.212.234.165	Nicaragua
SA	213.230.22.180	Saudi Arabia

List from greylisting:

Botnet Statistics [2017-03-14]

detection period: 2017-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 871
number of botnet IPs notified to network operators: 860
number of spam blocked: 74140
recipient count of spam blocked: 1929089

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	541
2	UNICOM-ZJ	82
3	WASU-BB	64
4	CMNET	16
5	ALISOFT	12
6	WASU	8
7	CHINANET-JS	7
8	CHINANET-GD	6
9	Chinafic	5
10	CHINANET-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	543
2	China	262
3	Russian Federation	10
4	United States	9
5	India	8
6	Viet Nam	6
7	South Korea	3
8	United Kingdom	3
9	Bangladesh	3
10	Pakistan	2

Suspected Bot List [2017-03-13]

detection period: 2017-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-13]

detection period: 2017-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 821
number of botnet IPs notified to network operators: 815
number of spam blocked: 98939
recipient count of spam blocked: 2769525

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	560
2	WASU-BB	71
3	UNICOM-ZJ	60
4	CMNET	13
5	WASU	12
6	CHINANET-JS	7
7	UNICOM-BJ	5
8	Chinafic	5
9	CHINANET-AH	4
10	UNICOM-HA	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	560
2	China	225
3	Russian Federation	7
4	United States	6
5	Ukraine	3
6	United Kingdom	3
7	Kazakhstan	2
8	South Korea	2
9	India	2
10	Viet Nam	1

Suspected Bot List [2017-03-12]

detection period: 2017-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-12]

detection period: 2017-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 799
number of botnet IPs notified to network operators: 789
number of spam blocked: 107693
recipient count of spam blocked: 2966384

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	595
2	UNICOM-ZJ	33
3	WASU-BB	27
4	CMNET	11
5	MSFT	10
6	WASU	5
7	Chinafic	5
8	UNICOM-BJ	4
9	CHINANET-JS	4
10	CHINANET-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	595
2	China	132
3	United States	22
4	Viet Nam	7
5	Russian Federation	7
6	India	5
7	Italy	3
8	Indonesia	3
9	Mexico	2
10	South Korea	2

Suspected Bot List [2017-03-11]

detection period: 2017-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-11]

detection period: 2017-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 682
number of botnet IPs notified to network operators: 676
number of spam blocked: 95332
recipient count of spam blocked: 2614086

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	577
2	CMNET	11
3	VNPT-VNNIC-VN	4
4	CHINANET-JS	3
5	MSFT	2
6	KORNET-KR	2
7	Chinafic	2
8	CHINANET-SD	2
9	CHINANET-GD	2
10	ZHEJIANG-ZIXUE-COMMITTEE	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	577
2	China	56
3	United States	7
4	India	5
5	Viet Nam	4
6	Russian Federation	4
7	South Korea	3
8	United Kingdom	3
9	France	3
10	Egypt	2

Suspected Bot List [2017-03-10]

detection period: 2017-03-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-10]

detection period: 2017-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 800
number of botnet IPs notified to network operators: 788
number of spam blocked: 70339
recipient count of spam blocked: 1910213

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	598
2	WASU-BB	39
3	UNICOM-ZJ	30
4	CMNET	14
5	WASU	7
6	Chinafic	5
7	VNPT-VNNIC-VN	3
8	UNICOM-SD	3
9	HICHINA	3
10	CHINANET-JS	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	598
2	China	141
3	United States	6
4	United Kingdom	6
5	Viet Nam	4
6	Pakistan	4
7	India	4
8	Indonesia	4
9	Ukraine	2
10	Russian Federation	2

Suspected Bot List [2017-03-09]

detection period: 2017-03-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-09]

detection period: 2017-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 786
number of botnet IPs notified to network operators: 778
number of spam blocked: 63680
recipient count of spam blocked: 1877573

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	540
2	UNICOM-ZJ	84
3	WASU-BB	54
4	WASU	13
5	CMNET	8
6	Chinafic	5
7	CHINANET-GD	3
8	VNPT-VNNIC-VN	2
9	UNIFIEDLAYER-NETWORK-11	2
10	CNLINKNET	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	541
2	China	197
3	United States	8
4	Italy	5
5	Viet Nam	4
6	United Kingdom	4
7	Thailand	3
8	India	3
9	Russian Federation	2
10	Iran	2

Suspected Bot List [2017-03-08]

detection period: 2017-03-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.12.146	India
IN	125.16.240.197	India
IN	223.196.86.228	India
RO	185.100.86.167	Romania
RO	185.105.5.133	Romania
RO	185.105.5.134	Romania
RO	185.105.5.135	Romania
RO	185.105.5.136	Romania
RO	185.105.5.137	Romania
RO	185.105.5.138	Romania
RO	185.105.5.139	Romania
RU	91.197.234.102	Russian Federation
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-08]

detection period: 2017-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1120
number of botnet IPs notified to network operators: 1073
number of spam blocked: 65538
recipient count of spam blocked: 1856357

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	524
2	UNICOM-ZJ	87
3	WASU-BB	68
4	UNICOM-GX	31
5	UNICOM-SD	23
6	WASU	11
7	CMNET	10
8	UNICOM-SC	9
9	CHINANET-CQ	9
10	VNPT-VNNIC-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	535
2	China	364
3	India	22
4	Brazil	21
5	Iran	17
6	Viet Nam	16
7	United States	14
8	Romania	9
9	Peru	8
10	Mexico	8

Suspected Bot List [2017-03-07]

detection period: 2017-03-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-07]

detection period: 2017-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 871
number of botnet IPs notified to network operators: 835
number of spam blocked: 70660
recipient count of spam blocked: 1925050

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	532
2	UNICOM-ZJ	72
3	WASU-BB	68
4	WASU	11
5	VNPT-VNNIC-VN	8
6	FPT-VN	6
7	TN-ATI-20100503	5
8	PTCLBB-PK	5
9	Chinafic	5
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	532
2	China	189
3	Viet Nam	20
4	Mexico	14
5	India	12
6	Iran	8
7	United States	7
8	Turkey	7
9	Pakistan	7
10	Tunisia	6

Botnet Statistics for February 2017

detection period: 2017-02-01 00:00 - 2017-02-28 23:59 UTC
total number of suspected botnet IPs: 24056
number of blocked spams: 2806870
recipient count of blocked spams: 77607050

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	11646
2	China	9164
3	Viet Nam	512
4	India	434
5	United States	218
6	Russian Federation	190
7	Brazil	150
8	Mexico	121
9	Iran	108
10	Peru	86
11	Italy	74
12	Colombia	72
13	Turkey	68
14	South Korea	60
15	Indonesia	57
16	Argentina	55
17	Ukraine	53
18	Thailand	53
19	Saudi Arabia	48
20	United Kingdom	48
21	Pakistan	40
22	Spain	38
23	Germany	36
24	Chile	27
25	Israel	24

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2472445
2	China	238477
3	United States	36642
4	Poland	15817
5	Brazil	10004
6	Colombia	6053
7	Italy	2838
8	India	2744
9	South Korea	2657
10	Macau	2486
11	Chile	2380
12	Russian Federation	2000
13	Argentina	1508
14	Ukraine	1359
15	Azerbaijan	1336
16	United Kingdom	1113
17	Saudi Arabia	1057
18	South Africa	1046
19	Bolivia	917
20	Venezuela	627
21	Germany	623
22	Pakistan	583
23	Czech Republic	424
24	Kazakhstan	377
25	Viet Nam	260

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2017-03-06]

detection period: 2017-03-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.234.186	Colombia
IN	125.16.12.146	India
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
US	206.125.47.5	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-06]

detection period: 2017-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 1048
number of botnet IPs notified to network operators: 993
number of spam blocked: 73863
recipient count of spam blocked: 2113112

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	530
2	UNICOM-ZJ	70
3	WASU-BB	40
4	VNPT-VNNIC-VN	15
5	WASU	14
6	UNICOM-GX	13
7	CMNET	9
8	CHINANET-GD	9
9	VIETEL-VN	7
10	TN-ATI-20100503	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	534
2	China	238
3	Viet Nam	37
4	India	25
5	Brazil	22
6	Mexico	19
7	Indonesia	13
8	Iran	12
9	United States	10
10	Colombia	9

Suspected Bot List [2017-03-05]

detection period: 2017-03-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-05]

detection period: 2017-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 860
number of botnet IPs notified to network operators: 820
number of spam blocked: 74196
recipient count of spam blocked: 2119941

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	524
2	UNICOM-ZJ	63
3	WASU-BB	35
4	VNPT-VNNIC-VN	22
5	CHINANET-GD	11
6	WASU	9
7	CMNET	9
8	MX-CSCV17-LACNIC	5
9	Chinafic	5
10	FPT-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	525
2	China	151
3	Viet Nam	34
4	India	22
5	Iran	19
6	Mexico	14
7	United States	8
8	Turkey	5
9	Tunisia	5
10	Brazil	5

Suspected Bot List [2017-03-04]

detection period: 2017-03-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BJ	197.234.219.24	Benin

List from greylisting:

Botnet Statistics [2017-03-04]

detection period: 2017-03-04 00:00-23:59 UTC
total number of suspected botnet IPs: 730
number of botnet IPs notified to network operators: 718
number of spam blocked: 71750
recipient count of spam blocked: 2083633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	544
2	UNICOM-ZJ	50
3	WASU-BB	27
4	CHINANET-GD	9
5	tonghnetwork	5
6	PTCLBB-PK	5
7	WASU	3
8	UNICOM-HA	3
9	SRT	3
10	CMNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	544
2	China	129
3	United States	7
4	Viet Nam	5
5	Pakistan	5
6	India	3
7	Uruguay	2
8	Russian Federation	2
9	Poland	2
10	Kazakhstan	2

Suspected Bot List [2017-03-03]

detection period: 2017-03-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-03]

detection period: 2017-03-03 00:00-23:59 UTC
total number of suspected botnet IPs: 873
number of botnet IPs notified to network operators: 867
number of spam blocked: 65056
recipient count of spam blocked: 1829049

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	527
2	UNICOM-ZJ	88
3	WASU-BB	65
4	MSFT	46
5	WASU	13
6	CMNET	12
7	CHINANET-GD	11
8	broadNnet-KR	3
9	VNPT-VNNIC-VN	3
10	UNICOM-HE	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	528
2	China	240
3	United States	51
4	Viet Nam	7
5	Russian Federation	7
6	South Korea	6
7	India	5
8	Brazil	4
9	United Kingdom	2
10	France	2

Suspected Bot List [2017-03-02]

detection period: 2017-03-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	186.27.126.130	Bolivia
IN	125.16.12.146	India
IN	223.196.86.228	India
RO	185.100.86.167	Romania
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-03-02]

detection period: 2017-03-02 00:00-23:59 UTC
total number of suspected botnet IPs: 879
number of botnet IPs notified to network operators: 868
number of spam blocked: 69870
recipient count of spam blocked: 1968452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	539
2	UNICOM-ZJ	84
3	WASU-BB	66
4	CMNET	19
5	WASU	8
6	CHINANET-GD	8
7	CHINANET-JS	7
8	UNICOM-HA	6
9	Chinafic	5
10	RingLink	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	539
2	China	258
3	Russian Federation	14
4	United States	10
5	India	8
6	South Korea	5
7	Brazil	5
8	Viet Nam	4
9	Thailand	4
10	Ukraine	2

Suspected Bot List [2017-03-01]

detection period: 2017-03-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-01]

detection period: 2017-03-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1025
number of botnet IPs notified to network operators: 981
number of spam blocked: 77732
recipient count of spam blocked: 2192793

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	568
2	UNICOM-ZJ	83
3	WASU-BB	60
4	VNPT-VNNIC-VN	33
5	WASU	19
6	CMNET	9
7	VIETEL-VN	7
8	FPT-VN	6
9	CHINANET-GD	6
10	MX-USCV4-LACNIC	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	568
2	China	208
3	Viet Nam	57
4	India	23
5	Iran	20
6	Mexico	19
7	Turkey	13
8	Brazil	10
9	United States	7
10	Peru	6

Suspected Bot List [2017-02-28]

detection period: 2017-02-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-02-28]

detection period: 2017-02-28 00:00-23:59 UTC
total number of suspected botnet IPs: 883
number of botnet IPs notified to network operators: 856
number of spam blocked: 77842
recipient count of spam blocked: 2221577

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	556
2	UNICOM-ZJ	60
3	WASU-BB	55
4	VNPT-VNNIC-VN	23
5	WASU	14
6	CMNET	11
7	BHARTI-IN	8
8	CHINANET-GD	7
9	Chinafic	5
10	FPT-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	556
2	China	184
3	Viet Nam	41
4	India	24
5	United States	7
6	Thailand	5
7	Iran	5
8	Indonesia	5
9	Mexico	4
10	Turkey	3