Botnet Statistics [2014-01-01]

detection period: 2014-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 2202
number of botnet IPs notified to network operators: 2124
number of spam blocked: 6126
recipient count of spam blocked: 189853

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	196
2	UNICOM-SD	149
3	CHINANET-GD	147
4	CRTC	107
5	CHINANET-JS	104
6	UNICOM-HE	88
7	UNICOM-LN	80
8	UNICOM-HA	71
9	UNICOM-JL	70
10	CTTNET	69

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1939
2	Taiwan	61
3	United States	30
4	Spain	16
5	Argentina	15
6	India	10
7	Israel	9
8	Canada	9
9	Iran	8
10	Colombia	7

Suspected Bot List [2013-12-31]

detection period: 2013-12-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 178

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.15.201.202	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.6.116	China
CN	150.255.113.93	China
DO	190.94.63.166	Dominican Republic
ES	46.24.99.86	Spain
GB	77.246.20.2	United Kingdom
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IN	202.63.105.226	India
PE	200.31.105.172	Peru
PK	115.186.59.70	Pakistan
SA	94.77.199.148	Saudi Arabia
US	50.201.42.106	United States
US	67.229.59.146	United States
US	98.126.76.58	United States

List from greylisting:

Botnet Statistics [2013-12-31]

detection period: 2013-12-31 00:00-23:59 UTC
total number of suspected botnet IPs: 2244
number of botnet IPs notified to network operators: 2066
number of spam blocked: 12819
recipient count of spam blocked: 431040

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	139
2	CHINANET-GD	133
3	UNICOM-SD	107
4	CTTNET	95
5	CRTC	87
6	CHINANET-JS	85
7	UNICOM-HE	79
8	UNICOM-LN	63
9	CHINANET-XJ	50
10	UNICOM-HA	48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1688
2	United States	73
3	Taiwan	49
4	Brazil	32
5	Spain	30
6	India	20
7	Argentina	20
8	Colombia	19
9	Russian Federation	18
10	Iran	18