Botnet Statistics [2015-04-01]

detection period: 2015-04-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1821
number of botnet IPs notified to network operators: 1726
number of spam blocked: 210287
recipient count of spam blocked: 7175602

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	965
2	UNICOM-GD	73
3	CHINANET-GD	35
4	UNICOM-FJ	28
5	CCCH3-4	13
6	UNICOM-BJ	11
7	WASU-BB	10
8	ALISOFT	9
9	KORNET-KR	8
10	CHINANET-ZJ-HZ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	978
2	China	335
3	United States	170
4	Canada	23
5	India	20
6	South Korea	19
7	Indonesia	18
8	Russian Federation	16
9	Turkey	14
10	Spain	14

Suspected Bot List [2015-03-31]

detection period: 2015-03-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 164

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CM	195.24.217.58	Cameroon
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-31]

detection period: 2015-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 2347
number of botnet IPs notified to network operators: 2183
number of spam blocked: 207859
recipient count of spam blocked: 7012235

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	970
2	UNICOM-GD	101
3	CHINANET-GD	28
4	CCCH3-4	23
5	CBC-CM-4	20
6	UNICOM-FJ	19
7	WASU-BB	11
8	NETBLK-CHARTER-NET	11
9	CRTC	10
10	CMNET	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	983
2	United States	365
3	China	339
4	Canada	66
5	France	47
6	Russian Federation	42
7	United Kingdom	37
8	Spain	37
9	Germany	25
10	Turkey	21