Botnet Statistics [2016-02-12]

detection period: 2016-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1114
number of botnet IPs notified to network operators: 1077
number of spam blocked: 61760
recipient count of spam blocked: 1814056

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	634
2	MSFT	26
3	MX-MSCV17-LACNIC	22
4	VNPT-VNNIC-VN	19
5	MSFT-GFS	16
6	CHINANET-ZJ	10
7	ALISOFT	10
8	CHINANET-JS	8
9	002.558.157/0001-62	7
10	CHINANET-GD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	636
2	China	104
3	United States	64
4	Viet Nam	40
5	Russian Federation	36
6	Brazil	35
7	Mexico	30
8	India	17
9	Thailand	15
10	Indonesia	10

Suspected Bot List [2016-02-11]

detection period: 2016-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.135.195	Canada
FR	94.23.114.49	France
IL	213.57.90.10	Israel
UY	179.25.158.15	Uruguay
UY	179.25.253.108	Uruguay

List from greylisting:

country code	IP address	Country
AR	179.38.76.53	Argentina
AR	181.14.245.234	Argentina
AR	181.169.213.213	Argentina
AR	190.7.9.194	Argentina
AR	190.210.204.15	Argentina
AR	200.41.178.234	Argentina
BG	94.26.8.52	Bulgaria
BG	94.26.50.6	Bulgaria
BO	186.27.126.130	Bolivia
CR	186.176.246.110	Costa Rica
CR	201.202.246.162	Costa Rica
EG	193.227.49.83	Egypt
ES	87.235.177.251	Spain
ES	95.120.14.214	Spain
ID	202.162.214.116	Indonesia
ID	202.162.219.83	Indonesia
IL	213.57.90.10	Israel
IN	61.2.82.228	India
IN	106.216.164.51	India
IN	112.133.244.35	India
IN	117.195.108.61	India
IN	117.197.120.11	India
IN	117.197.205.248	India
IN	117.214.29.201	India
IN	117.223.60.100	India
IN	117.244.15.243	India
IN	117.247.85.146	India
IN	117.248.28.65	India
IN	122.170.105.219	India
IN	122.173.35.115	India
IN	122.173.46.229	India
IN	180.211.126.178	India
IN	182.58.235.254	India
IN	182.71.75.246	India
IN	182.71.213.116	India
IN	202.164.49.210	India
IN	203.192.212.52	India
IN	203.194.109.142	India
KE	196.207.30.230	Kenya
MR	41.188.65.50	Mauritania
PH	122.53.178.100	Philippines
PK	39.33.130.214	Pakistan
PK	39.43.9.53	Pakistan
PK	182.185.217.121	Pakistan
RU	213.33.175.27	Russian Federation
TR	46.2.212.203	Turkey
TR	81.213.154.121	Turkey
TR	88.248.251.231	Turkey
TR	109.235.251.130	Turkey
TR	188.3.60.166	Turkey
UY	167.60.90.203	Uruguay
UZ	213.230.93.82	Uzbekistan
ZW	41.220.28.138	Zimbabwe

Botnet Statistics [2016-02-11]

detection period: 2016-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1039
number of botnet IPs notified to network operators: 982
number of spam blocked: 53695
recipient count of spam blocked: 1592696

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	580
2	MX-MSCV17-LACNIC	24
3	VNPT-VNNIC-VN	12
4	CHINANET-ZJ	11
5	BSNLNET	9
6	CHINANET-JS	8
7	ALISOFT	8
8	002.558.157/0001-62	8
9	KORNET-KR	5
10	FPT-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	583
2	China	95
3	Brazil	33
4	United States	32
5	India	32
6	Mexico	31
7	Viet Nam	28
8	Russian Federation	24
9	Indonesia	16
10	South Korea	12