Botnet Statistics [2017-02-02]

detection period: 2017-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 813
number of botnet IPs notified to network operators: 784
number of spam blocked: 14404
recipient count of spam blocked: 390937

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	77
2	HINET-NET	70
3	UNICOM-SD	57
4	UNICOM-GX	39
5	CHINANET-GZ	27
6	UNICOM-LN	25
7	CHINANET-ZJ	19
8	CHINANET-CQ	19
9	UNICOM-ZJ	18
10	SEEDNET-NET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	554
2	Taiwan	126
3	United States	20
4	Russian Federation	15
5	Brazil	14
6	India	9
7	United Kingdom	6
8	Germany	6
9	Colombia	6
10	Argentina	6

Suspected Bot List [2017-02-01]

detection period: 2017-02-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
AR	200.42.131.70	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.220	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
KZ	185.19.194.234	Kazakhstan
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.232.56.63	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-02-01]

detection period: 2017-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 695
number of botnet IPs notified to network operators: 671
number of spam blocked: 14578
recipient count of spam blocked: 229960

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	81
2	CHINANET-JS	55
3	UNICOM-SD	49
4	UNICOM-GX	41
5	SEEDNET-NET	16
6	UNICOM-HE	15
7	CHINANET-YN	15
8	CHINANET-GZ	14
9	UNICOM-ZJ	13
10	UNICOM-LN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	448
2	Taiwan	130
3	United States	17
4	Brazil	16
5	Russian Federation	11
6	Germany	9
7	Colombia	8
8	India	6
9	Argentina	5
10	South Korea	4