Botnet Statistics [2017-07-06]

detection period: 2017-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 782
number of botnet IPs notified to network operators: 737
number of spam blocked: 102100
recipient count of spam blocked: 1965266

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	127
2	WASU	103
3	CMNET	91
4	CHINANET-JS	30
5	SERVERCRATE	25
6	ALISOFT	25
7	BG-POWERNET-20070731	22
8	CHINANET-GD	20
9	CHINANET-HA	15
10	EONIX-NET-50-2-0-0-1-BLK-7	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	500
2	United States	113
3	Russian Federation	23
4	Bulgaria	22
5	Germany	16
6	Singapore	11
7	Taiwan	10
8	Poland	8
9	Hong Kong	7
10	South Korea	6

Suspected Bot List [2017-07-06]

detection period: 2017-07-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	200.41.87.215	Argentina
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
NO	193.150.121.66	Norway
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	91.197.234.102	Russian Federation
RU	109.111.189.234	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
TH	203.151.206.113	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-05]

detection period: 2017-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 874
number of botnet IPs notified to network operators: 840
number of spam blocked: 114671
recipient count of spam blocked: 2229423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	164
2	WASU	109
3	CMNET	95
4	CHINANET-JS	44
5	CC-15	22
6	CHINANET-GD	18
7	PVS-BLOCK02	16
8	CHINANET-HA	16
9	ALISOFT	14
10	VIRPUS-KC-2	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	566
2	United States	111
3	Russian Federation	31
4	Netherlands	18
5	Singapore	12
6	Poland	12
7	Romania	10
8	Taiwan	9
9	Hong Kong	9
10	South Korea	8