Botnet Statistics [2014-02-04]

detection period: 2014-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 4268
number of botnet IPs notified to network operators: 4099
number of spam blocked: 46659
recipient count of spam blocked: 1526492

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	343
2	UNICOM-SD	270
3	CHINANET-JS	190
4	CRTC	172
5	UNICOM-HE	166
6	UNICOM-HA	166
7	UNICOM-LN	148
8	CHINANET-GD	143
9	HINET-NET	125
10	UNICOM-JL	100

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3326
2	Taiwan	159
3	United States	54
4	Indonesia	44
5	India	41
6	Russian Federation	37
7	Turkey	36
8	Singapore	30
9	Kazakhstan	30
10	Brazil	30

Suspected Bot List [2014-02-03]

detection period: 2014-02-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 106

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.164.22	Argentina
BG	93.183.155.80	Bulgaria
BO	190.129.12.162	Bolivia
CN	150.255.88.51	China
CN	150.255.108.40	China
CN	150.255.127.180	China
CN	150.255.129.155	China
CN	150.255.144.170	China
GB	193.164.207.16	United Kingdom
HN	190.107.140.76	Honduras
IN	117.240.239.120	India
IR	91.98.117.28	Iran
IR	94.182.248.19	Iran
IT	95.227.34.226	Italy
MX	187.174.173.18	Mexico
MX	189.204.49.66	Mexico
RU	193.107.17.55	Russian Federation
SA	94.77.199.148	Saudi Arabia
TW	115.165.247.170	Taiwan
TW	119.77.133.98	Taiwan
TW	119.77.213.44	Taiwan
UA	195.66.204.70	Ukraine
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-02-03]

detection period: 2014-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 7314
number of botnet IPs notified to network operators: 7208
number of spam blocked: 115523
recipient count of spam blocked: 2446463

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-SD	611
2	CMNET	511
3	CHINANET-JS	367
4	UNICOM-HA	306
5	UNICOM-LN	299
6	UNICOM-HE	298
7	CRTC	248
8	UNICOM-HL	241
9	CHINANET-GD	240
10	UNICOM-JL	217

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6411
2	Taiwan	177
3	France	91
4	United States	57
5	Italy	36
6	Argentina	32
7	United Kingdom	31
8	Brazil	30
9	Russian Federation	28
10	India	26