Suspected Bot List [2014-08-04]

detection period: 2014-08-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 306

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
GR	89.210.13.196	Greece
HN	190.107.140.77	Honduras
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	122.54.80.66	Philippines
PK	221.120.222.69	Pakistan
SE	80.78.31.131	Sweden
TR	193.255.143.62	Turkey
US	50.201.42.106	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-08-04]

detection period: 2014-08-04 00:00-23:59 UTC
total number of suspected botnet IPs: 2652
number of botnet IPs notified to network operators: 2346
number of spam blocked: 61175
recipient count of spam blocked: 1722888

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	937
2	VNPT-VNNIC-VN	135
3	CRTC	135
4	WASU	63
5	WASU-BB	47
6	KORNET-KR	47
7	CHINANET-GD	38
8	UNICOM-ZJ	32
9	BSNLNET	26
10	BHARTI-IN	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	958
2	China	470
3	Viet Nam	203
4	India	112
5	South Korea	106
6	Russian Federation	79
7	Argentina	51
8	Peru	45
9	United States	44
10	Brazil	40

Suspected Bot List [2014-08-03]

detection period: 2014-08-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 276

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
GR	89.210.13.196	Greece
HN	190.107.140.77	Honduras
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PK	221.120.222.69	Pakistan
SE	80.78.31.131	Sweden
TR	193.255.143.62	Turkey
US	50.201.42.106	United States
US	174.139.94.82	United States
US	174.140.166.38	United States

List from greylisting: