Suspected Bot List [2014-11-02]

detection period: 2014-11-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 76

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CL	200.111.103.69	Chile
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IR	194.33.124.42	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	37.186.201.149	Italy
LB	62.84.79.245	Lebanon
PE	200.110.35.150	Peru
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
US	50.201.42.106	United States
US	69.197.128.170	United States
US	174.139.8.82	United States
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-11-02]

detection period: 2014-11-02 00:00-23:59 UTC
total number of suspected botnet IPs: 1497
number of botnet IPs notified to network operators: 1421
number of spam blocked: 116518
recipient count of spam blocked: 3142148

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	898
2	CHINANET-GD	81
3	CHINANET-HB	19
4	VNPT-VNNIC-VN	18
5	UNICOM-HA	15
6	UNICOM-BJ	11
7	CHINANET-JX	10
8	ALIBABA-US-CDN	9
9	FPT-VN	7
10	broadNnet-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	906
2	China	221
3	United States	41
4	Viet Nam	38
5	India	36
6	Russian Federation	23
7	Iran	18
8	South Korea	15
9	United Kingdom	14
10	Brazil	14

Botnet Statistics for October 2014

detection period: 2014-10-01 00:00 - 2014-10-31 23:59 UTC
total number of suspected botnet IPs: 36450
number of blocked spams: 3621575
recipient count of blocked spams: 114984553

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	22537
2	China	7416
3	United States	1353
4	India	503
5	Russian Federation	471
6	Viet Nam	337
7	Brazil	317
8	South Korea	215
9	Turkey	168
10	Argentina	155
11	Indonesia	151
12	United Kingdom	151
13	Italy	150
14	Ukraine	123
15	Poland	118
16	Arab Emirates	118
17	South Africa	111
18	Chile	109
19	Colombia	92
20	Spain	86
21	Mexico	79
22	Iran	76
23	Canada	65
24	Israel	64
25	Germany	63

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2750322
2	China	223361
3	United States	158844
4	Indonesia	54520
5	Russian Federation	40890
6	Hong Kong	40076
7	Brazil	39288
8	Iran	33435
9	Viet Nam	22746
10	Poland	22552
11	Saudi Arabia	20479
12	Italy	16234
13	Bangladesh	15636
14	Ukraine	15239
15	Malaysia	14659
16	Turkey	14076
17	South Africa	12724
18	Ivory Coast	11235
19	Iraq	9231
20	Lebanon	8962
21	South Korea	7550
22	Netherlands	7174
23	Canada	6671
24	India	6434
25	Serbia	6405

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: