Suspected Bot List [2014-03-30]

detection period: 2014-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
ES	80.35.117.49	Spain
ES	83.54.106.204	Spain
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
MX	201.158.203.50	Mexico
PH	124.107.165.60	Philippines
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
SK	178.41.127.179	Slovakia
TR	195.244.39.195	Turkey
TW	211.76.94.85	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
US	204.195.104.31	United States
UZ	217.30.171.169	Uzbekistan
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-30]

detection period: 2014-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2986
number of botnet IPs notified to network operators: 2934
number of spam blocked: 64107
recipient count of spam blocked: 1890870

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	534
2	CRTC	377
3	CHINANET-GD	266
4	CTTNET	129
5	CHINANET-JS	101
6	HINET-NET	80
7	UNICOM-SD	71
8	CHINANET-FJ	62
9	CHINANET-CQ	48
10	UNICOM-HN	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2574
2	Taiwan	114
3	United States	55
4	Russian Federation	30
5	Indonesia	22
6	Ukraine	18
7	Brazil	17
8	Germany	11
9	Iran	8
10	Poland	7

Suspected Bot List [2014-03-29]

detection period: 2014-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
ES	80.35.117.49	Spain
ES	83.54.106.204	Spain
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
MO	60.246.45.54	Macau
MX	201.158.203.50	Mexico
PH	124.107.165.60	Philippines
PK	59.103.212.124	Pakistan
PL	95.160.64.100	Poland
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	119.77.138.79	Taiwan
TW	211.76.94.85	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
US	204.195.104.31	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-29]

detection period: 2014-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 3225
number of botnet IPs notified to network operators: 3161
number of spam blocked: 64464
recipient count of spam blocked: 1959141

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	600
2	CRTC	396
3	CHINANET-GD	319
4	CHINANET-JS	144
5	CTTNET	142
6	HINET-NET	108
7	UNICOM-SD	61
8	CHINANET-SD	60
9	CHINANET-XJ	55
10	CHINANET-FJ	50

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2749
2	Taiwan	153
3	United States	59
4	Russian Federation	29
5	Brazil	21
6	Ukraine	17
7	Indonesia	17
8	Italy	12
9	Turkey	10
10	Spain	9

Suspected Bot List [2014-03-28]

detection period: 2014-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.179.137.8	Argentina
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
ES	80.35.117.49	Spain
ES	83.54.106.204	Spain
ID	27.131.4.6	Indonesia
IN	117.192.60.98	India
IN	117.201.226.112	India
IN	117.203.131.125	India
IN	117.243.209.190	India
IN	171.49.42.77	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
MX	201.158.203.50	Mexico
PK	182.189.179.69	Pakistan
PL	95.160.64.100	Poland
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.226.3	Taiwan
TW	119.77.138.79	Taiwan
TW	211.76.92.91	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-28]

detection period: 2014-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2735
number of botnet IPs notified to network operators: 2673
number of spam blocked: 68436
recipient count of spam blocked: 1985148

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	525
2	CRTC	291
3	CHINANET-GD	208
4	CTTNET	134
5	CHINANET-JS	116
6	HINET-NET	104
7	UNICOM-SD	54
8	UNICOM-HA	46
9	CHINANET-CQ	41
10	CHINANET-XJ	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2287
2	Taiwan	139
3	United States	43
4	Italy	31
5	Russian Federation	27
6	Brazil	22
7	Indonesia	16
8	Germany	12
9	Ukraine	11
10	India	9

Suspected Bot List [2014-03-27]

detection period: 2014-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 56

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CN	150.255.232.38	China
CZ	80.188.121.251	Czech Republic
ES	80.35.117.49	Spain
ES	83.54.106.204	Spain
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	117.203.135.79	India
IN	117.242.24.180	India
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
MO	60.246.241.130	Macau
MX	201.158.203.50	Mexico
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.194.94	Taiwan
TW	115.165.226.3	Taiwan
TW	119.77.133.52	Taiwan
TW	211.76.93.74	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
US	98.126.248.10	United States
US	184.82.162.122	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-27]

detection period: 2014-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2802
number of botnet IPs notified to network operators: 2746
number of spam blocked: 62965
recipient count of spam blocked: 1930756

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	538
2	CRTC	325
3	CTTNET	145
4	CHINANET-GD	117
5	HINET-NET	91
6	UNICOM-SD	89
7	CHINANET-JS	85
8	UNICOM-HN	56
9	UNICOM-HE	54
10	CHINANET-XJ	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2398
2	Taiwan	128
3	United States	43
4	Russian Federation	31
5	Brazil	20
6	Indonesia	17
7	Ukraine	13
8	Viet Nam	10
9	India	10
10	Turkey	7

Suspected Bot List [2014-03-26]

detection period: 2014-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 118

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CN	150.255.229.180	China
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
ES	83.54.106.204	Spain
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	117.242.24.180	India
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
MX	201.158.203.50	Mexico
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.220.66	Taiwan
TW	211.76.94.85	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
US	98.126.248.10	United States
US	204.195.104.31	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-26]

detection period: 2014-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3271
number of botnet IPs notified to network operators: 3153
number of spam blocked: 65439
recipient count of spam blocked: 1864177

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	498
2	CRTC	384
3	CHINANET-GD	255
4	CTTNET	126
5	UNICOM-SD	108
6	CHINANET-JS	104
7	HINET-NET	80
8	UNICOM-FJ	64
9	UNICOM-HN	62
10	CHINANET-FJ	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2699
2	Taiwan	115
3	United States	67
4	Russian Federation	32
5	France	28
6	Brazil	24
7	South Korea	17
8	Indonesia	17
9	United Kingdom	17
10	Ukraine	16

Suspected Bot List [2014-03-25]

detection period: 2014-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 209

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AF	180.94.69.66	Afghanistan
AF	180.94.69.68	Afghanistan
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.6.182	China
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.180.61.107	India
IN	182.72.131.50	India
IN	202.62.67.250	India
IN	210.212.97.139	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
MA	197.128.27.22	Morocco
NL	89.248.172.46	Netherlands
NP	202.79.52.53	Nepal
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RS	89.216.21.136	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
US	204.195.104.31	United States
VE	186.24.34.179	Venezuela
VE	190.39.82.232	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-03-25]

detection period: 2014-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1819
number of botnet IPs notified to network operators: 1611
number of spam blocked: 42489
recipient count of spam blocked: 1412835

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	328
2	CRTC	177
3	CMNET	79
4	CHINANET-JS	45
5	CHINANET-FJ	43
6	UNICOM-HN	38
7	UNICOM	25
8	CTTNET	21
9	HINET-NET	19
10	UNICOM-SD	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1064
2	United States	85
3	France	53
4	Brazil	53
5	Taiwan	48
6	Russian Federation	42
7	Italy	32
8	United Kingdom	30
9	South Korea	27
10	Argentina	20

Suspected Bot List [2014-03-24]

detection period: 2014-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AF	180.94.69.66	Afghanistan
AF	180.94.69.68	Afghanistan
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.179.169.37	Argentina
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.180.61.107	India
IN	182.72.131.50	India
IN	202.62.67.250	India
IN	210.212.97.139	India
IN	210.212.183.231	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
NL	89.248.172.46	Netherlands
NP	202.79.52.53	Nepal
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RO	212.146.101.154	Romania
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TW	211.76.90.160	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
US	96.44.179.105	United States
VE	186.24.34.179	Venezuela
VE	190.39.82.232	Venezuela
VE	190.111.122.3	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-03-24]

detection period: 2014-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2878
number of botnet IPs notified to network operators: 2796
number of spam blocked: 47678
recipient count of spam blocked: 1529495

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	544
2	CRTC	371
3	CHINANET-GD	334
4	CTTNET	131
5	UNICOM-HN	71
6	HINET-NET	68
7	UNICOM-SD	61
8	CHINANET-JS	60
9	UNICOM	55
10	CHINANET-FJ	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2363
2	Taiwan	103
3	United States	59
4	Brazil	46
5	Russian Federation	30
6	Italy	18
7	Indonesia	17
8	Ukraine	15
9	South Korea	14
10	Spain	14

Suspected Bot List [2014-03-23]

detection period: 2014-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
ID	27.131.4.6	Indonesia
IN	202.62.67.250	India
IN	210.212.183.231	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
NL	89.248.172.46	Netherlands
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RO	212.146.101.154	Romania
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.229.159	Taiwan
TW	211.76.90.160	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-23]

detection period: 2014-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2928
number of botnet IPs notified to network operators: 2876
number of spam blocked: 48534
recipient count of spam blocked: 1517689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	610
2	CRTC	418
3	CHINANET-GD	267
4	CTTNET	147
5	HINET-NET	93
6	UNICOM-SD	70
7	CHINANET-JS	60
8	CHINANET-FJ	54
9	UNICOM-HN	51
10	UNICOM-HE	41

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2490
2	Taiwan	139
3	United States	50
4	Russian Federation	28
5	Brazil	21
6	Indonesia	17
7	Ukraine	16
8	Italy	11
9	Germany	10
10	Colombia	10

Suspected Bot List [2014-03-22]

detection period: 2014-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CN	150.255.128.143	China
CZ	80.188.121.251	Czech Republic
ID	27.131.4.6	Indonesia
IN	117.242.24.45	India
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.253.67.148	Italy
NL	89.248.172.46	Netherlands
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TW	119.77.139.166	Taiwan
TW	119.77.158.84	Taiwan
TW	211.76.90.160	Taiwan
US	50.201.42.106	United States
US	69.64.48.57	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-22]

detection period: 2014-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3259
number of botnet IPs notified to network operators: 3209
number of spam blocked: 53190
recipient count of spam blocked: 1649928

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	664
2	CRTC	444
3	CHINANET-GD	388
4	CTTNET	180
5	HINET-NET	108
6	UNICOM-SD	85
7	CHINANET-JS	67
8	UNICOM-HN	54
9	UNICOM	51
10	CHINANET-FJ	47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2870
2	Taiwan	142
3	United States	29
4	Russian Federation	23
5	Ukraine	16
6	Indonesia	16
7	Brazil	14
8	Colombia	9
9	South Korea	8
10	Italy	8

Suspected Bot List [2014-03-21]

detection period: 2014-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 114

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
ID	27.131.4.6	Indonesia
IN	117.211.62.143	India
IN	117.217.234.89	India
IN	117.242.24.45	India
IN	202.62.67.250	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
MO	122.100.234.176	Macau
NL	89.248.172.46	Netherlands
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
SA	94.77.199.148	Saudi Arabia
TW	211.76.80.68	Taiwan
TW	211.76.90.160	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-21]

detection period: 2014-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 4009
number of botnet IPs notified to network operators: 3895
number of spam blocked: 107520
recipient count of spam blocked: 2708891

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	748
2	CRTC	520
3	CHINANET-GD	209
4	CTTNET	190
5	CHINANET-JS	139
6	HINET-NET	122
7	UNICOM-SD	92
8	CHINANET-XJ	65
9	UNICOM-HE	60
10	VNPT-VNNIC-VN	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3288
2	Taiwan	166
3	Viet Nam	74
4	United States	57
5	South Korea	36
6	Brazil	35
7	Italy	30
8	Russian Federation	28
9	Indonesia	26
10	India	24

Suspected Bot List [2014-03-20]

detection period: 2014-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 65

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
NL	89.248.172.46	Netherlands
PH	122.3.148.123	Philippines
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TW	119.77.139.166	Taiwan
TW	119.77.251.103	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-20]

detection period: 2014-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2633
number of botnet IPs notified to network operators: 2568
number of spam blocked: 41490
recipient count of spam blocked: 1358570

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	494
2	CRTC	318
3	CHINANET-GD	260
4	CTTNET	115
5	CHINANET-JS	76
6	HINET-NET	64
7	UNICOM-HN	55
8	UNICOM-SD	53
9	UNICOM	53
10	CHINANET-FJ	44

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2150
2	Taiwan	102
3	United States	44
4	Russian Federation	28
5	Viet Nam	23
6	Brazil	21
7	Italy	20
8	South Korea	19
9	Ukraine	17
10	Indonesia	15

Suspected Bot List [2014-03-19]

detection period: 2014-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
IN	59.97.139.158	India
IQ	95.170.214.44	Iraq
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
PH	122.3.148.123	Philippines
PH	124.107.165.60	Philippines
RO	212.146.101.154	Romania
RS	188.2.93.77	Serbia
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TW	119.77.139.166	Taiwan
US	50.201.42.106	United States
US	184.82.162.122	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-19]

detection period: 2014-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2599
number of botnet IPs notified to network operators: 2548
number of spam blocked: 40850
recipient count of spam blocked: 1310706

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	512
2	CRTC	381
3	CHINANET-GD	233
4	CTTNET	125
5	CHINANET-JS	94
6	CHINANET-FJ	62
7	UNICOM-SD	57
8	HINET-NET	57
9	UNICOM	40
10	UNICOM-HN	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2190
2	Taiwan	84
3	United States	55
4	Brazil	23
5	Russian Federation	22
6	Indonesia	19
7	Ukraine	16
8	Italy	15
9	Germany	13
10	United Kingdom	11

Suspected Bot List [2014-03-18]

detection period: 2014-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 78

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.225.141	China
CZ	80.188.121.251	Czech Republic
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	211.76.90.135	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-18]

detection period: 2014-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2724
number of botnet IPs notified to network operators: 2646
number of spam blocked: 37920
recipient count of spam blocked: 1251947

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	598
2	CRTC	479
3	CHINANET-GD	174
4	CTTNET	162
5	HINET-NET	68
6	UNICOM-SD	60
7	CHINANET-JS	59
8	CHINANET-FJ	50
9	UNICOM-HE	35
10	UNICOM-HA	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2265
2	Taiwan	93
3	United States	48
4	Italy	22
5	Brazil	21
6	Russian Federation	20
7	Indonesia	18
8	Ukraine	17
9	United Kingdom	17
10	France	16

Suspected Bot List [2014-03-17]

detection period: 2014-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 109

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BO	190.129.12.162	Bolivia
CZ	80.188.121.251	Czech Republic
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
KW	195.39.163.225	Kuwait
KZ	176.98.192.143	Kazakhstan
LB	213.175.188.158	Lebanon
MO	122.100.166.197	Macau
PL	95.160.64.100	Poland
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	119.77.132.140	Taiwan
TW	211.76.90.135	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-17]

detection period: 2014-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2563
number of botnet IPs notified to network operators: 2454
number of spam blocked: 41515
recipient count of spam blocked: 1328436

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	495
2	CRTC	380
3	CTTNET	139
4	CHINANET-GD	99
5	UNICOM-SD	85
6	HINET-NET	82
7	CHINANET-JS	72
8	UNICOM-HE	42
9	UNICOM-JL	34
10	UNICOM-HL	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2035
2	Taiwan	110
3	United States	40
4	Brazil	33
5	Italy	24
6	France	23
7	Argentina	21
8	United Kingdom	18
9	Ukraine	16
10	Indonesia	16

Suspected Bot List [2014-03-16]

detection period: 2014-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.137.138	China
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
KW	195.39.163.225	Kuwait
LB	213.175.188.158	Lebanon
MO	60.246.146.178	Macau
MO	60.246.255.163	Macau
MO	122.100.166.197	Macau
MO	122.100.233.242	Macau
MX	187.174.216.162	Mexico
PH	124.107.165.60	Philippines
PL	95.160.64.100	Poland
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-16]

detection period: 2014-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2221
number of botnet IPs notified to network operators: 2181
number of spam blocked: 37189
recipient count of spam blocked: 1207140

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	564
2	CRTC	330
3	CTTNET	132
4	CHINANET-GD	103
5	HINET-NET	102
6	UNICOM-SD	64
7	CHINANET-JS	49
8	CHINANET-FJ	31
9	UNICOM-HE	28
10	CHINANET-SC	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1910
2	Taiwan	132
3	United States	18
4	Indonesia	15
5	Russian Federation	14
6	Ukraine	10
7	Brazil	10
8	Poland	7
9	Japan	6
10	Serbia	5

Botnet Statistics for February 2014

detection period: 2014-02-01 00:00 - 2014-02-28 23:59 UTC
total number of suspected botnet IPs: 116384
number of blocked spams: 1674878
recipient count of blocked spams: 47853412

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	106604
2	Taiwan	2546
3	Italy	597
4	United States	552
5	India	453
6	France	413
7	United Kingdom	286
8	Brazil	272
9	Turkey	244
10	Spain	236
11	Russian Federation	226
12	Germany	205
13	Poland	200
14	Argentina	199
15	Kazakhstan	193
16	Indonesia	192
17	Singapore	159
18	South Korea	139
19	Viet Nam	132
20	Hong Kong	129
21	Ukraine	120
22	Japan	118
23	Mexico	111
24	Israel	106
25	Peru	104

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	1138538
2	Taiwan	68441
3	Brazil	67123
4	Indonesia	35302
5	United States	33581
6	Russian Federation	31850
7	Colombia	23683
8	Saudi Arabia	22795
9	Ukraine	22154
10	South Korea	20196
11	Hong Kong	16577
12	Iran	14016
13	India	12683
14	Viet Nam	12177
15	Mexico	11200
16	Ivory Coast	10798
17	Philippines	9581
18	Republic of Maldives	9168
19	Malaysia	8552
20	Poland	8441
21	United Kingdom	7429
22	Germany	6093
23	Italy	5804
24	Romania	5363
25	Thailand	5276

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2014-03-15]

detection period: 2014-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BO	190.129.12.162	Bolivia
CO	200.80.43.248	Colombia
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
MO	60.246.135.203	Macau
MO	60.246.178.110	Macau
MO	122.100.242.160	Macau
MX	187.174.216.162	Mexico
PH	124.107.165.60	Philippines
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.229.80	Taiwan
TW	115.165.250.155	Taiwan
TW	211.76.83.29	Taiwan
US	50.201.42.106	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-15]

detection period: 2014-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 4621
number of botnet IPs notified to network operators: 4573
number of spam blocked: 102548
recipient count of spam blocked: 2590926

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	988
2	CRTC	470
3	CTTNET	285
4	UNICOM-SD	228
5	CHINANET-GD	174
6	CHINANET-JS	166
7	HINET-NET	155
8	UNICOM-HE	121
9	UNICOM-HL	99
10	UNICOM-JL	93

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4164
2	Taiwan	198
3	United States	41
4	Russian Federation	19
5	Ukraine	14
6	Indonesia	14
7	Brazil	13
8	South Korea	11
9	Turkey	8
10	United Kingdom	8

Suspected Bot List [2014-03-14]

detection period: 2014-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	186.122.44.13	Argentina
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BO	190.129.12.162	Bolivia
CO	200.80.43.248	Colombia
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
IN	202.62.67.250	India
IQ	130.193.147.227	Iraq
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.150.115	Macau
MO	122.100.196.24	Macau
PH	124.107.165.60	Philippines
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SK	93.184.71.66	Slovakia
TW	122.100.84.15	Taiwan
US	50.201.42.106	United States
US	184.82.162.122	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-14]

detection period: 2014-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3104
number of botnet IPs notified to network operators: 3003
number of spam blocked: 51728
recipient count of spam blocked: 1507929

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	572
2	CRTC	373
3	CHINANET-GD	152
4	CTTNET	147
5	HINET-NET	132
6	UNICOM-SD	129
7	CHINANET-JS	129
8	UNICOM-HE	51
9	UNICOM-HL	49
10	CHINANET-FJ	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2540
2	Taiwan	157
3	United States	51
4	Italy	33
5	Indonesia	21
6	Argentina	21
7	Russian Federation	20
8	Brazil	17
9	India	16
10	Ukraine	13

Suspected Bot List [2014-03-13]

detection period: 2014-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 74

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.81.150	Arab Emirates
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	181.15.98.130	Argentina
AR	190.179.47.46	Argentina
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
AR	200.123.254.11	Argentina
BO	190.129.12.162	Bolivia
BO	200.87.201.146	Bolivia
CN	123.137.137.52	China
CO	200.80.43.248	Colombia
CR	201.196.50.10	Costa Rica
CR	201.197.180.34	Costa Rica
CZ	80.188.121.251	Czech Republic
ES	2.138.31.178	Spain
ES	188.85.104.103	Spain
HN	190.107.140.77	Honduras
IN	27.251.177.239	India
IN	202.62.67.250	India
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.44.4	Macau
MO	60.246.180.220	Macau
MX	201.151.46.145	Mexico
PA	190.5.230.178	Panama
PE	190.116.62.70	Peru
PL	95.160.64.100	Poland
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	122.100.84.15	Taiwan
US	50.201.42.106	United States
US	68.188.72.60	United States
US	74.143.13.134	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela
ZA	105.236.11.111	South Africa
ZA	105.236.128.237	South Africa
ZA	197.245.3.36	South Africa

List from greylisting:

Botnet Statistics [2014-03-13]

detection period: 2014-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2657
number of botnet IPs notified to network operators: 2583
number of spam blocked: 37974
recipient count of spam blocked: 1246047

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	433
2	CRTC	407
3	CHINANET-GD	155
4	CTTNET	126
5	HINET-NET	88
6	CHINANET-JS	82
7	UNICOM-SD	74
8	CHINANET-FJ	49
9	UNICOM-LN	38
10	UNICOM-HE	34

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2134
2	Taiwan	114
3	United States	68
4	France	38
5	Brazil	25
6	Indonesia	20
7	India	15
8	Russian Federation	14
9	Spain	13
10	Ukraine	11

Suspected Bot List [2014-03-12]

detection period: 2014-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.81.150	Arab Emirates
AL	80.78.75.103	Albania
AL	80.78.75.134	Albania
AR	186.135.17.129	Argentina
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BD	180.234.4.32	Bangladesh
BO	190.129.12.162	Bolivia
BO	200.87.201.146	Bolivia
CO	200.80.43.248	Colombia
CR	201.196.50.10	Costa Rica
CR	201.197.180.34	Costa Rica
CR	201.205.77.146	Costa Rica
CZ	80.188.121.251	Czech Republic
ES	2.138.31.178	Spain
IN	27.251.177.239	India
IN	122.160.239.39	India
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	60.246.179.180	Macau
MO	122.100.241.71	Macau
MX	201.151.46.145	Mexico
NL	5.255.87.156	Netherlands
PA	190.5.230.178	Panama
PL	95.160.64.100	Poland
RS	89.216.21.136	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TW	122.100.84.15	Taiwan
US	50.201.42.106	United States
US	68.188.72.60	United States
US	74.222.3.249	United States
US	97.89.65.98	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-12]

detection period: 2014-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 3732
number of botnet IPs notified to network operators: 3645
number of spam blocked: 75100
recipient count of spam blocked: 2024694

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	608
2	CRTC	439
3	CHINANET-GD	244
4	CTTNET	172
5	CHINANET-JS	159
6	UNICOM-SD	119
7	HINET-NET	118
8	CHINANET-AH	66
9	CHINANET-FJ	60
10	UNICOM-HE	59

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	3163
2	Taiwan	154
3	United States	70
4	Indonesia	26
5	Brazil	20
6	India	18
7	Russian Federation	17
8	Ukraine	16
9	France	16
10	Turkey	11

Suspected Bots' IP List for March 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-03-31]
Suspected Bots IP [2014-03-30]
Suspected Bots IP [2014-03-29]
Suspected Bots IP [2014-03-28]
Suspected Bots IP [2014-03-27]
Suspected Bots IP [2014-03-26]
Suspected Bots IP [2014-03-25]
Suspected Bots IP [2014-03-24]
Suspected Bots IP [2014-03-23]
Suspected Bots IP [2014-03-22]
Suspected Bots IP [2014-03-21]
Suspected Bots IP [2014-03-20]
Suspected Bots IP [2014-03-19]
Suspected Bots IP [2014-03-18]
Suspected Bots IP [2014-03-17]
Suspected Bots IP [2014-03-16]
Suspected Bots IP [2014-03-15]
Suspected Bots IP [2014-03-14]
Suspected Bots IP [2014-03-13]
Suspected Bots IP [2014-03-12]
Suspected Bots IP [2014-03-11]
Suspected Bots IP [2014-03-10]
Suspected Bots IP [2014-03-09]
Suspected Bots IP [2014-03-08]
Suspected Bots IP [2014-03-07]
Suspected Bots IP [2014-03-06]
Suspected Bots IP [2014-03-05]
Suspected Bots IP [2014-03-04]
Suspected Bots IP [2014-03-03]
Suspected Bots IP [2014-03-02]
Suspected Bots IP [2014-03-01]

Suspected Bot List [2014-03-11]

detection period: 2014-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.103	Albania
AR	186.135.17.129	Argentina
AR	190.182.225.42	Argentina
AR	200.63.19.165	Argentina
BO	190.129.12.162	Bolivia
CN	150.255.143.95	China
CN	150.255.190.131	China
CO	200.80.43.248	Colombia
CZ	80.188.121.251	Czech Republic
ES	88.22.145.56	Spain
HN	190.107.140.77	Honduras
IN	122.160.239.39	India
IR	91.98.36.84	Iran
IT	95.227.34.226	Italy
LB	213.175.188.158	Lebanon
MO	122.100.204.138	Macau
MX	187.163.137.184	Mexico
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.211.100	Singapore
SG	116.251.217.213	Singapore
SK	93.184.71.66	Slovakia
TW	115.165.252.42	Taiwan
TW	119.77.139.166	Taiwan
TW	122.100.84.15	Taiwan
US	50.201.42.106	United States
US	74.222.3.249	United States
VE	190.39.82.232	Venezuela

List from greylisting:

Botnet Statistics [2014-03-11]

detection period: 2014-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2999
number of botnet IPs notified to network operators: 2898
number of spam blocked: 39360
recipient count of spam blocked: 1260493

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	542
2	CRTC	492
3	CHINANET-GD	199
4	CTTNET	157
5	HINET-NET	113
6	CHINANET-JS	80
7	UNICOM-SD	73
8	CHINANET-FJ	64
9	CHINANET-SC	35
10	UNICOM-HA	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2393
2	Taiwan	146
3	France	55
4	United States	41
5	Russian Federation	27
6	Argentina	22
7	Brazil	21
8	Indonesia	17
9	Ukraine	15
10	Turkey	14