Suspected Bot List [2014-04-29]

detection period: 2014-04-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.77.34	Albania
AZ	62.217.139.35	Azerbaijan
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
IN	59.90.160.247	India
IN	59.92.102.224	India
IN	59.93.198.82	India
IN	59.94.66.57	India
IN	111.93.9.67	India
IN	115.69.255.74	India
IN	117.239.241.147	India
IN	117.242.109.150	India
IN	117.242.141.254	India
IN	122.160.239.46	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IN	202.134.157.40	India
IN	210.212.97.139	India
IN	223.188.68.3	India
IR	91.99.103.172	Iran
IT	95.234.249.153	Italy
KE	41.72.201.198	Kenya
MW	105.234.255.2	Malawi
MX	189.205.184.161	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
TZ	196.43.90.8	Tanzania
US	50.201.42.106	United States
US	66.214.186.192	United States
US	96.44.172.108	United States
US	174.140.165.72	United States
US	205.209.136.109	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-29]

detection period: 2014-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1238
number of botnet IPs notified to network operators: 1145
number of spam blocked: 48251
recipient count of spam blocked: 1575688

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	253
2	CRTC	131
3	UNICOM-GD	36
4	CHINANET-FJ	35
5	UNICOM	25
6	VNPT-VNNIC-VN	21
7	UNICOM-HN	21
8	KORNET-KR	13
9	CHINANET-JS	12
10	CMNET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	663
2	United States	74
3	Russian Federation	52
4	Viet Nam	36
5	India	35
6	Indonesia	31
7	Brazil	27
8	South Korea	23
9	Ukraine	19
10	United Kingdom	16

Suspected Bot List [2014-04-28]

detection period: 2014-04-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	62.217.139.35	Azerbaijan
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	186.120.97.26	Dominican Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.188.68.3	India
IR	91.99.103.172	Iran
IT	95.234.249.153	Italy
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
UA	91.210.150.205	Ukraine
US	50.201.42.106	United States
US	66.214.186.192	United States
US	96.44.172.108	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-28]

detection period: 2014-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 988
number of botnet IPs notified to network operators: 932
number of spam blocked: 46553
recipient count of spam blocked: 1553079

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	183
2	CRTC	127
3	CHINANET-FJ	36
4	UNICOM	32
5	UNICOM-GD	28
6	CHINANET-JS	20
7	UNICOM-HN	15
8	CMNET	9
9	CHINANET-SH	9
10	KORNET-KR	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	583
2	United States	46
3	Russian Federation	44
4	Brazil	37
5	Indonesia	29
6	South Korea	20
7	Italy	20
8	Taiwan	14
9	United Kingdom	14
10	Ukraine	12

Suspected Bot List [2014-04-27]

detection period: 2014-04-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	62.217.139.35	Azerbaijan
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.188.68.3	India
IR	91.98.36.84	Iran
IR	91.99.103.172	Iran
IT	95.234.249.153	Italy
NL	5.255.87.209	Netherlands
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RS	188.2.93.77	Serbia
RU	95.188.96.167	Russian Federation
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-27]

detection period: 2014-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 628
number of botnet IPs notified to network operators: 594
number of spam blocked: 44186
recipient count of spam blocked: 1466754

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	104
2	CRTC	55
3	CHINANET-FJ	28
4	CHINANET-JS	18
5	UNICOM-GD	14
6	CMNET	8
7	CHINANET-AH	8
8	UNICOM-HA	5
9	HICHINA	5
10	CHINANET-ZJ	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	349
2	Russian Federation	36
3	United States	29
4	Indonesia	24
5	Brazil	23
6	Ukraine	14
7	Germany	12
8	India	11
9	Hong Kong	11
10	South Korea	10

Suspected Bot List [2014-04-26]

detection period: 2014-04-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
AZ	62.217.139.35	Azerbaijan
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.188.68.3	India
IT	95.234.249.153	Italy
MX	200.92.120.54	Mexico
MX	201.158.203.50	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	178.41.32.157	Slovakia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-26]

detection period: 2014-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 883
number of botnet IPs notified to network operators: 832
number of spam blocked: 47303
recipient count of spam blocked: 1559962

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	149
2	CHINANET-GD	144
3	UNICOM-GD	44
4	CHINANET-FJ	40
5	CHINANET-JS	19
6	CHINANET-AH	10
7	CMNET	9
8	CHINANET-SH	8
9	HICHINA	7
10	HINET-NET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	539
2	Russian Federation	44
3	United States	37
4	Brazil	29
5	Indonesia	22
6	South Korea	16
7	Ukraine	15
8	Hong Kong	13
9	Taiwan	12
10	Germany	12

Suspected Bot List [2014-04-25]

detection period: 2014-04-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 303

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
AR	186.182.114.204	Argentina
AZ	62.217.139.35	Azerbaijan
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	59.99.169.63	India
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.242.109.1	India
IN	117.247.179.199	India
IN	117.254.125.37	India
IN	117.254.244.28	India
IN	122.160.239.46	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IN	202.134.157.16	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	200.92.120.54	Mexico
MX	201.158.203.50	Mexico
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
SK	178.41.32.157	Slovakia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	66.240.236.121	United States
US	96.44.172.108	United States
US	174.140.165.72	United States
US	184.82.236.67	United States
US	209.58.205.18	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-25]

detection period: 2014-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1512
number of botnet IPs notified to network operators: 1211
number of spam blocked: 48723
recipient count of spam blocked: 1585737

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	214
2	CRTC	145
3	UNICOM-GD	71
4	VNPT-VNNIC-VN	56
5	CHINANET-FJ	46
6	IP2000-ADSL-BAS	25
7	CHINANET-JS	23
8	VIETEL-VNNIC-VN	20
9	FPT-VN	16
10	CMNET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	662
2	Viet Nam	110
3	United States	99
4	India	66
5	France	66
6	Russian Federation	42
7	United Kingdom	38
8	Indonesia	32
9	Brazil	29
10	Hong Kong	26

Suspected Bot List [2014-04-24]

detection period: 2014-04-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 147

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.134	Albania
AR	186.182.114.204	Argentina
AR	200.63.164.22	Argentina
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CO	190.90.2.30	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	59.93.26.31	India
IN	111.93.9.67	India
IN	117.242.133.4	India
IN	122.160.239.46	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IN	203.76.176.224	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IT	95.234.249.153	Italy
KE	41.72.201.198	Kenya
MX	189.205.184.161	Mexico
MX	200.92.120.54	Mexico
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	66.240.236.121	United States
US	96.44.172.108	United States
US	209.58.205.18	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-24]

detection period: 2014-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1294
number of botnet IPs notified to network operators: 1150
number of spam blocked: 49649
recipient count of spam blocked: 1623774

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	249
2	CRTC	134
3	CHINANET-FJ	63
4	UNICOM-GD	55
5	CHINANET-JS	40
6	CMNET	11
7	CHINANET-SH	10
8	CHINANET-SC	9
9	CHINANET-AH	9
10	VNPT-VNNIC-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	713
2	United States	94
3	Russian Federation	47
4	Brazil	36
5	Indonesia	27
6	India	26
7	Ukraine	24
8	United Kingdom	21
9	France	17
10	Italy	16

Suspected Bot List [2014-04-23]

detection period: 2014-04-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 97

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	80.78.75.134	Albania
AR	186.182.114.204	Argentina
CO	190.60.39.186	Colombia
CU	200.55.159.65	Cuba
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
GB	217.199.167.205	United Kingdom
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SA	213.230.19.136	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	66.240.236.121	United States
US	96.44.172.108	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-23]

detection period: 2014-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1132
number of botnet IPs notified to network operators: 1039
number of spam blocked: 49704
recipient count of spam blocked: 1622770

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	164
2	CRTC	158
3	CHINANET-FJ	53
4	CHINANET-JS	36
5	UNICOM-GD	22
6	HINET-NET	20
7	CMNET	16
8	HICHINA	9
9	CHINANET-SH	8
10	UNICOM-SD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	601
2	United States	57
3	Russian Federation	47
4	Brazil	32
5	Taiwan	31
6	Indonesia	24
7	India	22
8	Ukraine	20
9	Turkey	15
10	Poland	14

Suspected Bot List [2014-04-22]

detection period: 2014-04-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EG	41.33.169.36	Egypt
GB	217.199.167.205	United Kingdom
HN	190.107.140.77	Honduras
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SA	213.230.19.136	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	66.240.236.121	United States
US	96.44.172.108	United States
US	204.44.100.185	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-22]

detection period: 2014-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1037
number of botnet IPs notified to network operators: 977
number of spam blocked: 39522
recipient count of spam blocked: 1273892

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	175
2	CRTC	134
3	CHINANET-JS	51
4	UNICOM-HN	49
5	CHINANET-FJ	43
6	UNICOM	35
7	UNICOM-GD	18
8	CHINANET-SH	13
9	CMNET	10
10	CHINANET-AH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	679
2	United States	48
3	Russian Federation	42
4	Brazil	28
5	Indonesia	24
6	India	16
7	Ukraine	15
8	South Korea	15
9	United Kingdom	12
10	Taiwan	10

Suspected Bot List [2014-04-21]

detection period: 2014-04-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
EG	41.33.169.36	Egypt
GB	217.199.167.205	United Kingdom
HN	190.107.140.77	Honduras
HN	200.107.120.82	Honduras
HN	200.107.121.197	Honduras
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	200.92.120.54	Mexico
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RU	95.188.96.167	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-21]

detection period: 2014-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 964
number of botnet IPs notified to network operators: 908
number of spam blocked: 43194
recipient count of spam blocked: 1422705

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	196
2	CRTC	116
3	UNICOM-HN	53
4	UNICOM	39
5	CHINANET-JS	32
6	CHINANET-FJ	28
7	UNICOM-GD	16
8	UNICOM-BJ	8
9	CHINANET-AH	8
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	637
2	United States	44
3	Russian Federation	38
4	Indonesia	27
5	Brazil	27
6	South Korea	16
7	Ukraine	13
8	Taiwan	9
9	United Kingdom	9
10	Colombia	9

Suspected Bot List [2014-04-20]

detection period: 2014-04-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
DO	190.122.102.42	Dominican Republic
EC	186.42.225.189	Ecuador
GB	217.199.167.205	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.247.241.27	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
US	192.161.172.105	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-20]

detection period: 2014-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1025
number of botnet IPs notified to network operators: 974
number of spam blocked: 49018
recipient count of spam blocked: 1608834

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	162
2	CHINANET-GD	121
3	CHINANET-HB	105
4	UNICOM-HB	42
5	CHINANET-FJ	36
6	CHINANET-JS	25
7	UNICOM-GD	18
8	CTTNET	12
9	CHINANET-SH	8
10	CHINANET-AH	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	661
2	United States	55
3	Russian Federation	41
4	Brazil	29
5	Indonesia	28
6	United Kingdom	15
7	Ukraine	14
8	South Korea	14
9	Thailand	9
10	Poland	9

Suspected Bot List [2014-04-19]

detection period: 2014-04-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
EC	186.42.225.189	Ecuador
EG	41.33.169.36	Egypt
GB	217.199.167.205	United Kingdom
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RS	188.2.93.77	Serbia
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	96.44.172.108	United States
US	192.161.172.105	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-19]

detection period: 2014-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1109
number of botnet IPs notified to network operators: 1047
number of spam blocked: 40729
recipient count of spam blocked: 1277730

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	148
2	CHINANET-GD	121
3	CHINANET-HB	96
4	UNICOM-HB	50
5	UNICOM-HN	47
6	UNICOM	38
7	CHINANET-FJ	27
8	UNICOM-GD	24
9	CHINANET-JS	21
10	CTTNET	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	709
2	United States	62
3	Russian Federation	38
4	Brazil	38
5	Indonesia	24
6	Italy	19
7	Ukraine	16
8	South Korea	16
9	Turkey	15
10	India	15

Suspected Bot List [2014-04-18]

detection period: 2014-04-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
BD	103.244.21.70	Bangladesh
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
EC	186.42.225.189	Ecuador
EG	41.33.169.36	Egypt
GB	217.199.167.205	United Kingdom
GT	200.6.227.75	Guatemala
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	209.58.205.18	United States
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-18]

detection period: 2014-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1001
number of botnet IPs notified to network operators: 943
number of spam blocked: 43382
recipient count of spam blocked: 1393207

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	136
2	CRTC	134
3	CHINANET-HB	84
4	UNICOM-HB	46
5	CHINANET-FJ	28
6	CHINANET-JS	23
7	UNICOM-GD	16
8	CMNET	10
9	CHINANET-ZJ-HZ	10
10	CHINANET-SH	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	629
2	United States	48
3	Brazil	40
4	Russian Federation	39
5	Indonesia	20
6	Italy	16
7	Ukraine	15
8	Germany	12
9	Turkey	11
10	Thailand	11

Suspected Bot List [2014-04-17]

detection period: 2014-04-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 120

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	168.226.141.203	Argentina
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
EG	41.33.169.36	Egypt
GT	200.6.227.75	Guatemala
HN	190.107.140.77	Honduras
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	201.158.203.50	Mexico
PK	121.52.159.236	Pakistan
PL	95.160.217.65	Poland
RS	188.2.93.77	Serbia
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	204.44.100.185	United States
US	209.58.205.18	United States
US	50.201.42.106	United States
UZ	80.80.208.229	Uzbekistan
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-17]

detection period: 2014-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1229
number of botnet IPs notified to network operators: 1110
number of spam blocked: 49387
recipient count of spam blocked: 1530050

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	138
2	CRTC	103
3	CHINANET-HB	60
4	UNICOM-HB	37
5	CHINANET-SH	26
6	CHINANET-FJ	24
7	CHINANET-JS	23
8	VNPT-VNNIC-VN	17
9	HINET-NET	17
10	UNICOM-GD	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	580
2	United States	95
3	Russian Federation	48
4	India	38
5	Brazil	38
6	Viet Nam	29
7	France	28
8	Indonesia	25
9	United Kingdom	25
10	Taiwan	24

Suspected Bot List [2014-04-16]

detection period: 2014-04-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
BD	103.244.21.70	Bangladesh
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
EC	186.42.225.189	Ecuador
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	204.44.100.185	United States
US	209.58.205.18	United States
US	50.201.42.106	United States
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-16]

detection period: 2014-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1014
number of botnet IPs notified to network operators: 955
number of spam blocked: 55363
recipient count of spam blocked: 1775766

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	117
2	CRTC	105
3	CHINANET-FJ	37
4	CHINANET-JS	33
5	CHINANET-SH	27
6	UNICOM-GD	14
7	CMNET	12
8	UNICOM-SD	9
9	HINET-NET	9
10	VNPT-VNNIC-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	508
2	United States	52
3	Russian Federation	43
4	Brazil	33
5	Indonesia	26
6	United Kingdom	22
7	Taiwan	18
8	Ukraine	17
9	Viet Nam	16
10	France	16

Suspected Bot List [2014-04-15]

detection period: 2014-04-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 92

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
BO	190.129.12.162	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	117.239.241.147	India
IN	117.239.39.165	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IN	27.251.176.178	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.234.249.153	Italy
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PH	122.49.217.2	Philippines
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RU	5.19.221.219	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	204.152.209.109	United States
US	204.195.104.31	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
US	50.201.42.106	United States
US	69.64.48.57	United States
US	97.90.101.77	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-15]

detection period: 2014-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1036
number of botnet IPs notified to network operators: 948
number of spam blocked: 58768
recipient count of spam blocked: 1907918

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	134
2	CRTC	75
3	CHINANET-FJ	38
4	CHINANET-JS	31
5	CHINANET-SH	22
6	UNICOM-GD	17
7	HINET-NET	13
8	HICHINA	12
9	VNPT-VNNIC-VN	11
10	UNICOM-BJ	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	495
2	United States	58
3	Russian Federation	48
4	Brazil	34
5	Ukraine	25
6	Indonesia	25
7	India	24
8	Taiwan	22
9	Viet Nam	19
10	Italy	18

Suspected Bot List [2014-04-14]

detection period: 2014-04-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
AR	190.182.225.42	Argentina
BD	103.244.21.70	Bangladesh
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
EC	186.42.225.189	Ecuador
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	202.62.67.250	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IN	223.226.28.86	India
IN	27.251.176.178	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.234.249.153	Italy
IT	95.253.67.148	Italy
LV	46.183.220.29	Latvia
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
NL	93.174.95.82	Netherlands
PH	122.49.217.2	Philippines
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.226.221.155	Turkey
TR	195.244.39.195	Turkey
US	204.152.209.109	United States
US	204.152.209.195	United States
US	204.195.104.31	United States
US	204.44.100.185	United States
US	209.58.205.18	United States
US	50.201.42.106	United States
US	69.64.48.57	United States
US	97.90.101.77	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	201.209.187.170	Venezuela
ZA	165.233.62.202	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-14]

detection period: 2014-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 565
number of botnet IPs notified to network operators: 510
number of spam blocked: 56429
recipient count of spam blocked: 1967025

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	24
2	CHINANET-GD	21
3	CMNET	13
4	HICHINA	9
5	CHINANET-ZJ	8
6	UNICOM-SD	7
7	CRTC	7
8	UNICOM-BJ	6
9	CHINANET-SH	6
10	CHINANET-FJ	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	210
2	Russian Federation	46
3	United States	34
4	Brazil	31
5	Indonesia	25
6	Ukraine	19
7	Taiwan	14
8	United Kingdom	13
9	India	11
10	South Korea	10

Suspected Bot List [2014-04-13]

detection period: 2014-04-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
AR	190.182.225.42	Argentina
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
GB	78.129.194.61	United Kingdom
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	59.90.169.54	India
IN	111.93.9.67	India
IN	202.62.67.250	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.234.249.153	Italy
IT	95.253.67.148	Italy
LV	46.183.220.29	Latvia
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	201.158.203.50	Mexico
NL	93.174.95.82	Netherlands
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
RU	5.19.221.219	Russian Federation
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	69.64.48.57	United States
US	97.90.101.77	United States
US	98.126.78.82	United States
US	204.152.209.109	United States
US	204.152.209.195	United States
US	204.195.104.31	United States
US	209.58.205.18	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	201.209.187.170	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-13]

detection period: 2014-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 796
number of botnet IPs notified to network operators: 743
number of spam blocked: 72876
recipient count of spam blocked: 2187479

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	108
2	CRTC	77
3	CHINANET-FJ	25
4	CHINANET-JS	23
5	CMNET	14
6	UNICOM-GD	13
7	CHINANET-SH	12
8	UNICOM-LN	8
9	HICHINA	8
10	CHINANET-ZJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	415
2	United States	47
3	Russian Federation	46
4	Brazil	27
5	Ukraine	24
6	Indonesia	24
7	United Kingdom	16
8	Taiwan	15
9	Thailand	12
10	France	12

Suspected Bot List [2014-04-12]

detection period: 2014-04-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
AR	190.182.225.42	Argentina
BD	103.244.21.70	Bangladesh
BO	190.129.12.162	Bolivia
BO	190.129.58.252	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DO	190.122.102.42	Dominican Republic
DZ	41.191.253.146	Algeria
EC	186.42.225.189	Ecuador
EG	41.33.169.36	Egypt
GB	78.129.194.61	United Kingdom
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.234.249.153	Italy
IT	95.253.67.148	Italy
LV	46.183.220.29	Latvia
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	189.205.184.161	Mexico
MX	201.158.203.50	Mexico
PH	58.69.100.234	Philippines
PK	121.52.159.236	Pakistan
RS	188.2.93.77	Serbia
RU	5.19.221.219	Russian Federation
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	69.64.48.57	United States
US	97.90.101.77	United States
US	98.126.78.82	United States
US	204.152.209.109	United States
US	204.152.209.195	United States
US	204.195.104.31	United States
US	209.58.205.18	United States
US	209.239.112.104	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	201.209.187.170	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-04-12]

detection period: 2014-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 885
number of botnet IPs notified to network operators: 823
number of spam blocked: 50211
recipient count of spam blocked: 1691174

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CRTC	119
2	CHINANET-GD	119
3	CHINANET-FJ	41
4	CHINANET-JS	32
5	UNICOM-GD	13
6	CHINANET-SH	12
7	CMNET	10
8	HICHINA	9
9	UNICOM-LN	7
10	CHINANET-ZJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	490
2	United States	45
3	Russian Federation	40
4	Brazil	27
5	Indonesia	26
6	Ukraine	19
7	United Kingdom	16
8	Taiwan	13
9	South Korea	13
10	Thailand	12

Suspected Bots' IP List for April 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-04-30]
Suspected Bots IP [2014-04-29]
Suspected Bots IP [2014-04-28]
Suspected Bots IP [2014-04-27]
Suspected Bots IP [2014-04-26]
Suspected Bots IP [2014-04-25]
Suspected Bots IP [2014-04-24]
Suspected Bots IP [2014-04-23]
Suspected Bots IP [2014-04-22]
Suspected Bots IP [2014-04-21]
Suspected Bots IP [2014-04-20]
Suspected Bots IP [2014-04-19]
Suspected Bots IP [2014-04-18]
Suspected Bots IP [2014-04-17]
file for "Suspected Bots IP [2014-04-16]" seems to be corrupted, so nothing for that day.
Suspected Bots IP [2014-04-15]
Suspected Bots IP [2014-04-14]
Suspected Bots IP [2014-04-13]
Suspected Bots IP [2014-04-12]
Suspected Bots IP [2014-04-11]
Suspected Bots IP [2014-04-10]
Suspected Bots IP [2014-04-09]
Suspected Bots IP [2014-04-08]
Suspected Bots IP [2014-04-07]
Suspected Bots IP [2014-04-06]
Suspected Bots IP [2014-04-05]
Suspected Bots IP [2014-04-04]
Suspected Bots IP [2014-04-03]
Suspected Bots IP [2014-04-02]
Suspected Bots IP [2014-04-01]

Suspected Bot List [2014-04-11]

detection period: 2014-04-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 71

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.17.36.83	Argentina
AR	190.182.225.42	Argentina
BD	103.244.21.70	Bangladesh
BO	190.129.12.162	Bolivia
CO	190.60.39.186	Colombia
CZ	80.188.121.251	Czech Republic
DZ	41.191.253.146	Algeria
EC	186.42.225.189	Ecuador
GB	78.129.194.61	United Kingdom
HN	190.107.140.77	Honduras
ID	27.131.4.6	Indonesia
IN	111.93.9.67	India
IN	122.160.239.46	India
IN	203.88.131.106	India
IN	203.90.114.228	India
IN	210.212.97.139	India
IR	91.98.36.84	Iran
IT	85.159.181.210	Italy
IT	95.227.34.226	Italy
IT	95.234.249.153	Italy
IT	95.253.67.148	Italy
JP	124.38.95.29	Japan
LV	46.183.220.29	Latvia
MW	105.234.255.2	Malawi
MX	187.240.114.239	Mexico
MX	189.205.184.161	Mexico
MX	201.158.203.50	Mexico
PH	58.69.100.234	Philippines
PH	122.49.217.2	Philippines
PH	122.52.149.209	Philippines
PK	121.52.159.236	Pakistan
RO	109.99.193.186	Romania
RS	188.2.93.77	Serbia
RU	95.188.112.11	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.217.213	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
TR	195.244.39.195	Turkey
US	50.201.42.106	United States
US	69.64.48.57	United States
US	97.90.101.77	United States
US	184.82.162.122	United States
US	204.152.209.109	United States
US	204.152.209.195	United States
US	204.195.104.31	United States
US	209.58.205.18	United States
US	209.239.112.104	United States
VE	186.24.34.179	Venezuela
VE	190.111.122.3	Venezuela
VE	190.202.116.101	Venezuela
VE	201.209.187.170	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting: