Suspected Bot List [2014-07-30]

detection period: 2014-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 438

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-30]

detection period: 2014-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 3411
number of botnet IPs notified to network operators: 2973
number of spam blocked: 95003
recipient count of spam blocked: 2232136

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1220
2	VNPT-VNNIC-VN	211
3	CHINANET-GD	138
4	CRTC	126
5	KORNET-KR	71
6	PE-TPSA-LACNIC	64
7	FPT-VN	54
8	WASU	53
9	BSNLNET	38
10	WASU-BB	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1250
2	China	518
3	Viet Nam	351
4	South Korea	157
5	Peru	132
6	India	125
7	United States	63
8	Colombia	62
9	Brazil	59
10	Russian Federation	49

Suspected Bot List [2014-07-29]

detection period: 2014-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 244

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States

List from greylisting:

Botnet Statistics [2014-07-29]

detection period: 2014-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2701
number of botnet IPs notified to network operators: 2457
number of spam blocked: 190661
recipient count of spam blocked: 3228227

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1206
2	CRTC	121
3	CHINANET-GD	65
4	WASU	61
5	UNICOM-HN	56
6	CHINANET-HB	51
7	VNPT-VNNIC-VN	41
8	WASU-BB	36
9	PE-TPSA-LACNIC	30
10	UNICOM-GD	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1225
2	China	569
3	India	92
4	Viet Nam	73
5	South Korea	51
6	Peru	48
7	United States	45
8	Brazil	44
9	Russian Federation	40
10	Argentina	33

Suspected Bot List [2014-07-28]

detection period: 2014-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 341

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-28]

detection period: 2014-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 3193
number of botnet IPs notified to network operators: 2852
number of spam blocked: 74650
recipient count of spam blocked: 2199563

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1209
2	VNPT-VNNIC-VN	154
3	UNICOM-HN	140
4	CRTC	128
5	UNICOM	80
6	KORNET-KR	60
7	CHINANET-GD	43
8	BSNLNET	40
9	UNICOM-GD	37
10	BHARTI-IN	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1236
2	China	611
3	Viet Nam	249
4	India	154
5	Russian Federation	131
6	South Korea	125
7	United States	58
8	Argentina	45
9	Peru	40
10	United Kingdom	28

Suspected Bot List [2014-07-27]

detection period: 2014-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 266

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-27]

detection period: 2014-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3051
number of botnet IPs notified to network operators: 2785
number of spam blocked: 106294
recipient count of spam blocked: 2813271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1214
2	VNPT-VNNIC-VN	178
3	UNICOM-HN	139
4	UNICOM	90
5	CHINANET-GD	88
6	CRTC	66
7	KORNET-KR	63
8	PE-TPSA-LACNIC	50
9	FPT-VN	47
10	CHINANET-HB	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1242
2	China	586
3	Viet Nam	299
4	South Korea	133
5	Peru	91
6	India	55
7	United States	42
8	Argentina	36
9	Brazil	33
10	Poland	30

Suspected Bot List [2014-07-26]

detection period: 2014-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 320

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
IN	27.5.182.53	India
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-07-26]

detection period: 2014-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3093
number of botnet IPs notified to network operators: 2773
number of spam blocked: 107433
recipient count of spam blocked: 2965292

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1204
2	UNICOM-HN	156
3	CHINANET-GD	140
4	VNPT-VNNIC-VN	117
5	UNICOM	100
6	CRTC	63
7	KORNET-KR	58
8	CHINANET-HB	32
9	VIETEL-VNNIC-VN	27
10	PE-TPSA-LACNIC	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1227
2	China	624
3	Viet Nam	214
4	South Korea	117
5	India	83
6	Russian Federation	76
7	Argentina	66
8	Peru	60
9	United States	52
10	Brazil	40

Suspected Bot List [2014-07-25]

detection period: 2014-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 280

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-25]

detection period: 2014-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2909
number of botnet IPs notified to network operators: 2629
number of spam blocked: 136492
recipient count of spam blocked: 3439076

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1202
2	CHINANET-GD	164
3	VNPT-VNNIC-VN	111
4	CRTC	68
5	WASU	52
6	UNICOM-GD	39
7	KORNET-KR	36
8	WASU-BB	35
9	PE-TPSA-LACNIC	29
10	FPT-VN	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1228
2	China	519
3	Viet Nam	188
4	South Korea	97
5	Russian Federation	63
6	Brazil	57
7	India	56
8	Argentina	56
9	United States	52
10	Peru	51

Suspected Bot List [2014-07-24]

detection period: 2014-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 298

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-24]

detection period: 2014-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2773
number of botnet IPs notified to network operators: 2475
number of spam blocked: 134720
recipient count of spam blocked: 3472653

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1202
2	UNICOM-HN	80
3	VNPT-VNNIC-VN	74
4	WASU	73
5	CRTC	53
6	WASU-BB	37
7	UNICOM-ZJ	34
8	CHINANET-GD	33
9	UNICOM	31
10	PE-TPSA-LACNIC	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1219
2	China	526
3	Viet Nam	122
4	Russian Federation	89
5	India	72
6	Peru	70
7	Argentina	53
8	Colombia	48
9	Brazil	47
10	South Korea	46

Suspected Bot List [2014-07-23]

detection period: 2014-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 299

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
EG	41.33.169.36	Egypt
HN	190.107.140.77	Honduras
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.132.203.42	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.94.82	United States

List from greylisting:

Botnet Statistics [2014-07-23]

detection period: 2014-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 3075
number of botnet IPs notified to network operators: 2776
number of spam blocked: 100799
recipient count of spam blocked: 2560543

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1218
2	UNICOM-ZJ	156
3	CRTC	122
4	VNPT-VNNIC-VN	88
5	WASU	81
6	WASU-BB	58
7	CHINANET-HB	57
8	UNICOM-HN	48
9	CHINANET-GD	46
10	UNICOM-GD	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1233
2	China	820
3	Viet Nam	132
4	India	76
5	Russian Federation	74
6	United States	64
7	Brazil	56
8	Argentina	56
9	Peru	52
10	South Korea	50

Suspected Bot List [2014-07-22]

detection period: 2014-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 255

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
HN	190.107.140.77	Honduras
IN	27.5.182.53	India
IN	117.245.95.252	India
IN	117.247.108.70	India
IN	203.90.114.228	India
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
NG	193.238.29.148	Nigeria
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PH	121.97.123.89	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	69.64.32.128	United States

List from greylisting:

Botnet Statistics [2014-07-22]

detection period: 2014-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2827
number of botnet IPs notified to network operators: 2572
number of spam blocked: 98755
recipient count of spam blocked: 2505816

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1231
2	CRTC	102
3	CHINANET-HB	80
4	UNICOM-HN	72
5	WASU	67
6	UNICOM	58
7	UNICOM-ZJ	52
8	CHINANET-GD	52
9	WASU-BB	45
10	VNPT-VNNIC-VN	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1239
2	China	743
3	Russian Federation	84
4	Argentina	62
5	Brazil	61
6	Viet Nam	54
7	Peru	45
8	United States	39
9	Colombia	35
10	India	33

Suspected Bot List [2014-07-21]

detection period: 2014-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 182

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	27.5.182.53	India
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	117.247.108.70	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	94.182.162.242	Iran
IT	31.199.192.20	Italy
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
NG	193.238.29.148	Nigeria
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PH	121.97.123.89	Philippines
PK	202.83.170.91	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	112.140.185.208	Singapore
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.180.186	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-21]

detection period: 2014-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2894
number of botnet IPs notified to network operators: 2713
number of spam blocked: 95485
recipient count of spam blocked: 3148670

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1186
2	CRTC	158
3	WASU	108
4	UNICOM-ZJ	100
5	CHINANET-GD	98
6	WASU-BB	67
7	VNPT-VNNIC-VN	59
8	KORNET-KR	32
9	CHINANET-HB	28
10	UNICOM	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1203
2	China	856
3	Viet Nam	105
4	Russian Federation	64
5	Brazil	54
6	United States	50
7	South Korea	49
8	India	37
9	Italy	34
10	Indonesia	32

Suspected Bot List [2014-07-20]

detection period: 2014-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 135

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.90.91.95	India
IN	117.245.95.252	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
IT	95.253.67.148	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
PK	202.83.170.91	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.180.186	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-20]

detection period: 2014-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2303
number of botnet IPs notified to network operators: 2170
number of spam blocked: 113176
recipient count of spam blocked: 3193085

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1204
2	UNICOM-ZJ	93
3	CHINANET-GD	48
4	WASU	41
5	CHINANET-HB	36
6	VNPT-VNNIC-VN	30
7	CRTC	25
8	UNICOM-GD	24
9	WASU-BB	19
10	OCN	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1211
2	China	455
3	United States	61
4	India	51
5	Russian Federation	50
6	Viet Nam	46
7	Brazil	32
8	South Korea	30
9	Indonesia	23
10	Japan	21

Suspected Bot List [2014-07-19]

detection period: 2014-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 206

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	69.64.32.128	United States
US	174.139.180.186	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-19]

detection period: 2014-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2934
number of botnet IPs notified to network operators: 2728
number of spam blocked: 92830
recipient count of spam blocked: 3004392

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1220
2	CHINANET-GD	232
3	UNICOM-HN	175
4	CRTC	148
5	UNICOM	78
6	UNICOM-GD	36
7	CHINANET-HB	34
8	BSNLNET	27
9	UNICOM-BJ	20
10	BHARTI-IN	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1227
2	China	849
3	Russian Federation	111
4	India	107
5	United States	54
6	Brazil	43
7	Indonesia	40
8	United Kingdom	35
9	Viet Nam	29
10	Iran	22

Suspected Bot List [2014-07-18]

detection period: 2014-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 134

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	122.160.239.46	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
NG	193.238.29.148	Nigeria
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	69.64.32.128	United States
US	174.139.180.186	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-18]

detection period: 2014-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2709
number of botnet IPs notified to network operators: 2575
number of spam blocked: 118986
recipient count of spam blocked: 3377124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1218
2	UNICOM-HN	224
3	UNICOM	129
4	CHINANET-GD	116
5	CRTC	69
6	UNICOM-ZJ	66
7	UNICOM-GD	33
8	CHINANET-HB	27
9	WASU	22
10	HTXX	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1226
2	China	852
3	Russian Federation	77
4	United States	61
5	Brazil	43
6	India	40
7	Indonesia	30
8	United Kingdom	23
9	Viet Nam	22
10	Thailand	18

Suspected Bot List [2014-07-17]

detection period: 2014-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CA	66.154.119.21	Canada
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	125.17.32.130	India
IN	182.72.57.212	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
NG	193.238.29.148	Nigeria
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SE	80.78.31.131	Sweden
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
UA	81.95.177.107	Ukraine
US	50.201.42.106	United States
US	68.189.142.171	United States
US	69.64.32.128	United States
US	69.85.93.70	United States
US	174.139.180.186	United States
US	199.217.113.176	United States
UZ	89.236.219.220	Uzbekistan
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-17]

detection period: 2014-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2488
number of botnet IPs notified to network operators: 2396
number of spam blocked: 95063
recipient count of spam blocked: 3115094

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1175
2	CRTC	126
3	CHINANET-GD	124
4	UNICOM-HN	113
5	UNICOM-ZJ	99
6	UNICOM	73
7	CHINANET-HB	48
8	UNICOM-GD	41
9	WASU	38
10	WASU-BB	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1184
2	China	849
3	United States	62
4	Russian Federation	49
5	Brazil	44
6	Indonesia	26
7	Italy	20
8	India	19
9	Ukraine	16
10	Thailand	14

Suspected Bot List [2014-07-16]

detection period: 2014-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
AR	200.63.164.22	Argentina
BD	180.211.180.18	Bangladesh
CA	66.154.119.21	Canada
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
EG	41.33.169.36	Egypt
GB	176.35.77.154	United Kingdom
IN	27.5.97.88	India
IN	59.90.91.95	India
IN	117.247.241.27	India
IN	122.160.239.46	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SG	116.251.209.131	Singapore
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
UA	81.95.177.107	Ukraine
US	50.201.42.106	United States
US	68.189.142.171	United States
US	199.217.113.176	United States
UZ	89.236.219.220	Uzbekistan
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-16]

detection period: 2014-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2322
number of botnet IPs notified to network operators: 2239
number of spam blocked: 113889
recipient count of spam blocked: 3014491

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1221
2	CHINANET-GD	172
3	CRTC	155
4	UNICOM-ZJ	76
5	WASU	34
6	CHINANET-JS	31
7	CHINANET-HB	29
8	UNICOM-GD	28
9	WASU-BB	15
10	UNICOM-BJ	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1231
2	China	672
3	Russian Federation	66
4	United States	37
5	Brazil	32
6	India	25
7	Indonesia	24
8	Italy	15
9	Ukraine	13
10	Turkey	11

Suspected Bot List [2014-07-15]

detection period: 2014-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 63

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CA	66.154.119.21	Canada
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
IN	59.90.91.95	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
PH	121.96.88.55	Philippines
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-15]

detection period: 2014-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2118
number of botnet IPs notified to network operators: 2055
number of spam blocked: 81968
recipient count of spam blocked: 2538511

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1204
2	UNICOM-ZJ	139
3	CRTC	127
4	CHINANET-GD	64
5	CHINANET-HB	36
6	CHINANET-JS	29
7	UNICOM-GD	22
8	WASU	19
9	UNICOM-BJ	13
10	WASU-BB	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1209
2	China	567
3	United States	38
4	Russian Federation	38
5	Brazil	27
6	India	22
7	Indonesia	16
8	Ukraine	14
9	Viet Nam	12
10	Iran	12

Suspected Bot List [2014-07-14]

detection period: 2014-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 99

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CA	66.154.119.21	Canada
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
IN	59.90.91.95	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-14]

detection period: 2014-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2147
number of botnet IPs notified to network operators: 2049
number of spam blocked: 84183
recipient count of spam blocked: 2533689

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1199
2	CRTC	128
3	CHINANET-GD	94
4	UNICOM-HN	84
5	UNICOM	28
6	CHINANET-JS	24
7	UNICOM-ZJ	21
8	UNICOM-GD	20
9	UNICOM-BJ	19
10	CHINANET-HB	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1202
2	China	553
3	Brazil	45
4	Russian Federation	38
5	United States	32
6	Indonesia	20
7	Italy	18
8	Viet Nam	17
9	Argentina	17
10	Spain	14

Suspected Bot List [2014-07-13]

detection period: 2014-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 81

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
CA	66.154.119.21	Canada
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.90.91.95	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
MX	201.132.203.42	Mexico
PH	58.69.100.234	Philippines
PH	121.96.88.55	Philippines
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	162.144.54.129	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-13]

detection period: 2014-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2398
number of botnet IPs notified to network operators: 2317
number of spam blocked: 110997
recipient count of spam blocked: 2982523

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1161
2	UNICOM-HN	169
3	CRTC	126
4	UNICOM-ZJ	110
5	CHINANET-GD	96
6	UNICOM	88
7	UNICOM-GD	26
8	VNPT-VNNIC-VN	24
9	UNICOM-BJ	19
10	CHINANET-HB	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1168
2	China	782
3	Russian Federation	54
4	United States	44
5	Viet Nam	42
6	Brazil	29
7	Indonesia	26
8	Ukraine	18
9	Thailand	18
10	India	16

Suspected Bot List [2014-07-12]

detection period: 2014-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
BD	180.211.180.18	Bangladesh
BO	190.129.58.252	Bolivia
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.90.91.95	India
IN	122.160.239.46	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	37.186.201.149	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.201.42.106	United States
US	68.189.142.171	United States
US	162.144.54.129	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-12]

detection period: 2014-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2504
number of botnet IPs notified to network operators: 2400
number of spam blocked: 103350
recipient count of spam blocked: 3073282

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1212
2	UNICOM-HN	173
3	CRTC	118
4	UNICOM-ZJ	114
5	UNICOM	89
6	CHINANET-GD	52
7	VNPT-VNNIC-VN	46
8	UNICOM-GD	33
9	WASU	18
10	VIETEL-VNNIC-VN	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1221
2	China	749
3	Viet Nam	71
4	Russian Federation	56
5	Brazil	43
6	United States	41
7	Argentina	30
8	France	20
9	Ukraine	19
10	Italy	18

Suspected Bots' IP List for July 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-07-31]
Suspected Bots IP [2014-07-30]
Suspected Bots IP [2014-07-29]
Suspected Bots IP [2014-07-28]
Suspected Bots IP [2014-07-27]
Suspected Bots IP [2014-07-26]
Suspected Bots IP [2014-07-25]
Suspected Bots IP [2014-07-24]
Suspected Bots IP [2014-07-23]
Suspected Bots IP [2014-07-22]
Suspected Bots IP [2014-07-21]
Suspected Bots IP [2014-07-20]
Suspected Bots IP [2014-07-19]
Suspected Bots IP [2014-07-18]
Suspected Bots IP [2014-07-17]
Suspected Bots IP [2014-07-16]
Suspected Bots IP [2014-07-15]
Suspected Bots IP [2014-07-14]
Suspected Bots IP [2014-07-13]
Suspected Bots IP [2014-07-12]
Suspected Bots IP [2014-07-11]
Suspected Bots IP [2014-07-10]
Suspected Bots IP [2014-07-09]
Suspected Bots IP [2014-07-08]
Suspected Bots IP [2014-07-07]
Suspected Bots IP [2014-07-06]
Suspected Bots IP [2014-07-05]
Suspected Bots IP [2014-07-04]
Suspected Bots IP [2014-07-03]
Suspected Bots IP [2014-07-02]
Suspected Bots IP [2014-07-01]

Suspected Bot List [2014-07-11]

detection period: 2014-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 139

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
AR	200.63.164.22	Argentina
BD	180.211.180.18	Bangladesh
BO	190.129.58.252	Bolivia
CL	200.111.103.74	Chile
CO	190.60.39.186	Colombia
ES	188.85.36.46	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
IN	59.90.91.95	India
IN	122.160.239.46	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IR	91.98.147.62	Iran
IT	95.227.105.203	Italy
IT	95.228.84.117	Italy
LB	194.126.140.247	Lebanon
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
NG	193.238.29.148	Nigeria
PE	190.116.62.70	Peru
PH	121.96.88.55	Philippines
PK	103.4.92.88	Pakistan
RO	92.87.210.196	Romania
RS	89.216.21.136	Serbia
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.194.34.29	United States
US	50.201.42.106	United States
US	66.240.236.121	United States
US	68.189.142.171	United States
US	162.144.54.129	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZA	196.41.205.29	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-11]

detection period: 2014-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2523
number of botnet IPs notified to network operators: 2384
number of spam blocked: 121504
recipient count of spam blocked: 3226427

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1219
2	CRTC	142
3	UNICOM-ZJ	98
4	WASU	88
5	CHINANET-GD	76
6	WASU-BB	72
7	UNICOM-GD	39
8	CHINANET-JS	23
9	VNPT-VNNIC-VN	22
10	UNICOM-BJ	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1234
2	China	695
3	Russian Federation	54
4	United States	52
5	Brazil	45
6	Viet Nam	34
7	India	32
8	Argentina	29
9	Ukraine	22
10	Indonesia	21

Suspected Bot List [2014-07-10]

detection period: 2014-07-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 303

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AL	217.24.253.251	Albania
AR	200.42.142.234	Argentina
AR	200.59.44.227	Argentina
AR	200.63.164.22	Argentina
BD	180.211.180.18	Bangladesh
CL	200.111.103.74	Chile
CL	200.111.103.77	Chile
ES	188.85.36.46	Spain
GB	176.35.77.154	United Kingdom
HN	190.107.140.77	Honduras
HT	200.80.106.38	Haiti
IN	59.90.91.95	India
IN	122.160.239.46	India
IN	122.168.124.73	India
IN	125.17.32.130	India
IN	202.62.67.250	India
IN	203.90.114.228	India
IN	210.212.97.179	India
IR	91.98.147.62	Iran
IR	94.182.162.242	Iran
IT	37.186.201.149	Italy
IT	85.40.63.218	Italy
IT	95.227.105.203	Italy
IT	95.228.84.117	Italy
KW	62.215.101.132	Kuwait
LB	194.126.140.247	Lebanon
MX	200.94.17.244	Mexico
MX	201.116.227.163	Mexico
NG	193.238.29.148	Nigeria
PE	190.116.62.70	Peru
PH	121.96.88.55	Philippines
PK	103.4.92.88	Pakistan
RO	92.87.210.196	Romania
RS	89.216.21.136	Serbia
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	193.255.143.62	Turkey
TR	193.255.143.63	Turkey
US	50.194.34.29	United States
US	50.201.42.106	United States
US	50.244.253.9	United States
US	66.240.236.121	United States
US	68.189.142.171	United States
US	162.144.54.129	United States
US	199.217.113.176	United States
VE	190.202.116.101	Venezuela
ZA	196.28.31.245	South Africa
ZA	196.41.205.29	South Africa
ZA	196.46.142.79	South Africa
ZW	41.220.28.138	Zimbabwe

List from greylisting:

Botnet Statistics [2014-07-10]

detection period: 2014-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3072
number of botnet IPs notified to network operators: 2769
number of spam blocked: 121897
recipient count of spam blocked: 3936749

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1204
2	UNICOM-ZJ	129
3	VNPT-VNNIC-VN	125
4	CRTC	125
5	WASU	104
6	CHINANET-GD	59
7	WASU-BB	53
8	KORNET-KR	36
9	AR-TEAR7-LACNIC	31
10	PE-TPSA-LACNIC	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1225
2	China	671
3	Viet Nam	193
4	South Korea	87
5	Peru	59
6	Brazil	57
7	Russian Federation	56
8	United States	55
9	Argentina	55
10	India	47