Suspected Bot List [2014-09-29]

detection period: 2014-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 127

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.16.161.35	Argentina
AR	186.22.193.175	Argentina
AR	186.22.241.100	Argentina
AR	186.23.11.128	Argentina
AR	190.120.59.156	Argentina
AR	190.124.155.72	Argentina
AU	192.94.208.254	Australia
BD	203.76.147.70	Bangladesh
BG	78.128.22.134	Bulgaria
CA	64.39.165.52	Canada
CL	186.36.104.201	Chile
CL	190.120.169.196	Chile
CL	190.208.228.186	Chile
CL	190.209.183.181	Chile
CO	200.80.43.248	Colombia
DE	89.14.252.144	Germany
EC	181.112.33.69	Ecuador
EC	181.112.150.242	Ecuador
EC	186.47.232.178	Ecuador
IN	59.185.241.3	India
IN	106.197.33.10	India
IN	117.96.22.90	India
IN	117.218.50.134	India
IN	117.230.166.148	India
IN	117.249.218.48	India
IN	210.212.85.35	India
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	79.10.134.101	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
LK	220.247.216.242	Sri Lanka
MX	201.161.130.76	Mexico
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	87.101.22.140	Poland
PL	95.160.12.231	Poland
PL	95.160.42.93	Poland
PL	95.160.68.142	Poland
PL	95.160.136.95	Poland
PL	95.160.177.29	Poland
PT	62.169.103.57	Portugal
RU	95.188.45.141	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
SE	83.209.204.114	Sweden
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	24.112.13.173	United States
US	24.112.18.252	United States
US	24.112.188.73	United States
US	24.154.236.162	United States
US	24.171.26.226	United States
US	24.183.164.80	United States
US	24.183.203.94	United States
US	24.207.213.64	United States
US	24.217.91.251	United States
US	24.217.156.57	United States
US	50.201.42.106	United States
US	65.184.46.166	United States
US	65.184.203.46	United States
US	65.185.104.25	United States
US	66.168.218.87	United States
US	66.190.171.102	United States
US	66.227.227.215	United States
US	68.114.255.8	United States
US	68.117.101.115	United States
US	68.184.61.35	United States
US	69.163.37.119	United States
US	71.8.124.217	United States
US	71.82.59.32	United States
US	71.83.75.47	United States
US	71.91.110.198	United States
US	71.95.211.121	United States
US	75.128.69.144	United States
US	75.130.192.33	United States
US	75.131.17.141	United States
US	75.135.3.237	United States
US	75.137.29.184	United States
US	75.137.69.178	United States
US	75.139.220.50	United States
US	75.141.103.25	United States
US	75.141.202.20	United States
US	96.39.187.235	United States
US	97.92.219.138	United States
US	97.92.221.89	United States
US	174.139.8.82	United States
US	204.116.60.250	United States
UZ	89.236.219.106	Uzbekistan
VE	186.24.43.3	Venezuela
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-09-29]

detection period: 2014-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2778
number of botnet IPs notified to network operators: 2651
number of spam blocked: 162112
recipient count of spam blocked: 4515876

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1199
2	CHINANET-JS	225
3	CHINANET-GD	208
4	CRTC	81
5	CHINANET-SN	79
6	CHINANET-LN	68
7	CHINANET-HB	31
8	CHINANET-HL	30
9	CHINANET-FJ	30
10	UNICOM-GD	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1207
2	China	928
3	United States	163
4	Brazil	56
5	Poland	49
6	Russian Federation	36
7	Germany	34
8	Indonesia	22
9	India	18
10	Ukraine	17

Suspected Bot List [2014-09-28]

detection period: 2014-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 125

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AM	178.78.184.66	Armenia
AR	181.16.178.73	Argentina
AR	181.177.16.75	Argentina
AR	186.22.83.14	Argentina
AR	186.22.104.45	Argentina
AR	186.22.109.44	Argentina
AR	186.22.193.175	Argentina
AR	186.23.40.87	Argentina
AR	186.23.89.47	Argentina
AR	190.6.214.160	Argentina
AR	190.11.121.53	Argentina
AR	190.13.115.240	Argentina
AR	190.106.82.139	Argentina
AR	190.115.124.30	Argentina
AR	190.221.104.213	Argentina
AR	200.50.186.43	Argentina
BD	203.76.147.70	Bangladesh
CL	181.73.75.223	Chile
CL	181.73.108.87	Chile
CL	181.74.240.93	Chile
CL	186.36.34.163	Chile
CL	186.36.118.184	Chile
CL	190.208.112.31	Chile
CL	190.209.57.20	Chile
CL	190.209.85.239	Chile
CL	190.209.141.29	Chile
CO	190.60.39.188	Colombia
CO	200.80.43.248	Colombia
DE	89.13.253.55	Germany
EG	62.117.58.109	Egypt
ES	87.111.171.16	Spain
ES	89.29.222.160	Spain
IN	59.93.122.243	India
IN	117.252.3.251	India
IN	117.254.182.167	India
IN	210.212.85.35	India
IR	91.98.147.62	Iran
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	62.18.60.8	Italy
IT	62.18.141.73	Italy
IT	79.10.5.185	Italy
IT	79.47.24.99	Italy
IT	79.47.211.126	Italy
IT	82.61.124.179	Italy
IT	95.227.105.203	Italy
LB	194.126.140.247	Lebanon
LK	220.247.216.242	Sri Lanka
MX	187.240.97.111	Mexico
PE	181.65.183.42	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
PL	95.160.68.142	Poland
PL	95.160.90.193	Poland
PL	95.160.137.41	Poland
PL	95.160.177.29	Poland
PL	95.160.208.113	Poland
PL	95.160.220.125	Poland
PL	95.160.249.96	Poland
PL	213.92.170.104	Poland
PL	213.92.184.164	Poland
PR	196.42.50.102	Puerto Rico
PT	78.130.9.45	Portugal
PT	78.130.20.250	Portugal
PT	78.130.75.91	Portugal
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	24.177.206.168	United States
US	24.207.213.64	United States
US	24.217.110.206	United States
US	24.231.226.69	United States
US	50.201.42.106	United States
US	65.28.87.9	United States
US	65.184.203.46	United States
US	65.191.250.21	United States
US	66.190.216.29	United States
US	68.114.254.192	United States
US	68.117.73.252	United States
US	68.117.101.115	United States
US	68.119.11.220	United States
US	68.184.59.98	United States
US	69.163.37.119	United States
US	71.83.75.47	United States
US	71.84.110.118	United States
US	71.91.110.198	United States
US	74.129.192.123	United States
US	74.132.159.99	United States
US	75.128.69.144	United States
US	75.131.17.141	United States
US	75.131.124.62	United States
US	75.135.3.237	United States
US	75.135.224.106	United States
US	75.139.220.50	United States
US	75.141.251.121	United States
US	75.142.145.240	United States
US	96.32.72.12	United States
US	96.39.187.235	United States
UZ	89.236.219.106	Uzbekistan
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-09-28]

detection period: 2014-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2862
number of botnet IPs notified to network operators: 2737
number of spam blocked: 148256
recipient count of spam blocked: 4146595

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1055
2	CHINANET-JS	274
3	CHINANET-GD	237
4	CRTC	139
5	CHINANET-SN	118
6	CHINANET-LN	77
7	CHINANET-FJ	37
8	CHINANET-HB	34
9	CHINANET-HL	30
10	sxtypdsn	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1132
2	Taiwan	1061
3	United States	137
4	Brazil	61
5	Poland	57
6	Germany	46
7	Russian Federation	37
8	Ukraine	28
9	Portugal	27
10	Indonesia	24

Suspected Bot List [2014-09-25]

detection period: 2014-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 120

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.16.161.39	Argentina
AR	181.177.15.97	Argentina
AR	186.22.83.14	Argentina
AR	190.13.115.240	Argentina
AR	190.55.211.151	Argentina
AR	190.106.81.87	Argentina
AR	190.106.82.139	Argentina
AR	190.110.239.79	Argentina
AR	190.120.149.213	Argentina
AR	190.220.47.252	Argentina
AR	200.41.129.112	Argentina
AR	201.250.113.116	Argentina
BD	203.76.147.70	Bangladesh
CA	64.39.165.234	Canada
CL	186.34.70.114	Chile
CL	186.37.78.148	Chile
IN	27.251.59.46	India
IN	59.93.127.102	India
IN	117.224.93.215	India
IN	117.230.230.162	India
IN	117.247.231.3	India
IN	210.212.85.35	India
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	5.168.121.71	Italy
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	79.10.110.222	Italy
IT	79.46.91.137	Italy
IT	79.52.197.210	Italy
IT	95.227.105.203	Italy
IT	176.200.174.228	Italy
IT	176.200.194.225	Italy
LK	220.247.216.242	Sri Lanka
MX	187.240.97.111	Mexico
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PL	213.92.184.164	Poland
PT	78.130.2.12	Portugal
PT	78.130.115.163	Portugal
RS	24.135.192.39	Serbia
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
SE	83.209.146.170	Sweden
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	24.159.123.174	United States
US	50.201.42.106	United States
US	65.28.87.9	United States
US	74.132.159.99	United States
US	174.139.8.82	United States
US	216.119.40.38	United States
VE	186.24.34.179	Venezuela
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2014-09-25]

detection period: 2014-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 3406
number of botnet IPs notified to network operators: 3286
number of spam blocked: 250545
recipient count of spam blocked: 4759741

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1227
2	CHINANET-GD	288
3	UNICOM-ZJ	227
4	CHINANET-JS	128
5	CRTC	121
6	CHINANET-SN	98
7	CHINANET-LN	96
8	ZJU-CN	93
9	CMNET	70
10	CHINANET-HB	52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1492
2	Taiwan	1236
3	United States	135
4	Brazil	66
5	Russian Federation	48
6	Poland	31
7	Indonesia	31
8	Viet Nam	28
9	Germany	26
10	India	22

Suspected Bot List [2014-09-24]

detection period: 2014-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 175

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.116.73.173	Argentina
AR	186.22.90.184	Argentina
AR	186.22.109.44	Argentina
AR	186.23.40.87	Argentina
AR	190.0.103.69	Argentina
AR	190.15.92.79	Argentina
AR	190.103.194.96	Argentina
AR	190.106.81.57	Argentina
AR	190.106.82.139	Argentina
AR	190.107.117.252	Argentina
AR	190.110.239.79	Argentina
AR	190.120.154.213	Argentina
AR	190.221.104.213	Argentina
AR	200.41.129.112	Argentina
BD	203.76.147.70	Bangladesh
CA	76.9.41.161	Canada
CL	181.43.1.65	Chile
CL	181.75.144.56	Chile
CL	190.208.245.179	Chile
CL	190.209.172.7	Chile
EC	186.47.232.178	Ecuador
IR	91.98.43.36	Iran
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	79.10.149.87	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
MX	201.161.130.152	Mexico
PE	190.41.51.210	Peru
PE	200.37.62.62	Peru
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PR	196.42.50.102	Puerto Rico
PT	62.169.126.218	Portugal
PT	88.210.86.104	Portugal
RO	194.102.73.103	Romania
RS	24.135.192.39	Serbia
RU	95.71.21.55	Russian Federation
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	196.202.153.146	Sudan
SE	83.209.172.46	Sweden
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	24.217.110.206	United States
US	24.247.147.181	United States
US	50.201.42.106	United States
US	66.168.149.193	United States
US	66.168.171.247	United States
US	68.119.11.220	United States
US	68.190.146.82	United States
US	71.14.60.66	United States
US	75.131.17.141	United States
US	75.135.3.237	United States
US	75.137.197.232	United States
US	75.141.251.121	United States
US	96.32.9.42	United States
US	96.37.64.29	United States

List from greylisting:

Botnet Statistics [2014-09-24]

detection period: 2014-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2925
number of botnet IPs notified to network operators: 2750
number of spam blocked: 228088
recipient count of spam blocked: 4854435

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1225
2	CHINANET-GD	194
3	UNICOM-ZJ	163
4	CRTC	130
5	CMNET	73
6	CHINANET-HB	51
7	ZJU-CN	50
8	CHINANET-JS	42
9	UNICOM-FJ	30
10	CRISSIC	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1237
2	China	920
3	United States	129
4	Brazil	73
5	India	48
6	Russian Federation	46
7	Poland	36
8	Germany	36
9	Viet Nam	33
10	Argentina	25

Suspected Bot List [2014-09-23]

detection period: 2014-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
IR	91.98.43.36	Iran
IR	91.98.234.195	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-23]

detection period: 2014-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2464
number of botnet IPs notified to network operators: 2360
number of spam blocked: 246818
recipient count of spam blocked: 4893669

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1239
2	CMNET	165
3	CRTC	134
4	UNICOM-ZJ	126
5	CHINANET-GD	121
6	ZJU-CN	58
7	CHINANET-HB	38
8	UNICOM-GD	19
9	UNICOM-BJ	14
10	CLOUDRADIUM-5	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1248
2	China	785
3	Russian Federation	48
4	United States	44
5	India	33
6	Brazil	25
7	Indonesia	22
8	Viet Nam	18
9	Italy	15
10	South Korea	14

Suspected Bot List [2014-09-22]

detection period: 2014-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 61

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-22]

detection period: 2014-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2297
number of botnet IPs notified to network operators: 2236
number of spam blocked: 216819
recipient count of spam blocked: 4547123

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1211
2	CRTC	148
3	CMNET	137
4	CHINANET-GD	112
5	UNICOM-ZJ	104
6	CHINANET-HB	44
7	ZJU-CN	42
8	UNICOM-BJ	17
9	WASU	16
10	UNICOM-SD	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1219
2	China	745
3	United States	49
4	Russian Federation	40
5	Brazil	21
6	Italy	19
7	Indonesia	14
8	Viet Nam	13
9	Iran	13
10	Hong Kong	10

Suspected Bot List [2014-09-21]

detection period: 2014-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-21]

detection period: 2014-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2035
number of botnet IPs notified to network operators: 1975
number of spam blocked: 147843
recipient count of spam blocked: 4224206

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1195
2	CHINANET-GD	125
3	CRTC	68
4	CMNET	67
5	UNICOM-ZJ	57
6	CHINANET-HB	43
7	WASU	41
8	WASU-BB	40
9	UNICOM-BJ	12
10	UNICOM-GD	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1204
2	China	534
3	Russian Federation	40
4	United States	31
5	Indonesia	19
6	Brazil	18
7	Argentina	13
8	Iran	12
9	Viet Nam	11
10	Colombia	11

Suspected Bot List [2014-09-20]

detection period: 2014-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 56

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EG	62.117.58.109	Egypt
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-20]

detection period: 2014-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1838
number of botnet IPs notified to network operators: 1782
number of spam blocked: 150630
recipient count of spam blocked: 4277065

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1168
2	CHINANET-GD	91
3	CRTC	74
4	CHINANET-HB	48
5	CMNET	46
6	WASU	24
7	WASU-BB	14
8	UNICOM-BJ	13
9	CLOUDRADIUM-5	10
10	UNICOM-SD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1174
2	China	387
3	United States	36
4	Russian Federation	33
5	Indonesia	16
6	Brazil	15
7	India	12
8	Viet Nam	10
9	Iran	10
10	Argentina	10

Suspected Bot List [2014-09-19]

detection period: 2014-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 68

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-19]

detection period: 2014-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2143
number of botnet IPs notified to network operators: 2075
number of spam blocked: 162996
recipient count of spam blocked: 4558293

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1195
2	CRTC	139
3	CMNET	127
4	CHINANET-GD	109
5	UNICOM-ZJ	87
6	CHINANET-HB	43
7	UNICOM-BJ	13
8	UNICOM-GD	9
9	HICHINA	7
10	UNICOM-SD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1202
2	China	617
3	United States	34
4	Russian Federation	31
5	Brazil	29
6	India	27
7	Indonesia	20
8	Italy	11
9	Spain	11
10	Viet Nam	10

Suspected Bot List [2014-09-18]

detection period: 2014-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 93

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EG	62.117.58.109	Egypt
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-18]

detection period: 2014-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2259
number of botnet IPs notified to network operators: 2166
number of spam blocked: 129307
recipient count of spam blocked: 3799067

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1146
2	CMNET	166
3	UNICOM-ZJ	131
4	CRTC	123
5	CHINANET-GD	90
6	UNICOM-FJ	39
7	CHINANET-HB	31
8	VNPT-VNNIC-VN	16
9	BSNLNET	15
10	UNICOM-SD	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1153
2	China	698
3	United States	62
4	India	43
5	Viet Nam	34
6	Russian Federation	30
7	Brazil	22
8	Indonesia	20
9	Italy	16
10	Iran	15

Suspected Bot List [2014-09-17]

detection period: 2014-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 88

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EG	62.117.58.109	Egypt
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-17]

detection period: 2014-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2228
number of botnet IPs notified to network operators: 2140
number of spam blocked: 110723
recipient count of spam blocked: 3292126

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1165
2	CRTC	117
3	CHINANET-GD	116
4	CMNET	110
5	UNICOM-ZJ	86
6	CHINANET-HB	33
7	VNPT-VNNIC-VN	24
8	UNICOM-SD	12
9	UNICOM-GD	12
10	UNICOM-BJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1174
2	China	594
3	United States	66
4	Russian Federation	60
5	Viet Nam	36
6	Indonesia	28
7	Brazil	25
8	India	24
9	Italy	14
10	Iran	14

Suspected Bot List [2014-09-16]

detection period: 2014-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 99

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
EG	62.117.58.109	Egypt
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
TW	180.218.34.210	Taiwan
UA	178.150.53.133	Ukraine
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-16]

detection period: 2014-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2127
number of botnet IPs notified to network operators: 2028
number of spam blocked: 254589
recipient count of spam blocked: 3830372

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1170
2	CRTC	117
3	UNICOM-ZJ	93
4	CHINANET-GD	47
5	CHINANET-HB	23
6	UNICOM-HA	10
7	WEBSTREAM	9
8	UNICOM-GD	9
9	UNICOM-BJ	9
10	CHINANET-AH	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1179
2	China	417
3	Russian Federation	108
4	United States	50
5	Brazil	29
6	India	27
7	Indonesia	25
8	Viet Nam	15
9	Iran	15
10	Ukraine	13

Suspected Bot List [2014-09-15]

detection period: 2014-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 70

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
IN	117.247.241.27	India
IN	202.56.203.62	India
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
LK	220.247.216.242	Sri Lanka
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	85.105.50.233	Turkey
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-15]

detection period: 2014-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2066
number of botnet IPs notified to network operators: 1996
number of spam blocked: 276458
recipient count of spam blocked: 4329997

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1190
2	CRTC	124
3	CHINANET-GD	118
4	UNICOM-ZJ	84
5	UNICOM-HA	19
6	CHINANET-HB	18
7	UNICOM-SD	9
8	UNICOM-BJ	9
9	CHINANET-JS	9
10	CHINANET-AH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1196
2	China	480
3	Russian Federation	63
4	United States	37
5	Indonesia	21
6	Brazil	20
7	India	17
8	Viet Nam	14
9	Iran	12
10	Spain	12

Suspected Bot List [2014-09-14]

detection period: 2014-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
IN	202.56.203.62	India
IR	91.98.234.195	Iran
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	85.105.50.233	Turkey
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-14]

detection period: 2014-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1794
number of botnet IPs notified to network operators: 1760
number of spam blocked: 273545
recipient count of spam blocked: 4542782

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1140
2	CHINANET-GD	87
3	CRTC	72
4	UNICOM-ZJ	71
5	CHINANET-HB	24
6	WASU	19
7	WASU-BB	18
8	CHINANET-AH	15
9	UNICOM-HA	12
10	UNICOM-BJ	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1147
2	China	432
3	United States	28
4	Russian Federation	28
5	Indonesia	15
6	Brazil	13
7	Iran	10
8	Hong Kong	9
9	South Korea	8
10	Poland	6

Suspected Bot List [2014-09-13]

detection period: 2014-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-13]

detection period: 2014-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1794
number of botnet IPs notified to network operators: 1751
number of spam blocked: 255250
recipient count of spam blocked: 3978366

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1164
2	CHINANET-GD	135
3	CHINANET-HB	40
4	WASU	36
5	WASU-BB	33
6	CHINANET-ZJ	27
7	CHINANET-AH	26
8	UNICOM-BJ	12
9	UNICOM-SD	10
10	UNICOM-GD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1170
2	China	391
3	Russian Federation	37
4	United States	28
5	Brazil	21
6	Indonesia	15
7	Iran	10
8	Viet Nam	9
9	Argentina	9
10	Hong Kong	7

Suspected Bot List [2014-09-12]

detection period: 2014-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 98

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-12]

detection period: 2014-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2205
number of botnet IPs notified to network operators: 2107
number of spam blocked: 261819
recipient count of spam blocked: 4187482

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1196
2	CHINANET-GD	104
3	UNICOM-ZJ	78
4	CRTC	67
5	CHINANET-HB	43
6	UNICOM-SD	30
7	VNPT-VNNIC-VN	28
8	CHINANET-ZJ	24
9	CHINANET-AH	21
10	WASU	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1207
2	China	528
3	United States	55
4	Viet Nam	48
5	India	39
6	Indonesia	23
7	Russian Federation	21
8	South Korea	21
9	France	20
10	Brazil	18

Suspected Bots' IP List for September 2014

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2014-09-30]
Suspected Bots IP [2014-09-29]
Suspected Bots IP [2014-09-28]
Suspected Bots IP [2014-09-25]
Suspected Bots IP [2014-09-24]
Suspected Bots IP [2014-09-23]
Suspected Bots IP [2014-09-22]
Suspected Bots IP [2014-09-21]
Suspected Bots IP [2014-09-20]
Suspected Bots IP [2014-09-19]
Suspected Bots IP [2014-09-18]
Suspected Bots IP [2014-09-17]
Suspected Bots IP [2014-09-16]
Suspected Bots IP [2014-09-15]
Suspected Bots IP [2014-09-14]
Suspected Bots IP [2014-09-13]
Suspected Bots IP [2014-09-12]
Suspected Bots IP [2014-09-11]
Suspected Bots IP [2014-09-10]
Suspected Bots IP [2014-09-09]
Suspected Bots IP [2014-09-08]
Suspected Bots IP [2014-09-07]
Suspected Bots IP [2014-09-06]
Suspected Bots IP [2014-09-05]
Suspected Bots IP [2014-09-04]
Suspected Bots IP [2014-09-03]
Suspected Bots IP [2014-09-02]
Suspected Bots IP [2014-09-01]

Suspected Bot List [2014-09-11]

detection period: 2014-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 97

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
BO	190.129.58.252	Bolivia
CL	186.106.16.4	Chile
EG	41.33.169.36	Egypt
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
SD	41.202.160.14	Sudan
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
UZ	89.236.219.220	Uzbekistan

List from greylisting:

Botnet Statistics [2014-09-11]

detection period: 2014-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2251
number of botnet IPs notified to network operators: 2154
number of spam blocked: 330000
recipient count of spam blocked: 5162886

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1178
2	CRTC	145
3	CHINANET-GD	138
4	UNICOM-ZJ	76
5	UNICOM-FJ	43
6	CHINANET-HB	34
7	UNICOM-BJ	24
8	CHINANET-AH	15
9	UNICOM-GD	11
10	CHINANET-ZJ	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1186
2	China	619
3	United States	75
4	India	38
5	Russian Federation	22
6	Indonesia	20
7	Brazil	20
8	Viet Nam	19
9	United Kingdom	18
10	Hong Kong	17

Suspected Bot List [2014-09-10]

detection period: 2014-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	181.112.45.2	Ecuador
EG	41.33.169.36	Egypt
IN	203.122.58.93	India
IR	194.33.124.77	Iran
IT	31.199.192.17	Italy
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
LV	85.9.201.199	Latvia
PE	200.110.35.150	Peru
PE	201.230.238.3	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
RU	95.188.112.11	Russian Federation
RU	109.167.201.26	Russian Federation
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
US	50.201.42.106	United States
UY	190.135.202.2	Uruguay

List from greylisting:

Botnet Statistics [2014-09-10]

detection period: 2014-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2071
number of botnet IPs notified to network operators: 1969
number of spam blocked: 173100
recipient count of spam blocked: 3192304

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1194
2	CRTC	131
3	UNICOM-ZJ	57
4	CHINANET-GD	33
5	CHINANET-HB	24
6	UNICOM-BJ	19
7	VNPT-VNNIC-VN	18
8	UNICOM-GD	16
9	UNICOM-SD	14
10	UNICOM-HA	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1201
2	China	407
3	India	59
4	United States	49
5	Viet Nam	30
6	Russian Federation	29
7	Indonesia	24
8	Brazil	24
9	United Kingdom	15
10	South Africa	13

Suspected Bot List [2014-09-09]

detection period: 2014-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 79

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2014-09-09]

detection period: 2014-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1672
number of botnet IPs notified to network operators: 1593
number of spam blocked: 61923
recipient count of spam blocked: 1354928

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1080
2	CRTC	145
3	UNICOM-ZJ	42
4	CHINANET-GD	19
5	UNICOM-BJ	18
6	VNPT-VNNIC-VN	12
7	UNICOM-GD	12
8	BSNLNET	11
9	BHARTI-IN	11
10	UNICOM-HA	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1085
2	China	300
3	India	52
4	United States	38
5	United Kingdom	18
6	Viet Nam	17
7	Spain	9
8	Singapore	8
9	France	8
10	Russian Federation	7

Suspected Bot List [2014-09-08]

detection period: 2014-09-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
IR	194.33.124.77	Iran
IT	31.199.192.20	Italy
IT	95.227.105.203	Italy
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-08]

detection period: 2014-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1835
number of botnet IPs notified to network operators: 1760
number of spam blocked: 137292
recipient count of spam blocked: 2409124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1156
2	CRTC	76
3	UNICOM-FJ	38
4	WASU	34
5	WASU-BB	32
6	UNICOM-BJ	17
7	CHINANET-GD	17
8	VNPT-VNNIC-VN	8
9	UNICOM-HA	8
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1162
2	China	306
3	India	41
4	Russian Federation	39
5	United States	37
6	Viet Nam	21
7	Hong Kong	18
8	Brazil	15
9	Indonesia	14
10	Malaysia	12

Suspected Bot List [2014-09-07]

detection period: 2014-09-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CA	184.107.73.239	Canada
EG	62.117.58.109	Egypt
IR	194.33.124.77	Iran
IT	31.199.192.20	Italy
PE	200.110.35.150	Peru
PH	58.69.100.234	Philippines
PK	103.4.92.88	Pakistan
SA	94.77.199.148	Saudi Arabia
TR	88.247.164.136	Turkey
US	50.201.42.106	United States

List from greylisting:

Botnet Statistics [2014-09-07]

detection period: 2014-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1685
number of botnet IPs notified to network operators: 1638
number of spam blocked: 180277
recipient count of spam blocked: 3209500

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1179
2	VNPT-VNNIC-VN	38
3	CHINANET-GD	35
4	WASU	26
5	WASU-BB	19
6	VIETEL-VNNIC-VN	10
7	FPT-VN	10
8	UNICOM-GD	8
9	KORNET-KR	7
10	UNICOM-BJ	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1188
2	China	164
3	Viet Nam	77
4	Russian Federation	27
5	United States	23
6	Brazil	16
7	South Korea	12
8	Indonesia	11
9	Hong Kong	11
10	Poland	9

Botnet Statistics for August 2014

detection period: 2014-08-01 00:00 - 2014-08-31 23:59 UTC
total number of suspected botnet IPs: 49092
number of blocked spams: 2345123
recipient count of blocked spams: 79214540

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	21708
2	China	9905
3	Viet Nam	3119
4	India	1573
5	Russian Federation	1200
6	United States	1059
7	South Korea	904
8	Peru	868
9	Argentina	814
10	Brazil	498
11	Colombia	418
12	Chile	377
13	United Kingdom	358
14	Indonesia	356
15	Italy	290
16	Mexico	249
17	Iran	238
18	Tunisia	230
19	Saudi Arabia	225
20	Poland	219
21	Israel	219
22	South Africa	197
23	Turkey	194
24	Spain	194
25	Romania	153

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1268145
2	China	389112
3	United States	72185
4	Indonesia	68660
5	Brazil	49003
6	Hong Kong	45863
7	Russian Federation	45326
8	Iran	31976
9	Poland	28537
10	Italy	23110
11	Turkey	22789
12	India	19138
13	Ukraine	18346
14	Philippines	17725
15	Saudi Arabia	16768
16	Viet Nam	16056
17	Ivory Coast	15953
18	Malaysia	15758
19	France	15363
20	Pakistan	14907
21	South Korea	13095
22	Singapore	10211
23	South Africa	9088
24	Serbia	8429
25	Thailand	7294

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are: