Suspected Bot List [2015-12-30]

detection period: 2015-12-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.178.141.24	Argentina
AR	190.178.154.45	Argentina
RU	91.243.115.20	Russian Federation
US	198.144.189.140	United States
US	198.144.189.149	United States
US	204.44.73.136	United States

List from greylisting:

country code	IP address	Country
AR	181.28.108.9	Argentina
AR	181.189.200.200	Argentina
AR	190.172.93.145	Argentina
AR	190.244.101.160	Argentina
AR	190.245.241.46	Argentina
AR	200.41.178.234	Argentina
AZ	91.135.253.230	Azerbaijan
BD	103.242.219.226	Bangladesh
BO	186.27.127.129	Bolivia
CM	197.159.0.70	Cameroon
CR	201.202.246.162	Costa Rica
ES	46.26.47.190	Spain
ES	83.51.175.110	Spain
ES	87.235.177.251	Spain
ES	213.140.59.128	Spain
IN	59.88.154.129	India
IN	59.97.54.27	India
IN	60.254.56.45	India
IN	110.227.77.76	India
IN	117.193.207.195	India
IN	117.196.44.131	India
IN	117.205.170.173	India
IN	117.239.43.85	India
IN	117.242.98.224	India
IN	117.248.220.31	India
IN	122.161.147.204	India
IN	122.163.10.27	India
IN	122.169.167.176	India
IN	122.170.182.151	India
IN	182.75.86.185	India
IN	202.62.78.202	India
IN	203.192.212.52	India
IN	203.194.109.142	India
IQ	130.193.208.49	Iraq
MN	150.129.143.76	Mongolia
PK	202.83.174.68	Pakistan
RO	188.212.193.18	Romania
RU	94.45.174.13	Russian Federation
TR	195.226.221.151	Turkey
TR	213.248.166.32	Turkey
TW	123.194.241.175	Taiwan
US	104.129.60.136	United States
US	104.223.2.202	United States
US	104.223.82.32	United States

Botnet Statistics [2015-12-30]

detection period: 2015-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2563
number of botnet IPs notified to network operators: 2513
number of spam blocked: 126536
recipient count of spam blocked: 370476

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	576
2	CHINANET-ZJ-JH	286
3	CHINANET-ZJ	230
4	CHINANET-SC	202
5	UNICOM-AH	195
6	CHINANET-JS	192
7	CHINANET-HB	186
8	WASU	119
9	VNPT-VNNIC-VN	58
10	WASU-BB	50

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2194
2	Viet Nam	115
3	United States	37
4	India	27
5	Russian Federation	23
6	Brazil	20
7	Ukraine	10
8	Indonesia	9
9	Argentina	9
10	Taiwan	8

Suspected Bot List [2015-12-29]

detection period: 2015-12-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AR	190.52.35.50	Argentina
AR	190.244.101.160	Argentina
AR	200.41.178.234	Argentina
AR	200.41.193.50	Argentina
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
BW	168.167.142.218	Botswana
CM	197.159.0.70	Cameroon
CN	122.49.30.56	China
CR	201.202.246.162	Costa Rica
EG	82.129.237.5	Egypt
ID	202.62.10.210	Indonesia
ID	202.162.214.116	Indonesia
IN	117.218.50.134	India
IN	117.239.29.114	India
IN	117.253.53.73	India
IN	122.169.165.230	India
IN	122.177.100.97	India
IN	180.92.171.30	India
IN	203.192.212.52	India
IN	203.194.109.142	India
KZ	77.245.110.111	Kazakhstan
MX	177.230.33.219	Mexico
MX	187.177.172.13	Mexico
MX	200.77.157.235	Mexico
PH	58.71.96.62	Philippines
PH	122.3.165.156	Philippines
RS	94.189.182.229	Serbia
RS	188.2.62.253	Serbia
RU	5.19.168.150	Russian Federation
TR	46.2.229.198	Turkey
US	69.163.35.211	United States
US	72.174.248.250	United States
US	104.129.60.136	United States
US	104.223.82.32	United States
US	192.163.236.251	United States
US	192.185.2.231	United States

Botnet Statistics [2015-12-29]

detection period: 2015-12-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2391
number of botnet IPs notified to network operators: 2352
number of spam blocked: 126273
recipient count of spam blocked: 376351

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	490
2	CHINANET-ZJ-JH	241
3	CHINANET-ZJ	231
4	UNICOM-AH	180
5	CHINANET-SC	177
6	CHINANET-HB	159
7	CHINANET-JS	157
8	WASU	131
9	UNICOM-ZJ	99
10	WASU-BB	83

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2073
2	United States	58
3	Viet Nam	36
4	Brazil	29
5	Russian Federation	24
6	South Korea	13
7	India	13
8	Indonesia	12
9	Hong Kong	10
10	Germany	9

Suspected Bot List [2015-12-28]

detection period: 2015-12-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AM	46.241.209.57	Armenia
AR	186.57.65.1	Argentina
AR	186.59.179.6	Argentina
AR	190.182.198.212	Argentina
AR	190.193.12.217	Argentina
AR	190.244.101.160	Argentina
AR	201.176.16.4	Argentina
BG	217.9.224.140	Bulgaria
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
BR	187.45.216.248	Brazil
CR	201.202.246.162	Costa Rica
CZ	85.71.191.194	Czech Republic
DZ	197.116.134.189	Algeria
ES	87.235.177.251	Spain
IN	117.218.1.148	India
IN	117.222.152.95	India
IN	122.162.165.243	India
IN	122.173.167.187	India
IN	122.173.227.207	India
IN	150.107.214.112	India
IN	203.192.212.52	India
MX	189.198.232.194	Mexico
PL	46.175.107.227	Poland
RO	92.84.44.198	Romania
RO	109.98.160.167	Romania
RU	5.19.168.150	Russian Federation
US	69.163.35.211	United States
US	104.129.60.136	United States
US	104.223.2.202	United States
US	162.144.34.20	United States
US	162.144.104.214	United States
US	192.185.4.117	United States
US	192.254.250.169	United States

Botnet Statistics [2015-12-28]

detection period: 2015-12-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2560
number of botnet IPs notified to network operators: 2524
number of spam blocked: 122842
recipient count of spam blocked: 251896

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	448
2	CHINANET-JS	295
3	CHINANET-ZJ	251
4	CHINANET-ZJ-JH	193
5	CHINANET-SC	193
6	UNICOM-AH	192
7	CHINANET-HB	158
8	UNICOM-ZJ	133
9	WASU	132
10	WASU-BB	73

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2200
2	Viet Nam	97
3	United States	40
4	Brazil	27
5	Russian Federation	23
6	India	11
7	Germany	10
8	Turkey	8
9	Taiwan	7
10	Romania	7

*

Suspected Bot List [2015-12-27]

detection period: 2015-12-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.149.16.44	Mexico
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AO	197.149.148.122	Angola
AR	186.38.47.137	Argentina
AR	190.7.8.246	Argentina
AR	190.244.101.160	Argentina
AZ	91.135.252.180	Azerbaijan
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
EG	193.227.49.83	Egypt
ID	202.62.10.210	Indonesia
IN	117.216.218.193	India
IN	117.221.229.13	India
IN	117.239.43.85	India
IN	117.245.17.149	India
IN	122.176.175.158	India
IN	203.192.212.52	India
IN	203.194.109.142	India
KZ	2.132.84.6	Kazakhstan
KZ	77.245.110.111	Kazakhstan
MX	189.169.181.21	Mexico
PH	58.71.96.62	Philippines
UA	193.107.130.153	Ukraine
US	50.61.143.141	United States
US	71.14.212.34	United States
US	104.223.2.202	United States
US	104.223.82.32	United States
US	162.144.104.214	United States
UZ	213.230.94.8	Uzbekistan

Botnet Statistics [2015-12-27]

detection period: 2015-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1762
number of botnet IPs notified to network operators: 1731
number of spam blocked: 112869
recipient count of spam blocked: 250562

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	227
2	CHINANET-ZJ-JH	197
3	CHINANET-ZJ	173
4	CHINANET-JS	163
5	CHINANET-SC	160
6	CHINANET-HB	141
7	UNICOM-AH	119
8	CHINANET-GD	99
9	UNICOM-ZJ	83
10	WASU	68

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1522
2	Viet Nam	66
3	United States	25
4	Russian Federation	13
5	India	11
6	Kazakhstan	10
7	Ukraine	9
8	Brazil	9
9	Indonesia	6
10	Taiwan	5

*

Suspected Bot List [2015-12-26]

detection period: 2015-12-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.149.36.9	Mexico
MX	189.149.57.207	Mexico
MX	189.150.160.40	Mexico
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
BO	186.27.127.129	Bolivia
IN	59.94.168.142	India
IN	112.133.246.22	India
IN	117.207.144.79	India
IN	117.218.100.192	India
IN	122.163.51.81	India
IN	122.165.113.251	India
IN	182.70.14.4	India
IN	182.71.155.226	India
IN	203.194.109.142	India
MX	187.177.172.13	Mexico
US	104.223.2.202	United States
US	104.223.82.32	United States
US	104.223.95.162	United States
US	162.144.104.214	United States
US	198.154.231.36	United States

Botnet Statistics [2015-12-26]

detection period: 2015-12-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1240
number of botnet IPs notified to network operators: 1218
number of spam blocked: 101285
recipient count of spam blocked: 310582

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	235
2	CHINANET-ZJ-JH	186
3	CHINANET-ZJ	138
4	CHINANET-HB	123
5	CHINANET-SC	90
6	CHINANET-JS	84
7	UNICOM-AH	76
8	CHINANET-GD	59
9	VNPT-VNNIC-VN	32
10	CHINANET-ZJ-SX	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1031
2	Viet Nam	70
3	United States	24
4	Ukraine	13
5	India	13
6	Taiwan	8
7	Russian Federation	8
8	Mexico	7
9	Germany	5
10	Brazil	5

*

Suspected Bot List [2015-12-25]

detection period: 2015-12-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	187.147.236.47	Mexico
MX	189.149.36.9	Mexico
TR	77.223.159.39	Turkey
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AR	186.137.171.30	Argentina
AR	186.158.224.227	Argentina
AR	190.244.101.160	Argentina
AR	200.122.104.248	Argentina
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
CR	201.202.246.162	Costa Rica
ID	202.62.10.210	Indonesia
IN	125.16.12.146	India
IN	203.192.212.52	India
US	71.30.221.85	United States
US	104.223.2.202	United States
US	104.223.82.32	United States
US	162.144.104.214	United States

Botnet Statistics [2015-12-25]

detection period: 2015-12-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1580
number of botnet IPs notified to network operators: 1560
number of spam blocked: 98511
recipient count of spam blocked: 366234

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	242
2	CHINANET-ZJ-JH	188
3	CHINANET-JS	174
4	CHINANET-ZJ	145
5	CHINANET-HB	120
6	CHINANET-SC	115
7	UNICOM-AH	97
8	WASU	69
9	UNICOM-ZJ	55
10	WASU-BB	50

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1340
2	United States	47
3	Taiwan	41
4	Viet Nam	37
5	Brazil	15
6	Russian Federation	10
7	South Korea	9
8	Hong Kong	6
9	Thailand	5
10	India	5

*

Suspected Bot List [2015-12-24]

detection period: 2015-12-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	187.147.236.47	Mexico
MX	189.149.28.239	Mexico
TR	77.223.159.39	Turkey
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	190.19.173.193	Argentina
AR	190.191.114.104	Argentina
AR	200.50.184.214	Argentina
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
CR	201.202.246.162	Costa Rica
EG	196.204.215.17	Egypt
ES	87.235.177.251	Spain
GE	92.51.116.144	Republic Of Georgia
IN	27.251.204.18	India
IN	122.167.153.148	India
IN	122.170.48.166	India
IN	122.178.171.158	India
IN	203.192.212.52	India
MX	187.177.50.130	Mexico
MX	189.242.148.128	Mexico
PH	58.71.96.62	Philippines
TM	217.174.232.8	Turkmenistan
UA	176.121.242.159	Ukraine
US	104.129.60.136	United States
US	104.223.2.202	United States
US	104.223.82.32	United States
US	108.167.189.39	United States
US	162.144.34.20	United States
VN	220.231.127.15	Viet Nam

Botnet Statistics [2015-12-24]

detection period: 2015-12-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2077
number of botnet IPs notified to network operators: 2045
number of spam blocked: 114685
recipient count of spam blocked: 365797

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	306
2	CHINANET-ZJ-JH	268
3	CHINANET-JS	266
4	CHINANET-SC	202
5	CHINANET-ZJ	146
6	CHINANET-HB	141
7	UNICOM-AH	140
8	WASU	85
9	UNICOM-ZJ	66
10	WASU-BB	62

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1779
2	Viet Nam	59
3	United States	38
4	Taiwan	37
5	Russian Federation	25
6	Brazil	15
7	Turkey	9
8	South Korea	9
9	India	9
10	Ukraine	7

*

Suspected Bot List [2015-12-23]

detection period: 2015-12-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
MX	187.141.103.121	Mexico
MX	187.147.232.75	Mexico
MX	189.149.28.239	Mexico
MX	189.150.157.136	Mexico
MX	189.150.164.54	Mexico
US	198.144.189.140	United States
US	198.144.189.149	United States
US	204.44.73.136	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	181.29.103.143	Argentina
AR	186.182.189.41	Argentina
AR	190.19.173.193	Argentina
BO	186.27.126.130	Bolivia
BO	186.27.127.129	Bolivia
ES	80.28.234.89	Spain
IN	59.89.149.209	India
IN	106.220.37.110	India
IN	117.223.196.230	India
IN	117.244.15.243	India
IN	122.174.227.80	India
IN	182.72.139.50	India
IN	203.194.109.142	India
MA	41.137.20.4	Morocco
MX	187.157.25.194	Mexico
MX	201.134.173.226	Mexico
PH	58.71.96.62	Philippines
RO	109.100.209.98	Romania
RS	94.189.210.111	Serbia
US	64.127.29.202	United States
US	104.129.60.136	United States
US	104.223.2.202	United States
US	104.223.82.32	United States
US	162.144.104.214	United States

Botnet Statistics [2015-12-23]

detection period: 2015-12-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2424
number of botnet IPs notified to network operators: 2390
number of spam blocked: 90076
recipient count of spam blocked: 369794

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ-JH	369
2	CHINANET-AH	346
3	CHINANET-SC	248
4	CHINANET-JS	236
5	CHINANET-HB	189
6	WASU	165
7	CHINANET-ZJ	160
8	UNICOM-AH	149
9	UNICOM-ZJ	136
10	WASU-BB	79

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2204
2	Viet Nam	41
3	United States	39
4	Taiwan	17
5	Russian Federation	15
6	Brazil	15
7	Mexico	9
8	India	8
9	South Korea	7
10	Turkey	5

Suspected Bot List [2015-12-22]

detection period: 2015-12-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
MX	187.141.103.121	Mexico
MX	189.150.157.136	Mexico
US	198.144.189.140	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AE	83.110.237.143	Arab Emirates
AL	213.207.33.19	Albania
AR	190.19.173.193	Argentina
AR	190.122.78.4	Argentina
DZ	41.200.26.118	Algeria
IN	106.216.153.136	India
IN	117.201.156.123	India
IN	122.172.70.72	India
IN	122.178.202.38	India
IN	122.183.241.170	India
IN	182.71.1.202	India
IN	202.142.103.35	India
MO	113.52.113.233	Macau
MX	187.157.25.194	Mexico
MX	187.175.218.80	Mexico
MX	201.134.173.226	Mexico
PK	39.33.122.208	Pakistan
RO	92.87.209.242	Romania
US	24.112.99.238	United States
US	104.223.2.202	United States
US	162.144.104.214	United States
US	162.212.131.145	United States
US	192.185.83.186	United States

Botnet Statistics [2015-12-22]

detection period: 2015-12-22 00:00-23:59 UTC
total number of suspected botnet IPs: 2441
number of botnet IPs notified to network operators: 2413
number of spam blocked: 67131
recipient count of spam blocked: 298063

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	356
2	CHINANET-JS	334
3	CHINANET-SC	256
4	CHINANET-HB	199
5	UNICOM-ZJ	196
6	CHINANET-ZJ-JH	196
7	CHINANET-ZJ	183
8	UNICOM-AH	156
9	WASU	150
10	WASU-BB	107

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2245
2	United States	41
3	Taiwan	31
4	Viet Nam	26
5	India	12
6	Russian Federation	11
7	Brazil	8
8	Mexico	7
9	Thailand	6
10	Ukraine	5

*

Suspected Bot List [2015-12-21]

detection period: 2015-12-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
MX	187.141.103.121	Mexico
MX	189.150.157.136	Mexico

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
CD	197.231.253.122	Democratic Republic Of Congo
CZ	217.198.113.97	Czech Republic
ES	87.235.177.251	Spain
IN	117.220.6.15	India
IN	122.163.54.59	India
IN	122.174.16.77	India
MX	187.163.169.153	Mexico
MX	187.237.63.162	Mexico
MX	201.134.173.226	Mexico
RO	109.96.244.164	Romania
TR	93.89.226.70	Turkey
US	104.223.2.202	United States
US	162.144.34.20	United States
US	192.163.227.233	United States
US	198.57.247.134	United States
US	198.154.231.36	United States

Botnet Statistics [2015-12-21]

detection period: 2015-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1978
number of botnet IPs notified to network operators: 1958
number of spam blocked: 23177
recipient count of spam blocked: 125879

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	386
2	CHINANET-JS	319
3	CHINANET-SC	199
4	CHINANET-HB	152
5	CHINANET-ZJ	147
6	UNICOM-AH	143
7	WASU	114
8	UNICOM-ZJ	114
9	CHINANET-ZJ-JH	103
10	WASU-BB	68

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1817
2	Viet Nam	38
3	Taiwan	28
4	United States	24
5	Russian Federation	6
6	Indonesia	6
7	Brazil	6
8	Mexico	5
9	India	5
10	Hong Kong	4

*

Suspected Bot List [2015-12-20]

detection period: 2015-12-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.150.157.136	Mexico

List from greylisting:

country code	IP address	Country
AR	181.22.53.155	Argentina
CM	197.159.0.70	Cameroon
CZ	217.198.113.97	Czech Republic
IN	122.163.2.115	India
IN	122.170.64.90	India
MA	41.137.20.4	Morocco
ME	178.175.107.229	Montenegro
MX	187.237.63.162	Mexico
MX	201.134.173.226	Mexico
UA	193.107.130.254	Ukraine
US	104.223.2.202	United States
US	104.223.95.162	United States
US	162.144.63.185	United States
US	162.144.104.214	United States
US	192.185.143.234	United States
US	192.185.176.188	United States
US	198.154.245.70	United States

Botnet Statistics [2015-12-20]

detection period: 2015-12-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1668
number of botnet IPs notified to network operators: 1649
number of spam blocked: 33250
recipient count of spam blocked: 365604

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	304
2	CHINANET-ZJ-JH	247
3	CHINANET-JS	217
4	CHINANET-SC	136
5	CHINANET-ZJ	118
6	CHINANET-HB	118
7	UNICOM-AH	115
8	UNICOM-ZJ	80
9	WASU	58
10	WASU-BB	48

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1528
2	Viet Nam	37
3	United States	21
4	Taiwan	6
5	Ukraine	5
6	India	5
7	Hong Kong	5
8	Brazil	5
9	Turkey	4
10	Thailand	4

*

Suspected Bot List [2015-12-19]

detection period: 2015-12-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.149.55.64	Mexico

List from greylisting:

country code	IP address	Country
AR	181.168.104.82	Argentina
AR	200.68.64.189	Argentina
BG	87.252.184.233	Bulgaria
IN	59.99.4.195	India
IN	59.145.124.110	India
IN	61.1.94.67	India
IN	122.179.84.166	India
IN	182.64.204.78	India
IN	182.75.61.34	India
KE	195.202.72.107	Kenya
MX	201.134.173.226	Mexico
PH	203.82.45.167	Philippines
PK	39.36.165.14	Pakistan
RS	178.149.214.64	Serbia
TW	106.1.86.129	Taiwan
US	104.223.2.202	United States

Botnet Statistics [2015-12-19]

detection period: 2015-12-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1222
number of botnet IPs notified to network operators: 1204
number of spam blocked: 29643
recipient count of spam blocked: 320456

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	221
2	CHINANET-ZJ-JH	155
3	CHINANET-JS	151
4	CHINANET-ZJ	99
5	UNICOM-AH	97
6	CHINANET-SC	89
7	CHINANET-GD	86
8	CHINANET-HB	82
9	VNPT-VNNIC-VN	43
10	VIETEL-VNNIC-VN	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1024
2	Viet Nam	80
3	United States	18
4	Russian Federation	11
5	India	11
6	Iran	6
7	Turkey	5
8	Thailand	5
9	Brazil	5
10	Ukraine	4

*

Suspected Bot List [2015-12-18]

detection period: 2015-12-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	187.155.241.233	Mexico
MX	189.149.45.12	Mexico
MX	189.149.246.19	Mexico

List from greylisting:

country code	IP address	Country
BG	217.9.224.141	Bulgaria
CD	197.231.253.122	Democratic Republic Of Congo
ES	87.235.177.251	Spain
MX	201.134.173.226	Mexico
US	104.223.2.202	United States

Botnet Statistics [2015-12-18]

detection period: 2015-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 644
number of botnet IPs notified to network operators: 635
number of spam blocked: 106878
recipient count of spam blocked: 334860

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	125
2	CHINANET-GD	89
3	CHINANET-JS	66
4	WASU-BB	57
5	CHINANET-AH	38
6	CHINANET-ZJ	29
7	CHINANET-HB	23
8	UNICOM-AH	22
9	CHINANET-SC	22
10	VNPT-VNNIC-VN	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	531
2	Viet Nam	38
3	United States	17
4	Taiwan	6
5	Mexico	5
6	Brazil	4
7	Thailand	3
8	Russian Federation	3
9	Hong Kong	3
10	Colombia	3

*

Suspected Bot List [2015-12-17]

detection period: 2015-12-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AZ	91.135.246.17	Azerbaijan
BD	180.211.162.210	Bangladesh
BG	217.9.224.140	Bulgaria
CZ	217.198.113.97	Czech Republic
ES	87.235.177.251	Spain
IN	59.177.233.137	India
IN	112.133.246.19	India
IN	117.223.33.219	India
IN	120.60.8.95	India
IN	122.172.113.6	India
IN	122.175.34.148	India
IN	122.252.249.67	India
MX	201.134.173.226	Mexico
MZ	41.220.35.21	Mozambique
PK	119.152.255.66	Pakistan
US	104.223.2.202	United States
US	192.163.248.87	United States

Botnet Statistics [2015-12-17]

detection period: 2015-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1460
number of botnet IPs notified to network operators: 1443
number of spam blocked: 171976
recipient count of spam blocked: 292080

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	216
2	CHINANET-AH	193
3	UNICOM-AH	125
4	CHINANET-HB	123
5	CHINANET-GD	122
6	WASU	119
7	CHINANET-ZJ	106
8	CHINANET-SC	100
9	WASU-BB	86
10	UNICOM-ZJ	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1320
2	Viet Nam	37
3	United States	15
4	India	9
5	Turkey	7
6	Russian Federation	6
7	Brazil	6
8	Taiwan	5
9	Poland	5
10	Hong Kong	5

*

Suspected Bot List [2015-12-16]

detection period: 2015-12-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.149.123.6	Mexico

List from greylisting:

country code	IP address	Country
AR	181.1.211.19	Argentina
AR	190.48.36.159	Argentina
AZ	91.135.247.81	Azerbaijan
CM	197.159.0.70	Cameroon
CN	202.108.255.227	China
ES	46.24.29.12	Spain
ES	87.235.177.251	Spain
IN	1.39.19.197	India
IN	59.92.96.208	India
IN	115.118.252.4	India
IN	117.253.181.45	India
IN	122.168.185.51	India
RO	109.99.232.86	Romania
TR	46.2.202.18	Turkey
US	47.61.194.145	United States
US	50.116.123.183	United States
US	192.185.82.156	United States

Botnet Statistics [2015-12-16]

detection period: 2015-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1861
number of botnet IPs notified to network operators: 1842
number of spam blocked: 112113
recipient count of spam blocked: 308527

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	287
2	CHINANET-AH	238
3	CHINANET-GD	197
4	CHINANET-ZJ-JH	160
5	CHINANET-SC	147
6	CHINANET-ZJ	134
7	CHINANET-HB	133
8	UNICOM-AH	117
9	UNICOM-ZJ	103
10	WASU	73

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1722
2	Viet Nam	38
3	United States	12
4	Turkey	9
5	India	8
6	Brazil	6
7	Poland	5
8	Ukraine	4
9	Kazakhstan	4
10	Taiwan	3

*

Suspected Bot List [2015-12-15]

detection period: 2015-12-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	187.141.103.121	Mexico
MX	189.149.123.6	Mexico

List from greylisting:

country code	IP address	Country
AR	186.62.17.158	Argentina
AR	190.19.180.112	Argentina
AR	191.82.171.135	Argentina
AR	200.122.104.248	Argentina
ES	87.235.177.251	Spain
ES	88.1.75.62	Spain
HK	150.129.40.237	Hong Kong
IN	120.63.136.46	India
IN	122.172.26.15	India
IN	122.176.26.64	India
IN	150.129.204.176	India
IN	203.145.168.207	India
PL	188.146.5.4	Poland
US	162.144.34.20	United States
US	162.144.104.214	United States
US	192.163.247.190	United States
US	192.185.82.156	United States
VN	220.231.127.8	Viet Nam

Botnet Statistics [2015-12-15]

detection period: 2015-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2215
number of botnet IPs notified to network operators: 2195
number of spam blocked: 115118
recipient count of spam blocked: 342322

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	332
2	CHINANET-AH	291
3	CHINANET-SC	194
4	CHINANET-ZJ-JH	181
5	UNICOM-ZJ	160
6	CHINANET-GD	156
7	CHINANET-HB	148
8	CHINANET-ZJ	146
9	UNICOM-AH	132
10	WASU	127

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2021
2	Viet Nam	70
3	Russian Federation	16
4	United States	14
5	Taiwan	10
6	Brazil	10
7	Poland	7
8	India	6
9	Turkey	5
10	Indonesia	5

*

Suspected Bot List [2015-12-14]

detection period: 2015-12-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	68.168.184.6	United States

List from greylisting:

country code	IP address	Country
AR	181.164.2.75	Argentina
AR	181.231.247.34	Argentina
AR	190.103.225.98	Argentina
AR	190.191.110.78	Argentina
BR	177.184.87.33	Brazil
BR	191.37.206.44	Brazil
EC	181.199.79.177	Ecuador
HK	103.254.148.111	Hong Kong
IN	45.112.15.153	India
IN	112.133.232.67	India
IN	117.212.220.86	India
IN	120.61.176.214	India
IN	122.174.214.77	India
IN	210.212.215.35	India
MN	122.201.18.147	Mongolia
PK	39.34.34.41	Pakistan
RO	109.99.104.52	Romania
RS	178.149.3.214	Serbia
US	50.116.123.183	United States
US	162.144.104.214	United States
US	162.213.39.238	United States
US	192.163.247.190	United States
US	192.185.82.156	United States
ZA	129.232.130.48	South Africa
ZA	169.1.79.112	South Africa

Botnet Statistics [2015-12-14]

detection period: 2015-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2120
number of botnet IPs notified to network operators: 2094
number of spam blocked: 109170
recipient count of spam blocked: 200148

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	374
2	CHINANET-AH	293
3	CHINANET-GD	227
4	CHINANET-HB	157
5	CHINANET-ZJ-JH	156
6	UNICOM-ZJ	139
7	UNICOM-AH	131
8	CHINANET-SC	131
9	WASU	102
10	CHINANET-ZJ	100

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1990
2	Viet Nam	47
3	United States	12
4	Taiwan	12
5	India	7
6	Brazil	6
7	Argentina	4
8	Turkey	3
9	Russian Federation	3
10	Bulgaria	3

*

Suspected Bot List [2015-12-13]

detection period: 2015-12-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.158.253.220	Argentina
IN	116.72.216.10	India
IN	117.204.169.115	India
IN	122.163.149.147	India
MN	122.201.18.147	Mongolia
MX	189.195.227.214	Mexico
MX	189.244.140.158	Mexico
PL	77.79.199.92	Poland
RO	109.103.53.194	Romania
TW	123.194.241.175	Taiwan
TW	180.177.39.158	Taiwan
US	162.144.100.188	United States
US	162.144.104.214	United States
US	192.185.82.156	United States

Botnet Statistics [2015-12-13]

detection period: 2015-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2215
number of botnet IPs notified to network operators: 2201
number of spam blocked: 158031
recipient count of spam blocked: 1642397

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	586
2	CHINANET-AH	304
3	CHINANET-JS	245
4	CHINANET-HB	186
5	CHINANET-ZJ-JH	145
6	UNICOM-AH	142
7	CHINANET-SC	95
8	CHINANET-ZJ	92
9	UNICOM-ZJ	80
10	CHINANET-GD	74

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1492
2	Taiwan	592
3	Viet Nam	66
4	United States	10
5	Ukraine	4
6	Russian Federation	4
7	India	4
8	Indonesia	4
9	United Kingdom	4
10	Turkey	3

*

Suspected Bot List [2015-12-12]

detection period: 2015-12-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina

List from greylisting:

country code	IP address	Country
AR	24.232.242.243	Argentina
AR	186.59.64.213	Argentina
AR	190.175.21.49	Argentina
AR	190.176.150.212	Argentina
AZ	91.135.255.133	Azerbaijan
IN	117.216.129.96	India
IN	117.220.208.8	India
IN	117.222.4.145	India
IN	122.174.73.147	India
IN	122.176.104.108	India
IN	182.56.105.39	India
IN	182.64.121.158	India
IN	182.72.168.122	India
MN	122.201.18.147	Mongolia
MX	187.177.172.13	Mexico
PK	39.52.37.84	Pakistan
TR	213.142.146.29	Turkey
UA	89.252.38.235	Ukraine
US	50.61.143.205	United States
US	68.190.32.125	United States
US	108.167.133.25	United States
US	162.144.104.214	United States
US	192.163.247.190	United States
US	192.163.248.87	United States
US	192.185.2.54	United States
US	192.185.81.108	United States
US	192.185.82.156	United States
US	200.12.232.6	United States
US	216.172.173.36	United States

Botnet Statistics [2015-12-12]

detection period: 2015-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2010
number of botnet IPs notified to network operators: 1981
number of spam blocked: 203101
recipient count of spam blocked: 1195766

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	341
2	CHINANET-AH	292
3	CHINANET-ZJ-JH	238
4	CHINANET-HB	171
5	UNICOM-AH	138
6	CHINANET-ZJ	138
7	CHINANET-JS	138
8	CHINANET-GD	112
9	CHINANET-SD	86
10	CHINANET-SC	61

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1414
2	Taiwan	343
3	Viet Nam	93
4	United States	38
5	Ukraine	16
6	India	15
7	Brazil	11
8	Russian Federation	8
9	Kazakhstan	6
10	Germany	6

*

Suspected Bots' IP List for November 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-11-01]
Suspected Bots IP [2015-11-02]
Suspected Bots IP [2015-11-03]
Suspected Bots IP [2015-11-04]
Suspected Bots IP [2015-11-05]
Suspected Bots IP [2015-11-06]
Suspected Bots IP [2015-11-07]
Suspected Bots IP [2015-11-08]
Suspected Bots IP [2015-11-09]
Suspected Bots IP [2015-11-10]
Suspected Bots IP [2015-11-11]
Suspected Bots IP [2015-11-12]
Suspected Bots IP [2015-11-13]
Suspected Bots IP [2015-11-14]
Suspected Bots IP [2015-11-15]
Suspected Bots IP [2015-11-16]
Suspected Bots IP [2015-11-17]
Suspected Bots IP [2015-11-18]
Suspected Bots IP [2015-11-19]
Suspected Bots IP [2015-11-20]
Suspected Bots IP [2015-11-21]
Suspected Bots IP [2015-11-22]
Suspected Bots IP [2015-11-23]
Suspected Bots IP [2015-11-24]
Suspected Bots IP [2015-11-25]
Suspected Bots IP [2015-11-26]
Suspected Bots IP [2015-11-27]
Suspected Bots IP [2015-11-28]
Suspected Bots IP [2015-11-29]
Suspected Bots IP [2015-11-30]

Suspected Bot List [2015-12-11]

detection period: 2015-12-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina

List from greylisting:

country code	IP address	Country
AR	190.55.142.231	Argentina
CO	190.60.207.187	Colombia
IN	112.133.244.22	India
IN	120.56.51.28	India
IN	122.170.20.43	India
IN	182.69.53.233	India
MX	177.225.131.179	Mexico
RO	81.12.170.22	Romania
TR	213.142.146.29	Turkey
US	162.144.104.214	United States
US	200.12.232.6	United States

Botnet Statistics [2015-12-11]

detection period: 2015-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1790
number of botnet IPs notified to network operators: 1778
number of spam blocked: 179572
recipient count of spam blocked: 336209

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	300
2	CHINANET-ZJ-JH	228
3	CHINANET-SC	156
4	CHINANET-HB	146
5	CHINANET-ZJ	141
6	WASU	134
7	UNICOM-AH	133
8	CHINANET-GD	88
9	WASU-BB	86
10	CHINANET-SD	62

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1625
2	Viet Nam	64
3	Russian Federation	17
4	United States	13
5	India	8
6	Taiwan	7
7	Turkey	7
8	Thailand	6
9	Brazil	6
10	Ukraine	4

*

Suspected Bot List [2015-12-10]

detection period: 2015-12-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina

List from greylisting:

country code	IP address	Country
AR	181.29.89.23	Argentina
AR	190.17.133.118	Argentina
AR	190.50.36.203	Argentina
BH	185.36.91.159	Bahrain
ES	87.235.177.251	Spain
ES	89.6.239.131	Spain
GR	37.6.241.156	Greece
IN	115.97.227.127	India
IN	115.113.249.2	India
IN	115.118.22.93	India
IN	116.74.71.196	India
IN	117.55.245.156	India
IN	122.162.117.9	India
IN	122.173.89.39	India
IN	182.65.252.153	India
IN	182.65.254.142	India
IN	182.72.153.186	India
IN	203.109.124.46	India
KE	197.254.17.158	Kenya
ME	178.175.20.230	Montenegro
MX	177.241.205.135	Mexico
MX	189.171.43.197	Mexico
RO	92.82.7.92	Romania
RS	178.148.238.160	Serbia
US	162.144.104.214	United States
US	192.163.247.190	United States

Botnet Statistics [2015-12-10]

detection period: 2015-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1981
number of botnet IPs notified to network operators: 1954
number of spam blocked: 182274
recipient count of spam blocked: 1317232

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	389
2	CHINANET-GD	192
3	CHINANET-AH	183
4	CHINANET-ZJ-JH	166
5	CHINANET-SC	116
6	CHINANET-JS	111
7	CHINANET-HB	105
8	UNICOM-ZJ	104
9	WASU	96
10	CHINANET-ZJ	91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1431
2	Taiwan	390
3	Viet Nam	41
4	India	15
5	United States	12
6	Turkey	10
7	Ukraine	7
8	Brazil	7
9	Thailand	6
10	Poland	6

*