Suspected Bot List [2015-03-30]

detection period: 2015-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 223

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-30]

detection period: 2015-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2651
number of botnet IPs notified to network operators: 2428
number of spam blocked: 206932
recipient count of spam blocked: 6800845

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	982
2	UNICOM-GD	99
3	CHINANET-GD	41
4	UNICOM-FJ	25
5	CCCH3-4	23
6	KORNET-KR	20
7	CHINANET-HN	18
8	CBC-CM-4	14
9	RIMA	13
10	CHINANET-JS	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	993
2	China	381
3	United States	379
4	France	66
5	Spain	57
6	Canada	56
7	Turkey	48
8	South Korea	47
9	United Kingdom	46
10	Russian Federation	44

Suspected Bot List [2015-03-29]

detection period: 2015-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-29]

detection period: 2015-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1637
number of botnet IPs notified to network operators: 1603
number of spam blocked: 206601
recipient count of spam blocked: 6976356

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	984
2	UNICOM-GD	97
3	CHINANET-GD	69
4	CHINANET-JS	20
5	CHINANET-HN	14
6	CHINANET-YN	12
7	CHINANET-SN	12
8	UNICOM-BJ	9
9	CRTC	9
10	CMNET	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	991
2	China	407
3	United States	43
4	Russian Federation	25
5	Brazil	13
6	Indonesia	12
7	Viet Nam	11
8	South Korea	11
9	Hong Kong	11
10	Iran	6

Suspected Bot List [2015-03-28]

detection period: 2015-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.2.168	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-28]

detection period: 2015-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1836
number of botnet IPs notified to network operators: 1776
number of spam blocked: 205474
recipient count of spam blocked: 6986264

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1023
2	CHINANET-GD	132
3	UNICOM-GD	98
4	CHINANET-JS	30
5	CHINANET-HN	24
6	CHINANET-YN	16
7	CHINANET-SN	13
8	UNICOM-BJ	9
9	CRTC	8
10	CHINANET-HB	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1034
2	China	477
3	United States	57
4	Russian Federation	43
5	Brazil	24
6	Viet Nam	17
7	South Korea	16
8	Indonesia	14
9	India	13
10	Iran	8

Suspected Bot List [2015-03-27]

detection period: 2015-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 307

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-27]

detection period: 2015-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3367
number of botnet IPs notified to network operators: 3060
number of spam blocked: 208070
recipient count of spam blocked: 7035442

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1017
2	CHINANET-GD	149
3	UNICOM-GD	98
4	TurkTelekom	82
5	TR-TELEKOM-20051027	73
6	TR-TELEKOM-20040920	59
7	CCCH3-4	41
8	UNICOM-FJ	40
9	CHINANET-HN	29
10	CBC-CM-4	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1024
2	United States	512
3	China	478
4	Turkey	374
5	Canada	91
6	France	78
7	United Kingdom	76
8	Spain	64
9	Russian Federation	61
10	Mexico	42

Suspected Bot List [2015-03-26]

detection period: 2015-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 329

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	202.63.113.11	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-26]

detection period: 2015-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 3483
number of botnet IPs notified to network operators: 3154
number of spam blocked: 195713
recipient count of spam blocked: 6607949

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	990
2	CHINANET-GD	158
3	UNICOM-GD	76
4	CCCH3-4	44
5	IP2000-ADSL-BAS	35
6	TR-TELEKOM-20051027	34
7	TurkTelekom	32
8	CBC-CM-4	30
9	UNICOM-FJ	28
10	RIMA	28

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1004
2	United States	549
3	China	490
4	Turkey	139
5	France	120
6	Spain	100
7	Germany	84
8	Canada	84
9	United Kingdom	81
10	South Korea	61

Suspected Bot List [2015-03-25]

detection period: 2015-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 71

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	202.63.113.11	India
LV	85.9.201.199	Latvia
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-25]

detection period: 2015-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1671
number of botnet IPs notified to network operators: 1600
number of spam blocked: 200059
recipient count of spam blocked: 6302975

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1012
2	CHINANET-GD	59
3	UNICOM-FJ	24
4	UNICOM-GD	22
5	CHINANET-HN	12
6	WASU	10
7	UNICOM-BJ	8
8	CMNET	8
9	WASU-BB	7
10	KORNET-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1025
2	China	272
3	United States	87
4	Russian Federation	32
5	Viet Nam	17
6	South Korea	13
7	Indonesia	12
8	Ukraine	10
9	Italy	10
10	India	10

Suspected Bot List [2015-03-24]

detection period: 2015-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.162	Indonesia
IN	202.63.113.11	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-24]

detection period: 2015-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1589
number of botnet IPs notified to network operators: 1556
number of spam blocked: 202239
recipient count of spam blocked: 6458690

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1051
2	CHINANET-GD	84
3	UNICOM-GD	25
4	CHINANET-HN	25
5	UNICOM-FJ	15
6	WASU	11
7	CMNET	11
8	WASU-BB	9
9	KORNET-KR	8
10	UNICOM-CN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1062
2	China	310
3	United States	35
4	South Korea	14
5	Brazil	14
6	Indonesia	13
7	Viet Nam	12
8	Russian Federation	9
9	Hong Kong	9
10	India	8

Suspected Bot List [2015-03-23]

detection period: 2015-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.162	Indonesia
IN	117.211.27.10	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-23]

detection period: 2015-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1526
number of botnet IPs notified to network operators: 1492
number of spam blocked: 199294
recipient count of spam blocked: 6853401

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	968
2	CHINANET-GD	125
3	UNICOM-GD	18
4	WASU-BB	11
5	WASU	11
6	CHINANET-HN	10
7	UNICOM-FJ	9
8	CMNET	8
9	CHINANET-JS	8
10	KORNET-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	980
2	China	328
3	United States	30
4	Russian Federation	14
5	South Korea	14
6	Indonesia	14
7	Viet Nam	12
8	India	9
9	Hong Kong	9
10	Brazil	8

Suspected Bot List [2015-03-22]

detection period: 2015-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
IN	117.211.27.10	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
US	69.197.156.227	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-22]

detection period: 2015-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1499
number of botnet IPs notified to network operators: 1465
number of spam blocked: 204166
recipient count of spam blocked: 6992447

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	976
2	CHINANET-GD	117
3	UNICOM-GD	18
4	UNICOM-FJ	18
5	CHINANET-HN	11
6	WASU-BB	8
7	UNICOM-BJ	8
8	UNICOM-CN	7
9	CMNET	7
10	CHINANET-JX	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	983
2	China	298
3	Russian Federation	27
4	United States	23
5	Viet Nam	17
6	South Korea	14
7	Indonesia	13
8	Brazil	11
9	Netherlands	7
10	Poland	6

Suspected Bot List [2015-03-21]

detection period: 2015-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
IN	117.211.27.10	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-21]

detection period: 2015-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1513
number of botnet IPs notified to network operators: 1477
number of spam blocked: 210506
recipient count of spam blocked: 7237953

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1003
2	CHINANET-GD	123
3	UNICOM-FJ	22
4	UNICOM-GD	15
5	KORNET-KR	10
6	CHINANET-JX	7
7	UNICOM-SD	6
8	UNICOM-CN	6
9	CHINANET-JS	6
10	CHINANET-HN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1012
2	China	278
3	United States	33
4	South Korea	17
5	Russian Federation	15
6	Indonesia	13
7	Brazil	12
8	India	11
9	Viet Nam	10
10	Hong Kong	9

Suspected Bot List [2015-03-20]

detection period: 2015-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 66

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.163	Indonesia
IN	117.211.27.10	India
IN	202.63.113.11	India
IN	202.63.113.12	India
LV	85.9.201.199	Latvia
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TR	178.20.225.190	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-20]

detection period: 2015-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1893
number of botnet IPs notified to network operators: 1827
number of spam blocked: 207180
recipient count of spam blocked: 7047765

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1098
2	CHINANET-GD	161
3	UNICOM-FJ	73
4	VNPT-VNNIC-VN	36
5	UNICOM-GD	17
6	UNICOM-CN	17
7	KORNET-KR	15
8	CHINANET-JX	15
9	CHINANET-HN	11
10	VIETEL-VNNIC-VN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1113
2	China	412
3	Viet Nam	62
4	United States	37
5	Russian Federation	30
6	South Korea	24
7	India	19
8	Brazil	14
9	Indonesia	13
10	Turkey	12

Suspected Bot List [2015-03-19]

detection period: 2015-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
ID	203.201.172.163	Indonesia
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TR	178.20.225.190	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-19]

detection period: 2015-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1668
number of botnet IPs notified to network operators: 1585
number of spam blocked: 199539
recipient count of spam blocked: 6941436

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	912
2	CHINANET-GD	144
3	UNICOM-FJ	25
4	WASU	19
5	UNICOM-GD	10
6	CHINANET-HN	10
7	TurkTelekom	8
8	IP2000-ADSL-BAS	8
9	CBC-CM-4	8
10	SALAY-TELEKOM	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	923
2	China	328
3	United States	124
4	Turkey	31
5	France	26
6	Indonesia	19
7	Canada	16
8	Italy	14
9	Russian Federation	13
10	Germany	12

Suspected Bot List [2015-03-18]

detection period: 2015-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.2.168	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TR	178.20.225.190	Turkey
TW	180.218.34.245	Taiwan
US	66.240.236.121	United States
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.200.126	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-18]

detection period: 2015-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1560
number of botnet IPs notified to network operators: 1496
number of spam blocked: 185946
recipient count of spam blocked: 6548170

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	869
2	CHINANET-GD	125
3	UNICOM-FJ	62
4	UNICOM-GD	15
5	VNPT-VNNIC-VN	12
6	KORNET-KR	9
7	CHINANET-JS	9
8	CHINANET-HN	9
9	CHINANET-JX	8
10	WASU	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	882
2	China	340
3	United States	35
4	Russian Federation	33
5	Viet Nam	25
6	South Korea	18
7	Indonesia	17
8	India	12
9	Brazil	12
10	Iran	11

Suspected Bot List [2015-03-17]

detection period: 2015-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 251

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
IN	117.218.2.168	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TR	178.20.225.190	Turkey
TW	180.218.34.245	Taiwan
US	66.240.236.121	United States
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-17]

detection period: 2015-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2652
number of botnet IPs notified to network operators: 2401
number of spam blocked: 189566
recipient count of spam blocked: 6716020

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	859
2	CHINANET-GD	212
3	CCCH3-4	32
4	CBC-CM-4	27
5	IP2000-ADSL-BAS	24
6	UNICOM-GD	23
7	UNICOM-FJ	22
8	ATT	19
9	RIMA	18
10	NETBLK-CHARTER-NET	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	870
2	United States	564
3	China	387
4	France	82
5	Canada	78
6	Turkey	75
7	Mexico	52
8	Spain	46
9	United Kingdom	42
10	Germany	24

Suspected Bot List [2015-03-16]

detection period: 2015-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
IN	121.247.68.156	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TR	178.20.225.190	Turkey
TW	180.218.34.245	Taiwan
US	66.240.236.121	United States
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-16]

detection period: 2015-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1451
number of botnet IPs notified to network operators: 1396
number of spam blocked: 194189
recipient count of spam blocked: 6829770

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	805
2	CHINANET-GD	236
3	UNICOM-GD	14
4	CHINANET-HN	14
5	VNPT-VNNIC-VN	8
6	SALAY-TELEKOM	7
7	UNICOM-BJ	6
8	CHINANET-SH	6
9	CHINANET-JS	6
10	shinenet	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	815
2	China	361
3	United States	34
4	Viet Nam	17
5	Russian Federation	15
6	Turkey	13
7	Iran	13
8	Indonesia	13
9	India	11
10	Hong Kong	10

Suspected Bot List [2015-03-15]

detection period: 2015-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.162	Indonesia
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States

List from greylisting:

Botnet Statistics [2015-03-15]

detection period: 2015-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1563
number of botnet IPs notified to network operators: 1499
number of spam blocked: 189124
recipient count of spam blocked: 6687879

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	861
2	CHINANET-GD	211
3	UNICOM-GD	18
4	VNPT-VNNIC-VN	7
5	ZJU-CN	6
6	TELKOMNET	6
7	SALAY-TELEKOM	6
8	CHINANET-JS	6
9	WEBSTREAM	5
10	UNICOM-SD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	872
2	China	325
3	Russian Federation	62
4	United States	36
5	Indonesia	22
6	Viet Nam	17
7	Iran	15
8	India	14
9	Turkey	12
10	South Korea	12

Suspected Bot List [2015-03-14]

detection period: 2015-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	121.247.68.156	India
IN	202.63.113.11	India
IN	202.63.113.12	India
IR	212.33.219.121	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-14]

detection period: 2015-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1312
number of botnet IPs notified to network operators: 1273
number of spam blocked: 159412
recipient count of spam blocked: 5593085

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	851
2	CHINANET-GD	118
3	UNICOM-GD	19
4	CMNET	8
5	SALAY-TELEKOM	6
6	CHINANET-JS	6
7	KORNET-KR	5
8	HINET-TW	4
9	ALISOFT	4
10	YITAIFENG	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	860
2	China	225
3	United States	33
4	Indonesia	17
5	Russian Federation	14
6	Viet Nam	13
7	Ukraine	13
8	South Korea	13
9	Hong Kong	13
10	Turkey	10

Suspected Bot List [2015-03-13]

detection period: 2015-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 246

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.50.134	India
IN	121.247.68.156	India
IN	202.63.113.11	India
IN	202.63.113.12	India
IR	212.33.219.121	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TR	178.20.225.181	Turkey
TR	178.20.225.182	Turkey
TR	178.20.225.183	Turkey
TR	178.20.225.186	Turkey
TR	178.20.225.187	Turkey
TR	178.20.225.189	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.226	United States
US	69.197.156.227	United States
US	96.35.58.176	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-13]

detection period: 2015-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2275
number of botnet IPs notified to network operators: 2029
number of spam blocked: 146130
recipient count of spam blocked: 5110296

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	876
2	VNPT-VNNIC-VN	79
3	CHINANET-GD	64
4	VIETEL-VNNIC-VN	28
5	KORNET-KR	23
6	CBC-CM-4	19
7	UNICOM-GD	15
8	AR-TEAR7-LACNIC	15
9	FPT-VN	14
10	CCCH3-4	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	893
2	United States	258
3	China	189
4	Viet Nam	164
5	India	48
6	Spain	48
7	Italy	47
8	South Korea	45
9	Turkey	38
10	Brazil	37

Suspected Bot List [2015-03-12]

detection period: 2015-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 255

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.50.134	India
IN	202.63.113.11	India
IN	202.63.113.12	India
IR	212.33.219.121	Iran
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.226	United States
US	96.35.58.176	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-12]

detection period: 2015-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2976
number of botnet IPs notified to network operators: 2721
number of spam blocked: 155001
recipient count of spam blocked: 5340334

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	920
2	CHINANET-GD	89
3	UNICOM-FJ	46
4	CCCH3-4	37
5	TurkTelekom	30
6	CBC-CM-4	27
7	NETBLK-CHARTER-NET	23
8	ATT	22
9	TR-TELEKOM-20040920	20
10	KORNET-KR	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	929
2	United States	477
3	China	296
4	Turkey	118
5	France	104
6	Spain	85
7	United Kingdom	69
8	Romania	67
9	Canada	57
10	Russian Federation	55

Suspected Bots' IP List for March 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-03-31]
Suspected Bots IP [2015-03-30]
Suspected Bots IP [2015-03-29]
Suspected Bots IP [2015-03-28]
Suspected Bots IP [2015-03-27]
Suspected Bots IP [2015-03-26]
Suspected Bots IP [2015-03-25]
Suspected Bots IP [2015-03-24]
Suspected Bots IP [2015-03-23]
Suspected Bots IP [2015-03-22]
Suspected Bots IP [2015-03-21]
Suspected Bots IP [2015-03-20]
Suspected Bots IP [2015-03-19]
Suspected Bots IP [2015-03-18]
Suspected Bots IP [2015-03-17]
Suspected Bots IP [2015-03-16]
Suspected Bots IP [2015-03-15]
Suspected Bots IP [2015-03-13]
Suspected Bots IP [2015-03-12]
Suspected Bots IP [2015-03-11]
Suspected Bots IP [2015-03-10]
Suspected Bots IP [2015-03-09]
Suspected Bots IP [2015-03-08]
Suspected Bots IP [2015-03-07]
Suspected Bots IP [2015-03-06]
Suspected Bots IP [2015-03-05]
Suspected Bots IP [2015-03-04]
Suspected Bots IP [2015-03-03]
Suspected Bots IP [2015-03-02]
Suspected Bots IP [2015-03-01]

Suspected Bot List [2015-03-11]

detection period: 2015-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 537

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
IN	121.247.68.156	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.226	United States
US	96.35.58.176	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-11]

detection period: 2015-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3746
number of botnet IPs notified to network operators: 3209
number of spam blocked: 154487
recipient count of spam blocked: 5324806

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	984
2	CCCH3-4	53
3	CHINANET-GD	52
4	CBC-CM-4	43
5	KORNET-KR	37
6	TurkTelekom	35
7	NETBLK-CHARTER-NET	32
8	SINGNET-SG	28
9	UNICOM-FJ	27
10	VIS-BLOCK	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1001
2	United States	772
3	China	250
4	Turkey	131
5	France	130
6	Spain	119
7	Canada	103
8	Romania	100
9	United Kingdom	98
10	South Korea	84

Suspected Bot List [2015-03-10]

detection period: 2015-03-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.118	Ecuador
ID	119.252.166.100	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PE	200.1.183.82	Peru
PK	103.4.92.88	Pakistan
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	23.91.19.149	United States
US	23.91.19.153	United States
US	23.91.19.154	United States
US	69.197.156.226	United States
US	198.13.107.10	United States
US	198.13.110.221	United States
US	198.13.110.222	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-10]

detection period: 2015-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1284
number of botnet IPs notified to network operators: 1236
number of spam blocked: 118124
recipient count of spam blocked: 4106818

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	807
2	CHINANET-GD	37
3	UNICOM-FJ	12
4	UNICOM-BJ	12
5	ZJU-CN	8
6	UNICOM-GD	8
7	YITAIFENG	7
8	CHINANET-HN	7
9	CERNET-CN	7
10	PSYCHZ-NETWORKS	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	818
2	China	197
3	United States	47
4	Russian Federation	21
5	Indonesia	17
6	Viet Nam	15
7	India	12
8	Brazil	11
9	Hong Kong	10
10	South Korea	9

Suspected Bot List [2015-03-09]

detection period: 2015-03-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 65

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.118	Ecuador
ID	103.16.115.14	Indonesia
ID	118.97.175.114	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	222.124.202.195	Indonesia
IN	117.211.27.12	India
IN	117.218.50.134	India
IN	125.21.245.146	India
IN	202.63.113.11	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PK	103.4.92.88	Pakistan
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TR	88.250.69.146	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.226	United States
US	96.35.58.176	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-09]

detection period: 2015-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1579
number of botnet IPs notified to network operators: 1514
number of spam blocked: 141978
recipient count of spam blocked: 5048407

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1001
2	CHINANET-GD	38
3	ZJU-CN	37
4	CERNET-CN	24
5	PSYCHZ-NETWORKS	17
6	UNICOM-GD	12
7	CHINANET-HN	12
8	UNICOM-BJ	10
9	YITAIFENG	7
10	CHINANET-JS	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1012
2	China	234
3	United States	58
4	Russian Federation	32
5	Indonesia	21
6	Viet Nam	15
7	South Korea	14
8	India	14
9	Hong Kong	13
10	Italy	11

Suspected Bot List [2015-03-08]

detection period: 2015-03-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.70	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.118	Ecuador
ID	103.16.115.14	Indonesia
ID	118.97.175.114	Indonesia
ID	118.97.253.243	Indonesia
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.148.7.77	Indonesia
ID	202.150.139.134	Indonesia
ID	202.150.157.34	Indonesia
ID	222.124.202.195	Indonesia
IN	117.211.27.12	India
IN	125.21.245.146	India
IN	202.63.113.12	India
MN	203.91.119.146	Mongolia
PL	95.160.218.204	Poland
TR	88.247.164.136	Turkey
TW	180.218.34.245	Taiwan
US	69.197.156.226	United States
US	96.35.58.176	United States
US	208.73.202.157	United States
US	209.220.168.177	United States

List from greylisting:

Botnet Statistics [2015-03-08]

detection period: 2015-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1711
number of botnet IPs notified to network operators: 1647
number of spam blocked: 148884
recipient count of spam blocked: 5155900

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1057
2	ZJU-CN	59
3	CHINANET-GD	42
4	CERNET-CN	25
5	CHINANET-HN	22
6	UNICOM-GD	10
7	YITAIFENG	7
8	UNICOM-SD	7
9	VNPT-VNNIC-VN	6
10	CHINANET-JS	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1068
2	China	264
3	United States	46
4	Russian Federation	45
5	Ukraine	28
6	Viet Nam	18
7	Indonesia	18
8	Brazil	18
9	Argentina	14
10	Iran	13