Suspected Bot List [2015-04-29]

detection period: 2015-04-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	117.218.175.121	India
IN	125.23.200.38	India
MX	201.116.227.163	Mexico
PH	58.69.100.238	Philippines
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-29]

detection period: 2015-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1476
number of botnet IPs notified to network operators: 1431
number of spam blocked: 119742
recipient count of spam blocked: 3684484

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1008
2	CHINANET-GD	46
3	CHINANET-JS	28
4	UNICOM-SD	25
5	CMNET	8
6	UNICOM-GD	7
7	CHINANET-HN	7
8	CHINANET-JX	5
9	GZGH	4
10	GIANT	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1014
2	China	223
3	United States	48
4	Russian Federation	21
5	Indonesia	15
6	India	12
7	Brazil	11
8	Iran	8
9	Viet Nam	6
10	Thailand	6

Suspected Bot List [2015-04-28]

detection period: 2015-04-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 70

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
MX	201.116.227.163	Mexico
PE	200.110.35.150	Peru
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-28]

detection period: 2015-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1702
number of botnet IPs notified to network operators: 1632
number of spam blocked: 123168
recipient count of spam blocked: 3822554

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1015
2	CHINANET-GD	46
3	UNICOM-SD	19
4	UNICOM-GD	16
5	CMNET	16
6	VNPT-VNNIC-VN	15
7	CHINANET-JS	10
8	CHINANET-HN	10
9	WASU-BB	7
10	MX-USCV4-LACNIC	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1024
2	China	239
3	Russian Federation	58
4	United States	50
5	Viet Nam	32
6	Indonesia	20
7	India	19
8	Ukraine	13
9	Brazil	13
10	Chile	12

Suspected Bot List [2015-04-27]

detection period: 2015-04-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
MX	201.116.227.163	Mexico
PH	58.69.100.238	Philippines
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-27]

detection period: 2015-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1592
number of botnet IPs notified to network operators: 1548
number of spam blocked: 130928
recipient count of spam blocked: 4179781

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1057
2	UNICOM-GD	42
3	CHINANET-GD	42
4	CHINANET-JS	29
5	UNICOM-SD	17
6	CHINANET-ZJ-HZ	12
7	CMNET	10
8	WASU	9
9	WASU-BB	8
10	XINWEI-NET	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1066
2	China	275
3	United States	44
4	Russian Federation	21
5	South Korea	12
6	Brazil	11
7	Turkey	9
8	Iran	9
9	Indonesia	9
10	Viet Nam	8

Suspected Bot List [2015-04-26]

detection period: 2015-04-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
MX	201.116.227.163	Mexico
PH	58.69.100.238	Philippines
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-26]

detection period: 2015-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1607
number of botnet IPs notified to network operators: 1568
number of spam blocked: 144232
recipient count of spam blocked: 4484020

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1089
2	UNICOM-GD	48
3	CHINANET-GD	43
4	CMNET	10
5	WASU	9
6	UNICOM-BJ	8
7	CHINANET-SH	8
8	XINWEI-NET	7
9	CHINANET-ZJ-HZ	7
10	VNPT-VNNIC-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1099
2	China	241
3	United States	45
4	Russian Federation	36
5	Brazil	17
6	Viet Nam	11
7	Iran	11
8	Poland	9
9	Indonesia	9
10	Ukraine	7

Suspected Bot List [2015-04-21]

detection period: 2015-04-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 214

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-21]

detection period: 2015-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2240
number of botnet IPs notified to network operators: 2026
number of spam blocked: 65542
recipient count of spam blocked: 2076083

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	566
2	CHINANET-GD	154
3	CHINANET-JS	48
4	UNICOM-GD	40
5	CBC-CM-4	30
6	UNICOM-CN	29
7	CCCH3-4	25
8	UNICOM-SD	23
9	JUMPSTART-5	17
10	ATT	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	579
2	United States	467
3	China	445
4	Canada	45
5	Mexico	43
6	Russian Federation	38
7	South Korea	38
8	Spain	31
9	United Kingdom	30
10	Turkey	26

Suspected Bot List [2015-04-20]

detection period: 2015-04-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	114.141.49.251	Indonesia
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-20]

detection period: 2015-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1791
number of botnet IPs notified to network operators: 1756
number of spam blocked: 145644
recipient count of spam blocked: 4639670

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1151
2	CHINANET-GD	177
3	UNICOM-CN	28
4	CHINANET-JS	15
5	VNPT-VNNIC-VN	13
6	UNICOM-GD	9
7	CMNET	9
8	CHINANET-HN	9
9	WASU-BB	8
10	WASU	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1164
2	China	366
3	United States	42
4	Viet Nam	22
5	Indonesia	13
6	Ukraine	11
7	Russian Federation	11
8	Brazil	11
9	South Korea	10
10	Italy	9

Suspected Bot List [2015-04-19]

detection period: 2015-04-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	114.141.49.251	Indonesia
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	59.90.140.150	India
IN	125.23.200.38	India
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-19]

detection period: 2015-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1515
number of botnet IPs notified to network operators: 1487
number of spam blocked: 150658
recipient count of spam blocked: 4817230

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1122
2	CHINANET-GD	73
3	UNICOM-GD	12
4	UNICOM-CN	11
5	WASU	9
6	ALISOFT	8
7	VNPT-VNNIC-VN	7
8	CHINANET-JS	6
9	CHINANET-HN	6
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1129
2	China	207
3	United States	33
4	Viet Nam	13
5	Indonesia	11
6	Russian Federation	10
7	Brazil	10
8	Iran	9
9	South Korea	8
10	Hong Kong	6

Suspected Bot List [2015-04-18]

detection period: 2015-04-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	117.240.116.226	India
IN	125.23.200.38	India
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-18]

detection period: 2015-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1550
number of botnet IPs notified to network operators: 1519
number of spam blocked: 149291
recipient count of spam blocked: 4711774

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1115
2	CHINANET-GD	84
3	UNICOM-CN	19
4	UNICOM-GD	14
5	CMNET	13
6	CHINANET-JS	8
7	CHINANET-HN	7
8	shinenet	6
9	ALISOFT	6
10	NETEON	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1120
2	China	245
3	United States	29
4	Russian Federation	17
5	Indonesia	12
6	Viet Nam	10
7	South Korea	9
8	Iran	7
9	Hong Kong	7
10	Brazil	6

Suspected Bot List [2015-04-17]

detection period: 2015-04-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 56

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-17]

detection period: 2015-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1931
number of botnet IPs notified to network operators: 1875
number of spam blocked: 123474
recipient count of spam blocked: 3763909

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1180
2	CHINANET-GD	234
3	UNICOM-SD	22
4	CHINANET-JS	22
5	UNICOM-CN	20
6	UNICOM-GD	8
7	DXTNET	8
8	UNICOM-BJ	7
9	KORNET-KR	6
10	CMNET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1185
2	China	419
3	Russian Federation	46
4	United States	27
5	India	18
6	Indonesia	17
7	South Korea	15
8	Viet Nam	13
9	Chile	10
10	Turkey	8

Suspected Bot List [2015-04-16]

detection period: 2015-04-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	125.23.200.38	India
PH	58.69.100.238	Philippines
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-16]

detection period: 2015-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2065
number of botnet IPs notified to network operators: 1960
number of spam blocked: 121228
recipient count of spam blocked: 3756430

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1146
2	CHINANET-GD	119
3	VNPT-VNNIC-VN	94
4	UNICOM-CN	50
5	CHINANET-JS	36
6	VIETEL-VNNIC-VN	34
7	KORNET-KR	28
8	WASU	13
9	AR-TEAR7-LACNIC	13
10	PE-TPSA-LACNIC	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1156
2	China	360
3	Viet Nam	162
4	South Korea	57
5	United States	29
6	Argentina	27
7	Peru	25
8	Russian Federation	22
9	India	19
10	Indonesia	15

Suspected Bot List [2015-04-15]

detection period: 2015-04-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 171

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	125.23.200.38	India
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-15]

detection period: 2015-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 2196
number of botnet IPs notified to network operators: 2025
number of spam blocked: 125893
recipient count of spam blocked: 4025271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1116
2	CHINANET-GD	103
3	VNPT-VNNIC-VN	44
4	CHINANET-JS	31
5	UNICOM-CN	29
6	UNICOM-SD	27
7	KORNET-KR	24
8	AR-TEAR7-LACNIC	20
9	UNICOM-GD	13
10	PE-PETD2-LACNIC	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1126
2	China	339
3	United States	91
4	Viet Nam	81
5	South Korea	47
6	Argentina	43
7	Mexico	30
8	Peru	29
9	Colombia	28
10	Brazil	25

Suspected Bot List [2015-04-14]

detection period: 2015-04-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 149

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-14]

detection period: 2015-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2318
number of botnet IPs notified to network operators: 2169
number of spam blocked: 120669
recipient count of spam blocked: 3746533

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1094
2	CHINANET-GD	97
3	CHINANET-JS	34
4	UNICOM-SD	19
5	UNICOM-CN	14
6	UNICOM-GD	13
7	KORNET-KR	13
8	CHINANET-HN	13
9	WASU-BB	12
10	CHINANET-AH	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1102
2	China	365
3	United States	141
4	Russian Federation	67
5	Brazil	32
6	Spain	31
7	South Korea	30
8	Turkey	29
9	India	25
10	Mexico	24

Suspected Bot List [2015-04-13]

detection period: 2015-04-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 230

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-13]

detection period: 2015-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3085
number of botnet IPs notified to network operators: 2855
number of spam blocked: 138668
recipient count of spam blocked: 4452959

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1097
2	CHINANET-GD	158
3	CHINANET-JS	39
4	UNICOM-SD	35
5	UNICOM-CN	25
6	BHARTI-IN	25
7	UNICOM-GD	23
8	TR-TELEKOM-20040920	23
9	IP2000-ADSL-BAS	23
10	TR-TELEKOM-20051027	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1108
2	China	488
3	United States	316
4	Turkey	100
5	Russian Federation	86
6	India	77
7	United Kingdom	66
8	France	56
9	Spain	53
10	Canada	42

Suspected Bot List [2015-04-12]

detection period: 2015-04-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	119.18.154.222	Indonesia
ID	202.137.230.220	Indonesia
ID	203.161.24.12	Indonesia
ID	203.201.172.162	Indonesia
ID	223.165.7.34	Indonesia
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-12]

detection period: 2015-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1866
number of botnet IPs notified to network operators: 1827
number of spam blocked: 141882
recipient count of spam blocked: 4472598

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1102
2	CHINANET-GD	189
3	UNICOM-ZJ	76
4	WASU-BB	31
5	WASU	27
6	CHINANET-HN	20
7	CHINANET-JS	17
8	CHINANET-SX	12
9	CHINANET-AH	11
10	CHINANET-LN	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1107
2	China	531
3	United States	35
4	Russian Federation	19
5	Indonesia	18
6	Viet Nam	17
7	South Korea	15
8	Hong Kong	10
9	Brazil	9
10	Iran	8

Suspected Bots' IP List for April 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-04-30]
Suspected Bots IP [2015-04-29]
Suspected Bots IP [2015-04-28]
Suspected Bots IP [2015-04-27]
Suspected Bots IP [2015-04-26]
Suspected Bots IP [2015-04-21]
Suspected Bots IP [2015-04-20]
Suspected Bots IP [2015-04-19]
Suspected Bots IP [2015-04-18]
Suspected Bots IP [2015-04-17]
Suspected Bots IP [2015-04-16]
Suspected Bots IP [2015-04-15]
Suspected Bots IP [2015-04-14]
Suspected Bots IP [2015-04-13]
Suspected Bots IP [2015-04-12]
Suspected Bots IP [2015-04-11]
Suspected Bots IP [2015-04-10]
Suspected Bots IP [2015-04-09]
Suspected Bots IP [2015-04-08]
Suspected Bots IP [2015-04-07]
Suspected Bots IP [2015-04-06]
Suspected Bots IP [2015-04-05]
Suspected Bots IP [2015-04-04]
Suspected Bots IP [2015-04-03]
Suspected Bots IP [2015-04-02]
Suspected Bots IP [2015-04-01]

Suspected Bot List [2015-04-11]

detection period: 2015-04-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.161.24.12	Indonesia
ID	203.201.172.162	Indonesia
ID	223.165.7.34	Indonesia
IN	117.218.50.134	India
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
PK	202.142.171.70	Pakistan
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-11]

detection period: 2015-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1808
number of botnet IPs notified to network operators: 1760
number of spam blocked: 136769
recipient count of spam blocked: 4272191

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1090
2	CHINANET-GD	173
3	UNICOM-ZJ	37
4	CHINANET-HN	18
5	WASU-BB	14
6	WASU	14
7	CHINANET-YN	13
8	CHINANET-SN	11
9	UNICOM-GD	10
10	KORNET-KR	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1094
2	China	441
3	Russian Federation	38
4	United States	32
5	Indonesia	18
6	Viet Nam	16
7	South Korea	16
8	India	12
9	Iran	11
10	Hong Kong	10

Suspected Bot List [2015-04-10]

detection period: 2015-04-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	213.172.86.5	Azerbaijan
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.161.24.12	Indonesia
ID	203.201.172.162	Indonesia
ID	223.165.7.34	Indonesia
IN	117.218.50.134	India
IN	125.23.200.38	India
IN	219.65.189.63	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-10]

detection period: 2015-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 2071
number of botnet IPs notified to network operators: 1966
number of spam blocked: 154466
recipient count of spam blocked: 5077978

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1071
2	CHINANET-GD	74
3	CHINANET-HN	18
4	VNPT-VNNIC-VN	16
5	CHINANET-JS	15
6	UNICOM-GD	14
7	UNICOM-CN	11
8	KORNET-KR	11
9	CHINANET-SN	11
10	CHINANET-HB	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1078
2	China	330
3	United States	137
4	Turkey	47
5	France	47
6	Russian Federation	44
7	Viet Nam	32
8	India	27
9	South Korea	21
10	Italy	20

Suspected Bot List [2015-04-09]

detection period: 2015-04-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 198

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CA	174.142.16.194	Canada
DZ	193.194.69.114	Algeria
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PH	58.69.100.238	Philippines
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-09]

detection period: 2015-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2812
number of botnet IPs notified to network operators: 2614
number of spam blocked: 182480
recipient count of spam blocked: 5379514

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1079
2	CHINANET-GD	137
3	UNICOM-CN	48
4	CHINANET-JS	36
5	CHINANET-HN	25
6	CCCH3-4	23
7	KORNET-KR	22
8	CHINANET-YN	18
9	CBC-CM-4	18
10	CHINANET-LN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1091
2	China	509
3	United States	288
4	Russian Federation	82
5	Canada	50
6	South Korea	46
7	France	46
8	Spain	42
9	Turkey	38
10	India	35

Suspected Bot List [2015-04-08]

detection period: 2015-04-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 151

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CA	174.142.16.194	Canada
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
CZ	88.100.0.235	Czech Republic
DZ	193.194.69.114	Algeria
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	125.23.200.38	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	174.45.152.26	United States

List from greylisting:

Botnet Statistics [2015-04-08]

detection period: 2015-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 2402
number of botnet IPs notified to network operators: 2251
number of spam blocked: 177543
recipient count of spam blocked: 5332140

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1058
2	CHINANET-GD	108
3	CHINANET-JS	35
4	UNICOM-CN	27
5	CCCH3-4	20
6	CBC-CM-4	19
7	CHINANET-HN	17
8	CHINANET-SN	12
9	CHINANET-JX	12
10	CMNET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1075
2	China	401
3	United States	293
4	Canada	42
5	Russian Federation	35
6	Turkey	33
7	Spain	31
8	South Korea	25
9	Arab Emirates	24
10	United Kingdom	23

Suspected Bot List [2015-04-07]

detection period: 2015-04-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 184

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States

List from greylisting:

Botnet Statistics [2015-04-07]

detection period: 2015-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 2459
number of botnet IPs notified to network operators: 2275
number of spam blocked: 182706
recipient count of spam blocked: 5693990

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1023
2	CHINANET-GD	91
3	UNICOM-CN	70
4	CCCH3-4	20
5	VNPT-VNNIC-VN	19
6	IP2000-ADSL-BAS	15
7	CBC-CM-4	15
8	UNICOM-GD	13
9	TR-TELEKOM-20051027	13
10	RIMA	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1031
2	China	346
3	United States	238
4	Russian Federation	91
5	France	61
6	Turkey	56
7	Spain	54
8	India	39
9	Canada	39
10	Viet Nam	32

Suspected Bot List [2015-04-06]

detection period: 2015-04-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 159

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	27.5.197.53	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States

List from greylisting:

Botnet Statistics [2015-04-06]

detection period: 2015-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 2335
number of botnet IPs notified to network operators: 2176
number of spam blocked: 164979
recipient count of spam blocked: 5260301

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1113
2	CHINANET-GD	35
3	CCCH3-4	30
4	TurkTelekom	19
5	CBC-CM-4	19
6	JUMPSTART-5	17
7	TR-TELEKOM-20051027	16
8	TR-TELEKOM-20040920	14
9	UNICOM-GD	13
10	SINGNET-SG	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1126
2	United States	411
3	China	200
4	Turkey	75
5	Russian Federation	45
6	South Korea	31
7	Indonesia	28
8	India	25
9	Canada	25
10	Spain	24

Suspected Bot List [2015-04-05]

detection period: 2015-04-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.110.35.150	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States

List from greylisting:

Botnet Statistics [2015-04-05]

detection period: 2015-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1550
number of botnet IPs notified to network operators: 1521
number of spam blocked: 178128
recipient count of spam blocked: 5676447

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1098
2	UNICOM-GD	100
3	CHINANET-GD	27
4	XINWEI-NET	17
5	UNICOM-CN	17
6	CHINANET-HN	11
7	CRTC	6
8	CHINANET-SN	5
9	CHINANET-JX	5
10	AR-TEAR7-LACNIC	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1108
2	China	260
3	United States	33
4	Russian Federation	21
5	Indonesia	16
6	Hong Kong	9
7	Iran	6
8	Brazil	6
9	Argentina	6
10	Japan	5

Suspected Bot List [2015-04-04]

detection period: 2015-04-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	27.5.197.53	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.110.35.150	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States

List from greylisting:

Botnet Statistics [2015-04-04]

detection period: 2015-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 1630
number of botnet IPs notified to network operators: 1577
number of spam blocked: 188684
recipient count of spam blocked: 6082996

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1112
2	UNICOM-GD	95
3	UNICOM-CN	16
4	CHINANET-GD	16
5	XINWEI-NET	15
6	CHINANET-HN	11
7	VNPT-VNNIC-VN	9
8	AR-TEAR7-LACNIC	9
9	CRTC	8
10	CHINANET-SN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1122
2	China	253
3	United States	31
4	Russian Federation	22
5	Indonesia	17
6	Viet Nam	16
7	Argentina	16
8	Turkey	12
9	Mexico	12
10	India	12

Suspected Bot List [2015-04-03]

detection period: 2015-04-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 308

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AZ	213.172.86.5	Azerbaijan
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	202.137.230.220	Indonesia
ID	203.201.172.162	Indonesia
IN	27.5.197.53	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
PE	200.110.35.150	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States

List from greylisting:

Botnet Statistics [2015-04-03]

detection period: 2015-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 3454
number of botnet IPs notified to network operators: 3146
number of spam blocked: 192853
recipient count of spam blocked: 6365090

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1118
2	UNICOM-GD	98
3	CCCH3-4	47
4	ADSLSTREAMYX	41
5	TurkTelekom	39
6	TR-TELEKOM-20051027	37
7	CHINANET-GD	35
8	IP2000-ADSL-BAS	34
9	UNICOM-CN	32
10	KORNET-KR	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1140
2	United States	651
3	China	342
4	Turkey	150
5	France	107
6	Canada	80
7	Malaysia	79
8	Russian Federation	78
9	South Korea	67
10	India	58

Botnet Statistics for March 2015

detection period: 2015-03-01 00:00 - 2015-03-31 23:59 UTC
total number of suspected botnet IPs: 42166
number of blocked spams: 5418321
recipient count of blocked spams: 186482807

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	21411
2	China	5489
3	United States	3170
4	Viet Nam	1215
5	Turkey	847
6	Spain	667
7	Russian Federation	636
8	France	591
9	South Korea	509
10	Canada	479
11	India	464
12	United Kingdom	444
13	Mexico	419
14	Argentina	402
15	Italy	384
16	Germany	358
17	Brazil	333
18	Romania	279
19	Colombia	219
20	Ukraine	214
21	Poland	184
22	Australia	155
23	Portugal	151
24	Chile	151
25	Peru	142

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	3149745
2	China	598134
3	United States	273944
4	Indonesia	169883
5	Viet Nam	92408
6	Russian Federation	81470
7	Iran	75144
8	Bangladesh	71618
9	Brazil	67351
10	South Korea	66710
11	Turkey	64469
12	Australia	58571
13	Hong Kong	56475
14	UNKNOWN	53251
15	Malaysia	52632
16	India	45404
17	Italy	37392
18	Ivory Coast	34008
19	Saudi Arabia	33047
20	Ecuador	29442
21	Ukraine	29046
22	Poland	26332
23	Mongolia	25373
24	Serbia	22897
25	Romania	22848

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2015-04-02]

detection period: 2015-04-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 115

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
IN	27.5.197.53	India
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States

List from greylisting:

Botnet Statistics [2015-04-02]

detection period: 2015-04-02 00:00-23:59 UTC
total number of suspected botnet IPs: 2233
number of botnet IPs notified to network operators: 2118
number of spam blocked: 210216
recipient count of spam blocked: 6937826

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1107
2	UNICOM-GD	71
3	CCCH3-4	35
4	CHINANET-GD	33
5	CBC-CM-4	29
6	UNICOM-FJ	13
7	CHINANET-HN	13
8	XINWEI-NET	11
9	VIS-BLOCK	11
10	ATT	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1119
2	United States	416
3	China	320
4	Russian Federation	35
5	Turkey	31
6	France	27
7	Indonesia	16
8	Hong Kong	16
9	Brazil	14
10	South Korea	13

Suspected Bot List [2015-04-01]

detection period: 2015-04-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	180.211.193.190	Bangladesh
BD	203.76.147.62	Bangladesh
CI	213.136.105.210	Ivory Coast
CI	213.136.105.212	Ivory Coast
EC	201.219.60.86	Ecuador
EC	201.219.60.118	Ecuador
ID	202.137.230.127	Indonesia
ID	202.137.230.134	Indonesia
ID	203.201.172.162	Indonesia
MN	203.91.119.146	Mongolia
MX	200.94.141.149	Mexico
PE	200.1.183.82	Peru
TW	180.218.34.245	Taiwan
US	69.197.156.227	United States
US	96.35.58.176	United States
US	209.220.168.177	United States

List from greylisting: