Suspected Bot List [2015-09-29]

detection period: 2015-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.172.10.95	Argentina
CN	202.142.16.70	China
DZ	105.109.96.4	Algeria
ES	87.235.177.251	Spain
ID	116.90.165.12	Indonesia
ID	118.82.14.254	Indonesia
IN	112.133.214.251	India
IN	117.203.240.108	India
IN	122.168.63.21	India
KZ	176.223.75.80	Kazakhstan
MR	41.188.89.38	Mauritania
MX	177.242.235.67	Mexico
MX	189.202.66.43	Mexico
MX	189.220.197.249	Mexico
PH	124.107.173.16	Philippines
TR	213.248.168.22	Turkey

Botnet Statistics [2015-09-29]

detection period: 2015-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1850
number of botnet IPs notified to network operators: 1834
number of spam blocked: 187122
recipient count of spam blocked: 2463897

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	906
2	UNICOM-AH	355
3	CHINANET-HB	197
4	CHINANET-GD	58
5	VNPT-VNNIC-VN	41
6	UNICOM-GD	16
7	CHINANET-JS	16
8	CHINANET-HN	16
9	UNICOM-BJ	13
10	CHINANET-SX	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	909
2	China	762
3	Viet Nam	75
4	United States	21
5	Brazil	12
6	India	8
7	Germany	7
8	Russian Federation	4
9	Mexico	4
10	France	4

Suspected Bot List [2015-09-28]

detection period: 2015-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	131.100.182.194	Argentina
AR	181.27.131.219	Argentina
AR	190.14.157.161	Argentina
AR	190.179.184.217	Argentina
AR	190.182.133.40	Argentina
CO	190.7.134.170	Colombia
DZ	197.118.50.105	Algeria
EG	81.10.34.107	Egypt
ES	87.235.177.251	Spain
HN	181.210.32.24	Honduras
ID	103.30.87.85	Indonesia
ID	150.107.248.146	Indonesia
ID	203.160.62.90	Indonesia
ID	203.176.183.170	Indonesia
IL	94.159.252.174	Israel
IN	27.4.229.230	India
IN	59.98.100.193	India
IN	117.194.113.98	India
IN	117.241.231.0	India
IN	122.161.204.235	India
IN	122.162.242.61	India
IN	122.169.180.133	India
IN	125.16.18.69	India
KZ	5.34.51.113	Kazakhstan
KZ	92.46.10.218	Kazakhstan
MA	212.217.2.8	Morocco
MX	177.239.123.142	Mexico
MX	187.172.157.239	Mexico
MX	201.152.8.55	Mexico
PK	39.54.28.142	Pakistan
RO	92.82.17.228	Romania
TW	180.176.90.119	Taiwan
US	192.232.192.251	United States
US	216.172.166.181	United States
UY	167.59.48.150	Uruguay

Botnet Statistics [2015-09-28]

detection period: 2015-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1845
number of botnet IPs notified to network operators: 1810
number of spam blocked: 200682
recipient count of spam blocked: 2721255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	692
2	UNICOM-AH	428
3	CHINANET-HB	224
4	CHINANET-SD	73
5	VNPT-VNNIC-VN	51
6	CHINANET-GD	49
7	CHINANET-HN	14
8	CHINANET-SX	12
9	CHINANET-SN	11
10	CHINANET-HA	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	905
2	Taiwan	695
3	Viet Nam	93
4	Russian Federation	14
5	India	14
6	United States	13
7	Turkey	11
8	Ukraine	8
9	Israel	6
10	Indonesia	6

Suspected Bot List [2015-09-27]

detection period: 2015-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.169.118.105	Argentina
AR	186.59.8.163	Argentina
AR	190.247.186.10	Argentina
AR	200.50.178.128	Argentina
IL	94.159.252.174	Israel
IN	112.133.229.11	India
IN	117.222.172.89	India
IN	202.91.75.179	India
MA	212.217.2.8	Morocco
MX	187.156.141.67	Mexico
MX	187.233.251.179	Mexico
MX	189.199.78.35	Mexico
PK	39.32.48.93	Pakistan
RO	109.101.87.247	Romania
RS	188.2.108.26	Serbia
US	74.129.170.198	United States
US	104.47.124.249	United States
US	104.47.126.241	United States
UY	167.59.2.245	Uruguay
UY	167.59.38.166	Uruguay
UY	186.48.39.229	Uruguay

Botnet Statistics [2015-09-27]

detection period: 2015-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2575
number of botnet IPs notified to network operators: 2554
number of spam blocked: 258376
recipient count of spam blocked: 3500912

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1048
2	UNICOM-AH	458
3	CHINANET-HB	357
4	CHINANET-SD	100
5	CHINANET-GD	92
6	CHINANET-JS	55
7	CHINANET-SX	52
8	CHINANET-HN	46
9	CHINANET-LN	36
10	CHINANET-SN	32

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1347
2	Taiwan	1050
3	Viet Nam	48
4	Brazil	22
5	United States	21
6	Ukraine	13
7	Romania	5
8	Mexico	4
9	India	4
10	Germany	4

Suspected Bot List [2015-09-26]

detection period: 2015-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	168.96.200.193	Argentina
AR	186.138.182.141	Argentina
IL	94.159.252.174	Israel
IN	117.244.15.243	India
IN	223.187.62.127	India
IQ	109.127.78.25	Iraq
MA	212.217.2.8	Morocco
MX	187.237.90.170	Mexico
MX	189.142.81.162	Mexico
NL	185.77.128.173	Netherlands
RO	92.83.241.189	Romania
RO	109.96.255.110	Romania
UA	31.41.109.52	Ukraine
US	68.188.100.102	United States
UY	186.49.228.40	Uruguay

Botnet Statistics [2015-09-26]

detection period: 2015-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2585
number of botnet IPs notified to network operators: 2570
number of spam blocked: 171127
recipient count of spam blocked: 3774793

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1066
2	CHINANET-HB	429
3	UNICOM-AH	338
4	CHINANET-GD	164
5	CHINANET-SD	103
6	CHINANET-JS	76
7	CHINANET-HN	40
8	CHINANET-YN	34
9	CHINANET-SN	32
10	CHINANET-SX	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1379
2	Taiwan	1068
3	Viet Nam	34
4	United States	19
5	Brazil	12
6	India	7
7	Ukraine	6
8	Turkey	6
9	Germany	5
10	Russian Federation	4

Suspected Bot List [2015-09-25]

detection period: 2015-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	202.62.10.210	Indonesia
IN	122.170.105.219	India
IN	125.16.12.146	India
IN	182.72.139.50	India
IN	203.194.109.130	India
MX	148.204.139.170	Mexico
MX	200.94.75.210	Mexico
PT	93.102.80.52	Portugal
US	68.188.100.102	United States
US	198.144.189.149	United States

List from greylisting:

country code	IP address	Country
AR	181.25.151.148	Argentina
AR	181.166.65.175	Argentina
AR	186.135.140.206	Argentina
AR	190.50.191.233	Argentina
AR	190.179.170.153	Argentina
AR	200.50.178.128	Argentina
AR	200.89.154.99	Argentina
DE	80.69.98.247	Germany
EC	200.107.60.50	Ecuador
ES	87.235.177.251	Spain
IL	94.159.252.174	Israel
IN	117.202.28.36	India
IN	122.160.45.203	India
IN	203.194.109.142	India
KZ	87.243.52.159	Kazakhstan
NL	185.77.128.173	Netherlands
PK	39.45.115.119	Pakistan
RO	92.80.104.139	Romania
US	68.188.100.102	United States
US	74.129.170.198	United States
US	216.172.166.181	United States
UY	167.59.100.251	Uruguay

Botnet Statistics [2015-09-25]

detection period: 2015-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2704
number of botnet IPs notified to network operators: 2673
number of spam blocked: 168521
recipient count of spam blocked: 3456747

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1020
2	CHINANET-HB	302
3	CHINANET-GD	266
4	UNICOM-AH	251
5	CHINANET-JS	129
6	CHINANET-HN	82
7	CHINANET-SX	77
8	CHINANET-LN	65
9	CHINANET-SD	57
10	CHINANET-YN	45

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1479
2	Taiwan	1022
3	Viet Nam	48
4	Brazil	25
5	United States	17
6	Russian Federation	12
7	India	11
8	Ukraine	10
9	Argentina	8
10	Indonesia	5

Suspected Bot List [2015-09-24]

detection period: 2015-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	200.50.178.128	Argentina
DE	80.69.98.251	Germany
ES	80.58.152.176	Spain
ES	87.235.177.251	Spain
IL	94.159.252.174	Israel
IN	59.88.76.238	India
IN	59.177.243.228	India
IN	106.216.140.26	India
IN	117.196.173.220	India
IN	117.202.184.11	India
IN	117.207.83.44	India
IN	120.61.52.183	India
IN	122.170.3.7	India
IN	122.174.213.111	India
IN	122.175.34.148	India
IN	182.65.173.13	India
KZ	2.132.21.48	Kazakhstan
KZ	2.132.94.169	Kazakhstan
MA	212.217.2.8	Morocco
MX	148.204.139.170	Mexico
NL	185.77.128.173	Netherlands
PH	122.52.15.249	Philippines
RO	89.123.234.145	Romania
RO	109.97.31.206	Romania
US	216.172.166.181	United States
UY	167.61.22.176	Uruguay

Botnet Statistics [2015-09-24]

detection period: 2015-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2791
number of botnet IPs notified to network operators: 2765
number of spam blocked: 163560
recipient count of spam blocked: 3758941

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1081
2	UNICOM-AH	349
3	CHINANET-HB	336
4	CHINANET-GD	169
5	CHINANET-JS	107
6	CHINANET-SX	88
7	CHINANET-HN	65
8	CHINANET-SN	64
9	CHINANET-YN	62
10	CHINANET-LN	57

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1475
2	Taiwan	1084
3	Viet Nam	74
4	Russian Federation	24
5	United States	20
6	India	20
7	Brazil	16
8	Germany	6
9	Ukraine	5
10	Turkey	5

Suspected Bot List [2015-09-23]

detection period: 2015-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.39.184.224	Argentina
AR	201.251.32.192	Argentina
AZ	95.86.176.180	Azerbaijan
DE	80.69.98.247	Germany
ES	87.235.177.251	Spain
IN	59.96.183.177	India
IN	101.0.45.44	India
IN	117.192.4.47	India
IN	117.201.50.162	India
IN	117.201.113.110	India
IN	117.205.150.245	India
IN	117.222.219.116	India
IN	122.169.33.45	India
IN	122.175.34.148	India
IN	122.175.238.27	India
IN	150.107.197.67	India
IN	182.65.170.217	India
IT	62.19.220.151	Italy
KZ	185.48.150.234	Kazakhstan
KZ	213.157.45.74	Kazakhstan
MX	187.139.95.250	Mexico
RO	89.122.117.53	Romania
RO	89.123.181.248	Romania
RO	109.98.164.51	Romania
UA	89.252.29.9	Ukraine
US	104.47.124.228	United States
US	104.47.124.248	United States
US	104.47.124.249	United States
US	104.47.125.212	United States
US	104.47.125.218	United States
US	104.47.126.202	United States
US	104.47.126.207	United States
US	104.47.126.212	United States
US	104.47.126.218	United States
US	104.47.126.230	United States
US	192.232.192.251	United States
US	192.254.137.244	United States
US	198.57.180.170	United States
US	216.172.166.181	United States
UY	167.60.122.58	Uruguay

Botnet Statistics [2015-09-23]

detection period: 2015-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2788
number of botnet IPs notified to network operators: 2748
number of spam blocked: 140568
recipient count of spam blocked: 3631976

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1071
2	UNICOM-AH	282
3	CHINANET-HB	280
4	CHINANET-GD	192
5	CHINANET-YN	156
6	CHINANET-LN	91
7	CHINANET-JS	88
8	CHINANET-SX	83
9	CHINANET-SN	69
10	CHINANET-HN	65

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1483
2	Taiwan	1073
3	Viet Nam	102
4	United States	32
5	India	17
6	Ukraine	14
7	Russian Federation	11
8	Turkey	6
9	Romania	6
10	Germany	6

Suspected Bot List [2015-09-22]

detection period: 2015-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.23.41.233	Argentina
AR	181.23.172.22	Argentina
AR	186.130.197.13	Argentina
AR	190.18.248.33	Argentina
AR	190.31.106.219	Argentina
AR	190.174.67.158	Argentina
AR	190.176.71.135	Argentina
AR	191.80.141.88	Argentina
DZ	105.102.33.129	Algeria
DZ	196.20.105.114	Algeria
EC	200.125.239.214	Ecuador
ES	87.235.177.251	Spain
IN	14.140.235.82	India
IN	61.3.230.33	India
IN	117.193.151.67	India
IN	117.239.77.69	India
IN	117.242.76.242	India
IN	122.165.232.120	India
IN	122.168.240.6	India
IN	122.171.189.162	India
IN	150.107.9.244	India
IN	182.73.204.74	India
IN	219.64.166.110	India
MO	27.109.167.33	Macau
MX	189.147.125.237	Mexico
MX	200.36.121.217	Mexico
PH	110.55.5.226	Philippines
PK	39.35.61.23	Pakistan
US	192.254.137.244	United States
US	198.57.180.170	United States
US	216.172.166.181	United States

Botnet Statistics [2015-09-22]

detection period: 2015-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 3219
number of botnet IPs notified to network operators: 3188
number of spam blocked: 132096
recipient count of spam blocked: 3479792

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1080
2	CHINANET-HB	485
3	UNICOM-AH	382
4	CHINANET-GD	183
5	CHINANET-YN	129
6	CHINANET-SD	97
7	CHINANET-JS	93
8	CHINANET-LN	79
9	CHINANET-SN	68
10	CHINANET-HN	65

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1865
2	Taiwan	1086
3	Viet Nam	74
4	Russian Federation	28
5	India	25
6	Brazil	24
7	United States	16
8	Ukraine	15
9	Turkey	8
10	Argentina	8

Suspected Bot List [2015-09-21]

detection period: 2015-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	24.232.43.7	Argentina
AR	168.96.200.193	Argentina
AR	179.40.166.73	Argentina
AR	181.29.138.211	Argentina
AR	186.128.98.42	Argentina
AR	186.137.98.91	Argentina
AR	190.55.193.71	Argentina
AR	190.188.42.217	Argentina
AR	190.188.123.168	Argentina
AR	200.41.192.90	Argentina
AR	201.219.161.225	Argentina
AR	201.231.104.164	Argentina
IL	31.154.162.243	Israel
IN	116.73.51.36	India
IN	117.194.16.25	India
IN	117.195.232.6	India
IN	117.201.79.35	India
IN	117.206.64.11	India
IN	117.212.7.198	India
IN	117.218.4.210	India
IN	117.247.12.11	India
IN	122.168.214.128	India
IN	182.64.168.49	India
IN	210.212.230.132	India
LT	188.69.195.157	Lithuania
MX	187.143.85.46	Mexico
MX	187.156.214.57	Mexico
MX	189.196.132.254	Mexico
MX	189.236.231.128	Mexico
NL	185.77.128.173	Netherlands
RS	185.22.90.88	Serbia
US	65.55.169.248	United States
US	65.55.169.253	United States
US	66.56.184.232	United States
US	157.56.110.245	United States
US	157.56.111.248	United States

Botnet Statistics [2015-09-21]

detection period: 2015-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 3654
number of botnet IPs notified to network operators: 3618
number of spam blocked: 123801
recipient count of spam blocked: 3447137

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1042
2	CHINANET-HB	415
3	UNICOM-AH	340
4	CHINANET-GD	273
5	CHINANET-YN	216
6	CHINANET-JS	189
7	CHINANET-SX	149
8	CHINANET-SD	134
9	CHINANET-HN	123
10	CHINANET-SN	122

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2375
2	Taiwan	1045
3	Viet Nam	77
4	India	20
5	Russian Federation	18
6	Brazil	14
7	Ukraine	13
8	Argentina	12
9	United States	11
10	Turkey	5

Suspected Bot List [2015-09-20]

detection period: 2015-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	198.144.189.140	United States

List from greylisting:

country code	IP address	Country
AL	79.106.109.181	Albania
AM	5.77.236.222	Armenia
AM	46.241.228.250	Armenia
AR	24.232.195.202	Argentina
AR	181.23.142.113	Argentina
AR	186.0.193.130	Argentina
AR	186.0.193.246	Argentina
AR	186.61.92.246	Argentina
AR	186.62.4.212	Argentina
AR	190.96.113.10	Argentina
AR	190.183.60.117	Argentina
AR	200.43.231.13	Argentina
AZ	5.178.5.236	Azerbaijan
BH	62.209.14.213	Bahrain
BR	187.108.174.76	Brazil
GB	91.109.13.254	United Kingdom
GE	95.137.166.63	Republic Of Georgia
GR	109.242.71.24	Greece
GT	190.4.29.89	Guatemala
ID	103.10.105.60	Indonesia
IN	117.193.214.152	India
IN	117.204.14.235	India
IN	117.241.120.94	India
IN	120.62.196.37	India
IN	122.163.218.90	India
IN	122.168.57.45	India
IR	5.200.68.118	Iran
IR	188.245.205.11	Iran
JO	87.236.233.98	Jordan
LB	185.99.32.2	Lebanon
MX	177.236.37.119	Mexico
MX	177.241.3.176	Mexico
MX	187.153.61.103	Mexico
MX	187.212.192.21	Mexico
MX	189.170.23.236	Mexico
MX	189.176.132.225	Mexico
MY	123.136.107.100	Malaysia
NL	185.77.128.173	Netherlands
PL	193.105.125.117	Poland
UA	91.219.83.133	Ukraine
US	207.242.2.186	United States

Botnet Statistics [2015-09-20]

detection period: 2015-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2410
number of botnet IPs notified to network operators: 2368
number of spam blocked: 125096
recipient count of spam blocked: 3579375

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1051
2	CHINANET-HB	204
3	UNICOM-AH	199
4	CHINANET-GD	186
5	CHINANET-JS	93
6	CHINANET-YN	92
7	CHINANET-LN	51
8	CHINANET-SN	49
9	VNPT-VNNIC-VN	48
10	CHINANET-HN	46

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1086
2	Taiwan	1052
3	Viet Nam	84
4	Russian Federation	34
5	India	18
6	Ukraine	12
7	Japan	12
8	Argentina	9
9	South Korea	7
10	Mexico	6

Suspected Bot List [2015-09-19]

detection period: 2015-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AL	79.106.109.207	Albania
AR	181.26.192.15	Argentina
AR	181.164.234.222	Argentina
AR	186.128.84.251	Argentina
DZ	41.200.16.138	Algeria
DZ	105.103.186.52	Algeria
GB	91.109.13.254	United Kingdom
ID	101.128.87.117	Indonesia
ID	111.95.126.226	Indonesia
IN	117.197.81.181	India
IN	117.206.241.224	India
IN	117.221.248.236	India
IN	122.174.238.99	India
IN	122.179.90.56	India
IN	150.107.9.216	India
IN	182.58.237.95	India
IN	182.65.137.8	India
IN	223.176.47.171	India
IQ	130.193.152.144	Iraq
KZ	92.46.10.17	Kazakhstan
KZ	193.193.252.14	Kazakhstan
LK	175.157.240.153	Sri Lanka
MX	177.230.228.144	Mexico
MX	177.242.235.67	Mexico
MX	187.187.19.25	Mexico
NL	185.77.128.173	Netherlands
PK	182.185.37.85	Pakistan
RO	89.123.43.18	Romania
RO	92.84.202.137	Romania
RO	109.98.161.104	Romania
TR	95.65.241.214	Turkey
TR	188.3.172.10	Turkey
UA	188.191.30.143	Ukraine
UZ	213.230.81.234	Uzbekistan

Botnet Statistics [2015-09-19]

detection period: 2015-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2279
number of botnet IPs notified to network operators: 2245
number of spam blocked: 143834
recipient count of spam blocked: 3771094

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1085
2	CHINANET-HB	203
3	UNICOM-AH	186
4	CHINANET-GD	128
5	CHINANET-YN	88
6	VNPT-VNNIC-VN	61
7	CHINANET-HN	53
8	CHINANET-JS	52
9	CHINANET-SX	42
10	CHINANET-LN	40

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1087
2	China	935
3	Viet Nam	115
4	Ukraine	17
5	India	15
6	Japan	13
7	United States	9
8	Kazakhstan	7
9	Brazil	7
10	Russian Federation	6

Suspected Bot List [2015-09-18]

detection period: 2015-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.46.206.167	Argentina
AR	190.93.208.13	Argentina
ES	87.235.177.251	Spain
GB	91.109.13.254	United Kingdom
ID	175.106.8.202	Indonesia
IN	45.64.192.138	India
IN	59.183.5.206	India
IN	117.212.234.114	India
IN	117.223.180.106	India
IN	117.239.77.69	India
IN	122.176.148.246	India
MX	187.177.50.130	Mexico
NL	185.77.128.173	Netherlands
PK	182.180.109.239	Pakistan
RO	92.80.106.169	Romania
RO	109.98.194.212	Romania
SV	190.62.153.87	El Salvador

Botnet Statistics [2015-09-18]

detection period: 2015-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2695
number of botnet IPs notified to network operators: 2678
number of spam blocked: 236588
recipient count of spam blocked: 3795859

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1030
2	CHINANET-HB	283
3	UNICOM-AH	215
4	CHINANET-GD	207
5	CHINANET-YN	92
6	CHINANET-ZJ	86
7	CHINANET-JS	79
8	CHINANET-SX	74
9	CHINANET-HN	66
10	CHINANET-SD	60

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1471
2	Taiwan	1032
3	Viet Nam	87
4	India	18
5	Brazil	12
6	Ukraine	8
7	United States	7
8	Russian Federation	6
9	Germany	6
10	Turkey	5

Suspected Bot List [2015-09-17]

detection period: 2015-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.19.29.67	Argentina
AR	186.56.242.239	Argentina
AR	190.104.73.16	Argentina
AR	190.104.208.51	Argentina
AR	190.175.53.128	Argentina
AR	190.192.107.190	Argentina
AR	200.127.144.123	Argentina
AR	201.250.159.235	Argentina
BG	217.9.224.140	Bulgaria
DZ	193.194.69.43	Algeria
EC	181.196.187.102	Ecuador
EC	200.107.60.50	Ecuador
ES	87.235.177.251	Spain
GB	91.109.13.254	United Kingdom
IL	31.154.92.52	Israel
IN	59.97.8.106	India
IN	59.97.221.111	India
IN	103.224.156.77	India
IN	103.233.116.38	India
IN	103.249.122.9	India
IN	117.204.53.240	India
IN	122.165.116.47	India
IN	182.70.30.96	India
IR	91.98.249.229	Iran
KR	166.104.239.93	South Korea
KZ	2.132.84.233	Kazakhstan
MO	27.109.183.8	Macau
MO	60.246.159.1	Macau
MX	177.230.53.33	Mexico
MX	187.153.91.137	Mexico
MX	187.154.65.40	Mexico
MX	189.186.14.48	Mexico
MX	189.252.102.50	Mexico
NL	93.174.90.36	Netherlands
NL	93.174.90.81	Netherlands
RO	89.121.245.57	Romania
RO	89.123.253.221	Romania
RO	109.96.37.174	Romania
US	74.129.170.198	United States
US	174.139.218.181	United States
UY	186.53.25.228	Uruguay

Botnet Statistics [2015-09-17]

detection period: 2015-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 3243
number of botnet IPs notified to network operators: 3202
number of spam blocked: 163210
recipient count of spam blocked: 3779856

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1067
2	CHINANET-HB	340
3	UNICOM-AH	262
4	CHINANET-GD	176
5	CHINANET-ZJ	146
6	CHINANET-SD	117
7	CHINANET-JS	105
8	UNICOM-ZJ	92
9	WASU	75
10	CHINANET-YN	71

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1823
2	Taiwan	1071
3	Viet Nam	147
4	Ukraine	23
5	Brazil	23
6	India	16
7	United States	14
8	Russian Federation	11
9	South Korea	11
10	Turkey	9

Suspected Bot List [2015-09-16]

detection period: 2015-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	200.63.163.110	Argentina
ES	87.111.199.68	Spain
ES	87.235.177.251	Spain
GB	91.109.13.254	United Kingdom
IN	59.89.42.246	India
IN	115.115.222.125	India
IN	120.60.144.203	India
IN	122.174.138.213	India
IN	182.65.138.104	India
IT	217.202.248.205	Italy
KW	178.161.116.250	Kuwait
MA	212.217.2.8	Morocco
MX	189.161.96.133	Mexico
MX	189.248.161.108	Mexico
NL	93.174.90.49	Netherlands
RS	109.72.51.38	Serbia
UA	89.252.41.252	Ukraine
US	104.47.124.213	United States
US	104.47.125.222	United States
US	192.254.134.62	United States
US	216.169.110.166	United States
UY	186.49.238.215	Uruguay

Botnet Statistics [2015-09-16]

detection period: 2015-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2982
number of botnet IPs notified to network operators: 2960
number of spam blocked: 130752
recipient count of spam blocked: 3657035

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1060
2	CHINANET-HB	410
3	UNICOM-AH	248
4	CHINANET-ZJ	185
5	CHINANET-GD	185
6	CHINANET-SD	136
7	UNICOM-ZJ	80
8	CHINANET-HN	69
9	CHINANET-JS	64
10	CHINANET-SX	51

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1739
2	Taiwan	1064
3	Viet Nam	35
4	United States	29
5	Brazil	20
6	Russian Federation	13
7	Ukraine	12
8	Turkey	7
9	Germany	7
10	India	6

Suspected Bot List [2015-09-15]

detection period: 2015-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
EG	193.227.34.20	Egypt

List from greylisting:

country code	IP address	Country
AM	46.241.171.91	Armenia
AR	181.171.50.251	Argentina
AR	186.57.171.176	Argentina
AR	190.189.219.152	Argentina
AR	200.42.93.198	Argentina
DZ	41.200.234.56	Algeria
EG	156.184.125.27	Egypt
ES	87.235.177.251	Spain
GB	91.109.13.254	United Kingdom
ID	103.19.111.1	Indonesia
ID	103.26.215.3	Indonesia
ID	103.246.1.138	Indonesia
ID	124.40.250.114	Indonesia
ID	202.158.104.194	Indonesia
ID	203.190.119.1	Indonesia
ID	210.210.142.99	Indonesia
IN	59.99.226.136	India
IN	122.169.166.38	India
KW	178.161.125.212	Kuwait
KW	188.71.248.251	Kuwait
KZ	92.46.20.245	Kazakhstan
MA	41.137.19.3	Morocco
MA	212.217.2.8	Morocco
MX	189.238.63.121	Mexico
MX	201.116.227.163	Mexico
NL	93.174.90.50	Netherlands
NL	93.174.90.93	Netherlands
TR	31.155.65.110	Turkey
TR	46.1.135.91	Turkey
UA	176.121.242.238	Ukraine
US	68.188.100.100	United States
UY	167.58.3.230	Uruguay

Botnet Statistics [2015-09-15]

detection period: 2015-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3339
number of botnet IPs notified to network operators: 3306
number of spam blocked: 163023
recipient count of spam blocked: 3660095

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1048
2	CHINANET-HB	506
3	UNICOM-AH	252
4	UNICOM-ZJ	221
5	CHINANET-ZJ	183
6	CHINANET-GD	175
7	WASU	173
8	WASU-BB	131
9	CHINANET-SD	116
10	CHINANET-HN	49

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2086
2	Taiwan	1051
3	Viet Nam	51
4	United States	24
5	Brazil	12
6	Ukraine	9
7	Indonesia	8
8	Russian Federation	6
9	Turkey	5
10	Poland	5

Suspected Bot List [2015-09-14]

detection period: 2015-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
CA	192.207.60.197	Canada
CN	118.67.124.10	China
GB	91.109.13.254	United Kingdom
HN	190.5.77.216	Honduras
IT	109.52.244.42	Italy
MA	212.217.2.8	Morocco
MX	189.234.104.158	Mexico
MX	201.116.227.163	Mexico
NL	93.174.90.34	Netherlands
NL	185.77.128.173	Netherlands
US	64.132.119.71	United States
US	68.188.100.100	United States
US	74.131.25.162	United States
US	108.179.198.74	United States

Botnet Statistics [2015-09-14]

detection period: 2015-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 3178
number of botnet IPs notified to network operators: 3164
number of spam blocked: 163362
recipient count of spam blocked: 3370931

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	949
2	CHINANET-HB	337
3	UNICOM-ZJ	237
4	CHINANET-GD	212
5	UNICOM-AH	211
6	WASU	164
7	CHINANET-ZJ	163
8	WASU-BB	132
9	CHINANET-SD	115
10	CHINANET-JS	75

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2088
2	Taiwan	949
3	United States	72
4	Viet Nam	12
5	Brazil	6
6	Russian Federation	4
7	Turkey	3
8	Thailand	3
9	Poland	3
10	Mexico	3

Suspected Bot List [2015-09-13]

detection period: 2015-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	186.27.126.130	Bolivia
ID	103.26.215.3	Indonesia
ID	116.90.165.12	Indonesia
MA	212.217.2.8	Morocco
MX	189.234.104.158	Mexico
SV	201.247.149.77	El Salvador
US	69.144.223.99	United States
US	184.167.56.70	United States
ZA	196.46.23.121	South Africa

List from greylisting:

country code	IP address	Country
BG	217.9.224.141	Bulgaria
GB	91.109.13.254	United Kingdom
ID	202.162.203.108	Indonesia
IL	94.159.217.120	Israel
IN	117.222.95.118	India
MX	189.234.104.158	Mexico
NL	185.77.128.173	Netherlands
PK	39.35.132.105	Pakistan
RO	109.99.176.211	Romania
TT	190.58.249.22	Trinidad/Tobago
US	64.132.119.71	United States
US	68.188.100.100	United States
US	74.131.25.162	United States

Botnet Statistics [2015-09-13]

detection period: 2015-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 3265
number of botnet IPs notified to network operators: 3244
number of spam blocked: 176474
recipient count of spam blocked: 3632060

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1026
2	CHINANET-HB	289
3	CHINANET-GD	280
4	UNICOM-AH	184
5	CHINANET-JS	158
6	CHINANET-SX	156
7	UNICOM-ZJ	122
8	CHINANET-ZJ	113
9	CHINANET-SD	108
10	CHINANET-HN	98

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1996
2	Taiwan	1030
3	Viet Nam	70
4	United States	39
5	Brazil	20
6	Russian Federation	16
7	Ukraine	11
8	India	7
9	Indonesia	7
10	Germany	7

Suspected Bot List [2015-09-12]

detection period: 2015-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AM	5.77.208.104	Armenia
BO	186.27.126.130	Bolivia
ID	103.26.215.3	Indonesia
IN	125.16.12.146	India
IT	109.52.231.207	Italy
IT	217.202.248.96	Italy
MA	212.217.2.8	Morocco
MX	189.234.104.158	Mexico
SV	201.247.149.77	El Salvador
US	68.188.100.100	United States
US	69.144.223.99	United States
US	74.131.25.162	United States
US	184.167.56.70	United States

List from greylisting:

country code	IP address	Country
AR	190.13.217.163	Argentina
AR	190.122.144.33	Argentina
AR	190.188.123.168	Argentina
CA	70.38.11.233	Canada
CA	192.207.60.197	Canada
EG	41.65.126.98	Egypt
GB	91.109.13.254	United Kingdom
ID	111.94.135.199	Indonesia
IN	117.217.252.149	India
IN	123.201.38.47	India
IN	182.75.40.246	India
IT	217.202.248.96	Italy
KZ	92.46.3.111	Kazakhstan
MA	212.217.2.8	Morocco
MX	189.234.104.158	Mexico
PK	39.55.143.110	Pakistan
RO	109.99.176.211	Romania
SV	201.247.149.77	El Salvador
UA	91.211.213.42	Ukraine
US	68.188.100.100	United States
US	69.144.223.99	United States
UY	179.24.204.157	Uruguay
UY	186.54.29.172	Uruguay

Botnet Statistics [2015-09-12]

detection period: 2015-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 4301
number of botnet IPs notified to network operators: 4271
number of spam blocked: 175885
recipient count of spam blocked: 3635429

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1046
2	CHINANET-GD	579
3	CHINANET-HB	544
4	UNICOM-AH	281
5	CHINANET-JS	266
6	CHINANET-HN	206
7	CHINANET-SX	176
8	CHINANET-LN	153
9	CHINANET-ZJ	144
10	CHINANET-SN	134

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2997
2	Taiwan	1046
3	Viet Nam	75
4	United States	33
5	Brazil	25
6	Russian Federation	19
7	India	8
8	Germany	7
9	Turkey	6
10	Thailand	6

Suspected Bot List [2015-09-11]

detection period: 2015-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AM	5.77.198.73	Armenia
AR	186.62.31.147	Argentina
AR	190.104.232.112	Argentina
BO	161.22.135.34	Bolivia
BY	87.252.236.220	Belarus
EG	41.65.126.98	Egypt
GB	90.223.242.174	United Kingdom
GB	91.109.13.254	United Kingdom
ID	124.40.250.114	Indonesia
IN	27.5.159.79	India
MX	189.234.104.158	Mexico
PT	93.102.176.28	Portugal
RO	81.12.215.226	Romania
RO	109.99.176.211	Romania
SV	201.247.149.77	El Salvador
US	68.188.100.100	United States
US	74.129.170.198	United States
US	74.131.25.162	United States

Botnet Statistics [2015-09-11]

detection period: 2015-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 3442
number of botnet IPs notified to network operators: 3424
number of spam blocked: 165287
recipient count of spam blocked: 3378307

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1032
2	CHINANET-ZJ	267
3	CHINANET-GD	262
4	CHINANET-HB	232
5	UNICOM-AH	203
6	WASU	196
7	UNICOM-ZJ	166
8	CHINANET-JS	136
9	WASU-BB	133
10	CHINANET-SD	121

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2279
2	Taiwan	1034
3	United States	19
4	Brazil	18
5	Viet Nam	13
6	Russian Federation	7
7	Poland	6
8	Kazakhstan	5
9	Turkey	4
10	Indonesia	4

Suspected Bot List [2015-09-10]

detection period: 2015-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.51.168.86	Argentina
AR	190.104.232.112	Argentina
BO	186.27.126.130	Bolivia
BR	150.164.88.242	Brazil
CA	192.207.60.197	Canada
EG	193.227.49.83	Egypt
ES	87.235.177.251	Spain
ID	202.162.214.116	Indonesia
IN	59.90.91.95	India
IN	122.170.105.219	India
IN	122.174.250.39	India
IN	122.179.56.103	India
IN	203.192.212.52	India
IT	217.201.73.75	Italy
MA	212.217.2.8	Morocco
MX	201.116.227.163	Mexico
RO	109.99.176.211	Romania
RS	178.148.142.64	Serbia
US	64.132.119.71	United States
US	68.188.100.100	United States
US	69.144.223.99	United States
US	72.9.96.248	United States
US	72.9.96.249	United States
US	72.9.96.250	United States
US	72.9.96.251	United States
US	75.134.115.198	United States
US	184.167.56.70	United States
UY	167.62.135.4	Uruguay
ZA	196.46.23.121	South Africa

Botnet Statistics [2015-09-10]

detection period: 2015-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3376
number of botnet IPs notified to network operators: 3347
number of spam blocked: 217472
recipient count of spam blocked: 3527199

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1061
2	CHINANET-HB	315
3	CHINANET-ZJ	243
4	CHINANET-GD	206
5	CHINANET-SD	197
6	WASU	168
7	UNICOM-AH	157
8	CHINANET-JS	144
9	UNICOM-ZJ	132
10	WASU-BB	123

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2124
2	Taiwan	1063
3	United States	52
4	Brazil	23
5	Viet Nam	13
6	Russian Federation	9
7	India	7
8	Ukraine	6
9	Turkey	5
10	Indonesia	5

Suspected Bot List [2015-09-09]

detection period: 2015-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AE	83.111.163.30	Arab Emirates
AM	5.77.219.143	Armenia
AR	181.30.50.138	Argentina
AR	186.59.197.176	Argentina
AR	190.104.232.112	Argentina
AR	190.174.102.145	Argentina
DZ	41.200.236.18	Algeria
GB	90.223.242.174	United Kingdom
IN	1.39.15.219	India
IN	59.93.219.139	India
IN	106.194.2.233	India
IN	117.202.192.144	India
IN	117.204.62.158	India
IN	117.241.208.45	India
IN	117.248.208.15	India
IN	122.172.23.179	India
IN	125.16.12.146	India
IN	182.72.139.50	India
IN	203.192.212.52	India
MA	212.217.2.8	Morocco
MX	148.204.139.170	Mexico
MX	177.240.78.33	Mexico
MX	189.202.48.119	Mexico
MX	189.210.193.216	Mexico
MX	189.234.104.158	Mexico
MX	200.94.129.6	Mexico
PK	39.35.208.2	Pakistan
PL	188.146.1.179	Poland
RO	92.87.54.61	Romania
RO	109.99.176.211	Romania
SE	83.209.193.49	Sweden
SV	201.247.149.77	El Salvador
TW	106.1.34.107	Taiwan
US	50.197.121.185	United States
US	50.253.204.227	United States
US	68.188.100.100	United States
US	69.144.223.99	United States
US	75.134.115.198	United States
US	108.179.198.74	United States
US	184.167.56.70	United States
US	192.185.219.221	United States
US	200.12.232.6	United States
UY	167.61.86.182	Uruguay
UY	167.61.218.193	Uruguay
ZA	197.245.191.83	South Africa

Botnet Statistics [2015-09-09]

detection period: 2015-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 2498
number of botnet IPs notified to network operators: 2453
number of spam blocked: 115836
recipient count of spam blocked: 2966733

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1003
2	UNICOM-ZJ	209
3	WASU	182
4	WASU-BB	176
5	CHINANET-HB	111
6	UNICOM-AH	109
7	CHINANET-GD	70
8	CHINANET-ZJ	65
9	VNPT-VNNIC-VN	41
10	CHINANET-YN	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1133
2	Taiwan	1007
3	Viet Nam	81
4	United States	52
5	Brazil	37
6	India	19
7	Russian Federation	18
8	Indonesia	16
9	Ukraine	11
10	Netherlands	9