Suspected Bot List [2015-10-30]

detection period: 2015-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.229.44.18	Argentina
AR	186.56.155.176	Argentina
AR	186.137.248.3	Argentina
AR	190.178.107.63	Argentina
AR	190.190.251.191	Argentina
AR	190.195.18.97	Argentina
IN	59.88.216.203	India
IN	59.176.102.194	India
IN	112.133.246.104	India
IN	117.208.20.45	India
IN	122.163.215.148	India
IN	122.172.142.158	India
IN	122.175.78.236	India
IN	182.64.201.185	India
IN	223.176.13.178	India
MX	177.246.89.164	Mexico
MX	189.152.251.120	Mexico
MX	201.110.91.249	Mexico
RO	92.83.84.128	Romania
RO	92.86.70.95	Romania
RO	109.98.165.6	Romania
RS	24.135.10.125	Serbia
US	162.144.104.214	United States

Botnet Statistics [2015-10-30]

detection period: 2015-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2063
number of botnet IPs notified to network operators: 2040
number of spam blocked: 151757
recipient count of spam blocked: 3271934

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1221
2	UNICOM-ZJ	152
3	WASU	111
4	WASU-BB	99
5	VNPT-VNNIC-VN	67
6	CHINANET-ZJ	42
7	CHINANET-HB	36
8	CHINANET-AH	30
9	CHINANET-GD	25
10	FPT-VN	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1226
2	China	589
3	Viet Nam	136
4	Brazil	17
5	United States	10
6	India	10
7	Ukraine	9
8	Romania	9
9	Thailand	6
10	Russian Federation	6

Suspected Bot List [2015-10-29]

detection period: 2015-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.128.182.62	Argentina
AR	200.0.213.2	Argentina
AR	200.24.255.139	Argentina
AR	200.55.47.61	Argentina
AR	201.251.24.73	Argentina
ES	87.235.177.251	Spain
ES	92.58.117.16	Spain
IN	59.88.199.72	India
IN	59.96.221.222	India
IN	59.97.132.72	India
IN	116.73.152.109	India
IN	117.240.169.138	India
IN	122.169.11.109	India
IN	122.177.254.220	India
MX	187.214.93.166	Mexico
PH	122.54.161.38	Philippines
PK	39.32.227.184	Pakistan
TW	180.177.39.158	Taiwan
US	162.144.104.214	United States
US	198.154.241.165	United States
UZ	213.230.76.206	Uzbekistan

Botnet Statistics [2015-10-29]

detection period: 2015-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2134
number of botnet IPs notified to network operators: 2113
number of spam blocked: 333944
recipient count of spam blocked: 3405539

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1248
2	UNICOM-ZJ	161
3	WASU	127
4	WASU-BB	100
5	CHINANET-HB	51
6	CHINANET-ZJ	48
7	CHINANET-GD	46
8	VNPT-VNNIC-VN	38
9	CHINANET-AH	27
10	UNICOM-BJ	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1256
2	China	668
3	Viet Nam	83
4	Brazil	18
5	United States	15
6	Ukraine	10
7	India	8
8	Colombia	6
9	South Korea	5
10	Argentina	5

Suspected Bot List [2015-10-28]

detection period: 2015-10-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.23.11.95	Argentina
AR	186.60.70.250	Argentina
AR	190.18.9.101	Argentina
AR	190.55.33.137	Argentina
BO	190.129.127.163	Bolivia
ES	87.235.177.251	Spain
IL	31.154.92.62	Israel
IN	27.251.5.182	India
IN	59.92.246.246	India
IN	117.194.121.79	India
IN	117.195.107.202	India
IN	117.203.211.238	India
IN	117.208.96.229	India
IN	117.212.245.154	India
IN	117.222.122.162	India
IN	122.174.23.141	India
IN	125.21.255.126	India
IN	182.77.87.116	India
KE	195.202.72.107	Kenya
MA	197.129.86.212	Morocco
MX	189.172.186.211	Mexico
MX	189.190.115.224	Mexico
RO	86.34.135.26	Romania
TR	213.248.146.53	Turkey
US	108.167.133.29	United States
US	108.179.199.86	United States
US	162.144.34.20	United States
US	162.144.104.214	United States
US	162.144.248.207	United States
US	198.154.241.165	United States

Botnet Statistics [2015-10-28]

detection period: 2015-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2041
number of botnet IPs notified to network operators: 2011
number of spam blocked: 285938
recipient count of spam blocked: 3401343

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1254
2	UNICOM-ZJ	161
3	WASU	102
4	WASU-BB	80
5	CHINANET-HB	59
6	VNPT-VNNIC-VN	53
7	CHINANET-AH	39
8	CHINANET-GD	26
9	UNICOM-AH	20
10	UNICOM-BJ	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1263
2	China	551
3	Viet Nam	99
4	United States	17
5	India	14
6	Russian Federation	13
7	Brazil	10
8	Indonesia	6
9	Turkey	5
10	Kazakhstan	5

Suspected Bot List [2015-10-27]

detection period: 2015-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AL	79.106.109.230	Albania
AR	186.137.28.202	Argentina
AR	186.182.58.20	Argentina
AR	190.182.234.95	Argentina
AR	201.231.194.88	Argentina
IN	117.214.33.25	India
IN	119.235.48.179	India
IN	122.174.214.246	India
KE	195.202.72.107	Kenya
ME	178.175.15.212	Montenegro
MM	203.81.91.11	Myanmar
MX	187.145.220.206	Mexico
MX	189.194.141.80	Mexico
PK	39.32.104.32	Pakistan
PL	95.160.195.10	Poland
RO	92.83.68.174	Romania
RO	109.98.160.210	Romania
TR	188.3.154.61	Turkey
TW	180.176.90.119	Taiwan
UA	176.121.242.238	Ukraine
US	108.179.199.86	United States
US	162.144.104.214	United States

Botnet Statistics [2015-10-27]

detection period: 2015-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1859
number of botnet IPs notified to network operators: 1837
number of spam blocked: 269609
recipient count of spam blocked: 3052124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1213
2	UNICOM-ZJ	173
3	WASU	94
4	WASU-BB	53
5	CHINANET-AH	44
6	CHINANET-HB	41
7	CHINANET-GD	23
8	UNICOM-BJ	17
9	VNPT-VNNIC-VN	11
10	CHINANET-SD	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1218
2	China	515
3	Viet Nam	28
4	United States	12
5	Brazil	11
6	Ukraine	5
7	Romania	5
8	South Korea	5
9	Poland	4
10	Germany	4

Suspected Bot List [2015-10-26]

detection period: 2015-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.210.204.12	Argentina
AR	190.244.101.160	Argentina
CO	190.60.108.2	Colombia
EC	186.46.56.42	Ecuador
ES	87.235.177.251	Spain
ES	88.0.160.6	Spain
ES	188.85.140.112	Spain
IN	117.217.89.68	India
IN	117.240.224.246	India
MX	189.208.70.219	Mexico
TR	213.248.172.190	Turkey
US	162.144.104.214	United States

Botnet Statistics [2015-10-26]

detection period: 2015-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1876
number of botnet IPs notified to network operators: 1864
number of spam blocked: 263533
recipient count of spam blocked: 2859263

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1172
2	WASU	191
3	UNICOM-ZJ	159
4	WASU-BB	149
5	CHINANET-GD	33
6	UNICOM-BJ	17
7	CHINANET-SH	9
8	UNICOM-JS	6
9	CMNET	5
10	UNICOM-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1178
2	China	633
3	United States	16
4	Brazil	5
5	Russian Federation	4
6	Spain	4
7	Viet Nam	3
8	India	3
9	France	3
10	Germany	3

Suspected Bot List [2015-10-25]

detection period: 2015-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.134.22.144	Argentina
BG	77.70.80.21	Bulgaria
CN	202.142.16.70	China
CZ	95.46.240.32	Czech Republic
EC	186.46.56.42	Ecuador
IN	1.39.13.177	India
IN	117.211.110.116	India
MX	177.228.177.90	Mexico
MX	187.177.172.13	Mexico
MX	189.212.15.247	Mexico
US	162.144.104.214	United States

Botnet Statistics [2015-10-25]

detection period: 2015-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1677
number of botnet IPs notified to network operators: 1666
number of spam blocked: 209190
recipient count of spam blocked: 2677563

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1168
2	UNICOM-ZJ	125
3	WASU	99
4	WASU-BB	77
5	CHINANET-GD	24
6	UNICOM-BJ	20
7	CHINANET-ZJ	17
8	CHINANET-HB	15
9	CHINANET-AH	13
10	UNICOM-AH	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1172
2	China	440
3	United States	16
4	Viet Nam	10
5	Brazil	6
6	India	4
7	Russian Federation	3
8	Mexico	3
9	Thailand	2
10	Indonesia	2

Suspected Bot List [2015-10-24]

detection period: 2015-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.15.202.179	Argentina
AR	190.182.146.2	Argentina
AR	190.210.204.12	Argentina
AR	201.255.169.160	Argentina
BG	77.70.80.21	Bulgaria
IN	182.71.116.193	India
IN	203.192.212.52	India
MZ	41.190.178.222	Mozambique
PH	122.52.119.54	Philippines
RO	92.85.154.246	Romania
US	66.63.178.26	United States
US	192.254.137.244	United States
UZ	213.230.86.243	Uzbekistan

Botnet Statistics [2015-10-24]

detection period: 2015-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1821
number of botnet IPs notified to network operators: 1808
number of spam blocked: 219744
recipient count of spam blocked: 2958050

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1297
2	CHINANET-HB	85
3	CHINANET-ZJ	82
4	CHINANET-AH	80
5	CHINANET-GD	43
6	UNICOM-AH	38
7	VNPT-VNNIC-VN	32
8	FPT-VN	16
9	UNICOM-BJ	14
10	VIETEL-VNNIC-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1299
2	China	386
3	Viet Nam	68
4	United States	7
5	Brazil	6
6	Romania	5
7	Russian Federation	4
8	Indonesia	4
9	Argentina	4
10	Ukraine	3

Suspected Bot List [2015-10-23]

detection period: 2015-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.62.220.202	Argentina
AR	190.12.170.108	Argentina
AR	190.190.124.186	Argentina
AR	190.244.101.160	Argentina
AZ	95.86.144.115	Azerbaijan
BG	77.70.80.21	Bulgaria
ES	87.235.177.251	Spain
IN	59.182.184.61	India
IN	61.3.8.135	India
IN	116.74.101.132	India
IN	117.212.234.231	India
IN	117.214.141.7	India
IN	117.245.46.196	India
KZ	193.193.252.14	Kazakhstan
KZ	213.157.39.54	Kazakhstan
MX	187.142.247.169	Mexico
MX	189.236.155.229	Mexico
PT	62.169.91.234	Portugal
RO	92.81.169.146	Romania
RS	188.2.154.88	Serbia
US	50.206.182.125	United States
US	72.172.136.97	United States
US	162.144.104.214	United States
US	192.254.137.244	United States

Botnet Statistics [2015-10-23]

detection period: 2015-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2265
number of botnet IPs notified to network operators: 2241
number of spam blocked: 209206
recipient count of spam blocked: 2777361

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1294
2	UNICOM-ZJ	176
3	WASU	142
4	CHINANET-HB	88
5	WASU-BB	84
6	CHINANET-ZJ	76
7	CHINANET-AH	64
8	CHINANET-GD	55
9	UNICOM-AH	39
10	VNPT-VNNIC-VN	35

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1298
2	China	781
3	Viet Nam	70
4	United States	12
5	Brazil	10
6	Ukraine	9
7	India	9
8	Turkey	6
9	Russian Federation	6
10	Romania	5

Suspected Bot List [2015-10-22]

detection period: 2015-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.20.69.243	Argentina
AR	181.31.243.94	Argentina
AR	190.15.235.48	Argentina
AR	200.91.38.248	Argentina
BG	77.70.80.21	Bulgaria
EC	190.63.8.67	Ecuador
GR	37.6.241.211	Greece
KZ	80.241.32.110	Kazakhstan
MX	187.143.83.44	Mexico
MX	187.143.135.54	Mexico
RO	86.35.185.9	Romania
RS	178.149.49.126	Serbia
US	50.192.175.33	United States
US	108.179.199.86	United States
US	162.144.104.214	United States
US	192.254.137.244	United States
US	198.57.162.203	United States
US	216.172.173.36	United States
ZA	169.0.148.160	South Africa

Botnet Statistics [2015-10-22]

detection period: 2015-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1793
number of botnet IPs notified to network operators: 1774
number of spam blocked: 245530
recipient count of spam blocked: 2633417

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	943
2	UNICOM-ZJ	210
3	WASU	127
4	WASU-BB	100
5	UNICOM-AH	73
6	CHINANET-HB	61
7	CHINANET-GD	50
8	CHINANET-ZJ	30
9	CHINANET-AH	25
10	VNPT-VNNIC-VN	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	948
2	China	733
3	Viet Nam	43
4	United States	13
5	Brazil	6
6	Ukraine	5
7	Kazakhstan	4
8	Germany	4
9	Argentina	4
10	Mexico	3

Suspected Bot List [2015-10-21]

detection period: 2015-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.210.142.13	Argentina
BG	77.70.80.21	Bulgaria
BW	168.167.214.48	Botswana
ES	46.26.217.172	Spain
ES	188.86.167.137	Spain
IN	59.99.132.162	India
IN	117.192.197.59	India
IN	117.196.20.230	India
IN	120.59.184.122	India
IN	122.179.28.120	India
IN	182.72.168.122	India
KW	178.161.48.185	Kuwait
ME	178.175.126.8	Montenegro
MX	177.247.1.86	Mexico
MX	201.116.227.163	Mexico
RO	92.85.20.103	Romania
SV	190.62.170.15	El Salvador
UA	176.121.242.238	Ukraine
US	108.179.199.86	United States
US	162.144.104.214	United States
US	198.154.241.165	United States

Botnet Statistics [2015-10-21]

detection period: 2015-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2233
number of botnet IPs notified to network operators: 2212
number of spam blocked: 287188
recipient count of spam blocked: 3847546

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1029
2	CHINANET-HB	220
3	UNICOM-AH	197
4	UNICOM-ZJ	195
5	WASU	165
6	WASU-BB	97
7	VNPT-VNNIC-VN	47
8	CHINANET-GD	45
9	UNICOM-BJ	11
10	FPT-VN	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1030
2	China	1022
3	Viet Nam	85
4	United States	14
5	India	7
6	Ukraine	5
7	Russian Federation	5
8	United Kingdom	5
9	Turkey	4
10	Romania	4

Suspected Bot List [2015-10-20]

detection period: 2015-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.171.50.251	Argentina
BG	77.70.80.21	Bulgaria
MX	187.177.172.13	Mexico
MX	187.237.63.162	Mexico
PH	122.3.16.26	Philippines
PK	39.55.50.65	Pakistan
US	68.112.21.237	United States
US	162.144.34.20	United States

Botnet Statistics [2015-10-20]

detection period: 2015-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2090
number of botnet IPs notified to network operators: 2082
number of spam blocked: 252559
recipient count of spam blocked: 3818668

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1039
2	UNICOM-ZJ	160
3	WASU-BB	122
4	WASU	122
5	CHINANET-HB	119
6	CHINANET-ZJ	118
7	CHINANET-AH	109
8	UNICOM-AH	107
9	CHINANET-GD	24
10	UNICOM-BJ	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1040
2	China	963
3	United States	20
4	Viet Nam	12
5	Brazil	7
6	Ukraine	5
7	Hong Kong	4
8	Germany	4
9	Russian Federation	3
10	Turkey	2

Suspected Bot List [2015-10-19]

detection period: 2015-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.18.124.121	Argentina
AR	190.185.172.17	Argentina
AR	190.245.255.68	Argentina
AR	201.231.200.54	Argentina
CO	190.60.108.2	Colombia
ES	87.235.177.251	Spain
GR	62.169.208.183	Greece
IN	59.94.98.180	India
IN	116.75.26.135	India
IN	117.193.198.104	India
IN	117.212.208.41	India
IN	122.161.180.196	India
IN	122.169.18.42	India
IN	182.70.245.72	India
IN	202.142.67.149	India
IN	202.157.83.35	India
IN	203.217.145.165	India
IR	85.9.99.178	Iran
KZ	2.132.7.250	Kazakhstan
KZ	5.34.7.192	Kazakhstan
KZ	87.243.36.139	Kazakhstan
MX	177.227.166.248	Mexico
MX	200.94.75.210	Mexico
MX	201.116.227.163	Mexico
RO	92.80.211.101	Romania
RS	178.149.255.142	Serbia
RS	188.2.111.230	Serbia
US	108.179.199.86	United States
US	162.144.104.214	United States
US	216.172.173.36	United States
UY	167.59.25.32	Uruguay
UY	167.61.103.45	Uruguay

Botnet Statistics [2015-10-19]

detection period: 2015-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 3129
number of botnet IPs notified to network operators: 3097
number of spam blocked: 264709
recipient count of spam blocked: 3946649

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1091
2	UNICOM-AH	458
3	CHINANET-HB	271
4	CHINANET-ZJ	208
5	WASU	168
6	UNICOM-ZJ	146
7	CHINANET-AH	137
8	WASU-BB	129
9	CHINANET-GD	64
10	VNPT-VNNIC-VN	52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1733
2	Taiwan	1093
3	Viet Nam	99
4	United States	58
5	India	19
6	Brazil	14
7	Ukraine	12
8	Russian Federation	10
9	Turkey	8
10	Romania	7

Suspected Bot List [2015-10-18]

detection period: 2015-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.23.156.195	Argentina
BG	62.221.148.196	Bulgaria
CA	192.207.61.238	Canada
ID	202.62.10.210	Indonesia
IN	115.118.209.75	India
IN	117.247.50.73	India
IN	203.194.109.142	India
KZ	5.34.98.130	Kazakhstan
MA	41.137.19.3	Morocco
MX	187.175.101.72	Mexico
TZ	169.255.187.80	Tanzania
US	96.44.129.50	United States
US	157.55.234.245	United States
US	208.80.211.177	United States
UY	167.61.115.46	Uruguay

Botnet Statistics [2015-10-18]

detection period: 2015-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 2588
number of botnet IPs notified to network operators: 2573
number of spam blocked: 230084
recipient count of spam blocked: 3495633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1008
2	UNICOM-AH	353
3	CHINANET-HB	267
4	CHINANET-GD	87
5	CHINANET-ZJ	83
6	WASU	81
7	WASU-BB	64
8	CHINANET-AH	60
9	UNICOM-ZJ	51
10	NET-107-151-128-0	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1254
2	Taiwan	1011
3	United States	117
4	Viet Nam	53
5	South Korea	32
6	Russian Federation	11
7	Brazil	10
8	Ukraine	9
9	Netherlands	7
10	India	7

Suspected Bot List [2015-10-17]

detection period: 2015-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.178.192.153	Argentina
CA	192.207.61.238	Canada
ES	87.111.49.137	Spain
IN	117.201.59.37	India
IN	122.170.179.79	India
IN	125.16.12.146	India
IN	182.70.140.172	India
IN	182.72.139.50	India
IQ	93.91.194.137	Iraq
MR	41.188.91.61	Mauritania
MX	189.157.229.142	Mexico
MX	200.94.75.210	Mexico
PH	122.3.36.202	Philippines
RO	92.84.129.171	Romania
RS	89.216.147.59	Serbia
US	65.55.169.245	United States
US	68.188.100.21	United States
US	96.44.129.50	United States
US	198.55.115.11	United States
US	198.57.162.203	United States

Botnet Statistics [2015-10-17]

detection period: 2015-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2300
number of botnet IPs notified to network operators: 2280
number of spam blocked: 228530
recipient count of spam blocked: 3629130

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1085
2	UNICOM-AH	332
3	CHINANET-HB	210
4	CHINANET-GD	74
5	NET-107-151-128-0	36
6	CNHOST-ASIA	35
7	VNPT-VNNIC-VN	30
8	UNICOM-BJ	27
9	CHINANET-HN	26
10	KORNET-KR	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1088
2	China	881
3	United States	104
4	Viet Nam	69
5	South Korea	34
6	Brazil	14
7	Ukraine	12
8	India	11
9	Russian Federation	7
10	Turkey	6

Suspected Bot List [2015-10-16]

detection period: 2015-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.188.123.168	Argentina
AR	190.244.101.160	Argentina
AR	201.253.69.105	Argentina
AZ	95.86.162.17	Azerbaijan
BY	217.21.46.81	Belarus
CO	190.60.108.2	Colombia
ES	87.111.49.137	Spain
ID	202.62.10.210	Indonesia
IN	59.88.151.109	India
IN	117.211.38.172	India
IN	122.178.100.177	India
IN	182.64.167.40	India
IN	182.68.73.219	India
IN	182.72.139.50	India
IN	203.194.109.142	India
IR	91.98.243.172	Iran
IT	2.194.73.55	Italy
MX	187.217.83.34	Mexico
MX	200.94.75.210	Mexico
RO	92.80.4.96	Romania
RO	109.98.164.84	Romania
TR	5.47.215.88	Turkey
TW	180.176.90.119	Taiwan
US	50.116.120.220	United States
US	50.193.108.88	United States
US	162.144.104.214	United States
US	198.55.115.11	United States
UY	167.61.68.253	Uruguay
UY	167.61.103.80	Uruguay

Botnet Statistics [2015-10-16]

detection period: 2015-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3064
number of botnet IPs notified to network operators: 3035
number of spam blocked: 212049
recipient count of spam blocked: 3446062

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1078
2	UNICOM-AH	341
3	CHINANET-HB	298
4	UNICOM-ZJ	125
5	WASU	123
6	CHINANET-GD	120
7	CHINANET-AH	105
8	CHINANET-ZJ	100
9	WASU-BB	72
10	NET-107-151-128-0	66

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1570
2	Taiwan	1085
3	United States	146
4	Viet Nam	62
5	South Korea	40
6	Brazil	25
7	Ukraine	15
8	India	15
9	Colombia	11
10	Turkey	8

Suspected Bot List [2015-10-15]

detection period: 2015-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.1.173.87	Argentina
AR	186.59.29.173	Argentina
AR	190.175.16.209	Argentina
CO	190.60.108.2	Colombia
DZ	41.102.90.94	Algeria
ES	87.111.49.137	Spain
ES	87.235.177.251	Spain
IN	59.89.213.197	India
IN	61.12.94.166	India
IN	101.0.45.116	India
IN	117.208.33.119	India
IN	117.211.61.26	India
IN	117.213.3.73	India
IN	122.170.105.219	India
IN	122.174.57.6	India
IN	122.176.25.175	India
IN	203.194.109.142	India
MX	187.159.82.224	Mexico
MX	200.94.75.210	Mexico
MX	201.116.227.163	Mexico
PK	182.185.83.173	Pakistan
RO	109.98.160.15	Romania
TZ	169.255.187.80	Tanzania
US	68.188.100.96	United States
US	155.94.180.12	United States
US	155.94.180.20	United States
US	155.94.180.28	United States
US	155.94.180.54	United States
US	155.94.180.59	United States
US	155.94.180.60	United States
US	155.94.180.84	United States
US	155.94.180.85	United States
US	155.94.180.90	United States
US	155.94.180.99	United States
US	155.94.180.107	United States
US	155.94.180.134	United States
US	155.94.180.135	United States
US	155.94.180.139	United States
US	155.94.180.144	United States
US	155.94.180.149	United States
US	155.94.180.158	United States
US	155.94.180.175	United States
US	155.94.180.185	United States
US	155.94.180.192	United States
US	155.94.180.203	United States
US	155.94.180.207	United States
US	155.94.180.216	United States
US	155.94.180.217	United States
US	155.94.180.232	United States
US	155.94.180.250	United States
US	157.56.111.80	United States
US	162.144.104.214	United States
UY	167.61.68.253	Uruguay

Botnet Statistics [2015-10-15]

detection period: 2015-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 3360
number of botnet IPs notified to network operators: 3307
number of spam blocked: 195431
recipient count of spam blocked: 3258027

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1021
2	CHINANET-HB	378
3	UNICOM-AH	307
4	UNICOM-ZJ	176
5	CHINANET-AH	174
6	WASU	171
7	CHINANET-ZJ	154
8	CHINANET-GD	143
9	WASU-BB	123
10	NET-107-151-128-0	77

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1962
2	Taiwan	1025
3	United States	187
4	Viet Nam	42
5	South Korea	20
6	India	17
7	Brazil	17
8	Russian Federation	9
9	Romania	6
10	Colombia	6

Suspected Bot List [2015-10-13]

detection period: 2015-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.15.192.210	Argentina
AR	190.51.181.238	Argentina
AR	190.179.133.252	Argentina
AR	200.49.158.44	Argentina
BR	150.164.88.242	Brazil
CO	190.60.108.2	Colombia
EC	181.196.187.102	Ecuador
ID	103.16.199.130	Indonesia
ID	103.16.199.131	Indonesia
ID	103.26.215.3	Indonesia
ID	202.62.10.210	Indonesia
IN	203.194.109.142	India
IT	95.74.78.186	Italy
MA	212.217.2.8	Morocco
MX	189.228.154.58	Mexico
MX	201.132.123.9	Mexico
RO	92.83.49.41	Romania
TR	95.65.234.123	Turkey
US	68.188.100.96	United States
US	198.154.241.165	United States
UY	167.61.138.37	Uruguay

Botnet Statistics [2015-10-13]

detection period: 2015-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 2501
number of botnet IPs notified to network operators: 2480
number of spam blocked: 205606
recipient count of spam blocked: 3359676

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1019
2	UNICOM-AH	425
3	CHINANET-HB	328
4	CHINANET-AH	118
5	WASU	87
6	UNICOM-ZJ	84
7	WASU-BB	57
8	CHINANET-GD	51
9	CHINANET-ZJ	46
10	CHINANET-HN	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1330
2	Taiwan	1024
3	Brazil	21
4	United States	18
5	Viet Nam	11
6	Russian Federation	10
7	Indonesia	6
8	Colombia	6
9	South Korea	5
10	India	5

Suspected Bot List [2015-10-12]

detection period: 2015-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.18.124.121	Argentina
AR	190.190.234.252	Argentina
CA	72.55.153.155	Canada
EC	181.112.60.106	Ecuador
ES	87.111.49.137	Spain
ID	103.16.199.130	Indonesia
ID	111.94.104.141	Indonesia
ID	182.23.32.91	Indonesia
IN	59.98.200.205	India
IN	59.99.180.62	India
IN	61.246.137.58	India
IN	116.74.69.253	India
IN	117.193.20.159	India
IN	117.241.113.128	India
IN	120.59.235.95	India
IN	122.170.105.219	India
IN	125.16.12.146	India
IN	150.129.103.124	India
IN	182.72.107.166	India
IN	182.72.139.50	India
KZ	2.132.84.176	Kazakhstan
KZ	213.157.50.254	Kazakhstan
MA	212.217.2.8	Morocco
MX	187.177.172.13	Mexico
PK	182.191.43.62	Pakistan
US	68.188.100.96	United States
ZA	105.210.163.136	South Africa

Botnet Statistics [2015-10-12]

detection period: 2015-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 2777
number of botnet IPs notified to network operators: 2750
number of spam blocked: 224503
recipient count of spam blocked: 3517160

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1050
2	UNICOM-AH	388
3	CHINANET-HB	320
4	UNICOM-ZJ	151
5	WASU	134
6	CHINANET-GD	117
7	CHINANET-AH	95
8	WASU-BB	54
9	VNPT-VNNIC-VN	44
10	CHINANET-HN	30

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1466
2	Taiwan	1056
3	Viet Nam	87
4	Brazil	20
5	United States	18
6	Russian Federation	17
7	India	17
8	Ukraine	8
9	South Korea	8
10	Turkey	7

Suspected Bot List [2015-10-11]

detection period: 2015-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	179.41.240.184	Argentina
AR	181.26.183.73	Argentina
AR	186.22.20.218	Argentina
AR	190.244.43.47	Argentina
AR	200.122.100.100	Argentina
CO	190.60.108.2	Colombia
DZ	197.117.4.174	Algeria
ES	87.111.49.137	Spain
ID	180.250.210.23	Indonesia
ID	180.252.181.15	Indonesia
IN	122.162.184.168	India
IN	203.194.109.142	India
IT	109.52.216.242	Italy
KZ	5.34.106.190	Kazakhstan
MA	212.217.2.8	Morocco
MX	189.250.21.85	Mexico
MX	200.94.75.210	Mexico
RS	178.149.49.126	Serbia
US	68.188.100.96	United States
US	162.144.104.214	United States
US	198.154.214.215	United States

Botnet Statistics [2015-10-11]

detection period: 2015-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 2547
number of botnet IPs notified to network operators: 2526
number of spam blocked: 305136
recipient count of spam blocked: 3580646

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1066
2	UNICOM-AH	265
3	CHINANET-HB	172
4	CHINANET-GD	168
5	UNICOM-ZJ	135
6	WASU	125
7	WASU-BB	64
8	CHINANET-LN	45
9	VNPT-VNNIC-VN	41
10	CHINANET-HN	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1201
2	Taiwan	1070
3	Viet Nam	81
4	Brazil	23
5	United States	20
6	Ukraine	19
7	India	14
8	Russian Federation	13
9	South Korea	9
10	Indonesia	8

Suspected Bots' IP List for September 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-09-01]
Suspected Bots IP [2015-09-02]
Suspected Bots IP [2015-09-03]
Suspected Bots IP [2015-09-04]
Suspected Bots IP [2015-09-05]
Suspected Bots IP [2015-09-06]
Suspected Bots IP [2015-09-07]
Suspected Bots IP [2015-09-08]
Suspected Bots IP [2015-09-09]
Suspected Bots IP [2015-09-10]
Suspected Bots IP [2015-09-11]
Suspected Bots IP [2015-09-12]
Suspected Bots IP [2015-09-13]
Suspected Bots IP [2015-09-14]
Suspected Bots IP [2015-09-15]
Suspected Bots IP [2015-09-16]
Suspected Bots IP [2015-09-17]
Suspected Bots IP [2015-09-18]
Suspected Bots IP [2015-09-19]
Suspected Bots IP [2015-09-20]
Suspected Bots IP [2015-09-21]
Suspected Bots IP [2015-09-22]
Suspected Bots IP [2015-09-23]
Suspected Bots IP [2015-09-24]
Suspected Bots IP [2015-09-25]
Suspected Bots IP [2015-09-26]
Suspected Bots IP [2015-09-27]
Suspected Bots IP [2015-09-28]
Suspected Bots IP [2015-09-29]
Suspected Bots IP [2015-09-30]

Suspected Bot List [2015-10-10]

detection period: 2015-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.57.231.253	Argentina
AZ	91.135.242.172	Azerbaijan
BR	150.164.88.242	Brazil
CO	190.60.108.2	Colombia
ES	87.111.49.137	Spain
ID	202.62.10.210	Indonesia
IN	59.178.148.44	India
IN	120.57.76.82	India
IN	122.177.216.141	India
IN	125.16.12.146	India
IN	203.194.109.142	India
MA	212.217.2.8	Morocco
MO	60.246.191.187	Macau
MX	177.225.243.67	Mexico
MX	189.142.103.19	Mexico
MX	200.94.75.210	Mexico
RS	188.2.226.123	Serbia
US	174.45.219.54	United States
UY	167.61.21.122	Uruguay

Botnet Statistics [2015-10-10]

detection period: 2015-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 3029
number of botnet IPs notified to network operators: 3010
number of spam blocked: 195709
recipient count of spam blocked: 3530794

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1084
2	CHINANET-HB	366
3	UNICOM-AH	258
4	WASU	206
5	CHINANET-GD	203
6	WASU-BB	179
7	UNICOM-ZJ	111
8	CHINANET-JS	56
9	CHINANET-HN	56
10	CHINANET-LN	42

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1724
2	Taiwan	1085
3	Viet Nam	34
4	Brazil	27
5	United States	18
6	India	17
7	Russian Federation	16
8	European Union	16
9	South Korea	10
10	Colombia	9

Suspected Bot List [2015-10-09]

detection period: 2015-10-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.182.40.206	Argentina
BG	78.128.24.57	Bulgaria
BG	94.26.77.68	Bulgaria
BY	91.149.173.211	Belarus
CO	190.60.108.2	Colombia
ES	87.111.49.137	Spain
ES	87.235.177.251	Spain
ID	103.16.199.131	Indonesia
ID	103.26.215.3	Indonesia
ID	111.94.135.226	Indonesia
ID	202.62.10.210	Indonesia
IN	59.94.210.14	India
IN	106.220.174.55	India
IN	117.201.40.43	India
IN	117.222.114.150	India
IN	117.247.222.156	India
IN	122.170.105.219	India
IN	122.179.28.214	India
IN	182.74.98.218	India
IN	182.75.49.6	India
IN	203.192.212.52	India
IN	203.194.109.142	India
IT	150.145.60.121	Italy
KZ	109.201.55.64	Kazakhstan
MX	189.193.198.243	Mexico
MX	189.211.83.146	Mexico
MX	200.94.75.210	Mexico
MZ	197.235.32.2	Mozambique
PK	39.55.193.127	Pakistan
RO	86.34.170.206	Romania
RO	86.34.221.102	Romania
RO	89.120.75.232	Romania
RO	89.122.117.53	Romania
UA	176.121.238.165	Ukraine
US	47.59.68.219	United States
US	162.144.104.214	United States
UY	167.61.46.174	Uruguay
UY	167.61.69.66	Uruguay

Botnet Statistics [2015-10-09]

detection period: 2015-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 3339
number of botnet IPs notified to network operators: 3301
number of spam blocked: 198329
recipient count of spam blocked: 3627371

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1099
2	UNICOM-AH	469
3	CHINANET-HB	397
4	CHINANET-GD	182
5	CHINANET-ZJ	150
6	UNICOM-ZJ	141
7	WASU	119
8	WASU-BB	97
9	CHINANET-JS	81
10	CHINANET-HN	58

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1959
2	Taiwan	1102
3	Viet Nam	89
4	Brazil	30
5	Russian Federation	26
6	India	22
7	United States	20
8	Indonesia	10
9	Colombia	7
10	Ukraine	5

Suspected Bot List [2015-10-08]

detection period: 2015-10-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.17.59.163	Argentina
AR	190.51.158.82	Argentina
AR	190.193.54.18	Argentina
AR	200.50.176.46	Argentina
BG	78.128.24.57	Bulgaria
CO	190.60.108.2	Colombia
ES	83.53.151.96	Spain
ES	87.111.49.137	Spain
ID	103.16.199.130	Indonesia
ID	103.16.199.131	Indonesia
ID	103.26.215.3	Indonesia
ID	114.141.49.90	Indonesia
ID	202.62.10.210	Indonesia
IN	59.88.149.126	India
IN	117.201.25.53	India
IN	117.241.208.165	India
IN	125.16.12.146	India
IN	182.72.139.50	India
IN	203.192.212.52	India
IN	203.194.109.142	India
IT	2.194.89.254	Italy
KZ	109.229.176.111	Kazakhstan
MA	41.137.19.3	Morocco
MA	212.217.2.8	Morocco
MX	177.231.134.232	Mexico
MX	189.148.219.114	Mexico
MX	200.94.75.210	Mexico
MX	201.113.168.144	Mexico
PH	122.3.36.203	Philippines
PK	39.41.128.48	Pakistan
US	24.240.82.184	United States
US	162.144.104.214	United States
UY	167.61.25.160	Uruguay