Suspected Bot List [2015-11-29]

detection period: 2015-11-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MO	27.109.136.25	Macau
MO	27.109.177.202	Macau
MX	187.141.118.20	Mexico

List from greylisting:

country code	IP address	Country
CM	41.202.221.42	Cameroon
MX	187.177.172.13	Mexico
US	162.144.104.214	United States
US	162.144.131.227	United States

Botnet Statistics [2015-11-29]

detection period: 2015-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1013
number of botnet IPs notified to network operators: 1006
number of spam blocked: 60522
recipient count of spam blocked: 417068

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	140
2	CHINANET-ZJ-JH	106
3	CHINANET-ZJ	93
4	UNICOM-ZJ	91
5	CHINANET-HB	90
6	CHINANET-SC	83
7	CHINANET-JS	72
8	UNICOM-AH	64
9	WASU	58
10	WASU-BB	43

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	955
2	United States	15
3	Taiwan	8
4	Thailand	5
5	Hong Kong	3
6	Viet Nam	2
7	Russian Federation	2
8	Peru	2
9	Mexico	2
10	Macau	2

Suspected Bot List [2015-11-28]

detection period: 2015-11-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
UY	167.57.126.193	Uruguay

List from greylisting:

country code	IP address	Country
BD	180.210.130.16	Bangladesh
BO	186.27.127.129	Bolivia
CM	41.202.221.42	Cameroon
IN	117.244.15.243	India
IN	122.183.192.97	India
KZ	77.245.110.111	Kazakhstan
MX	200.94.75.210	Mexico
US	204.44.65.214	United States

Botnet Statistics [2015-11-28]

detection period: 2015-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 313
number of botnet IPs notified to network operators: 304
number of spam blocked: 69976
recipient count of spam blocked: 213028

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	38
2	CHINANET-ZJ	20
3	CHINANET-HB	20
4	CHINANET-AH	18
5	UNICOM-AH	15
6	VNPT-VNNIC-VN	11
7	CHINANET-ZJ-QZ	11
8	CHINANET-JS	8
9	CHINANET-HA	8
10	MAINT-CHINANET-HA	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	199
2	Viet Nam	18
3	United States	12
4	Taiwan	11
5	Brazil	8
6	Thailand	6
7	Germany	5
8	Russian Federation	4
9	United Kingdom	4
10	South Korea	3

Suspected Bot List [2015-11-27]

detection period: 2015-11-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	50.203.120.116	United States
UY	167.57.48.123	Uruguay
UY	167.57.116.133	Uruguay

List from greylisting:

country code	IP address	Country
BD	180.210.130.16	Bangladesh
CM	41.202.221.42	Cameroon
MX	189.254.134.100	Mexico
RO	92.82.45.160	Romania
US	50.116.123.183	United States
US	162.144.131.227	United States

Botnet Statistics [2015-11-27]

detection period: 2015-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 460
number of botnet IPs notified to network operators: 451
number of spam blocked: 250287
recipient count of spam blocked: 357468

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	99
2	WASU	67
3	WASU-BB	64
4	CHINANET-GD	30
5	CHINANET-HB	23
6	CHINANET-JS	13
7	CHINANET-AH	13
8	CHINANET-ZJ	12
9	UNICOM-AH	11
10	HINET-NET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	382
2	United States	16
3	Taiwan	10
4	Viet Nam	8
5	Thailand	5
6	Russian Federation	3
7	South Korea	3
8	Brazil	3
9	Uruguay	2
10	Ukraine	2

Suspected Bot List [2015-11-26]

detection period: 2015-11-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.0.163.20	Argentina
AR	190.193.185.164	Argentina
UY	167.56.35.240	Uruguay
UY	167.56.188.201	Uruguay

List from greylisting:

country code	IP address	Country
AR	186.60.128.8	Argentina
ES	87.235.177.251	Spain
IN	59.99.143.169	India
IN	117.213.188.109	India
IN	117.244.15.243	India
MX	187.177.172.13	Mexico
MX	189.254.134.100	Mexico
US	24.170.233.95	United States
US	155.94.148.35	United States
US	162.144.104.214	United States

Botnet Statistics [2015-11-26]

detection period: 2015-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 834
number of botnet IPs notified to network operators: 820
number of spam blocked: 275819
recipient count of spam blocked: 358139

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	230
2	WASU	144
3	WASU-BB	119
4	CHINANET-ZJ	35
5	CHINANET-HB	34
6	CHINANET-GD	34
7	CHINANET-AH	32
8	UNICOM-AH	27
9	VNPT-VNNIC-VN	18
10	HINET-NET	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	712
2	Viet Nam	39
3	Taiwan	16
4	United States	15
5	Japan	7
6	Russian Federation	5
7	Thailand	4
8	India	3
9	Germany	3
10	Argentina	3

Suspected Bot List [2015-11-25]

detection period: 2015-11-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	208.73.201.211	United States

List from greylisting:

country code	IP address	Country
IN	59.95.53.246	India
IN	61.3.255.153	India
IN	122.169.67.70	India
IN	182.64.74.230	India
IN	182.77.69.128	India
KE	195.202.72.107	Kenya
PK	39.33.198.48	Pakistan
US	50.116.123.183	United States
US	68.184.154.57	United States
US	162.144.104.214	United States

Botnet Statistics [2015-11-25]

detection period: 2015-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1252
number of botnet IPs notified to network operators: 1241
number of spam blocked: 326610
recipient count of spam blocked: 1675979

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	419
2	UNICOM-ZJ	149
3	WASU	92
4	WASU-BB	79
5	CHINANET-ZJ	78
6	CHINANET-HB	74
7	CHINANET-AH	67
8	UNICOM-AH	58
9	CHINANET-GD	35
10	SAKURA-NET	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	700
2	Taiwan	424
3	Viet Nam	33
4	Japan	27
5	United States	16
6	South Korea	5
7	India	5
8	Russian Federation	4
9	Romania	3
10	Hong Kong	3

Suspected Bot List [2015-11-24]

detection period: 2015-11-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	208.73.201.211	United States

List from greylisting:

country code	IP address	Country
BG	217.9.224.141	Bulgaria
CA	184.107.73.206	Canada
ES	87.235.177.251	Spain
IN	59.94.75.191	India
IN	115.118.237.147	India
IN	122.178.157.134	India
IN	182.68.52.232	India
MX	187.177.172.13	Mexico
MX	189.254.134.100	Mexico
US	50.116.123.183	United States
US	162.144.104.214	United States
US	198.57.194.6	United States
US	198.57.247.223	United States

Botnet Statistics [2015-11-24]

detection period: 2015-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1326
number of botnet IPs notified to network operators: 1312
number of spam blocked: 281673
recipient count of spam blocked: 1915778

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	484
2	WASU	150
3	UNICOM-ZJ	114
4	WASU-BB	99
5	CHINANET-HB	69
6	CHINANET-AH	64
7	UNICOM-AH	61
8	CHINANET-ZJ-QZ	46
9	CHINANET-ZJ	41
10	CHINANET-GD	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	740
2	Taiwan	488
3	Viet Nam	29
4	United States	16
5	Japan	5
6	India	5
7	United Kingdom	4
8	Thailand	3
9	Panama	3
10	South Korea	3

Suspected Bot List [2015-11-23]

detection period: 2015-11-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.30.19.182	Argentina
AR	190.48.75.13	Argentina
AZ	5.178.7.206	Azerbaijan
ES	87.235.177.251	Spain
GR	79.107.96.207	Greece
IN	61.1.32.119	India
IN	120.63.151.178	India
IN	202.134.182.2	India
IN	223.176.132.121	India
ME	46.161.92.226	Montenegro
MX	187.177.172.13	Mexico
MX	189.165.192.246	Mexico
MX	189.193.198.243	Mexico
PH	124.106.167.60	Philippines
RO	92.80.190.27	Romania
US	162.144.104.214	United States
US	198.57.194.6	United States

Botnet Statistics [2015-11-23]

detection period: 2015-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 866
number of botnet IPs notified to network operators: 849
number of spam blocked: 222079
recipient count of spam blocked: 570844

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	113
2	UNICOM-ZJ	111
3	WASU-BB	88
4	CHINANET-HB	79
5	CHINANET-AH	78
6	CHINANET-ZJ	76
7	UNICOM-AH	60
8	VNPT-VNNIC-VN	32
9	UNICOM-BJ	17
10	CHINANET-GD	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	699
2	Viet Nam	73
3	United States	12
4	Taiwan	9
5	Thailand	8
6	Brazil	7
7	India	5
8	Germany	5
9	Mexico	4
10	Indonesia	4

Suspected Bot List [2015-11-22]

detection period: 2015-11-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	186.56.109.6	Argentina
AR	190.7.61.199	Argentina
CO	190.61.4.62	Colombia
EG	196.218.145.190	Egypt
IN	122.163.4.109	India
IN	202.63.98.161	India
KE	195.202.72.107	Kenya
LK	175.157.191.231	Sri Lanka
MX	189.241.78.220	Mexico
PY	190.121.174.65	Paraguay
US	50.116.123.183	United States
US	162.144.104.214	United States
US	192.185.4.117	United States

Botnet Statistics [2015-11-22]

detection period: 2015-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 624
number of botnet IPs notified to network operators: 611
number of spam blocked: 249623
recipient count of spam blocked: 413547

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	79
2	CHINANET-HB	78
3	WASU	57
4	UNICOM-AH	55
5	CHINANET-ZJ	55
6	CHINANET-AH	48
7	WASU-BB	37
8	VNPT-VNNIC-VN	34
9	CHINANET-GD	18
10	UNICOM-BJ	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	483
2	Viet Nam	54
3	United States	17
4	Russian Federation	16
5	Germany	4
6	Brazil	4
7	Taiwan	3
8	Turkey	3
9	Iran	3
10	India	3

Suspected Bot List [2015-11-21]

detection period: 2015-11-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.210.149.165	Argentina
US	155.94.148.35	United States

Botnet Statistics [2015-11-21]

detection period: 2015-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 351
number of botnet IPs notified to network operators: 349
number of spam blocked: 267927
recipient count of spam blocked: 543423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	94
2	CHINANET-HB	75
3	UNICOM-AH	24
4	CHINANET-JS	22
5	CHINANET-GD	22
6	UNICOM-BJ	11
7	CHINANET-AH	10
8	CHINANET-ZJ-SX	6
9	CHINANET-ZJ-JH	4
10	BJENET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	304
2	United States	13
3	Taiwan	5
4	Thailand	4
5	Germany	3
6	Russian Federation	2
7	Bulgaria	2
8	Viet Nam	1
9	Ukraine	1
10	Turkey	1

Suspected Bot List [2015-11-20]

detection period: 2015-11-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.210.149.165	Argentina
IN	117.218.69.229	India
MX	187.217.165.227	Mexico
RO	92.85.147.129	Romania
US	162.144.104.214	United States

Botnet Statistics [2015-11-20]

detection period: 2015-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 631
number of botnet IPs notified to network operators: 626
number of spam blocked: 205946
recipient count of spam blocked: 338020

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	123
2	WASU-BB	75
3	CHINANET-HB	70
4	CHINANET-ZJ	65
5	CHINANET-AH	51
6	UNICOM-ZJ	50
7	CHINANET-GD	28
8	UNICOM-AH	27
9	CHINANET-JS	10
10	UNICOM-BJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	556
2	Viet Nam	11
3	Taiwan	10
4	United States	8
5	Ukraine	6
6	Russian Federation	4
7	Brazil	4
8	Thailand	3
9	India	3
10	Germany	3

Suspected Bot List [2015-11-19]

detection period: 2015-11-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
DO	200.42.219.44	Dominican Republic
MX	187.131.35.15	Mexico
TW	123.194.31.30	Taiwan
US	50.255.96.65	United States

List from greylisting:

country code	IP address	Country
AE	217.165.164.208	Arab Emirates
AR	181.15.123.18	Argentina
AR	181.31.12.106	Argentina
AR	190.178.7.131	Argentina
AR	190.190.127.21	Argentina
CN	121.40.80.62	China
ES	87.235.177.251	Spain
IN	14.140.253.194	India
IN	59.88.217.24	India
IN	59.96.110.179	India
IN	61.0.94.241	India
IN	117.193.186.195	India
IN	117.214.44.205	India
IN	120.57.166.19	India
IN	122.168.5.151	India
IN	122.170.9.100	India
MA	41.137.56.4	Morocco
MX	200.94.75.210	Mexico
PH	58.71.96.62	Philippines
RO	89.120.95.9	Romania
RO	92.82.94.33	Romania
RO	109.99.32.166	Romania
UA	178.213.107.190	Ukraine
UA	193.107.130.184	Ukraine
US	64.6.236.75	United States
US	66.188.117.246	United States
US	96.39.42.105	United States
US	155.94.148.35	United States
US	162.144.104.214	United States

Botnet Statistics [2015-11-19]

detection period: 2015-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 850
number of botnet IPs notified to network operators: 817
number of spam blocked: 251106
recipient count of spam blocked: 450161

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	114
2	UNICOM-ZJ	98
3	WASU-BB	70
4	CHINANET-HB	47
5	VNPT-VNNIC-VN	43
6	CHINANET-ZJ	43
7	CHINANET-AH	40
8	UNICOM-AH	34
9	CHINANET-GD	32
10	SC-CH-NET-SRL	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	566
2	Viet Nam	87
3	United States	30
4	European Union	18
5	India	14
6	South Korea	12
7	Brazil	12
8	Ukraine	10
9	Poland	9
10	Taiwan	8

Suspected Bot List [2015-11-18]

detection period: 2015-11-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	24.232.112.60	Argentina
DO	200.42.219.44	Dominican Republic
MX	187.131.35.15	Mexico
MX	189.176.244.187	Mexico
US	50.255.96.65	United States

List from greylisting:

country code	IP address	Country
AM	46.241.201.205	Armenia
AR	190.210.149.165	Argentina
ES	87.235.177.251	Spain
IN	59.90.79.135	India
IN	61.3.200.126	India
IN	117.208.234.77	India
IN	122.169.4.100	India
IN	122.175.238.191	India
IN	182.68.153.40	India
KG	91.192.66.210	Kyrgyzstan
RO	89.122.16.246	Romania
RO	92.81.30.225	Romania
RU	91.218.163.6	Russian Federation
TR	46.2.123.10	Turkey
US	64.6.236.75	United States
US	155.94.148.35	United States
US	216.172.173.36	United States

Botnet Statistics [2015-11-18]

detection period: 2015-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 852
number of botnet IPs notified to network operators: 830
number of spam blocked: 287342
recipient count of spam blocked: 565299

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	134
2	WASU	93
3	WASU-BB	85
4	CHINANET-ZJ	58
5	CHINANET-HB	51
6	CHINANET-GD	49
7	CHINANET-AH	47
8	UNICOM-AH	44
9	VNPT-VNNIC-VN	37
10	CHINANET-JS	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	655
2	Viet Nam	68
3	Japan	18
4	United States	13
5	India	10
6	Ukraine	9
7	Taiwan	9
8	Russian Federation	9
9	Brazil	7
10	Turkey	5

Suspected Bot List [2015-11-17]

detection period: 2015-11-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	24.232.112.60	Argentina
DO	200.42.219.44	Dominican Republic
MX	189.176.244.187	Mexico
MX	189.176.250.180	Mexico
US	50.203.120.116	United States
US	50.241.22.137	United States
US	50.255.96.65	United States

List from greylisting:

country code	IP address	Country
AE	217.165.126.154	Arab Emirates
AR	190.210.9.23	Argentina
AR	190.210.149.165	Argentina
IN	27.251.239.186	India
KW	62.215.59.49	Kuwait
US	64.6.236.75	United States
US	155.94.148.35	United States
US	162.144.34.20	United States
US	173.254.219.249	United States

Botnet Statistics [2015-11-17]

detection period: 2015-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 938
number of botnet IPs notified to network operators: 922
number of spam blocked: 323425
recipient count of spam blocked: 601971

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	142
2	WASU	129
3	CHINANET-ZJ	107
4	CHINANET-HB	103
5	CHINANET-AH	86
6	UNICOM-AH	83
7	WASU-BB	73
8	CHINANET-GD	23
9	CHINANET-JS	19
10	UNICOM-BJ	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	861
2	United States	19
3	Taiwan	8
4	Germany	5
5	Viet Nam	4
6	South Africa	3
7	India	3
8	Indonesia	3
9	Argentina	3
10	Turkey	2

Suspected Bot List [2015-11-16]

detection period: 2015-11-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 312

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AE	83.110.58.100	Arab Emirates
AE	83.110.74.187	Arab Emirates
AE	83.110.94.204	Arab Emirates
AE	83.110.136.131	Arab Emirates
AE	83.110.137.198	Arab Emirates
AE	83.110.148.145	Arab Emirates
AL	77.247.90.245	Albania
AL	79.106.110.62	Albania
AR	181.16.111.105	Argentina
AR	181.23.216.43	Argentina
AR	181.25.209.8	Argentina
AR	181.28.238.229	Argentina
AR	181.164.238.100	Argentina
AR	181.165.253.43	Argentina
AR	181.167.129.209	Argentina
AR	181.167.251.189	Argentina
AR	181.168.32.176	Argentina
AR	181.189.210.157	Argentina
AR	186.122.136.158	Argentina
AR	186.138.199.143	Argentina
AR	190.2.21.101	Argentina
AR	190.3.71.234	Argentina
AR	190.17.223.54	Argentina
AR	190.30.245.109	Argentina
AR	190.55.196.183	Argentina
AR	190.104.249.64	Argentina
AR	190.105.127.9	Argentina
AR	190.173.18.213	Argentina
AR	190.174.27.80	Argentina
AR	190.188.105.228	Argentina
AR	190.210.9.23	Argentina
AR	190.210.149.165	Argentina
AR	190.230.135.148	Argentina
AR	190.244.20.53	Argentina
AR	190.245.81.170	Argentina
AR	200.3.189.248	Argentina
AR	200.68.92.93	Argentina
AR	200.123.157.186	Argentina
AR	201.231.145.78	Argentina
AR	201.251.136.4	Argentina
BD	103.242.216.226	Bangladesh
BD	103.242.219.18	Bangladesh
BG	78.90.7.87	Bulgaria
BO	181.114.119.188	Bolivia
BO	181.115.140.101	Bolivia
BO	190.129.154.139	Bolivia
BO	190.129.165.152	Bolivia
BO	200.87.131.142	Bolivia
BO	200.87.146.149	Bolivia
BO	200.87.171.186	Bolivia
CO	190.7.130.107	Colombia
DO	148.103.232.19	Dominican Republic
DO	186.120.186.44	Dominican Republic
DZ	41.107.119.173	Algeria
DZ	105.104.147.189	Algeria
DZ	197.115.133.111	Algeria
DZ	197.117.188.77	Algeria
EC	190.63.4.145	Ecuador
EC	190.214.21.185	Ecuador
EC	200.125.236.186	Ecuador
EC	201.238.179.191	Ecuador
ES	79.146.91.45	Spain
ES	81.33.189.78	Spain
ES	83.50.65.136	Spain
ES	83.50.85.164	Spain
ES	83.58.254.143	Spain
ES	88.14.234.199	Spain
ES	89.7.171.108	Spain
ES	95.60.187.163	Spain
ES	95.121.21.175	Spain
ET	213.55.115.109	Ethiopia
GB	2.216.118.87	United Kingdom
GB	2.217.115.252	United Kingdom
GB	2.218.63.114	United Kingdom
GB	5.65.82.7	United Kingdom
GB	5.71.65.90	United Kingdom
GB	90.194.114.60	United Kingdom
GB	151.224.19.190	United Kingdom
GB	151.230.64.99	United Kingdom
GB	213.41.83.218	United Kingdom
GH	41.218.217.7	Ghana
GH	41.218.223.182	Ghana
GH	196.11.90.10	Ghana
GR	79.107.229.143	Greece
GR	79.166.26.220	Greece
GR	141.237.106.161	Greece
GT	181.189.152.102	Guatemala
GT	200.6.244.122	Guatemala
GT	200.35.180.180	Guatemala
HN	190.53.241.206	Honduras
IL	94.159.171.16	Israel
IN	1.39.36.129	India
IN	1.39.49.178	India
IN	27.34.253.42	India
IN	27.109.24.174	India
IN	27.251.185.54	India
IN	59.92.99.223	India
IN	59.177.217.119	India
IN	59.178.76.115	India
IN	59.182.179.49	India
IN	59.183.184.174	India
IN	60.243.252.209	India
IN	60.254.96.212	India
IN	61.2.19.101	India
IN	61.3.146.51	India
IN	103.2.132.117	India
IN	103.2.132.203	India
IN	103.2.134.134	India
IN	106.216.137.99	India
IN	115.98.50.253	India
IN	117.194.17.103	India
IN	117.194.149.74	India
IN	117.194.200.78	India
IN	117.195.228.122	India
IN	117.199.191.198	India
IN	117.200.89.247	India
IN	117.202.112.247	India
IN	117.205.119.180	India
IN	117.206.187.172	India
IN	117.207.169.68	India
IN	117.211.165.83	India
IN	117.213.94.159	India
IN	117.214.32.211	India
IN	117.218.64.133	India
IN	117.222.46.82	India
IN	117.222.66.238	India
IN	117.228.111.158	India
IN	117.229.67.181	India
IN	117.234.170.235	India
IN	117.242.213.120	India
IN	117.244.99.5	India
IN	117.253.167.250	India
IN	120.57.232.205	India
IN	120.59.38.50	India
IN	120.88.181.157	India
IN	122.161.58.163	India
IN	122.161.90.13	India
IN	122.161.212.210	India
IN	122.163.16.152	India
IN	122.163.60.147	India
IN	122.163.77.10	India
IN	122.163.93.55	India
IN	122.163.215.146	India
IN	122.164.236.117	India
IN	122.167.38.86	India
IN	122.167.116.218	India
IN	122.168.57.12	India
IN	122.168.141.69	India
IN	122.168.246.215	India
IN	122.170.57.31	India
IN	122.171.123.210	India
IN	122.171.215.79	India
IN	122.172.149.44	India
IN	122.172.205.116	India
IN	122.172.248.169	India
IN	122.173.81.123	India
IN	122.175.209.46	India
IN	122.176.68.209	India
IN	122.176.252.207	India
IN	122.178.175.231	India
IN	123.201.198.103	India
IN	125.19.97.198	India
IN	150.129.29.187	India
IN	150.129.126.195	India
IN	182.57.254.227	India
IN	182.68.97.252	India
IN	182.69.140.211	India
IN	182.71.160.209	India
IN	182.73.21.86	India
IN	182.73.204.34	India
IN	182.74.184.211	India
IN	182.74.209.226	India
IN	202.63.115.82	India
IN	223.176.14.154	India
IQ	93.91.194.202	Iraq
IQ	95.170.192.216	Iraq
IQ	130.193.199.35	Iraq
IQ	130.193.220.86	Iraq
IR	85.133.226.60	Iran
IR	89.165.82.128	Iran
IT	5.170.2.190	Italy
IT	95.227.194.158	Italy
IT	95.237.165.128	Italy
IT	95.240.6.201	Italy
IT	95.241.162.251	Italy
IT	95.245.67.86	Italy
IT	95.249.14.185	Italy
IT	95.252.75.233	Italy
IT	188.11.173.22	Italy
KE	41.215.52.146	Kenya
KE	105.50.37.96	Kenya
KE	197.254.85.130	Kenya
KH	114.134.189.169	Cambodia
KH	114.134.189.181	Cambodia
KH	114.134.189.191	Cambodia
KW	62.215.163.226	Kuwait
KW	83.96.52.126	Kuwait
KW	168.187.16.253	Kuwait
KZ	2.132.85.222	Kazakhstan
LB	85.112.70.168	Lebanon
LK	175.157.242.90	Sri Lanka
LK	175.157.244.13	Sri Lanka
ME	46.161.108.193	Montenegro
ME	178.175.52.126	Montenegro
MO	60.246.188.34	Macau
MU	41.212.158.50	Mauritius
MX	177.229.148.43	Mexico
MX	177.232.114.234	Mexico
MX	177.240.65.93	Mexico
MX	177.244.43.3	Mexico
MX	187.176.65.213	Mexico
MX	187.178.247.65	Mexico
MX	187.242.160.185	Mexico
MX	189.193.89.234	Mexico
MX	189.197.182.248	Mexico
MX	189.205.202.141	Mexico
MX	189.206.54.50	Mexico
MX	189.208.101.130	Mexico
MX	189.209.22.31	Mexico
MX	201.128.223.211	Mexico
MX	201.163.42.34	Mexico
MX	201.164.160.255	Mexico
MY	123.136.106.205	Malaysia
NG	41.75.203.11	Nigeria
PH	122.52.117.37	Philippines
PH	122.54.77.92	Philippines
PK	39.32.69.49	Pakistan
PK	39.32.144.148	Pakistan
PK	39.32.165.111	Pakistan
PK	39.32.169.43	Pakistan
PK	39.32.181.128	Pakistan
PK	39.33.232.178	Pakistan
PK	39.34.105.112	Pakistan
PK	39.42.64.12	Pakistan
PK	39.43.110.49	Pakistan
PK	39.45.20.86	Pakistan
PK	39.48.125.80	Pakistan
PK	39.49.50.236	Pakistan
PK	39.54.182.153	Pakistan
PK	39.55.32.145	Pakistan
PK	39.55.139.143	Pakistan
PK	39.55.239.60	Pakistan
PK	115.186.58.204	Pakistan
PK	115.186.92.110	Pakistan
PK	115.186.103.12	Pakistan
PK	119.157.0.231	Pakistan
PK	182.178.139.231	Pakistan
PK	182.185.12.164	Pakistan
PK	182.185.24.106	Pakistan
PK	182.185.69.34	Pakistan
PK	182.185.223.211	Pakistan
PK	182.185.253.141	Pakistan
PK	182.186.247.140	Pakistan
PK	182.188.221.236	Pakistan
PK	182.191.67.80	Pakistan
PK	203.101.179.84	Pakistan
PY	186.17.144.143	Paraguay
PY	190.128.150.70	Paraguay
PY	200.85.41.182	Paraguay
RO	86.34.169.14	Romania
RO	86.34.184.210	Romania
RO	86.35.228.61	Romania
RO	89.122.180.237	Romania
RO	92.82.235.235	Romania
RO	92.83.191.58	Romania
RO	92.84.44.76	Romania
RO	92.84.84.202	Romania
RO	92.85.89.95	Romania
RO	92.85.179.216	Romania
RO	92.86.201.3	Romania
RS	24.135.208.76	Serbia
RS	89.216.138.101	Serbia
RS	178.148.191.52	Serbia
RS	178.149.82.179	Serbia
RS	178.149.254.46	Serbia
RS	188.2.61.118	Serbia
RS	188.2.86.47	Serbia
RS	188.2.153.54	Serbia
SD	196.202.152.242	Sudan
SK	78.99.98.95	Slovakia
SV	190.86.175.37	El Salvador
TH	112.143.6.20	Thailand
TM	217.174.234.7	Turkmenistan
TR	31.155.249.199	Turkey
TR	46.2.3.59	Turkey
TR	46.2.69.110	Turkey
TR	46.2.252.238	Turkey
TR	94.78.71.237	Turkey
TR	188.3.217.92	Turkey
TW	118.233.217.210	Taiwan
TW	123.192.223.214	Taiwan
TW	123.193.125.70	Taiwan
TZ	41.59.251.190	Tanzania
US	47.67.124.51	United States
US	47.67.219.84	United States
US	50.255.165.230	United States
US	64.6.236.75	United States
US	162.144.34.20	United States
UY	167.56.17.167	Uruguay
UY	167.58.33.102	Uruguay
UY	167.60.19.84	Uruguay
UY	167.62.149.58	Uruguay
UY	179.25.159.21	Uruguay
UY	179.29.114.80	Uruguay
UY	186.48.23.209	Uruguay
UY	186.48.170.151	Uruguay
UY	186.50.51.116	Uruguay
UZ	213.230.77.35	Uzbekistan
UZ	213.230.78.26	Uzbekistan
UZ	213.230.101.182	Uzbekistan
ZA	197.255.127.177	South Africa
ZM	41.72.121.213	Zambia

Botnet Statistics [2015-11-16]

detection period: 2015-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 2679
number of botnet IPs notified to network operators: 2367
number of spam blocked: 75597
recipient count of spam blocked: 1471299

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	443
2	UNICOM-ZJ	132
3	WASU	97
4	VNPT-VNNIC-VN	94
5	CHINANET-ZJ	91
6	CHINANET-HB	85
7	WASU-BB	76
8	UNICOM-AH	73
9	CHINANET-AH	73
10	FPT-VN	52

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	753
2	Taiwan	456
3	Viet Nam	262
4	India	154
5	Turkey	73
6	Iran	52
7	Mexico	47
8	Italy	46
9	Peru	36
10	Pakistan	35

Suspected Bot List [2015-11-15]

detection period: 2015-11-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	24.232.112.60	Argentina
DO	200.42.219.44	Dominican Republic
MX	187.131.22.18	Mexico
MX	189.176.244.109	Mexico
MX	189.252.9.19	Mexico
US	50.255.96.65	United States

List from greylisting:

country code	IP address	Country
AR	190.210.149.165	Argentina
MX	187.177.172.13	Mexico
RS	178.149.66.24	Serbia
TW	123.192.242.219	Taiwan
US	64.6.236.75	United States
US	155.94.254.59	United States
US	162.144.104.214	United States

Botnet Statistics [2015-11-15]

detection period: 2015-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1702
number of botnet IPs notified to network operators: 1689
number of spam blocked: 139446
recipient count of spam blocked: 3811623

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1031
2	CHINANET-GD	97
3	CHINANET-ZJ	73
4	CHINANET-AH	69
5	CHINANET-HB	67
6	UNICOM-AH	52
7	UNICOM-ZJ	40
8	CHINANET-JS	31
9	WASU	24
10	WASU-BB	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1037
2	China	575
3	Viet Nam	29
4	United States	13
5	Thailand	5
6	Germany	5
7	Russian Federation	4
8	Mexico	4
9	Chile	3
10	Turkey	2

Suspected Bot List [2015-11-14]

detection period: 2015-11-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	181.15.90.37	Argentina
AR	181.166.80.209	Argentina
AR	190.103.225.98	Argentina
AR	190.210.149.165	Argentina
IN	1.39.63.68	India
IN	106.219.5.34	India
IN	117.204.46.9	India
IN	117.221.90.59	India
IN	117.241.6.234	India
IN	120.61.162.107	India
IN	120.63.149.16	India
IN	122.176.201.244	India
IN	182.64.241.228	India
IN	182.74.175.198	India
IR	5.200.68.118	Iran
MX	189.233.57.251	Mexico
PK	39.33.223.118	Pakistan
PK	39.43.107.227	Pakistan
PL	188.146.68.67	Poland
PL	188.146.68.90	Poland
RO	109.96.244.164	Romania
RO	109.101.24.206	Romania
TH	222.123.128.1	Thailand
TR	31.155.211.81	Turkey
UA	91.211.213.35	Ukraine
UA	194.8.147.152	Ukraine
US	64.6.236.75	United States

Botnet Statistics [2015-11-14]

detection period: 2015-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1477
number of botnet IPs notified to network operators: 1450
number of spam blocked: 137467
recipient count of spam blocked: 3411616

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	889
2	VNPT-VNNIC-VN	54
3	CHINANET-ZJ	42
4	CHINANET-HB	42
5	CHINANET-GD	41
6	CHINANET-AH	39
7	CHINANET-ZJ-NB	32
8	UNICOM-AH	27
9	CHINANET-JS	19
10	FPT-VN	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	894
2	China	321
3	Viet Nam	108
4	Ukraine	27
5	Brazil	16
6	India	14
7	Poland	10
8	Romania	9
9	Turkey	8
10	Germany	6

Suspected Bots' IP List for October 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-10-01]
Suspected Bots IP [2015-10-02]
Suspected Bots IP [2015-10-03]
Suspected Bots IP [2015-10-04]
Suspected Bots IP [2015-10-05]
Suspected Bots IP [2015-10-06]
Suspected Bots IP [2015-10-07]
Suspected Bots IP [2015-10-08]
Suspected Bots IP [2015-10-09]
Suspected Bots IP [2015-10-10]
Suspected Bots IP [2015-10-11]
Suspected Bots IP [2015-10-12]
Suspected Bots IP [2015-10-13]
Suspected Bots IP [2015-10-15]
Suspected Bots IP [2015-10-16]
Suspected Bots IP [2015-10-17]
Suspected Bots IP [2015-10-18]
Suspected Bots IP [2015-10-19]
Suspected Bots IP [2015-10-20]
Suspected Bots IP [2015-10-21]
Suspected Bots IP [2015-10-22]
Suspected Bots IP [2015-10-23]
Suspected Bots IP [2015-10-24]
Suspected Bots IP [2015-10-25]
Suspected Bots IP [2015-10-26]
Suspected Bots IP [2015-10-27]
Suspected Bots IP [2015-10-28]
Suspected Bots IP [2015-10-29]
Suspected Bots IP [2015-10-30]
Suspected Bots IP [2015-10-31]

Suspected Bot List [2015-11-13]

detection period: 2015-11-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AR	190.55.85.72	Argentina
AR	190.210.149.165	Argentina
EG	196.204.215.17	Egypt
IN	59.96.225.39	India
IN	117.201.162.8	India
IN	117.217.240.90	India
IN	117.222.172.188	India
IN	122.161.42.30	India
IN	122.172.118.126	India
IN	122.176.118.183	India
KZ	5.34.77.57	Kazakhstan
PK	39.43.67.134	Pakistan
US	64.6.236.75	United States

Botnet Statistics [2015-11-13]

detection period: 2015-11-13 00:00-23:59 UTC
total number of suspected botnet IPs: 609
number of botnet IPs notified to network operators: 596
number of spam blocked: 24988
recipient count of spam blocked: 158698

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	135
2	VNPT-VNNIC-VN	44
3	CHINANET-ZJ	44
4	CHINANET-AH	35
5	WASU	33
6	CHINANET-HB	32
7	UNICOM-AH	31
8	UNICOM-ZJ	23
9	WASU-BB	19
10	CHINANET-ZJ-NB	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	426
2	Viet Nam	92
3	India	13
4	Brazil	12
5	Ukraine	8
6	United States	6
7	Taiwan	6
8	Turkey	6
9	Germany	5
10	Romania	4

Suspected Bot List [2015-11-12]

detection period: 2015-11-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
UY	167.57.3.42	Uruguay

List from greylisting:

country code	IP address	Country
AR	190.210.149.165	Argentina
CO	200.80.10.68	Colombia
IN	117.221.189.203	India
IN	182.68.74.98	India
MX	187.210.168.130	Mexico
MX	189.136.51.233	Mexico
RO	89.122.108.233	Romania
US	162.144.34.20	United States

Botnet Statistics [2015-11-12]

detection period: 2015-11-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1387
number of botnet IPs notified to network operators: 1378
number of spam blocked: 130210
recipient count of spam blocked: 3179327

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	660
2	UNICOM-ZJ	141
3	WASU	115
4	CHINANET-GD	107
5	WASU-BB	86
6	CHINANET-AH	40
7	CHINANET-ZJ	33
8	UNICOM-AH	32
9	CHINANET-HB	23
10	CHINANET-JS	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	663
2	China	651
3	Viet Nam	18
4	United States	7
5	Ukraine	5
6	Germany	5
7	Brazil	5
8	Russian Federation	4
9	India	3
10	Turkey	2

Suspected Bot List [2015-11-11]

detection period: 2015-11-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	163.172.10.74	United Kingdom
UY	167.57.3.42	Uruguay

List from greylisting:

country code	IP address	Country
AE	83.111.52.4	Arab Emirates
AR	181.15.123.18	Argentina
AR	181.16.100.172	Argentina
AR	186.128.171.225	Argentina
CO	200.80.10.68	Colombia
ES	87.235.177.251	Spain
IN	61.3.171.193	India
IN	116.73.193.4	India
IQ	130.193.224.173	Iraq
MO	122.100.152.220	Macau
MX	177.228.177.90	Mexico
MX	187.210.168.130	Mexico
RO	86.35.247.78	Romania
RO	89.121.207.83	Romania
RO	92.81.55.89	Romania
RO	109.98.164.156	Romania
RO	109.100.100.57	Romania
RO	109.102.91.85	Romania
RO	109.102.253.218	Romania
TR	95.65.237.66	Turkey
US	162.144.131.227	United States
US	173.254.219.249	United States

Botnet Statistics [2015-11-11]

detection period: 2015-11-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1863
number of botnet IPs notified to network operators: 1839
number of spam blocked: 165368
recipient count of spam blocked: 4194663

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1011
2	UNICOM-ZJ	161
3	CHINANET-GD	121
4	WASU	103
5	WASU-BB	76
6	CHINANET-AH	36
7	CHINANET-HB	35
8	CHINANET-ZJ-NB	32
9	UNICOM-AH	30
10	VNPT-VNNIC-VN	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1017
2	China	686
3	Viet Nam	52
4	Brazil	14
5	United States	13
6	Romania	8
7	Germany	8
8	Ukraine	6
9	Russian Federation	5
10	India	5

Suspected Bot List [2015-11-10]

detection period: 2015-11-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country
AE	83.111.52.4	Arab Emirates
AR	181.170.31.42	Argentina
AR	186.38.47.235	Argentina
AR	186.56.20.105	Argentina
AR	186.138.189.251	Argentina
AR	190.191.110.78	Argentina
AR	200.41.195.67	Argentina
CR	201.203.219.188	Costa Rica
GR	109.242.152.87	Greece
IL	213.57.88.54	Israel
IN	45.123.25.243	India
IN	117.247.165.48	India
IN	122.162.70.154	India
KZ	5.34.42.238	Kazakhstan
KZ	46.34.213.188	Kazakhstan
MX	187.179.191.83	Mexico
MX	187.210.168.130	Mexico
RO	89.122.164.147	Romania
RO	89.123.127.10	Romania
RO	92.80.212.6	Romania
RO	109.97.238.245	Romania
US	75.131.26.125	United States
US	173.254.219.249	United States
US	192.254.137.244	United States
US	216.172.173.36	United States

Botnet Statistics [2015-11-10]

detection period: 2015-11-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1740
number of botnet IPs notified to network operators: 1715
number of spam blocked: 113116
recipient count of spam blocked: 2802311

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1029
2	UNICOM-ZJ	151
3	WASU	107
4	WASU-BB	89
5	CHINANET-GD	56
6	VNPT-VNNIC-VN	42
7	CHINANET-ZJ-NB	15
8	VIETEL-VN	9
9	UNICOM-BJ	8
10	CHINANET-ZJ-JH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1030
2	China	509
3	Viet Nam	81
4	Russian Federation	15
5	Brazil	12
6	Ukraine	10
7	United States	9
8	Turkey	7
9	Romania	6
10	Argentina	6