Suspected Bot List [2016-12-30]

detection period: 2016-12-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-12-30]

detection period: 2016-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 208
number of botnet IPs notified to network operators: 203
number of spam blocked: 5763
recipient count of spam blocked: 9795

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	64
2	CHINANET-HB	15
3	CMNET	12
4	UNICOM-BJ	11
5	CHINANET-JS	7
6	CHINANET-SH	6
7	CHINANET-GD	5
8	CHINANET-CQ	5
9	HINET-NET	4
10	UNICOM-SD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	168
2	United States	7
3	Taiwan	4
4	India	4
5	Viet Nam	3
6	Brazil	3
7	South Africa	2
8	Russian Federation	2
9	South Korea	2
10	Ukraine	1

Suspected Bot List [2016-12-29]

detection period: 2016-12-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-12-29]

detection period: 2016-12-29 00:00-23:59 UTC
total number of suspected botnet IPs: 356
number of botnet IPs notified to network operators: 351
number of spam blocked: 13040
recipient count of spam blocked: 18039

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	210
2	CHINANET-HB	23
3	UNICOM-BJ	11
4	CMNET	9
5	UNICOM-SD	6
6	CHINANET-JS	6
7	CHINANET-GD	4
8	CHINANET-CQ	4
9	VNPT-VNNIC-VN	3
10	UNICOM-GX	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	309
2	Viet Nam	6
3	United States	6
4	Taiwan	5
5	Romania	3
6	South Africa	2
7	Netherlands	2
8	South Korea	2
9	Japan	2
10	Hong Kong	2

Suspected Bot List [2016-12-28]

detection period: 2016-12-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-12-28]

detection period: 2016-12-28 00:00-23:59 UTC
total number of suspected botnet IPs: 354
number of botnet IPs notified to network operators: 349
number of spam blocked: 13746
recipient count of spam blocked: 21303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	203
2	CHINANET-HB	14
3	UNICOM-ZJ	9
4	CMNET	9
5	UNICOM-BJ	8
6	CHINANET-JS	7
7	UNICOM-SD	5
8	VNPT-VNNIC-VN	4
9	UNICOM-GX	4
10	HINET-NET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	305
2	Viet Nam	6
3	Russian Federation	6
4	Taiwan	4
5	United Kingdom	4
6	United States	3
7	Ukraine	3
8	Pakistan	2
9	Iran	2
10	Germany	2

Suspected Bot List [2016-12-27]

detection period: 2016-12-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-12-27]

detection period: 2016-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 505
number of botnet IPs notified to network operators: 499
number of spam blocked: 13762
recipient count of spam blocked: 20251

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	183
2	UNICOM-ZJ	97
3	WASU-BB	66
4	WASU	22
5	CHINANET-HB	18
6	CMNET	10
7	CHINANET-GD	8
8	VNPT-VNNIC-VN	6
9	VIETEL-VNNIC-VN	4
10	UNICOM-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	466
2	Viet Nam	11
3	Taiwan	7
4	India	3
5	South Africa	2
6	Brazil	2
7	Argentina	2
8	United States	1
9	Ukraine	1
10	Russian Federation	1

Suspected Bot List [2016-12-26]

detection period: 2016-12-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-12-26]

detection period: 2016-12-26 00:00-23:59 UTC
total number of suspected botnet IPs: 389
number of botnet IPs notified to network operators: 387
number of spam blocked: 10595
recipient count of spam blocked: 14465

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	161
2	UNICOM-ZJ	54
3	WASU-BB	28
4	CHINANET-HB	28
5	CMNET	13
6	VNPT-VNNIC-VN	9
7	WASU	7
8	UNICOM-BJ	7
9	UNICOM-SD	4
10	CHINANET-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	338
2	Viet Nam	17
3	Taiwan	6
4	Brazil	6
5	Russian Federation	3
6	India	3
7	Germany	3
8	United States	2
9	Thailand	2
10	South Africa	1

Suspected Bot List [2016-12-25]

detection period: 2016-12-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	58.147.173.36	Bangladesh
BD	202.5.37.132	Bangladesh
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GT	181.209.238.225	Guatemala
HT	200.113.221.17	Haiti
ID	118.98.125.58	Indonesia
ID	203.190.113.186	Indonesia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.75.205.202	India
IN	182.75.213.102	India
NI	190.124.32.202	Nicaragua
PK	110.38.217.63	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-25]

detection period: 2016-12-25 00:00-23:59 UTC
total number of suspected botnet IPs: 506
number of botnet IPs notified to network operators: 481
number of spam blocked: 12335
recipient count of spam blocked: 15075

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	165
2	CHINANET-HB	30
3	CMNET	24
4	CHINANET-GD	11
5	CHINANET-YN	10
6	UNICOM-BJ	9
7	UNICOM-GD	8
8	CHINANET-CQ	8
9	UNICOM-SD	7
10	UNICOM-JX	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	352
2	India	17
3	Taiwan	11
4	Bangladesh	9
5	Brazil	8
6	Cambodia	7
7	South Korea	6
8	Colombia	6
9	United States	5
10	El Salvador	5

Suspected Bot List [2016-12-24]

detection period: 2016-12-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	193.252.26.9	France
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	125.17.80.106	India
IN	182.75.205.202	India
KH	103.12.160.149	Cambodia
NI	190.124.32.202	Nicaragua
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.38.217.122	Pakistan
RO	109.166.146.198	Romania
SV	179.5.32.182	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador

List from greylisting:

Botnet Statistics [2016-12-24]

detection period: 2016-12-24 00:00-23:59 UTC
total number of suspected botnet IPs: 399
number of botnet IPs notified to network operators: 383
number of spam blocked: 12148
recipient count of spam blocked: 13525

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	158
2	CHINANET-HB	24
3	CMNET	17
4	CHINANET-GD	9
5	UNICOM-GD	8
6	CHINANET-GX	7
7	UNICOM-JX	6
8	CHINANET-CQ	5
9	UNICOM-LN	4
10	UNICOM-HE	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	309
2	India	12
3	Russian Federation	9
4	United States	7
5	Taiwan	7
6	Cambodia	5
7	South Korea	4
8	Brazil	4
9	Bangladesh	4
10	El Salvador	3

Suspected Bot List [2016-12-23]

detection period: 2016-12-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	58.147.173.36	Bangladesh
CR	181.193.59.118	Costa Rica
CR	186.32.186.58	Costa Rica
ES	62.15.75.212	Spain
FR	62.210.188.153	France
FR	85.203.80.206	France
FR	85.203.105.93	France
FR	193.252.26.9	France
GE	37.131.224.106	Republic Of Georgia
ID	203.190.113.186	Indonesia
IN	27.251.165.130	India
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.70.178	India
IN	182.72.100.238	India
IN	182.75.123.78	India
IN	182.75.205.202	India
KE	196.200.18.90	Kenya
KZ	185.19.195.88	Kazakhstan
NI	190.124.32.202	Nicaragua
PK	110.36.20.8	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.34	El Salvador
SV	179.5.33.78	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.146	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-23]

detection period: 2016-12-23 00:00-23:59 UTC
total number of suspected botnet IPs: 559
number of botnet IPs notified to network operators: 522
number of spam blocked: 15903
recipient count of spam blocked: 17912

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	157
2	CHINANET-HB	30
3	CMNET	29
4	CHINANET-YN	11
5	UNICOM-JX	10
6	CHINANET-GX	10
7	UNICOM-SD	9
8	UNICOM-HE	9
9	UNICOM-GD	9
10	SV-CSCV-LACNIC	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	366
2	India	24
3	Russian Federation	13
4	Taiwan	11
5	Colombia	10
6	Brazil	10
7	El Salvador	9
8	Bangladesh	9
9	Cambodia	8
10	South Korea	7

Suspected Bot List [2016-12-22]

detection period: 2016-12-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	85.203.116.140	France
IN	182.71.70.178	India
IN	182.72.100.238	India
IN	182.75.123.78	India
KE	196.200.18.90	Kenya
KZ	185.19.195.88	Kazakhstan
PK	110.38.217.82	Pakistan
SV	179.5.33.78	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-12-22]

detection period: 2016-12-22 00:00-23:59 UTC
total number of suspected botnet IPs: 470
number of botnet IPs notified to network operators: 434
number of spam blocked: 11595
recipient count of spam blocked: 12357

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	124
2	UNICOM-ZJ	40
3	CHINANET-HB	24
4	VNPT-VNNIC-VN	18
5	CHINANET-GD	16
6	WASU-BB	15
7	CMNET	14
8	UNICOM-SD	10
9	BHARTI-IN	10
10	BSNLNET	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	303
2	India	34
3	Viet Nam	31
4	Taiwan	7
5	Russian Federation	7
6	Pakistan	7
7	Iran	6
8	Thailand	5
9	Indonesia	5
10	Brazil	5

Suspected Bot List [2016-12-21]

detection period: 2016-12-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 63

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	203.190.113.186	Indonesia
IN	182.71.70.178	India
IN	182.72.100.238	India
IN	182.75.123.78	India
KE	196.200.18.90	Kenya
KZ	185.19.195.88	Kazakhstan
SV	179.5.33.78	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-12-21]

detection period: 2016-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 757
number of botnet IPs notified to network operators: 694
number of spam blocked: 14908
recipient count of spam blocked: 22715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	172
2	UNICOM-ZJ	87
3	WASU-BB	62
4	VNPT-VNNIC-VN	27
5	WASU	21
6	CHINANET-HB	18
7	VIETEL-VNNIC-VN	10
8	CMNET	10
9	BSNLNET	10
10	PTCLBB-PK	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	450
2	India	66
3	Viet Nam	64
4	Iran	22
5	Pakistan	13
6	Colombia	9
7	Brazil	9
8	Mexico	8
9	United States	7
10	Taiwan	7

Suspected Bot List [2016-12-20]

detection period: 2016-12-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 80

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.189.194.93	Argentina
BD	43.240.102.85	Bangladesh
BD	116.193.219.166	Bangladesh
CO	190.90.41.195	Colombia
GT	181.209.238.53	Guatemala
GT	190.56.135.9	Guatemala
GT	190.56.156.73	Guatemala
GT	190.56.250.81	Guatemala
ID	203.190.113.186	Indonesia
IN	182.75.123.78	India
KE	196.200.18.90	Kenya
KZ	185.19.195.88	Kazakhstan
SV	179.5.33.78	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-12-20]

detection period: 2016-12-20 00:00-23:59 UTC
total number of suspected botnet IPs: 811
number of botnet IPs notified to network operators: 731
number of spam blocked: 18005
recipient count of spam blocked: 19547

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	254
2	VNPT-VNNIC-VN	45
3	UNICOM-ZJ	34
4	CHINANET-HB	17
5	WASU-BB	16
6	FPT-VN	16
7	CMNET	15
8	BSNLNET	12
9	CHINANET-JS	10
10	UNICOM-SD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	435
2	Viet Nam	89
3	India	84
4	Iran	24
5	Indonesia	12
6	Colombia	12
7	Bangladesh	10
8	Taiwan	9
9	Russian Federation	7
10	Mexico	7

Suspected Bot List [2016-12-19]

detection period: 2016-12-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.189.194.93	Argentina
CO	190.90.41.195	Colombia
FR	193.252.26.9	France
GT	181.209.238.53	Guatemala
GT	181.209.238.69	Guatemala
GT	190.56.135.9	Guatemala
GT	190.56.154.221	Guatemala
GT	190.56.156.73	Guatemala
GT	190.56.250.81	Guatemala
ID	203.190.113.186	Indonesia
IN	182.72.146.78	India
IN	182.72.149.230	India
KE	196.200.18.90	Kenya
KZ	185.19.195.88	Kazakhstan
SV	179.5.33.78	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-12-19]

detection period: 2016-12-19 00:00-23:59 UTC
total number of suspected botnet IPs: 599
number of botnet IPs notified to network operators: 550
number of spam blocked: 13982
recipient count of spam blocked: 15054

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	226
2	CHINANET-SC	34
3	CHINANET-HB	27
4	CMNET	12
5	CHINANET-JS	11
6	VNPT-VNNIC-VN	10
7	UNICOM-SD	8
8	CHINANET-SH	8
9	GT-TESA-LACNIC	6
10	UNICOM-GX	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	401
2	India	32
3	Viet Nam	22
4	Iran	9
5	United States	8
6	Turkey	8
7	Colombia	8
8	Mexico	7
9	Guatemala	7
10	Brazil	7

Suspected Bot List [2016-12-18]

detection period: 2016-12-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	5.158.242.40	France
US	68.119.82.199	United States

List from greylisting:

Botnet Statistics [2016-12-18]

detection period: 2016-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 456
number of botnet IPs notified to network operators: 451
number of spam blocked: 11830
recipient count of spam blocked: 12862

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	205
2	CHINANET-JS	62
3	CHINANET-SC	55
4	CHINANET-HB	23
5	CHINANET-GD	16
6	CMNET	8
7	Chinafic	5
8	UNICOM-SD	4
9	HINET-NET	4
10	CHINANET-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	421
2	United States	9
3	Taiwan	7
4	Russian Federation	3
5	South Korea	2
6	India	2
7	France	2
8	Turkey	1
9	Netherlands	1
10	Kenya	1

Suspected Bot List [2016-12-17]

detection period: 2016-12-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.30.11.71	Argentina
BO	186.27.126.130	Bolivia
FR	37.187.162.49	France
ID	27.124.82.3	Indonesia
ID	202.159.42.246	Indonesia
IN	125.16.240.197	India
US	69.36.65.214	United States

List from greylisting:

Botnet Statistics [2016-12-17]

detection period: 2016-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 528
number of botnet IPs notified to network operators: 498
number of spam blocked: 15603
recipient count of spam blocked: 17927

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	215
2	CHINANET-HB	20
3	CHINANET-SC	18
4	CMNET	13
5	VNPT-VNNIC-VN	9
6	HICHINA	7
7	CHINANET-JS	7
8	BHARTI-IN	7
9	VIETEL-VNNIC-VN	6
10	VIETEL-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	339
2	India	38
3	Viet Nam	32
4	Russian Federation	12
5	Brazil	12
6	Iran	10
7	United States	9
8	Indonesia	5
9	Taiwan	4
10	South Korea	4

Suspected Bot List [2016-12-16]

detection period: 2016-12-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.30.11.71	Argentina
AR	190.108.35.2	Argentina
BO	186.27.126.130	Bolivia
FR	37.187.162.49	France
ID	27.123.1.162	Indonesia
ID	27.124.82.3	Indonesia
IN	125.16.240.197	India
MM	103.27.118.146	Myanmar
US	69.36.65.214	United States

List from greylisting:

Botnet Statistics [2016-12-16]

detection period: 2016-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 748
number of botnet IPs notified to network operators: 673
number of spam blocked: 13344
recipient count of spam blocked: 14398

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	259
2	VNPT-VNNIC-VN	36
3	CHINANET-SC	25
4	CHINANET-HB	21
5	BSNLNET	16
6	BHARTI-IN	14
7	HICHINA	9
8	VIETEL-VN	8
9	PTCLBB-PK	8
10	CHINANET-SD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	404
2	India	87
3	Viet Nam	66
4	Brazil	26
5	Iran	14
6	Pakistan	11
7	Mexico	10
8	Russian Federation	9
9	Indonesia	9
10	United States	8

Suspected Bot List [2016-12-15]

detection period: 2016-12-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.30.11.71	Argentina
AR	190.108.35.2	Argentina
BO	186.27.126.130	Bolivia
FR	37.187.162.49	France
ID	27.123.1.162	Indonesia
ID	27.124.82.3	Indonesia
IN	125.16.240.197	India
NO	193.150.121.66	Norway
US	69.36.65.214	United States

List from greylisting:

Botnet Statistics [2016-12-15]

detection period: 2016-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 789
number of botnet IPs notified to network operators: 687
number of spam blocked: 23414
recipient count of spam blocked: 25155

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	233
2	UNICOM-JS	29
3	VNPT-VNNIC-VN	27
4	CHINANET-HB	21
5	FPT-VN	16
6	PTCLBB-PK	15
7	CMNET	11
8	BSNLNET	10
9	BHARTI-IN	9
10	HICHINA	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	369
2	India	73
3	Viet Nam	71
4	Brazil	31
5	Iran	23
6	Pakistan	22
7	United States	18
8	Mexico	14
9	Indonesia	12
10	Italy	10

Suspected Bot List [2016-12-14]

detection period: 2016-12-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
CV	197.255.143.108	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
FR	85.203.120.51	France
FR	193.252.26.9	France
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.71.16.154	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.98.186	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.33.37	Pakistan
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
TR	78.187.59.130	Turkey

List from greylisting:

Botnet Statistics [2016-12-14]

detection period: 2016-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 969
number of botnet IPs notified to network operators: 864
number of spam blocked: 21700
recipient count of spam blocked: 25084

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	267
2	CHINANET-JS	35
3	VNPT-VNNIC-VN	31
4	CHINANET-HB	26
5	BHARTI-IN	26
6	CMNET	21
7	BSNLNET	20
8	VIETEL-VN	17
9	UNICOM-JS	14
10	UNICOM-JX	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	490
2	India	96
3	Viet Nam	81
4	Russian Federation	18
5	Iran	17
6	Colombia	15
7	Bangladesh	13
8	Mexico	12
9	Indonesia	12
10	Brazil	12

Suspected Bot List [2016-12-13]

detection period: 2016-12-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 182

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.195.255.164	Argentina
BD	43.240.100.199	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	202.5.37.132	Bangladesh
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
ES	88.28.206.137	Spain
ES	88.28.209.187	Spain
FR	80.11.102.142	France
FR	85.203.114.1	France
FR	85.203.120.51	France
FR	85.203.123.53	France
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.196.77	Haiti
HT	200.113.196.252	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.105	Haiti
HT	200.113.221.134	Haiti
ID	118.98.125.58	Indonesia
ID	202.75.97.154	Indonesia
ID	203.190.113.186	Indonesia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.36.34	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KH	103.239.54.178	Cambodia
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
TR	78.187.59.130	Turkey
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-13]

detection period: 2016-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1205
number of botnet IPs notified to network operators: 1023
number of spam blocked: 21618
recipient count of spam blocked: 28827

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	272
2	VNPT-VNNIC-VN	46
3	BHARTI-IN	44
4	BSNLNET	31
5	CMNET	30
6	UNICOM-HE	21
7	CHINANET-HB	21
8	CHINANET-JS	19
9	FPT-VN	14
10	UNICOM-SD	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	546
2	India	136
3	Viet Nam	94
4	Brazil	30
5	Iran	25
6	Antigua And Barbuda	23
7	Pakistan	21
8	United States	19
9	Russian Federation	18
10	Indonesia	18

Suspected Bot List [2016-12-12]

detection period: 2016-12-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AO	41.72.57.250	Angola
AR	190.108.35.2	Argentina
BD	43.240.100.199	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.211.106.148	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
FR	82.98.48.220	France
FR	85.203.80.206	France
FR	85.203.105.93	France
FR	85.203.107.46	France
FR	85.203.120.51	France
FR	85.203.121.115	France
FR	109.1.102.56	France
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.196.77	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.134	Haiti
ID	118.98.125.58	Indonesia
ID	202.75.97.154	Indonesia
ID	203.190.113.186	Indonesia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.205.202	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KH	103.239.54.178	Cambodia
KZ	2.133.92.26	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.35.128	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
TR	88.249.25.2	Turkey
TZ	41.77.194.182	Tanzania
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-12]

detection period: 2016-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1093
number of botnet IPs notified to network operators: 948
number of spam blocked: 24731
recipient count of spam blocked: 43980

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	263
2	UNICOM-JS	44
3	BHARTI-IN	40
4	CMNET	29
5	CHINANET-HB	26
6	BSNLNET	26
7	VNPT-VNNIC-VN	23
8	UNICOM-HE	19
9	UNICOM-JX	11
10	UNICOM-GD	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	549
2	India	109
3	Viet Nam	50
4	Brazil	25
5	Russian Federation	22
6	Pakistan	18
7	Bangladesh	18
8	Iran	17
9	United States	16
10	Antigua And Barbuda	14

Suspected Bots' IP List for November 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-11-01]
Suspected Bots IP [2016-11-02]
Suspected Bots IP [2016-11-03]
Suspected Bots IP [2016-11-04]
Suspected Bots IP [2016-11-05]
Suspected Bots IP [2016-11-06]
Suspected Bots IP [2016-11-07]
Suspected Bots IP [2016-11-08]
Suspected Bots IP [2016-11-09]
Suspected Bots IP [2016-11-10]
Suspected Bots IP [2016-11-11]
Suspected Bots IP [2016-11-12]
Suspected Bots IP [2016-11-13]
Suspected Bots IP [2016-11-14]
Suspected Bots IP [2016-11-15]
Suspected Bots IP [2016-11-16]
Suspected Bots IP [2016-11-17]
Suspected Bots IP [2016-11-18]
Suspected Bots IP [2016-11-19]
Suspected Bots IP [2016-11-20]
Suspected Bots IP [2016-11-21]
Suspected Bots IP [2016-11-22]
Suspected Bots IP [2016-11-23]
Suspected Bots IP [2016-11-24]
Suspected Bots IP [2016-11-25]
Suspected Bots IP [2016-11-26]
Suspected Bots IP [2016-11-27]
Suspected Bots IP [2016-11-28]
Suspected Bots IP [2016-11-29]
Suspected Bots IP [2016-11-30]

Suspected Bot List [2016-12-11]

detection period: 2016-12-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AO	41.72.57.250	Angola
AR	190.108.35.2	Argentina
BD	43.240.100.199	Bangladesh
BD	58.147.173.36	Bangladesh
BD	116.193.219.109	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.211.106.148	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
ES	88.28.206.137	Spain
ES	88.28.209.187	Spain
FR	85.203.105.93	France
FR	85.203.114.1	France
FR	85.203.120.51	France
FR	109.1.102.56	France
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.196.77	Haiti
HT	200.113.196.252	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.134	Haiti
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.217.38	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KZ	2.133.92.26	Kazakhstan
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
SA	88.85.228.90	Saudi Arabia
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
TR	78.187.59.130	Turkey
TR	88.249.25.2	Turkey
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-11]

detection period: 2016-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 772
number of botnet IPs notified to network operators: 677
number of spam blocked: 25863
recipient count of spam blocked: 36973

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	209
2	CMNET	29
3	BHARTI-IN	28
4	CHINANET-HB	27
5	BSNLNET	19
6	UNICOM-JS	18
7	UNICOM-HE	18
8	UNICOM-JX	12
9	WATEEN-TEL	10
10	UNICOM-GD	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	459
2	India	62
3	Antigua And Barbuda	18
4	Russian Federation	15
5	Taiwan	11
6	Pakistan	11
7	South Korea	11
8	Colombia	11
9	Brazil	11
10	Bangladesh	11

Suspected Bot List [2016-12-10]

detection period: 2016-12-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 120

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.108.35.2	Argentina
BD	43.240.100.199	Bangladesh
BD	58.147.173.36	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.211.106.148	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
ES	88.28.206.137	Spain
ES	88.28.209.187	Spain
FR	85.203.105.93	France
FR	85.203.111.157	France
FR	85.203.114.1	France
FR	85.203.120.51	France
FR	85.203.123.53	France
FR	109.1.102.56	France
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.196.77	Haiti
HT	200.113.196.252	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.105	Haiti
HT	200.113.221.134	Haiti
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.212.52	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KZ	2.133.92.26	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
SA	88.85.228.90	Saudi Arabia
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
US	69.36.65.214	United States
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2016-12-10]

detection period: 2016-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 852
number of botnet IPs notified to network operators: 732
number of spam blocked: 22873
recipient count of spam blocked: 29599

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	118
2	VNPT-VNNIC-VN	40
3	BHARTI-IN	36
4	CMNET	35
5	CHINANET-HB	21
6	BSNLNET	21
7	UNICOM-HE	18
8	UNICOM-JX	13
9	WATEEN-TEL	12
10	HINET-NET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	365
2	India	101
3	Viet Nam	57
4	Antigua And Barbuda	21
5	Brazil	18
6	Russian Federation	16
7	Pakistan	16
8	Indonesia	14
9	Colombia	14
10	Taiwan	13

Suspected Bot List [2016-12-09]

detection period: 2016-12-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 141

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AO	41.72.57.250	Angola
AR	190.108.35.2	Argentina
BD	43.240.100.199	Bangladesh
BD	58.147.173.36	Bangladesh
BD	103.16.73.207	Bangladesh
BD	116.193.219.109	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.211.106.148	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	62.14.160.198	Spain
ES	62.15.75.212	Spain
FR	82.98.48.220	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.196.77	Haiti
HT	200.113.196.252	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.134	Haiti
ID	118.98.125.58	Indonesia
ID	202.75.97.154	Indonesia
ID	203.190.113.186	Indonesia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KH	103.239.54.178	Cambodia
KZ	2.133.92.26	Kazakhstan
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
SA	88.85.228.90	Saudi Arabia
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
ZM	155.0.27.5	Zambia

List from greylisting: