Suspected Bot List [2016-01-30]

detection period: 2016-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.115.50.42	Argentina
IT	185.26.197.13	Italy
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AE	83.110.81.241	Arab Emirates
AR	181.14.245.234	Argentina
AR	190.7.9.194	Argentina
AR	190.19.203.28	Argentina
AR	200.41.178.234	Argentina
BO	186.27.126.130	Bolivia
CM	197.159.0.70	Cameroon
CN	202.108.255.216	China
CR	201.202.246.162	Costa Rica
EG	193.227.49.83	Egypt
IL	213.57.90.10	Israel
IN	61.1.66.19	India
IN	117.193.245.123	India
IN	117.204.22.246	India
IN	117.204.68.80	India
IN	117.218.13.66	India
IN	117.244.15.243	India
IN	117.247.12.11	India
IN	122.170.105.219	India
IN	122.252.236.6	India
IN	125.16.12.146	India
IN	180.211.126.178	India
IN	203.192.212.52	India
IN	203.194.109.142	India
IN	210.212.215.35	India
IT	185.26.197.13	Italy
RU	89.23.192.230	Russian Federation
RU	188.191.22.29	Russian Federation
SO	41.79.197.27	Somalia
ZW	41.220.28.138	Zimbabwe

Botnet Statistics [2016-01-30]

detection period: 2016-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 558
number of botnet IPs notified to network operators: 520
number of spam blocked: 2910
recipient count of spam blocked: 58066

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MX-MSCV17-LACNIC	107
2	CHINANET-GD	26
3	VNPT-VNNIC-VN	20
4	ALISOFT	14
5	002.558.157/0001-62	9
6	BSNLNET	8
7	QUADRANET	7
8	MX-CTSC6-LACNIC	7
9	CHINANET-ZJ	7
10	CHINANET-SC	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	125
2	Mexico	119
3	Viet Nam	41
4	United States	33
5	Brazil	33
6	Russian Federation	28
7	India	22
8	Hong Kong	14
9	Taiwan	10
10	Indonesia	8

Suspected Bot List [2016-01-29]

detection period: 2016-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.18.166.64	Argentina
AR	190.115.50.42	Argentina
EG	82.129.243.42	Egypt
IT	185.26.197.13	Italy
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AR	181.14.245.234	Argentina
AR	186.138.81.32	Argentina
AR	200.41.178.234	Argentina
AR	201.235.24.41	Argentina
BG	217.18.249.186	Bulgaria
BO	186.27.126.130	Bolivia
CM	197.159.0.70	Cameroon
CR	201.202.246.162	Costa Rica
CR	201.203.219.188	Costa Rica
DZ	197.118.221.114	Algeria
EG	193.227.49.83	Egypt
ES	87.235.177.251	Spain
IE	212.78.241.13	Ireland
IL	213.57.90.10	Israel
IN	59.90.111.127	India
IN	59.95.88.97	India
IN	112.133.232.2	India
IN	117.212.161.58	India
IN	117.218.13.66	India
IN	117.244.15.243	India
IN	120.63.8.27	India
IN	122.163.126.125	India
IN	122.170.105.219	India
IN	122.179.87.240	India
IN	125.16.12.146	India
IN	180.211.126.178	India
IN	182.56.98.189	India
IN	182.77.13.105	India
IN	203.192.212.52	India
IN	203.194.109.142	India
IT	185.26.197.13	Italy
PH	122.53.178.100	Philippines
PK	58.27.242.204	Pakistan
RO	109.97.179.131	Romania
RS	89.216.26.243	Serbia
RU	89.23.192.230	Russian Federation
TR	109.235.251.130	Turkey
US	104.47.0.214	United States
US	104.47.0.247	United States
US	104.47.0.248	United States
US	104.47.1.234	United States
US	104.47.2.235	United States
US	104.47.2.241	United States
US	142.4.29.53	United States
US	157.56.112.245	United States
US	157.56.112.249	United States
ZW	41.220.28.138	Zimbabwe

Botnet Statistics [2016-01-29]

detection period: 2016-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 641
number of botnet IPs notified to network operators: 584
number of spam blocked: 4548
recipient count of spam blocked: 80352

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MX-MSCV17-LACNIC	128
2	VNPT-VNNIC-VN	22
3	CHINANET-GD	15
4	ALISOFT	11
5	MSFT	9
6	CHINANET-ZJ	9
7	MX-CTSC6-LACNIC	8
8	002.558.157/0001-62	8
9	VIETEL-VN	7
10	QUADRANET	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Mexico	145
2	China	111
3	Viet Nam	54
4	United States	49
5	Brazil	38
6	Russian Federation	34
7	India	25
8	Taiwan	14
9	Hong Kong	13
10	Poland	10

Suspected Bot List [2016-01-28]

detection period: 2016-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.18.166.64	Argentina
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AE	83.110.142.61	Arab Emirates
AL	213.207.33.19	Albania
AM	5.77.163.218	Armenia
AR	181.14.245.234	Argentina
AR	190.177.166.243	Argentina
AR	200.41.178.234	Argentina
BD	113.11.75.249	Bangladesh
BG	78.90.2.109	Bulgaria
BO	186.27.126.130	Bolivia
BO	190.129.54.151	Bolivia
CM	197.159.0.70	Cameroon
CR	201.202.246.162	Costa Rica
IL	213.57.90.10	Israel
IN	59.90.111.127	India
IN	59.178.156.120	India
IN	61.2.163.57	India
IN	61.3.22.86	India
IN	61.12.81.54	India
IN	106.220.123.2	India
IN	110.227.246.37	India
IN	117.218.13.66	India
IN	117.218.50.134	India
IN	117.241.78.244	India
IN	117.244.15.243	India
IN	122.168.151.3	India
IN	125.16.12.146	India
IN	180.211.126.178	India
IN	182.71.25.102	India
IN	203.192.212.52	India
IN	203.194.109.142	India
KZ	213.157.45.74	Kazakhstan
MN	150.129.143.242	Mongolia
PH	122.53.178.100	Philippines
PK	39.37.144.94	Pakistan
PY	181.40.91.118	Paraguay
RO	109.100.245.104	Romania
RU	89.23.192.230	Russian Federation
TR	46.2.92.113	Turkey
TR	109.235.251.130	Turkey
TR	188.3.74.61	Turkey

Botnet Statistics [2016-01-28]

detection period: 2016-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 637
number of botnet IPs notified to network operators: 589
number of spam blocked: 30250
recipient count of spam blocked: 300760

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MX-MSCV17-LACNIC	145
2	CHINANET-GD	36
3	VNPT-VNNIC-VN	19
4	VIETEL-VN	9
5	MX-CTSC6-LACNIC	9
6	002.558.157/0001-62	8
7	QUADRANET	7
8	MRHOSTBIZ-NET	7
9	CMNET	7
10	CHINANET-ZJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Mexico	162
2	China	128
3	Viet Nam	48
4	United States	38
5	Brazil	37
6	Russian Federation	31
7	India	26
8	Turkey	12
9	Indonesia	12
10	South Korea	11

Suspected Bot List [2016-01-27]

detection period: 2016-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 173

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.178.132.125	Argentina
AR	190.178.136.7	Argentina
AR	190.178.144.146	Argentina
AR	190.178.154.168	Argentina
MX	177.226.189.201	Mexico
MX	177.229.41.229	Mexico
MX	177.229.101.11	Mexico
MX	177.229.136.159	Mexico
MX	177.229.221.81	Mexico
MX	177.229.239.191	Mexico
MX	177.230.5.63	Mexico
MX	177.230.237.24	Mexico
MX	177.230.238.155	Mexico
MX	177.230.251.81	Mexico
MX	177.231.14.105	Mexico
MX	177.231.53.94	Mexico
MX	177.231.179.166	Mexico
MX	177.231.195.245	Mexico
MX	177.240.68.247	Mexico
MX	177.240.196.57	Mexico
MX	177.240.209.28	Mexico
MX	177.241.34.88	Mexico
MX	177.241.42.194	Mexico
MX	177.241.76.16	Mexico
MX	177.241.94.246	Mexico
MX	177.241.98.65	Mexico
MX	177.241.154.107	Mexico
MX	177.241.199.225	Mexico
MX	177.243.71.181	Mexico
MX	177.243.88.207	Mexico
MX	177.243.100.51	Mexico
MX	177.243.150.5	Mexico
MX	177.243.151.126	Mexico
MX	177.243.157.37	Mexico
MX	177.243.158.165	Mexico
MX	177.243.158.243	Mexico
MX	177.243.219.222	Mexico
MX	177.244.110.180	Mexico
MX	177.244.195.190	Mexico
MX	177.245.30.8	Mexico
MX	177.245.195.9	Mexico
MX	177.245.201.206	Mexico
MX	177.246.38.43	Mexico
MX	177.246.40.177	Mexico
MX	177.246.179.110	Mexico
MX	177.246.187.19	Mexico
MX	177.246.201.226	Mexico
MX	177.247.158.122	Mexico
MX	177.247.159.194	Mexico
MX	177.247.177.64	Mexico
MX	177.247.180.118	Mexico
MX	177.247.184.163	Mexico
MX	187.240.14.51	Mexico
MX	187.240.88.160	Mexico
MX	187.240.172.123	Mexico
MX	187.241.12.217	Mexico
MX	187.242.151.154	Mexico
MX	187.242.152.144	Mexico
MX	187.242.157.142	Mexico
MX	187.242.220.26	Mexico
MX	187.242.244.66	Mexico
MX	187.243.184.137	Mexico
MX	187.243.204.45	Mexico
MX	187.244.3.155	Mexico
MX	187.244.19.67	Mexico
MX	187.244.140.77	Mexico
MX	187.245.12.167	Mexico
MX	187.245.83.30	Mexico
MX	187.246.12.86	Mexico
MX	187.246.104.52	Mexico
MX	187.247.41.107	Mexico
MX	187.247.114.6	Mexico
MX	189.192.5.99	Mexico
MX	189.192.37.60	Mexico
MX	189.192.48.203	Mexico
MX	189.192.111.251	Mexico
MX	189.192.112.213	Mexico
MX	189.193.0.159	Mexico
MX	189.193.18.188	Mexico
MX	189.193.19.122	Mexico
MX	189.193.24.176	Mexico
MX	189.193.49.170	Mexico
MX	189.193.125.105	Mexico
MX	189.193.132.124	Mexico
MX	189.193.210.125	Mexico
MX	189.194.38.18	Mexico
MX	189.195.142.38	Mexico
MX	189.195.204.253	Mexico
MX	189.196.55.12	Mexico
MX	189.196.55.88	Mexico
MX	189.196.66.11	Mexico
MX	189.196.66.115	Mexico
MX	189.196.137.209	Mexico
MX	189.197.0.35	Mexico
MX	189.197.3.170	Mexico
MX	189.197.22.247	Mexico
MX	189.197.23.0	Mexico
MX	189.197.28.189	Mexico
MX	189.197.34.162	Mexico
MX	189.198.2.59	Mexico
MX	189.198.3.94	Mexico
MX	189.198.16.28	Mexico
MX	189.198.18.74	Mexico
MX	189.198.18.93	Mexico
MX	189.198.118.188	Mexico
MX	189.198.118.192	Mexico
MX	189.198.118.200	Mexico
MX	189.198.118.216	Mexico
MX	189.198.120.159	Mexico
MX	189.198.161.205	Mexico
MX	189.198.189.169	Mexico
MX	189.199.26.223	Mexico
MX	189.199.34.213	Mexico
MX	189.199.63.25	Mexico
MX	200.77.83.235	Mexico
MX	200.77.99.164	Mexico
MX	200.92.17.117	Mexico
MX	200.92.19.112	Mexico
MX	200.92.59.22	Mexico
MX	200.92.68.194	Mexico
MX	200.92.77.231	Mexico
MX	200.92.91.161	Mexico
MX	200.92.101.177	Mexico
MX	200.92.121.25	Mexico
MX	200.92.124.112	Mexico
MX	200.92.151.197	Mexico
MX	200.92.190.211	Mexico
MX	200.92.222.16	Mexico
MX	201.132.231.24	Mexico
MX	201.164.12.248	Mexico
MX	201.164.52.145	Mexico
MX	201.164.200.124	Mexico
MX	201.164.202.227	Mexico
MX	201.164.208.82	Mexico
MX	201.164.210.191	Mexico
MX	201.164.215.72	Mexico
MX	201.164.252.22	Mexico
MX	201.164.255.74	Mexico
MX	201.165.244.26	Mexico
MX	201.165.244.52	Mexico
US	104.129.60.132	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AR	181.14.245.234	Argentina
AR	200.41.178.234	Argentina
BO	186.27.126.130	Bolivia
CI	41.66.25.176	Ivory Coast
CR	201.202.246.162	Costa Rica
EG	193.227.49.83	Egypt
ES	87.235.177.251	Spain
IL	213.57.90.10	Israel
IN	59.92.232.81	India
IN	103.15.82.21	India
IN	117.212.131.94	India
IN	117.218.13.66	India
IN	117.218.50.134	India
IN	117.221.192.77	India
IN	117.244.15.243	India
IN	122.160.196.214	India
IN	122.161.184.66	India
IN	122.170.105.219	India
IN	122.177.72.102	India
IN	125.16.12.146	India
IN	180.211.126.178	India
IN	203.192.212.52	India
IN	203.194.109.142	India
MN	150.129.142.85	Mongolia
PH	122.53.178.100	Philippines
RU	89.23.192.230	Russian Federation
US	192.185.149.105	United States
US	198.57.213.93	United States

Botnet Statistics [2016-01-27]

detection period: 2016-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 661
number of botnet IPs notified to network operators: 488
number of spam blocked: 30724
recipient count of spam blocked: 360018

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MX-MSCV17-LACNIC	136
2	CHINANET-GD	35
3	VNPT-VNNIC-VN	19
4	MX-CTSC6-LACNIC	10
5	HINET-NET	9
6	CHINANET-ZJ	9
7	002.558.157/0001-62	9
8	CMNET	8
9	ALISOFT	7
10	MRHOSTBIZ-NET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Mexico	151
2	China	143
3	United States	48
4	Russian Federation	39
5	Viet Nam	38
6	Brazil	36
7	India	28
8	Taiwan	14
9	Hong Kong	13
10	South Korea	11

Suspected Bot List [2016-01-26]

detection period: 2016-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.178.136.178	Argentina
AR	190.178.143.200	Argentina
MX	200.92.95.183	Mexico
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AR	181.14.245.234	Argentina
AR	200.41.178.234	Argentina
BG	78.90.2.109	Bulgaria
BO	186.27.126.130	Bolivia
CR	201.202.246.162	Costa Rica
DZ	197.119.24.82	Algeria
EG	193.227.49.83	Egypt
IL	213.57.90.10	Israel
IN	110.225.191.97	India
IN	120.61.54.153	India
IN	120.61.208.225	India
IN	125.16.12.146	India
IN	182.65.253.8	India
IN	203.192.212.52	India
IN	203.194.109.142	India
KZ	92.46.30.210	Kazakhstan
MX	187.244.221.21	Mexico
PH	122.53.178.100	Philippines
PR	24.139.144.253	Puerto Rico
RO	86.34.170.206	Romania
RU	89.23.192.230	Russian Federation
ZW	41.220.28.138	Zimbabwe

Botnet Statistics [2016-01-26]

detection period: 2016-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 377
number of botnet IPs notified to network operators: 345
number of spam blocked: 32660
recipient count of spam blocked: 358073

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	21
2	VNPT-VNNIC-VN	17
3	QUADRANET	7
4	HINET-NET	6
5	CMNET	6
6	CHINANET-SC	6
7	FPT-VN	5
8	CHINANET-ZJ	5
9	ALISOFT	5
10	002.558.157/0001-62	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	99
2	United States	44
3	Viet Nam	34
4	Brazil	29
5	Russian Federation	24
6	India	13
7	Taiwan	11
8	Colombia	8
9	Kazakhstan	7
10	Hong Kong	7

Suspected Bot List [2016-01-25]

detection period: 2016-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.115.50.42	Argentina
AR	190.178.136.178	Argentina
AR	190.178.151.153	Argentina
MO	60.246.234.187	Macau
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AM	212.34.244.55	Armenia
AR	24.232.242.243	Argentina
AR	190.182.234.95	Argentina
AR	190.185.238.30	Argentina
AZ	95.86.185.91	Azerbaijan
IN	117.199.168.136	India
IN	122.162.136.97	India
IN	182.65.171.0	India
IN	182.68.159.88	India
MX	177.243.146.100	Mexico
MX	177.244.194.82	Mexico
MX	200.92.91.161	Mexico
PH	49.146.198.140	Philippines
RO	92.85.185.47	Romania
RO	109.98.8.76	Romania
RO	109.98.160.103	Romania
RU	89.23.192.230	Russian Federation

Botnet Statistics [2016-01-25]

detection period: 2016-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 257
number of botnet IPs notified to network operators: 229
number of spam blocked: 30943
recipient count of spam blocked: 346342

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	41
2	CHINANET-GD	15
3	ETC-VNNIC-VN	9
4	FPT-VN	8
5	QUADRANET	7
6	HINET-NET	6
7	VIETEL-VN	5
8	ALISOFT	5
9	005.200.140/0001-27	5
10	VIETEL-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	77
2	China	39
3	United States	21
4	Brazil	14
5	Taiwan	11
6	Ukraine	8
7	Mexico	8
8	Argentina	7
9	Russian Federation	6
10	Romania	6

Suspected Bot List [2016-01-24]

detection period: 2016-01-23 00:00-24:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.115.50.42	Argentina
TR	195.244.57.182	Turkey
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AR	179.41.164.251	Argentina
AR	181.23.132.84	Argentina
AR	186.18.8.51	Argentina
AR	190.210.131.50	Argentina
CA	184.107.73.206	Canada
GE	5.178.179.139	Republic Of Georgia
IN	182.58.212.28	India
IN	182.74.87.153	India
MX	187.244.164.65	Mexico
RU	89.23.192.230	Russian Federation
UA	193.107.128.111	Ukraine

Botnet Statistics [2016-01-24]

detection period: 2016-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 198
number of botnet IPs notified to network operators: 178
number of spam blocked: 30503
recipient count of spam blocked: 339753

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	18
2	CHINANET-GD	15
3	QUADRANET	7
4	TFN-NET	5
5	FPT-VN	5
6	HINET-NET	4
7	CHINANET-JS	4
8	ALISOFT	4
9	005.200.140/0001-27	4
10	GIANT	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	52
2	Viet Nam	33
3	United States	18
4	Taiwan	14
5	Russian Federation	11
6	Brazil	7
7	Argentina	6
8	Indonesia	5
9	Turkey	4
10	Mexico	4

Suspected Bot List [2016-01-23]

detection period: 2016-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.115.50.42	Argentina
MO	60.246.234.187	Macau
TR	195.244.57.182	Turkey
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AR	190.178.199.181	Argentina
IN	59.91.19.181	India
IN	59.94.138.81	India
IN	59.178.167.208	India
IN	106.206.128.24	India
IN	117.196.191.71	India
IN	117.205.154.98	India
IN	122.165.214.119	India
IN	122.173.130.90	India
IN	182.68.65.14	India
MX	187.244.103.25	Mexico
PK	39.45.180.48	Pakistan
PK	115.186.188.155	Pakistan
RS	188.2.228.67	Serbia
RU	89.23.192.230	Russian Federation

Botnet Statistics [2016-01-23]

detection period: 2016-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 276
number of botnet IPs notified to network operators: 251
number of spam blocked: 10383
recipient count of spam blocked: 143051

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	32
2	ETC-VNNIC-VN	12
3	VIETEL-VN	11
4	CHINANET-GD	11
5	FPT-VN	10
6	VIETEL-VNNIC-VN	7
7	QUADRANET	7
8	IPxDSL-NET	7
9	OVH-ARIN-7	6
10	005.200.140/0001-27	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	87
2	China	57
3	United States	18
4	India	16
5	Taiwan	11
6	Brazil	11
7	France	10
8	Canada	8
9	Turkey	7
10	Russian Federation	7

Suspected Bot List [2016-01-22]

detection period: 2016-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 61

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
CA	167.114.215.61	Canada
MO	60.246.234.187	Macau
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AE	217.165.244.65	Arab Emirates
AR	181.16.19.103	Argentina
AR	181.21.153.44	Argentina
AR	181.164.136.169	Argentina
AR	190.19.126.229	Argentina
AR	201.251.59.30	Argentina
AZ	91.135.246.191	Azerbaijan
CG	197.157.255.194	Republic of the Congo
DZ	105.104.200.202	Algeria
DZ	105.106.117.55	Algeria
ES	87.235.177.251	Spain
ET	213.55.105.102	Ethiopia
IN	59.95.144.20	India
IN	59.178.61.217	India
IN	61.3.104.126	India
IN	110.227.250.225	India
IN	117.198.44.159	India
IN	117.199.172.116	India
IN	117.205.9.104	India
IN	117.208.250.220	India
IN	117.213.106.162	India
IN	117.213.168.118	India
IN	117.223.200.212	India
IN	122.169.42.248	India
IN	122.170.193.148	India
IN	122.173.223.233	India
IN	122.180.174.212	India
IN	122.180.226.17	India
IN	202.62.72.210	India
IN	203.217.145.132	India
IN	223.176.39.148	India
KG	91.192.66.141	Kyrgyzstan
KZ	2.132.83.59	Kazakhstan
MA	196.12.226.220	Morocco
MN	49.0.187.130	Mongolia
MN	122.201.31.195	Mongolia
MX	177.229.105.126	Mexico
PH	110.55.0.246	Philippines
PH	124.104.131.192	Philippines
PH	124.107.13.78	Philippines
PK	39.47.193.233	Pakistan
PK	39.52.193.66	Pakistan
PK	182.178.248.92	Pakistan
RO	109.100.0.145	Romania
RO	109.102.172.36	Romania
RU	89.23.192.230	Russian Federation
TW	123.194.104.23	Taiwan
UA	193.107.128.111	Ukraine
US	142.4.29.53	United States
US	198.154.245.70	United States
US	216.172.173.36	United States

Botnet Statistics [2016-01-22]

detection period: 2016-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 392
number of botnet IPs notified to network operators: 331
number of spam blocked: 3172
recipient count of spam blocked: 62500

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	59
2	CHINANET-GD	15
3	BSNLNET	9
4	VIETEL-VN	8
5	QUADRANET	7
6	FPT-VN	7
7	ALISOFT	7
8	VIETEL-VNNIC-VN	6
9	HINET-NET	5
10	ETC-VNNIC-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	91
2	China	65
3	India	29
4	United States	28
5	Brazil	22
6	Taiwan	15
7	Mexico	10
8	Turkey	9
9	Russian Federation	8
10	Romania	8

Suspected Bot List [2016-01-21]

detection period: 2016-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	186.61.46.83	Argentina
CM	197.159.0.70	Cameroon
ES	87.235.177.251	Spain
IN	122.176.16.64	India
MO	27.109.207.222	Macau
MX	189.192.5.99	Mexico
PK	210.2.151.226	Pakistan
RU	89.23.192.230	Russian Federation
TR	195.87.6.82	Turkey
US	162.144.37.189	United States

Botnet Statistics [2016-01-21]

detection period: 2016-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 204
number of botnet IPs notified to network operators: 185
number of spam blocked: 2755
recipient count of spam blocked: 59464

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	24
2	FR-OVH-20150522	10
3	QUADRANET	7
4	OVH-ARIN-7	6
5	ALISOFT	6
6	CHINANET-SN	5
7	MSFT-GFS	4
8	GIANT	4
9	CHINANET-SC	4
10	CHINANET-HA	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	81
2	United States	32
3	France	12
4	Russian Federation	9
5	Canada	8
6	Taiwan	7
7	Hong Kong	5
8	Turkey	4
9	Mexico	4
10	Viet Nam	3

Suspected Bot List [2016-01-20]

detection period: 2016-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
UY	167.57.15.195	Uruguay

List from greylisting:

country code	IP address	Country
AE	217.165.122.176	Arab Emirates
AL	80.78.78.131	Albania
AL	213.207.33.19	Albania
AR	181.27.181.242	Argentina
AR	190.105.90.200	Argentina
CA	184.107.162.10	Canada
CM	197.159.0.70	Cameroon
CU	200.55.139.82	Cuba
ES	87.235.177.251	Spain
IN	117.196.166.88	India
IN	117.208.45.18	India
IN	117.211.160.45	India
IN	117.220.7.79	India
IN	122.160.80.4	India
IN	122.173.44.74	India
IN	182.59.95.249	India
IN	182.64.175.56	India
IN	202.63.100.229	India
KH	117.20.113.21	Cambodia
MX	177.243.150.5	Mexico
MX	177.246.40.177	Mexico
MX	177.247.157.65	Mexico
MX	187.243.121.118	Mexico
MX	189.195.119.135	Mexico
MX	189.199.32.9	Mexico
PK	39.47.56.65	Pakistan
PK	39.48.91.82	Pakistan
PK	39.49.86.143	Pakistan
PK	182.185.233.114	Pakistan
RS	178.148.71.165	Serbia
RU	89.23.192.230	Russian Federation
TR	94.78.83.137	Turkey
TR	213.142.146.29	Turkey

Botnet Statistics [2016-01-20]

detection period: 2016-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 461
number of botnet IPs notified to network operators: 426
number of spam blocked: 1830
recipient count of spam blocked: 37061

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	52
2	UNICOM-AH	41
3	CHINANET-HB	39
4	CHINANET-ZJ	36
5	VNPT-VNNIC-VN	33
6	CHINANET-GD	20
7	CHINANET-SC	16
8	VIETEL-VNNIC-VN	9
9	FPT-VN	8
10	CHINANET-ZJ-JH	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	251
2	Viet Nam	60
3	United States	17
4	Mexico	13
5	India	13
6	Taiwan	11
7	Russian Federation	10
8	Canada	7
9	Indonesia	6
10	Ukraine	5

Suspected Bot List [2016-01-19]

detection period: 2016-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
UY	167.56.5.27	Uruguay
UY	167.57.10.10	Uruguay

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	191.81.53.176	Argentina
CA	184.107.162.10	Canada
CM	197.159.0.70	Cameroon
CY	213.149.185.212	Cyprus
CZ	217.198.113.97	Czech Republic
DE	80.153.14.197	Germany
IN	117.247.176.93	India
IN	117.253.137.152	India
IN	120.56.255.196	India
IN	120.61.201.239	India
IN	122.168.67.59	India
MX	201.164.57.166	Mexico
PK	39.35.119.57	Pakistan
RU	89.23.192.230	Russian Federation
TR	188.3.121.28	Turkey
TR	213.142.146.29	Turkey
UA	193.192.37.70	Ukraine
UY	201.217.138.67	Uruguay

Botnet Statistics [2016-01-19]

detection period: 2016-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 623
number of botnet IPs notified to network operators: 601
number of spam blocked: 2903
recipient count of spam blocked: 49955

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	128
2	CHINANET-ZJ	80
3	UNICOM-AH	61
4	CHINANET-ZJ-JH	60
5	CHINANET-HB	55
6	CHINANET-GD	40
7	CHINANET-SC	21
8	HINET-NET	8
9	NL-BARKAR-20150907	7
10	GIANT	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	489
2	United States	16
3	Russian Federation	15
4	Viet Nam	12
5	Taiwan	11
6	Netherlands	8
7	Mexico	7
8	India	7
9	Hong Kong	6
10	Brazil	6

Suspected Bot List [2016-01-18]

detection period: 2016-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IL	213.57.90.10	Israel
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	181.23.22.249	Argentina
AR	186.18.184.225	Argentina
AR	190.55.213.33	Argentina
AR	201.231.175.174	Argentina
CA	184.107.162.10	Canada
CM	197.159.0.70	Cameroon
CN	59.38.97.5	China
ES	87.235.177.251	Spain
IN	27.4.217.85	India
IN	117.216.11.198	India
IN	117.221.150.193	India
IN	117.222.126.32	India
IN	117.223.227.98	India
IN	120.63.213.52	India
IN	122.161.187.85	India
IN	122.178.209.228	India
IN	150.129.130.188	India
IN	210.89.56.226	India
IR	212.33.205.183	Iran
MX	148.240.33.5	Mexico
PK	39.33.251.20	Pakistan
RU	89.23.192.230	Russian Federation
RU	188.75.198.157	Russian Federation
TR	188.3.33.60	Turkey
TR	188.3.201.54	Turkey
UA	193.192.37.70	Ukraine
UY	201.217.138.67	Uruguay

Botnet Statistics [2016-01-18]

detection period: 2016-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 284
number of botnet IPs notified to network operators: 248
number of spam blocked: 4408
recipient count of spam blocked: 6032

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	34
2	VNPT-VNNIC-VN	18
3	MSFT	14
4	QUADRANET	7
5	VIETEL-VNNIC-VN	6
6	MSFT-GFS	6
7	CHINANET-JS	6
8	VIETEL-VN	5
9	FPT-VN	5
10	UNICOM-SX	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	90
2	Viet Nam	41
3	United States	39
4	India	15
5	Russian Federation	14
6	Brazil	12
7	Turkey	8
8	Iran	7
9	Ukraine	6
10	Argentina	5

Suspected Bot List [2016-01-17]

detection period: 2016-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	181.169.79.145	Argentina
AR	190.178.79.136	Argentina
CA	184.107.162.10	Canada
CM	197.159.0.70	Cameroon
IN	59.99.128.105	India
IN	116.74.65.99	India
IN	117.248.4.251	India
IN	121.243.210.219	India
IN	122.160.154.35	India
IN	182.68.213.33	India
MX	177.230.238.240	Mexico
RU	89.23.192.230	Russian Federation
TR	213.142.146.29	Turkey
UA	193.192.37.70	Ukraine

Botnet Statistics [2016-01-17]

detection period: 2016-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 247
number of botnet IPs notified to network operators: 225
number of spam blocked: 3987
recipient count of spam blocked: 5222

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	52
2	CHINANET-GD	15
3	FPT-VN	14
4	VIETEL-VN	8
5	QUADRANET	7
6	ETC-VNNIC-VN	6
7	VIETEL-VNNIC-VN	4
8	ALISOFT	4
9	MX-CTSC6-LACNIC	3
10	CHINANET-SC	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	92
2	China	48
3	United States	22
4	India	10
5	Russian Federation	8
6	Ukraine	7
7	Poland	6
8	Brazil	6
9	Mexico	5
10	Iran	4

Suspected Bot List [2016-01-16]

detection period: 2016-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.251	Argentina
CA	167.114.215.61	Canada
NL	83.162.216.214	Netherlands
PK	116.90.109.37	Pakistan
US	104.129.60.132	United States
US	104.129.60.148	United States
US	104.129.60.159	United States
US	104.129.60.165	United States
US	104.129.62.7	United States
US	104.129.62.36	United States
US	104.129.62.102	United States
UY	167.56.166.70	Uruguay
UY	167.57.55.65	Uruguay

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	181.166.108.171	Argentina
AR	186.138.230.9	Argentina
AR	190.177.150.105	Argentina
AR	190.246.233.16	Argentina
AR	200.49.156.98	Argentina
CA	184.107.162.10	Canada
CM	197.159.0.70	Cameroon
GB	5.68.214.175	United Kingdom
GE	92.51.116.28	Republic Of Georgia
IN	27.4.7.41	India
IN	59.92.67.26	India
IN	59.176.125.51	India
IN	117.55.242.134	India
IN	117.194.148.71	India
IN	117.214.165.221	India
IN	117.241.232.179	India
IN	117.246.255.134	India
IN	117.253.186.91	India
IN	117.255.224.45	India
IN	121.246.34.234	India
IN	122.163.154.130	India
IN	122.164.210.223	India
IN	122.176.179.152	India
IN	125.16.41.9	India
IN	202.142.70.129	India
IN	202.142.73.182	India
KZ	2.132.85.85	Kazakhstan
ME	178.175.49.40	Montenegro
MX	177.241.75.183	Mexico
MX	187.177.172.13	Mexico
MX	189.192.49.103	Mexico
RO	109.98.161.6	Romania
UA	193.192.37.70	Ukraine

Botnet Statistics [2016-01-16]

detection period: 2016-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 336
number of botnet IPs notified to network operators: 289
number of spam blocked: 8511
recipient count of spam blocked: 116768

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	45
2	CHINANET-GD	17
3	FPT-VN	14
4	ETC-VNNIC-VN	8
5	ALISOFT	8
6	VIETEL-VNNIC-VN	7
7	QUADRANET	7
8	BSNLNET	7
9	VIETEL-VN	6
10	AR-CASA10-LACNIC	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	87
2	China	69
3	United States	26
4	India	24
5	Russian Federation	18
6	Brazil	12
7	Ukraine	8
8	Mexico	7
9	Indonesia	7
10	Taiwan	6

Suspected Bot List [2016-01-15]

detection period: 2016-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	116.90.109.37	Pakistan
US	104.129.60.132	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AR	181.14.172.187	Argentina
AR	190.178.5.98	Argentina
AR	200.49.156.98	Argentina
AR	200.82.76.26	Argentina
BO	190.129.184.219	Bolivia
CM	197.159.0.70	Cameroon
CZ	217.198.113.97	Czech Republic
DE	79.133.50.70	Germany
ES	87.235.177.251	Spain
ES	95.61.54.136	Spain
IN	59.93.5.199	India
IN	117.201.212.186	India
IN	117.208.2.64	India
IN	122.174.46.108	India
IN	182.68.133.122	India
KW	62.215.100.201	Kuwait
MX	177.245.99.167	Mexico
MX	189.197.41.83	Mexico
PH	122.3.37.83	Philippines
PH	122.3.87.115	Philippines
PH	122.54.107.63	Philippines
PH	124.106.167.60	Philippines
PK	39.47.219.78	Pakistan
TR	195.87.6.82	Turkey
UA	31.43.94.53	Ukraine
UA	193.192.37.70	Ukraine

Botnet Statistics [2016-01-15]

detection period: 2016-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 264
number of botnet IPs notified to network operators: 235
number of spam blocked: 7152
recipient count of spam blocked: 75383

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	24
2	VNPT-VNNIC-VN	17
3	CHINANET-GD	14
4	CHINANET-AH	13
5	CHINANET-SC	12
6	CHINANET-ZJ-JH	10
7	CHINANET-JS	8
8	ALISOFT	6
9	VIETEL-VNNIC-VN	4
10	IPG	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	127
2	Viet Nam	29
3	United States	15
4	Taiwan	9
5	India	7
6	Brazil	6
7	Russian Federation	5
8	Indonesia	5
9	Germany	5
10	Ukraine	4

Suspected Bot List [2016-01-14]

detection period: 2016-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	116.90.106.129	Pakistan
PK	116.90.109.37	Pakistan
US	104.129.60.132	United States

List from greylisting:

country code	IP address	Country
AL	79.106.8.36	Albania
AL	79.106.110.66	Albania
AL	213.207.33.19	Albania
AR	200.41.47.212	Argentina
AR	201.176.136.154	Argentina
AR	201.250.255.27	Argentina
CM	197.159.0.70	Cameroon
IN	59.97.136.105	India
IN	120.57.29.145	India
PH	49.149.8.151	Philippines
PK	39.46.73.192	Pakistan
RO	109.98.8.76	Romania
SV	190.86.253.9	El Salvador
TR	213.142.139.135	Turkey
US	50.61.143.131	United States
US	200.12.232.6	United States
VE	150.188.4.63	Venezuela
ZA	197.245.23.194	South Africa

Botnet Statistics [2016-01-14]

detection period: 2016-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 639
number of botnet IPs notified to network operators: 618
number of spam blocked: 8586
recipient count of spam blocked: 104039

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	127
2	CHINANET-ZJ	91
3	CHINANET-JS	62
4	CHINANET-SC	46
5	CHINANET-ZJ-JH	42
6	CHINANET-HB	39
7	UNICOM-AH	36
8	CHINANET-GD	31
9	HINET-NET	9
10	ALISOFT	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	527
2	United States	20
3	Taiwan	15
4	Viet Nam	14
5	Indonesia	5
6	Mexico	4
7	Ukraine	3
8	Romania	3
9	Pakistan	3
10	Japan	3

Suspected Bot List [2016-01-13]

detection period: 2016-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	116.90.106.129	Pakistan
US	104.129.60.132	United States

List from greylisting:

country code	IP address	Country
AE	83.110.221.7	Arab Emirates
AL	213.207.33.19	Albania
AM	212.34.226.101	Armenia
AR	181.228.40.110	Argentina
AR	200.24.255.139	Argentina
CM	197.159.0.70	Cameroon
DZ	193.194.92.3	Algeria
ES	87.235.177.251	Spain
IN	117.247.120.198	India
IN	120.57.92.181	India
IN	122.161.44.83	India
MX	177.245.100.252	Mexico
MX	187.254.232.240	Mexico
PH	124.106.165.120	Philippines
SV	190.53.46.254	El Salvador
TR	213.142.146.29	Turkey

Botnet Statistics [2016-01-13]

detection period: 2016-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 613
number of botnet IPs notified to network operators: 595
number of spam blocked: 10858
recipient count of spam blocked: 65165

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-AH	137
2	CHINANET-ZJ	70
3	UNICOM-AH	53
4	CHINANET-SC	50
5	CHINANET-HB	44
6	CHINANET-ZJ-JH	31
7	CHINANET-JS	31
8	CHINANET-GD	23
9	VNPT-VNNIC-VN	19
10	ALISOFT	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	477
2	Viet Nam	31
3	United States	10
4	Taiwan	9
5	Mexico	8
6	Brazil	7
7	Ukraine	6
8	Russian Federation	5
9	Turkey	4
10	Poland	4

Suspected Bot List [2016-01-12]

detection period: 2016-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	116.90.106.129	Pakistan
US	104.129.60.132	United States

List from greylisting:

country code	IP address	Country
AL	213.207.33.19	Albania
AM	212.34.226.101	Armenia
AR	190.3.24.18	Argentina
AR	190.189.24.54	Argentina
AR	190.192.38.12	Argentina
AR	190.193.211.211	Argentina
AR	200.126.129.82	Argentina
AR	200.127.47.116	Argentina
AR	201.251.91.128	Argentina
CM	197.159.0.70	Cameroon
DZ	193.194.92.3	Algeria
ES	87.235.177.251	Spain
ES	188.87.93.85	Spain
IN	117.195.159.54	India
IN	117.216.255.239	India
IN	120.61.160.202	India
IN	122.161.130.94	India
IN	202.153.45.94	India
MX	187.177.172.13	Mexico
SV	190.62.133.46	El Salvador
US	71.14.212.34	United States
US	192.232.212.44	United States