Daily Botnet Statistics: November 2016

Wednesday, November 30, 2016

Suspected Bot List [2016-11-29]

detection period: 2016-11-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 238

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
AR	190.195.255.164	Argentina
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
ES	88.28.206.137	Spain
ES	88.28.209.187	Spain
FR	62.210.188.185	France
FR	82.98.48.220	France
FR	85.203.80.206	France
FR	85.203.107.46	France
FR	85.203.114.1	France
FR	85.203.116.219	France
FR	85.203.120.51	France
FR	85.203.121.115	France
FR	85.203.123.53	France
FR	109.1.102.56	France
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
GT	181.209.254.17	Guatemala
HT	200.113.196.77	Haiti
HT	200.113.196.252	Haiti
HT	200.113.221.17	Haiti
HT	200.113.221.105	Haiti
HT	200.113.221.134	Haiti
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
IT	134.255.172.28	Italy
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-29]

detection period: 2016-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1991
number of botnet IPs notified to network operators: 1753
number of spam blocked: 23345
recipient count of spam blocked: 29112

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	275
2	CHINANET-HN	161
3	VIETEL-VNNIC-VN	62
4	FPT-VN	53
5	CHINANET-GD	52
6	BHARTI-IN	50
7	BSNLNET	48
8	VIETEL-VN	37
9	CMNET	30
10	CHINANET-JS	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	509
2	Viet Nam	500
3	India	178
4	Brazil	76
5	Italy	54
6	Colombia	48
7	Mexico	36
8	Argentina	31
9	Antigua And Barbuda	31
10	South Korea	29

Tuesday, November 29, 2016

Suspected Bot List [2016-11-28]

detection period: 2016-11-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 214

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
AR	190.195.255.164	Argentina
BD	202.5.37.132	Bangladesh
CM	41.211.106.148	Cameroon
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
FR	82.98.48.220	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KH	103.239.54.178	Cambodia
KZ	89.218.26.142	Kazakhstan
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
PL	185.125.4.249	Poland
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-28]

detection period: 2016-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2096
number of botnet IPs notified to network operators: 1882
number of spam blocked: 22385
recipient count of spam blocked: 28267

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	323
2	CHINANET-HN	129
3	VIETEL-VNNIC-VN	81
4	FPT-VN	57
5	BHARTI-IN	55
6	CHINANET-JS	53
7	VIETEL-VN	50
8	CHINANET-HB	47
9	CMNET	41
10	BSNLNET	39

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	614
2	China	592
3	India	160
4	Brazil	61
5	Mexico	38
6	Italy	38
7	Colombia	38
8	South Korea	32
9	Antigua And Barbuda	30
10	Taiwan	28

Monday, November 28, 2016

Suspected Bot List [2016-11-27]

detection period: 2016-11-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 158

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
AR	190.195.255.164	Argentina
BD	180.211.159.98	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
EG	41.33.33.146	Egypt
ES	88.28.199.74	Spain
ES	88.28.209.187	Spain
FR	82.98.48.220	France
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
GT	181.209.238.69	Guatemala
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
IT	134.255.172.28	Italy
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KZ	89.218.26.142	Kazakhstan
MY	203.142.41.3	Malaysia
MY	203.142.41.4	Malaysia
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-27]

detection period: 2016-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1487
number of botnet IPs notified to network operators: 1329
number of spam blocked: 305255
recipient count of spam blocked: 307085

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	169
2	CHINANET-HN	105
3	CHINANET-GD	49
4	FPT-VN	41
5	UNICOM-ZJ	40
6	CHINANET-HB	34
7	VIETEL-VNNIC-VN	32
8	CMNET	31
9	BHARTI-IN	31
10	BSNLNET	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	537
2	Viet Nam	322
3	India	76
4	Brazil	39
5	Argentina	34
6	South Korea	30
7	Antigua And Barbuda	27
8	Mexico	25
9	Russian Federation	23
10	Colombia	22

Sunday, November 27, 2016

Suspected Bot List [2016-11-26]

detection period: 2016-11-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 86

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	118.179.158.218	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.163.67	Cambodia
KZ	89.218.26.142	Kazakhstan
MY	203.142.35.67	Malaysia
MY	203.142.41.4	Malaysia
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.38.210	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.219.211	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
TZ	41.77.194.182	Tanzania

List from greylisting:

Botnet Statistics [2016-11-26]

detection period: 2016-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 812
number of botnet IPs notified to network operators: 726
number of spam blocked: 393290
recipient count of spam blocked: 398203

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	107
2	CHINANET-GD	53
3	BHARTI-IN	33
4	CHINANET-HB	30
5	CMNET	27
6	UNICOM-HE	23
7	BSNLNET	23
8	UCOM-GPON	15
9	UNICOM-GD	13
10	UNICOM-JX	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	421
2	India	77
3	Antigua And Barbuda	23
4	Viet Nam	18
5	Armenia	15
6	Taiwan	14
7	Russian Federation	14
8	South Korea	14
9	Brazil	14
10	Pakistan	13

Saturday, November 26, 2016

Suspected Bot List [2016-11-25]

detection period: 2016-11-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 183

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
AR	190.195.255.164	Argentina
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.74.247.122	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.212.52	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KZ	89.218.26.142	Kazakhstan
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SA	88.85.228.90	Saudi Arabia
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-25]

detection period: 2016-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1302
number of botnet IPs notified to network operators: 1119
number of spam blocked: 477668
recipient count of spam blocked: 488368

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	134
2	BHARTI-IN	58
3	BSNLNET	54
4	CHINANET-GD	44
5	CHINANET-HB	36
6	VNPT-VNNIC-VN	28
7	CMNET	28
8	UNICOM-HE	20
9	UCOM-GPON	18
10	CHINANET-AH	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	489
2	India	216
3	Viet Nam	73
4	Pakistan	34
5	Antigua And Barbuda	29
6	Indonesia	25
7	Brazil	23
8	Russian Federation	20
9	Bangladesh	18
10	Armenia	18

Friday, November 25, 2016

Suspected Bot List [2016-11-24]

detection period: 2016-11-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 173

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
FR	82.98.48.220	France
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	203.192.212.52	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
MY	203.142.41.3	Malaysia
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SA	88.85.228.90	Saudi Arabia
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
US	69.145.190.168	United States

List from greylisting:

Botnet Statistics [2016-11-24]

detection period: 2016-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1286
number of botnet IPs notified to network operators: 1113
number of spam blocked: 195485
recipient count of spam blocked: 199921

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	148
2	CHINANET-GD	92
3	BHARTI-IN	47
4	CHINANET-JS	44
5	UNICOM-JS	43
6	CHINANET-HB	33
7	BSNLNET	32
8	VNPT-VNNIC-VN	24
9	CMNET	21
10	UNICOM-HE	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	582
2	India	170
3	Viet Nam	61
4	Pakistan	28
5	Colombia	24
6	Brazil	24
7	Iran	23
8	Indonesia	23
9	Italy	21
10	Antigua And Barbuda	20

Thursday, November 24, 2016

Suspected Bot List [2016-11-23]

detection period: 2016-11-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 165

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	58.147.173.36	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.123	Cape Verde
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GT	181.209.252.97	Guatemala
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.6.82	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.217.38	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.119.150	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.12.160.149	Cambodia
KH	103.12.161.70	Cambodia
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
KH	103.239.54.178	Cambodia
KZ	89.218.26.142	Kazakhstan
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.32.105	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-23]

detection period: 2016-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1311
number of botnet IPs notified to network operators: 1146
number of spam blocked: 19766
recipient count of spam blocked: 23587

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	165
2	UNICOM-ZJ	77
3	BHARTI-IN	48
4	UNICOM-JS	43
5	WASU	36
6	BSNLNET	33
7	CHINANET-JS	30
8	CMNET	27
9	WASU-BB	26
10	CHINANET-HB	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	639
2	India	155
3	Viet Nam	56
4	Iran	35
5	Russian Federation	22
6	Indonesia	22
7	Bangladesh	22
8	Brazil	20
9	Antigua And Barbuda	19
10	Colombia	15

Wednesday, November 23, 2016

Suspected Bot List [2016-11-22]

detection period: 2016-11-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 110

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	202.5.37.132	Bangladesh
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.6.82	India
IN	182.71.119.162	India
IN	182.72.36.34	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.205.202	India
IN	203.192.221.86	India
IN	203.192.221.87	India
IT	134.255.172.28	Italy
KH	103.12.161.187	Cambodia
KH	103.12.163.67	Cambodia
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-22]

detection period: 2016-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1050
number of botnet IPs notified to network operators: 940
number of spam blocked: 10170
recipient count of spam blocked: 16213

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	132
2	UNICOM-ZJ	74
3	CHINANET-JS	69
4	UNICOM-JS	48
5	WASU	43
6	BHARTI-IN	33
7	WASU-BB	31
8	CHINANET-HB	21
9	UNICOM-HE	16
10	CMNET	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	590
2	India	102
3	Viet Nam	33
4	Iran	21
5	Pakistan	20
6	Colombia	17
7	Bangladesh	17
8	Brazil	16
9	Russian Federation	13
10	Antigua And Barbuda	13

Tuesday, November 22, 2016

Suspected Bot List [2016-11-21]

detection period: 2016-11-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 104

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	43.240.100.4	Bangladesh
BD	43.240.100.102	Bangladesh
BD	43.240.100.199	Bangladesh
BD	103.36.100.16	Bangladesh
BD	116.193.219.109	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
BD	202.5.37.132	Bangladesh
CR	186.32.186.58	Costa Rica
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.6.82	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.87	India
KH	103.239.54.178	Cambodia
NI	190.124.32.202	Nicaragua
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.38.216.74	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SA	88.85.228.90	Saudi Arabia
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-21]

detection period: 2016-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 941
number of botnet IPs notified to network operators: 837
number of spam blocked: 8635
recipient count of spam blocked: 13188

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	84
2	CHINANET-JS	50
3	UNICOM-ZJ	46
4	UNICOM-JS	41
5	BHARTI-IN	38
6	WASU	31
7	CMNET	28
8	CHINANET-HB	25
9	WASU-BB	21
10	BSNLNET	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	512
2	India	111
3	Viet Nam	27
4	Bangladesh	16
5	Russian Federation	15
6	Colombia	15
7	Brazil	15
8	Armenia	14
9	Taiwan	13
10	Pakistan	13

Monday, November 21, 2016

Suspected Bot List [2016-11-20]

detection period: 2016-11-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 76

List from fake open relays:

country code	IP address	Country
BD	43.240.100.4	Bangladesh
BD	43.240.100.199	Bangladesh
BD	103.36.100.16	Bangladesh
BD	116.193.219.109	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.121	Cape Verde
CV	197.255.143.123	Cape Verde
ES	88.28.206.137	Spain
ES	88.28.209.187	Spain
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.89.138	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.205.202	India
IN	203.192.221.87	India
KH	103.239.54.178	Cambodia
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.63	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.133	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.217.162	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SA	88.85.228.90	Saudi Arabia
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-20]

detection period: 2016-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 781
number of botnet IPs notified to network operators: 705
number of spam blocked: 9995
recipient count of spam blocked: 20061

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	81
2	UNICOM-ZJ	70
3	WASU	50
4	BHARTI-IN	25
5	CHINANET-HB	23
6	BSNLNET	22
7	CMNET	21
8	WASU-BB	18
9	UNICOM-HE	17
10	UCOM-GPON	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	423
2	India	59
3	Russian Federation	18
4	Antigua And Barbuda	18
5	Armenia	17
6	Pakistan	16
7	Taiwan	14
8	Bangladesh	14
9	Brazil	13
10	Ukraine	11

Sunday, November 20, 2016

Suspected Bot List [2016-11-19]

detection period: 2016-11-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

List from fake open relays:

country code	IP address	Country
AR	170.84.169.2	Argentina
AR	190.191.64.42	Argentina
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.123	Cape Verde
ES	88.28.204.7	Spain
ES	88.28.206.137	Spain
GA	197.231.141.29	Gabon
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	125.99.255.146	India
IN	182.71.6.82	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.173.58	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.119.150	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	182.76.1.182	India
IN	203.192.212.52	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KH	103.239.54.178	Cambodia
NL	213.34.69.164	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.35.128	Pakistan
PK	110.36.38.210	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.216.74	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.218.122	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
SA	88.85.228.90	Saudi Arabia
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
UG	137.63.129.23	Uganda

List from greylisting:

Botnet Statistics [2016-11-19]

detection period: 2016-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 639
number of botnet IPs notified to network operators: 565
number of spam blocked: 1338
recipient count of spam blocked: 4354

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	39
2	BHARTI-IN	33
3	WASU-BB	30
4	WASU	29
5	CMNET	25
6	CHINANET-HB	23
7	UCOM-GPON	18
8	UNICOM-HE	15
9	BSNLNET	14
10	UNICOM-JX	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	310
2	India	59
3	Armenia	18
4	Antigua And Barbuda	18
5	Viet Nam	15
6	Russian Federation	13
7	South Korea	13
8	El Salvador	11
9	United States	10
10	Brazil	10

Saturday, November 19, 2016

Suspected Bot List [2016-11-18]

detection period: 2016-11-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	202.5.37.132	Bangladesh
CM	41.223.30.251	Cameroon
CR	186.32.186.58	Costa Rica
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.122	Cape Verde
CV	197.255.143.123	Cape Verde
FR	82.98.48.220	France
GA	197.231.143.122	Gabon
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	125.17.80.106	India
IN	182.71.6.82	India
IN	182.71.16.154	India
IN	182.71.25.62	India
IN	182.72.25.86	India
IN	182.72.26.130	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.173.58	India
IN	182.74.190.194	India
IN	182.74.203.226	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.114.174	India
IN	182.75.123.78	India
IN	182.75.205.202	India
IN	182.75.213.102	India
IN	203.192.221.86	India
KH	103.239.54.178	Cambodia
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.60	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.218.122	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
SA	88.85.228.90	Saudi Arabia
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2016-11-18]

detection period: 2016-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1295
number of botnet IPs notified to network operators: 1226
number of spam blocked: 88120
recipient count of spam blocked: 91615

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	528
2	UNICOM-ZJ	56
3	WASU-BB	39
4	BHARTI-IN	30
5	CMNET	27
6	BSNLNET	25
7	UNICOM-HE	22
8	CHINANET-HB	21
9	UCOM-GPON	18
10	UNICOM-JS	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	893
2	India	69
3	Viet Nam	25
4	Antigua And Barbuda	24
5	Armenia	18
6	Brazil	17
7	Taiwan	16
8	Russian Federation	16
9	South Korea	14
10	United States	11

Friday, November 18, 2016

Suspected Bot List [2016-11-17]

detection period: 2016-11-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

List from fake open relays:

country code	IP address	Country
IN	182.71.6.82	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.149.230	India
IN	182.74.173.58	India
IN	182.75.77.50	India
IN	182.76.1.182	India
IN	203.192.212.52	India
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.137	El Salvador

List from greylisting:

Botnet Statistics [2016-11-17]

detection period: 2016-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1150
number of botnet IPs notified to network operators: 1127
number of spam blocked: 260772
recipient count of spam blocked: 268268

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	654
2	UNICOM-ZJ	96
3	CHINANET-HN	91
4	WASU-BB	42
5	CHINANET-JS	34
6	UNICOM-JS	32
7	CHINANET-HB	14
8	BHARTI-IN	8
9	CMNET	7
10	CHINANET-GD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	1046
2	India	17
3	Brazil	8
4	Taiwan	7
5	Russian Federation	7
6	Turkey	5
7	El Salvador	5
8	South Korea	5
9	Hong Kong	4
10	United States	3

Thursday, November 17, 2016

Suspected Bot List [2016-11-16]

detection period: 2016-11-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

List from fake open relays:

country code	IP address	Country
AR	170.84.169.2	Argentina
IN	203.192.212.52	India
US	47.50.130.58	United States

List from greylisting:

Botnet Statistics [2016-11-16]

detection period: 2016-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 930
number of botnet IPs notified to network operators: 914
number of spam blocked: 220789
recipient count of spam blocked: 228909

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	459
2	CHINANET-HN	95
3	UNICOM-ZJ	85
4	WASU-BB	41
5	UNICOM-JS	32
6	CHINANET-JS	31
7	CHINANET-HB	16
8	CHINANET-AH	13
9	CHINANET-GD	9
10	UNICOM-NM	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	838
2	Japan	12
3	United States	11
4	Taiwan	6
5	Italy	6
6	Turkey	5
7	Russian Federation	5
8	India	4
9	Argentina	4
10	Viet Nam	3

Wednesday, November 16, 2016

Suspected Bot List [2016-11-15]

detection period: 2016-11-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 87

List from fake open relays:

country code	IP address	Country
AR	190.191.64.42	Argentina
BD	43.240.100.4	Bangladesh
BD	43.240.100.102	Bangladesh
BD	103.36.100.16	Bangladesh
BD	116.193.219.109	Bangladesh
BD	116.193.219.141	Bangladesh
BD	116.193.219.163	Bangladesh
BD	116.193.220.3	Bangladesh
CM	41.223.30.251	Cameroon
CV	197.255.143.108	Cape Verde
CV	197.255.143.121	Cape Verde
CV	197.255.143.123	Cape Verde
GA	197.231.141.29	Gabon
IN	59.145.146.94	India
IN	125.99.255.146	India
IN	182.71.6.82	India
IN	182.71.16.154	India
IN	182.71.118.138	India
IN	182.71.119.162	India
IN	182.72.25.86	India
IN	182.72.36.34	India
IN	182.72.63.238	India
IN	182.72.89.138	India
IN	182.72.98.186	India
IN	182.72.100.238	India
IN	182.72.149.230	India
IN	182.72.158.134	India
IN	182.73.105.34	India
IN	182.73.149.126	India
IN	182.73.193.250	India
IN	182.73.245.86	India
IN	182.74.31.134	India
IN	182.74.50.70	India
IN	182.74.112.246	India
IN	182.74.190.194	India
IN	182.74.232.178	India
IN	182.75.19.2	India
IN	182.75.77.50	India
IN	182.75.107.222	India
IN	182.75.110.198	India
IN	182.75.114.174	India
IN	182.75.205.202	India
IN	182.76.1.182	India
IN	203.192.212.52	India
IN	203.192.221.86	India
IN	203.192.221.87	India
KG	81.88.196.175	Kyrgyzstan
NL	213.34.69.164	Netherlands
NL	213.34.69.176	Netherlands
PH	203.115.141.251	Philippines
PK	110.36.32.105	Pakistan
PK	110.36.33.37	Pakistan
PK	110.36.38.210	Pakistan
PK	110.38.216.74	Pakistan
PK	110.38.217.82	Pakistan
PK	110.38.217.122	Pakistan
PK	110.38.217.161	Pakistan
PK	110.38.218.122	Pakistan
PK	110.38.219.211	Pakistan
PK	182.191.81.191	Pakistan
RO	89.165.156.233	Romania
RU	213.33.205.6	Russian Federation
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
UG	137.63.129.23	Uganda
US	47.50.130.58	United States

List from greylisting:

Botnet Statistics [2016-11-15]

detection period: 2016-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1371
number of botnet IPs notified to network operators: 1284
number of spam blocked: 18001
recipient count of spam blocked: 32596

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	392
2	CHINANET-HN	113
3	UNICOM-ZJ	84
4	WASU-BB	47
5	CHINANET-JS	39
6	UNICOM-JS	37
7	BHARTI-IN	30
8	CMNET	27
9	UCOM-GPON	25
10	CHINANET-HB	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	994
2	India	57
3	United States	28
4	Armenia	25
5	Taiwan	18
6	Russian Federation	18
7	Antigua And Barbuda	17
8	South Korea	16
9	Pakistan	13
10	Ukraine	12