Suspected Bot List [2015-07-30]

detection period: 2015-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-30]

detection period: 2015-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 2988
number of botnet IPs notified to network operators: 2968
number of spam blocked: 245236
recipient count of spam blocked: 3067031

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1073
2	CHINANET-ZJ-JH	364
3	UNICOM-ZJ	256
4	WASU	225
5	CHINANET-AH	210
6	CHINANET-GD	206
7	WASU-BB	197
8	CHINANET-SC	105
9	VNPT-VNNIC-VN	32
10	CHINANET-JS	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1684
2	Taiwan	1080
3	Viet Nam	80
4	United States	20
5	Brazil	19
6	Russian Federation	15
7	Kazakhstan	8
8	Hong Kong	8
9	India	7
10	Ukraine	6

Suspected Bot List [2015-07-29]

detection period: 2015-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-29]

detection period: 2015-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2852
number of botnet IPs notified to network operators: 2829
number of spam blocked: 188852
recipient count of spam blocked: 3232192

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1001
2	CHINANET-ZJ-JH	380
3	CHINANET-AH	260
4	UNICOM-ZJ	232
5	CHINANET-GD	199
6	WASU	175
7	CHINANET-SC	165
8	WASU-BB	111
9	UNICOM-BJ	36
10	CHINANET-JS	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1672
2	Taiwan	1004
3	Viet Nam	62
4	United States	25
5	India	11
6	Brazil	10
7	Ukraine	8
8	Hong Kong	6
9	Kazakhstan	5
10	South Korea	4

Suspected Bot List [2015-07-28]

detection period: 2015-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-28]

detection period: 2015-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2803
number of botnet IPs notified to network operators: 2789
number of spam blocked: 192849
recipient count of spam blocked: 3643524

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	998
2	CHINANET-ZJ-JH	341
3	CHINANET-AH	311
4	CHINANET-SC	207
5	UNICOM-ZJ	183
6	CHINANET-GD	170
7	WASU	125
8	WASU-BB	115
9	CHINANET-JS	95
10	VNPT-VNNIC-VN	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1641
2	Taiwan	1002
3	Viet Nam	44
4	United States	41
5	Brazil	11
6	Hong Kong	9
7	Ukraine	8
8	South Korea	6
9	Russian Federation	5
10	Poland	2

Suspected Bot List [2015-07-27]

detection period: 2015-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-27]

detection period: 2015-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 3069
number of botnet IPs notified to network operators: 3061
number of spam blocked: 137344
recipient count of spam blocked: 3466557

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1019
2	CHINANET-ZJ-JH	531
3	CHINANET-AH	366
4	UNICOM-ZJ	234
5	CHINANET-SC	221
6	WASU	180
7	WASU-BB	155
8	CHINANET-GD	149
9	CHINANET-JS	27
10	UNICOM-BJ	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1960
2	Taiwan	1026
3	United States	24
4	Viet Nam	23
5	Hong Kong	6
6	Brazil	6
7	India	3
8	Russian Federation	2
9	South Korea	2
10	Bulgaria	2

Suspected Bot List [2015-07-26]

detection period: 2015-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-26]

detection period: 2015-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 2742
number of botnet IPs notified to network operators: 2727
number of spam blocked: 169436
recipient count of spam blocked: 4094914

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1073
2	CHINANET-ZJ-JH	485
3	CHINANET-AH	422
4	CHINANET-SC	194
5	CHINANET-GD	115
6	WASU	71
7	UNICOM-ZJ	70
8	WASU-BB	68
9	VNPT-VNNIC-VN	23
10	CHINANET-JS	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1503
2	Taiwan	1076
3	Viet Nam	47
4	United States	19
5	Russian Federation	18
6	Brazil	14
7	Ukraine	8
8	South Korea	8
9	India	6
10	Turkey	5

Suspected Bot List [2015-07-25]

detection period: 2015-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-25]

detection period: 2015-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2318
number of botnet IPs notified to network operators: 2295
number of spam blocked: 147433
recipient count of spam blocked: 3686452

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1017
2	CHINANET-ZJ-JH	458
3	CHINANET-AH	398
4	CHINANET-SC	152
5	CHINANET-GD	144
6	UNICOM-JS	29
7	ERX-NETBLOCK	14
8	CHINANET-JX	6
9	CHINANET-JS	6
10	VNPT-VNNIC-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1231
2	Taiwan	1019
3	United States	10
4	Viet Nam	8
5	Ukraine	5
6	Russian Federation	5
7	Brazil	4
8	Indonesia	3
9	Hong Kong	3
10	France	3

Suspected Bot List [2015-07-24]

detection period: 2015-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-24]

detection period: 2015-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 2863
number of botnet IPs notified to network operators: 2812
number of spam blocked: 162455
recipient count of spam blocked: 3890465

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	982
2	CHINANET-ZJ-JH	411
3	CHINANET-AH	343
4	CHINANET-SC	193
5	CHINANET-GD	168
6	UNICOM-ZJ	138
7	WASU	107
8	UNICOM-JS	80
9	WASU-BB	76
10	VNPT-VNNIC-VN	37

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1689
2	Taiwan	985
3	Viet Nam	75
4	United States	27
5	Brazil	14
6	Ukraine	10
7	India	8
8	Russian Federation	6
9	South Korea	6
10	Indonesia	5

Suspected Bot List [2015-07-23]

detection period: 2015-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-23]

detection period: 2015-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 2009
number of botnet IPs notified to network operators: 1981
number of spam blocked: 182948
recipient count of spam blocked: 4370797

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1045
2	UNICOM-ZJ	136
3	WASU	116
4	CHINANET-ZJ-JH	113
5	WASU-BB	108
6	CHINANET-AH	99
7	CHINANET-GD	66
8	CHINANET-SC	54
9	VNPT-VNNIC-VN	21
10	UNICOM-BJ	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1047
2	China	771
3	Viet Nam	48
4	United States	23
5	Brazil	23
6	Russian Federation	14
7	India	7
8	Argentina	7
9	South Korea	6
10	Ukraine	5

Suspected Bot List [2015-07-22]

detection period: 2015-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-22]

detection period: 2015-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1798
number of botnet IPs notified to network operators: 1782
number of spam blocked: 165678
recipient count of spam blocked: 4081928

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1073
2	WASU	165
3	UNICOM-ZJ	152
4	WASU-BB	107
5	CHINANET-GD	40
6	VNPT-VNNIC-VN	23
7	CHINANET-JX	14
8	UNICOM-BJ	13
9	CHINANET-SH	9
10	FPT-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1080
2	China	559
3	Viet Nam	51
4	United States	14
5	Brazil	13
6	Ukraine	9
7	South Korea	7
8	India	7
9	France	6
10	Kazakhstan	5

Suspected Bot List [2015-07-21]

detection period: 2015-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-21]

detection period: 2015-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1582
number of botnet IPs notified to network operators: 1570
number of spam blocked: 132986
recipient count of spam blocked: 3327296

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1052
2	UNICOM-ZJ	133
3	WASU	107
4	WASU-BB	93
5	CHINANET-GD	34
6	UNICOM-BJ	16
7	VNPT-VNNIC-VN	9
8	CHINANET-HN	7
9	GIANT	6
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1054
2	China	441
3	United States	19
4	Viet Nam	12
5	Brazil	6
6	South Korea	5
7	Ukraine	4
8	Hong Kong	4
9	France	4
10	Russian Federation	3

Suspected Bot List [2015-07-20]

detection period: 2015-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-20]

detection period: 2015-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1992
number of botnet IPs notified to network operators: 1891
number of spam blocked: 116875
recipient count of spam blocked: 3157797

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1046
2	UNICOM-ZJ	132
3	VNPT-VNNIC-VN	123
4	CHINANET-GD	51
5	WASU	34
6	WASU-BB	31
7	BSNLNET	24
8	VIETEL-VNNIC-VN	23
9	ETC-VNNIC-VN	19
10	VIETEL-VN	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1057
2	China	337
3	Viet Nam	227
4	India	70
5	South Korea	27
6	Argentina	25
7	Brazil	21
8	Spain	19
9	United States	17
10	Ukraine	17

Suspected Bot List [2015-07-19]

detection period: 2015-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-19]

detection period: 2015-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1642
number of botnet IPs notified to network operators: 1621
number of spam blocked: 121048
recipient count of spam blocked: 3118571

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1048
2	UNICOM-ZJ	129
3	WASU	125
4	WASU-BB	106
5	CHINANET-GD	43
6	VNPT-VNNIC-VN	13
7	CHINANET-JX	7
8	VIETEL-VN	6
9	CHINANET-SH	6
10	CHINANET-HN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1052
2	China	451
3	Viet Nam	32
4	United States	21
5	France	7
6	Brazil	7
7	Italy	6
8	Spain	6
9	Argentina	6
10	Russian Federation	4

Suspected Bot List [2015-07-18]

detection period: 2015-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-18]

detection period: 2015-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1508
number of botnet IPs notified to network operators: 1495
number of spam blocked: 209245
recipient count of spam blocked: 3402075

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1012
2	CHINANET-SC	123
3	CHINANET-GD	109
4	CHINANET-ZJ-JH	69
5	UNICOM-ZJ	23
6	WASU	22
7	WASU-BB	21
8	VNPT-VNNIC-VN	8
9	EARTHLINK2000-D	5
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1013
2	China	409
3	United States	22
4	Viet Nam	15
5	India	7
6	France	4
7	Venezuela	3
8	Ukraine	3
9	Japan	3
10	Indonesia	3

Suspected Bot List [2015-07-17]

detection period: 2015-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-17]

detection period: 2015-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 2584
number of botnet IPs notified to network operators: 2571
number of spam blocked: 196767
recipient count of spam blocked: 3226983

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	984
2	CHINANET-ZJ-JH	438
3	CHINANET-SC	321
4	CHINANET-GD	310
5	UNICOM-ZJ	138
6	WASU	113
7	WASU-BB	85
8	VNPT-VNNIC-VN	14
9	UNICOM-BJ	8
10	FPT-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1455
2	Taiwan	989
3	Viet Nam	36
4	United States	18
5	Brazil	11
6	Ukraine	9
7	France	8
8	India	5
9	Hong Kong	5
10	South Korea	4

Suspected Bot List [2015-07-16]

detection period: 2015-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-16]

detection period: 2015-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 3195
number of botnet IPs notified to network operators: 3175
number of spam blocked: 210140
recipient count of spam blocked: 3234280

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1004
2	CHINANET-ZJ-JH	691
3	CHINANET-SC	425
4	CHINANET-GD	294
5	CHINANET-AH	166
6	UNICOM-ZJ	153
7	WASU	112
8	WASU-BB	81
9	UNICOM-BJ	24
10	VNPT-VNNIC-VN	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2010
2	Taiwan	1008
3	Viet Nam	42
4	Brazil	26
5	United States	21
6	Ukraine	10
7	Russian Federation	7
8	South Korea	6
9	India	6
10	Indonesia	5

Suspected Bot List [2015-07-14]

detection period: 2015-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-14]

detection period: 2015-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 2052
number of botnet IPs notified to network operators: 2030
number of spam blocked: 316697
recipient count of spam blocked: 3393417

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1019
2	CHINANET-SC	388
3	CHINANET-AH	207
4	CHINANET-GD	177
5	VNPT-VNNIC-VN	45
6	UNICOM-BJ	17
7	VIETEL-VNNIC-VN	10
8	CHINANET-HN	7
9	WASU-BB	6
10	VIETEL-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1024
2	China	838
3	Viet Nam	86
4	United States	17
5	Brazil	11
6	India	6
7	United Kingdom	6
8	Ukraine	4
9	Russian Federation	4
10	Argentina	4

Suspected Bot List [2015-07-13]

detection period: 2015-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
EG	193.227.34.20	Egypt
MX	201.116.227.163	Mexico

List from greylisting:

Botnet Statistics [2015-07-13]

detection period: 2015-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1158
number of botnet IPs notified to network operators: 1131
number of spam blocked: 278583
recipient count of spam blocked: 2861946

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	788
2	CHINANET-GD	119
3	VNPT-VNNIC-VN	36
4	UNICOM-BJ	16
5	VIETEL-VNNIC-VN	8
6	FPT-VN	7
7	CHINANET-SH	6
8	WASU	5
9	WASU-BB	4
10	GIANT	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	794
2	China	173
3	Viet Nam	66
4	India	14
5	United States	11
6	Ukraine	11
7	Russian Federation	11
8	Brazil	9
9	Turkey	6
10	South Korea	6

Suspected Bots' IP List for July 2015

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below) 10 days after its respective botnet statistics gets published.

New data will be added here daily. You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2015-07-31]
Suspected Bots IP [2015-07-30]
Suspected Bots IP [2015-07-29]
Suspected Bots IP [2015-07-28]
Suspected Bots IP [2015-07-27]
Suspected Bots IP [2015-07-26]
Suspected Bots IP [2015-07-25]
Suspected Bots IP [2015-07-24]
Suspected Bots IP [2015-07-23]
Suspected Bots IP [2015-07-22]
Suspected Bots IP [2015-07-21]
Suspected Bots IP [2015-07-20]
Suspected Bots IP [2015-07-19]
Suspected Bots IP [2015-07-18]
Suspected Bots IP [2015-07-17]
Suspected Bots IP [2015-07-16]
Suspected Bots IP [2015-07-14]
Suspected Bots IP [2015-07-13]
Suspected Bots IP [2015-07-12]
Suspected Bots IP [2015-07-11]
Suspected Bots IP [2015-07-10]
Suspected Bots IP [2015-07-09]
Suspected Bots IP [2015-07-08]
Suspected Bots IP [2015-07-07]
Suspected Bots IP [2015-07-06]
Suspected Bots IP [2015-07-05]
Suspected Bots IP [2015-07-04]
Suspected Bots IP [2015-07-03]
Suspected Bots IP [2015-07-02]
Suspected Bots IP [2015-07-01]

Suspected Bot List [2015-07-12]

detection period: 2015-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-12]

detection period: 2015-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1295
number of botnet IPs notified to network operators: 1282
number of spam blocked: 190784
recipient count of spam blocked: 3565469

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1020
2	CHINANET-GD	59
3	VNPT-VNNIC-VN	24
4	VIETEL-VN	12
5	WASU	10
6	VIETEL-VNNIC-VN	7
7	CHINANET-SH	6
8	WASU-BB	5
9	IPxDSL-NET	3
10	FPT-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1026
2	China	110
3	Viet Nam	58
4	United States	11
5	Ukraine	11
6	Russian Federation	9
7	Brazil	8
8	Indonesia	5
9	Turkey	4
10	Poland	4

Suspected Bot List [2015-07-11]

detection period: 2015-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-11]

detection period: 2015-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1402
number of botnet IPs notified to network operators: 1381
number of spam blocked: 219707
recipient count of spam blocked: 3907833

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1054
2	VNPT-VNNIC-VN	53
3	FPT-VN	24
4	VIETEL-VN	17
5	CHINANET-GD	15
6	ETC-VNNIC-VN	8
7	IPxDSL-NET	7
8	CHINANET-HN	6
9	CHINANET-SH	5
10	VIETEL-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1061
2	Viet Nam	121
3	China	56
4	Ukraine	21
5	United States	20
6	India	16
7	Russian Federation	14
8	Brazil	10
9	Israel	7
10	Kazakhstan	6

Suspected Bot List [2015-07-10]

detection period: 2015-07-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-10]

detection period: 2015-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1244
number of botnet IPs notified to network operators: 1225
number of spam blocked: 394635
recipient count of spam blocked: 4931517

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1023
2	VNPT-VNNIC-VN	22
3	CHINANET-GD	21
4	WASU	5
5	FPT-VN	5
6	BSNLNET	5
7	VIETEL-VNNIC-VN	4
8	UNICOM-BJ	4
9	MOCAH-1	4
10	EARTHLINK2000-D	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1026
2	China	64
3	Viet Nam	40
4	United States	24
5	India	11
6	Ukraine	10
7	Brazil	9
8	Kazakhstan	6
9	Russian Federation	5
10	United Kingdom	5

Suspected Bot List [2015-07-09]

detection period: 2015-07-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
EG	193.227.34.20	Egypt

List from greylisting:

Botnet Statistics [2015-07-09]

detection period: 2015-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1269
number of botnet IPs notified to network operators: 1249
number of spam blocked: 238571
recipient count of spam blocked: 3901187

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1002
2	VNPT-VNNIC-VN	39
3	CHINANET-GD	25
4	VIETEL-VN	12
5	WASU	7
6	UNICOM-BJ	7
7	MSFT	7
8	CHINANET-SH	7
9	FPT-VN	6
10	VIETEL-VNNIC-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1007
2	China	82
3	Viet Nam	68
4	United States	31
5	Brazil	12
6	Indonesia	5
7	Argentina	5
8	Ukraine	4
9	Thailand	4
10	Kazakhstan	4

Suspected Bot List [2015-07-08]

detection period: 2015-07-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-08]

detection period: 2015-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1300
number of botnet IPs notified to network operators: 1278
number of spam blocked: 119711
recipient count of spam blocked: 3152669

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1028
2	CHINANET-GD	33
3	VNPT-VNNIC-VN	20
4	005.405.669/0001-87	12
5	UNICOM-BJ	11
6	WASU	8
7	WASU-BB	5
8	VIETEL-VN	5
9	PCCW-BIA	4
10	GIANT	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1034
2	China	105
3	Viet Nam	44
4	United States	26
5	Brazil	20
6	Ukraine	6
7	Russian Federation	5
8	Kazakhstan	5
9	India	5
10	Italy	4

Suspected Bot List [2015-07-07]

detection period: 2015-07-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-07]

detection period: 2015-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1315
number of botnet IPs notified to network operators: 1297
number of spam blocked: 199749
recipient count of spam blocked: 3534894

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1025
2	CHINANET-GD	32
3	VNPT-VNNIC-VN	23
4	UNICOM-BJ	15
5	CHINANET-SH	9
6	CHINANET-HN	8
7	005.405.669/0001-87	8
8	ETC-VNNIC-VN	7
9	WASU-BB	6
10	VIETEL-VNNIC-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1028
2	China	119
3	Viet Nam	58
4	United States	12
5	Brazil	12
6	Japan	9
7	India	7
8	Indonesia	6
9	Ukraine	5
10	Russian Federation	5

Suspected Bot List [2015-07-06]

detection period: 2015-07-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-06]

detection period: 2015-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 1208
number of botnet IPs notified to network operators: 1189
number of spam blocked: 175323
recipient count of spam blocked: 3394192

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1002
2	UNICOM-BJ	21
3	CHINANET-GD	21
4	005.405.669/0001-87	9
5	WASU	7
6	CHINANET-SH	6
7	CHINANET-HN	6
8	VNPT-VNNIC-VN	5
9	GIANT	4
10	CHINANET-SC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1005
2	China	103
3	United States	17
4	Brazil	13
5	Viet Nam	11
6	Russian Federation	6
7	Hong Kong	6
8	South Korea	4
9	Japan	4
10	Italy	4

Suspected Bot List [2015-07-05]

detection period: 2015-07-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-05]

detection period: 2015-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1513
number of botnet IPs notified to network operators: 1502
number of spam blocked: 178849
recipient count of spam blocked: 3292645

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1033
2	CHINANET-SC	243
3	CHINANET-GD	24
4	VNPT-VNNIC-VN	22
5	UNICOM-BJ	8
6	VIETEL-VNNIC-VN	5
7	UNICOM-SC	5
8	CHINANET-HN	5
9	FPT-NET	4
10	ENZUINC-US-BLK16	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1039
2	China	331
3	Viet Nam	42
4	United States	27
5	Ukraine	11
6	Russian Federation	8
7	Brazil	6
8	Kazakhstan	3
9	South Korea	3
10	India	3

Botnet Statistics for June 2015

detection period: 2015-06-01 00:00 - 2015-06-30 23:59 UTC
total number of suspected botnet IPs: 30278
number of blocked spams: 3288197
recipient count of blocked spams: 88068904

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	20269
2	China	6783
3	Russian Federation	451
4	United States	375
5	Viet Nam	334
6	India	180
7	Brazil	136
8	Argentina	136
9	South Korea	93
10	Ukraine	83
11	Germany	82
12	Mexico	72
13	Japan	64
14	Indonesia	64
15	United Kingdom	59
16	Iran	53
17	Chile	49
18	Turkey	48
19	Kazakhstan	48
20	Spain	45
21	Italy	43
22	Thailand	36
23	Hong Kong	34
24	France	34
25	Poland	33

The top 22 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	2874509
2	United States	259616
3	France	135693
4	China	9900
5	Brazil	5951
6	United Kingdom	1926
7	Australia	213
8	Germany	212
9	Viet Nam	58
10	Ecuador	31
11	Israel	16
12	Russian Federation	12
13	Netherlands	12
14	Italy	9
15	South Korea	8
16	Egypt	7
17	Indonesia	6
18	Thailand	4
19	Hungary	4
20	Hong Kong	4
21	Canada	4
22	Czech Republic	2

The top 22 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2015-07-04]

detection period: 2015-07-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.20.225	Canada

List from greylisting:

Botnet Statistics [2015-07-04]

detection period: 2015-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 1332
number of botnet IPs notified to network operators: 1304
number of spam blocked: 108003
recipient count of spam blocked: 2772264

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	972
2	CHINANET-SC	159
3	CHINANET-GD	16
4	VNPT-VNNIC-VN	7
5	UNICOM-SC	5
6	GIANT	5
7	CHINANET-HN	5
8	FPT-VN	4
9	CMNET	3
10	CHINANET-JS	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	975
2	China	218
3	Viet Nam	16
4	United States	15
5	Ukraine	13
6	Russian Federation	9
7	Brazil	7
8	Spain	6
9	Argentina	6
10	South Korea	4

Suspected Bot List [2015-07-03]

detection period: 2015-07-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-03]

detection period: 2015-07-03 00:00-23:59 UTC
total number of suspected botnet IPs: 1400
number of botnet IPs notified to network operators: 1392
number of spam blocked: 96248
recipient count of spam blocked: 2545332

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	944
2	CHINANET-JS	282
3	CHINANET-GD	22
4	UNICOM-BJ	13
5	WASU-BB	6
6	CMNET	6
7	HICHINA	4
8	GIANT	4
9	CHINANET-SH	4
10	UNICOM-HE	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	949
2	China	382
3	United States	16
4	Brazil	8
5	Hong Kong	6
6	Russian Federation	5
7	South Korea	4
8	Argentina	3
9	Viet Nam	2
10	Ukraine	2

Suspected Bot List [2015-07-02]

detection period: 2015-07-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-02]

detection period: 2015-07-02 00:00-23:59 UTC
total number of suspected botnet IPs: 2126
number of botnet IPs notified to network operators: 2117
number of spam blocked: 94633
recipient count of spam blocked: 2520289

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	970
2	CHINANET-JS	879
3	CHINANET-GD	39
4	UNICOM-BJ	29
5	MXL1	11
6	WASU	10
7	WASU-BB	6
8	TFN-NET	5
9	CHINANET-SC	5
10	CHINANET-HN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1032
2	Taiwan	977
3	United States	28
4	Poland	11
5	Germany	8
6	Russian Federation	6
7	Ukraine	5
8	South Korea	5
9	Brazil	5
10	Indonesia	4

Suspected Bot List [2015-07-01]

detection period: 2015-07-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-07-01]

detection period: 2015-07-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1794
number of botnet IPs notified to network operators: 1765
number of spam blocked: 101499
recipient count of spam blocked: 2740439

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	978
2	CHINANET-JS	529
3	CHINANET-GD	40
4	UNICOM-BJ	20
5	VNPT-VNNIC-VN	9
6	WASU-BB	8
7	CHINANET-HN	7
8	CHINANET-SC	6
9	WASU	5
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	981
2	China	663
3	Viet Nam	18
4	United States	18
5	Russian Federation	15
6	Brazil	15
7	Argentina	9
8	Hong Kong	8
9	India	6
10	Ukraine	5

Suspected Bot List [2015-06-30]

detection period: 2015-06-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2015-06-30]

detection period: 2015-06-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1778
number of botnet IPs notified to network operators: 1764
number of spam blocked: 122961
recipient count of spam blocked: 3256799

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1017
2	CHINANET-JS	511
3	CHINANET-GD	46
4	UNICOM-HB	19
5	CHINANET-SH	9
6	CHINANET-SC	7
7	WASU-BB	6
8	WASU	6
9	CHINANET-HN	6
10	CMNET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	1020
2	China	670
3	United States	19
4	Viet Nam	5
5	Russian Federation	5
6	India	5
7	France	5
8	Brazil	5
9	South Korea	4
10	Hong Kong	4