Suspected Bot List [2016-07-30]

detection period: 2016-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 118

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.57.69.175	Argentina
US	71.95.169.126	United States

List from greylisting:

Botnet Statistics [2016-07-30]

detection period: 2016-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1197
number of botnet IPs notified to network operators: 1079
number of spam blocked: 2243
recipient count of spam blocked: 19727

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	269
2	SONET-NET	220
3	CHINANET-HN	92
4	VNPT-VNNIC-VN	38
5	MX-USCV4-LACNIC	27
6	WASU	21
7	VE-CSVE-LACNIC	21
8	WASU-BB	17
9	BSNLNET	14
10	VIETEL-VN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	491
2	China	190
3	Viet Nam	85
4	India	60
5	Mexico	46
6	Turkey	29
7	Venezuela	24
8	Peru	24
9	Brazil	22
10	Colombia	21

Suspected Bot List [2016-07-29]

detection period: 2016-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.57.37.15	Argentina
AR	186.57.69.175	Argentina
TW	123.195.102.46	Taiwan

List from greylisting:

Botnet Statistics [2016-07-29]

detection period: 2016-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1623
number of botnet IPs notified to network operators: 1478
number of spam blocked: 5321
recipient count of spam blocked: 23367

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	256
2	SONET-NET	238
3	WASU	139
4	CHINANET-HN	108
5	VNPT-VNNIC-VN	50
6	UNICOM-ZJ	39
7	MX-USCV4-LACNIC	31
8	NorthStar	27
9	CHINANET-JS	20
10	BSNLNET	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	497
2	China	475
3	India	119
4	Viet Nam	99
5	Mexico	55
6	Turkey	40
7	United States	25
8	Peru	21
9	Colombia	21
10	Iran	20

Suspected Bot List [2016-07-28]

detection period: 2016-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 149

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	71.95.169.126	United States

List from greylisting:

Botnet Statistics [2016-07-28]

detection period: 2016-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1534
number of botnet IPs notified to network operators: 1385
number of spam blocked: 32084
recipient count of spam blocked: 33426

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	244
2	HINET-NET	172
3	SONET-NET	129
4	UNICOM-ZJ	90
5	VNPT-VNNIC-VN	62
6	CHINANET-HN	58
7	WASU-BB	41
8	CHINANET-JS	31
9	BHARTI-IN	26
10	MSFT	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	596
2	Taiwan	303
3	Viet Nam	119
4	India	108
5	Mexico	49
6	Brazil	30
7	Turkey	29
8	United States	28
9	Indonesia	24
10	Pakistan	22

Suspected Bot List [2016-07-27]

detection period: 2016-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 110

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	71.95.169.126	United States

List from greylisting:

Botnet Statistics [2016-07-27]

detection period: 2016-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1196
number of botnet IPs notified to network operators: 1086
number of spam blocked: 42882
recipient count of spam blocked: 43386

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	225
2	HINET-NET	142
3	SONET-NET	91
4	UNICOM-ZJ	76
5	CHINANET-JS	39
6	WASU-BB	28
7	VNPT-VNNIC-VN	25
8	UNICOM-JS	20
9	MSFT	17
10	BSNLNET	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	484
2	Taiwan	235
3	India	75
4	Viet Nam	63
5	Mexico	40
6	Brazil	26
7	United States	22
8	Iran	21
9	Turkey	18
10	Venezuela	16

Suspected Bot List [2016-07-26]

detection period: 2016-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 186

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-26]

detection period: 2016-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1685
number of botnet IPs notified to network operators: 1499
number of spam blocked: 68610
recipient count of spam blocked: 69464

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	265
2	HINET-NET	150
3	SONET-NET	129
4	UNICOM-ZJ	82
5	VNPT-VNNIC-VN	73
6	UNICOM-JS	49
7	CHINANET-JS	29
8	BSNLNET	26
9	WASU-BB	24
10	BHARTI-IN	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	557
2	Taiwan	286
3	India	139
4	Viet Nam	134
5	Mexico	54
6	Iran	42
7	Turkey	35
8	Brazil	34
9	Peru	33
10	United States	23

Suspected Bot List [2016-07-25]

detection period: 2016-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 82

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-25]

detection period: 2016-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1441
number of botnet IPs notified to network operators: 1359
number of spam blocked: 26887
recipient count of spam blocked: 37070

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	249
2	HINET-NET	147
3	SONET-NET	126
4	UNICOM-ZJ	87
5	CHINANET-JS	55
6	WASU-BB	43
7	UNICOM-JS	43
8	VNPT-VNNIC-VN	39
9	CHINANET-HN	39
10	NorthStar	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	624
2	Taiwan	274
3	Viet Nam	82
4	India	70
5	Mexico	51
6	Brazil	40
7	Iran	36
8	Peru	33
9	Colombia	22
10	United States	16

Suspected Bot List [2016-07-24]

detection period: 2016-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 61

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-24]

detection period: 2016-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1070
number of botnet IPs notified to network operators: 1009
number of spam blocked: 3320
recipient count of spam blocked: 4334

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	202
2	SONET-NET	159
3	WASU	153
4	UNICOM-ZJ	66
5	WASU-BB	42
6	VNPT-VNNIC-VN	40
7	CHINANET-HN	40
8	CHINANET-JS	27
9	ETC-VNNIC-VN	10
10	BHARTI-IN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	388
2	Taiwan	362
3	Viet Nam	71
4	India	34
5	Mexico	22
6	Iran	22
7	Peru	11
8	Brazil	11
9	Saudi Arabia	8
10	Venezuela	6

Suspected Bot List [2016-07-23]

detection period: 2016-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
TW	118.233.21.82	Taiwan

List from greylisting:

Botnet Statistics [2016-07-23]

detection period: 2016-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 813
number of botnet IPs notified to network operators: 746
number of spam blocked: 4088
recipient count of spam blocked: 16078

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	179
2	SONET-NET	144
3	CHINANET-HN	49
4	CHINANET-YN	24
5	CHINANET-HB	24
6	VNPT-VNNIC-VN	19
7	MX-USCV4-LACNIC	16
8	CHINANET-ZJ-JH	13
9	BSNLNET	12
10	VE-CSVE-LACNIC	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	326
2	China	147
3	India	46
4	Mexico	43
5	Viet Nam	41
6	Peru	16
7	Iran	15
8	Brazil	13
9	Turkey	12
10	Venezuela	11

Suspected Bot List [2016-07-22]

detection period: 2016-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 137

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.146.126	Colombia
PK	175.107.63.2	Pakistan
TW	123.195.103.136	Taiwan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-22]

detection period: 2016-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1094
number of botnet IPs notified to network operators: 957
number of spam blocked: 2326
recipient count of spam blocked: 16949

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	152
2	SONET-NET	126
3	WASU	73
4	CHINANET-HN	51
5	UNICOM-ZJ	49
6	MX-USCV4-LACNIC	26
7	VNPT-VNNIC-VN	25
8	CHINANET-JS	15
9	CHINANET-HB	15
10	CHINANET-YN	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	303
2	Taiwan	285
3	India	80
4	Mexico	54
5	Viet Nam	51
6	Iran	22
7	Peru	20
8	Turkey	19
9	Brazil	19
10	Colombia	17

Suspected Bot List [2016-07-21]

detection period: 2016-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 127

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-21]

detection period: 2016-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 1444
number of botnet IPs notified to network operators: 1317
number of spam blocked: 800
recipient count of spam blocked: 2054

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	260
2	HINET-NET	147
3	SONET-NET	132
4	UNICOM-ZJ	90
5	VNPT-VNNIC-VN	54
6	CHINANET-HN	45
7	WASU-BB	42
8	CHINANET-JS	37
9	UNICOM-JS	23
10	MX-USCV4-LACNIC	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	576
2	Taiwan	282
3	Viet Nam	95
4	India	82
5	Mexico	58
6	Brazil	27
7	Turkey	22
8	Iran	21
9	Peru	20
10	Philippines	16

Suspected Bot List [2016-07-20]

detection period: 2016-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 152

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-20]

detection period: 2016-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 1575
number of botnet IPs notified to network operators: 1423
number of spam blocked: 1408
recipient count of spam blocked: 2303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	289
2	HINET-NET	122
3	SONET-NET	118
4	UNICOM-ZJ	87
5	VNPT-VNNIC-VN	54
6	CMNET	47
7	CHINANET-HN	45
8	CHINANET-JS	41
9	MX-USCV4-LACNIC	39
10	UNICOM-JS	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	644
2	Taiwan	243
3	India	113
4	Viet Nam	89
5	Mexico	70
6	Peru	42
7	Turkey	31
8	Iran	30
9	Brazil	29
10	Argentina	16

Suspected Bot List [2016-07-19]

detection period: 2016-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 351

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-19]

detection period: 2016-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 2591
number of botnet IPs notified to network operators: 2240
number of spam blocked: 1419
recipient count of spam blocked: 2118

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	310
2	SONET-NET	206
3	MX-USCV4-LACNIC	135
4	HINET-NET	121
5	UNICOM-ZJ	110
6	VNPT-VNNIC-VN	77
7	CMNET	37
8	WASU-BB	36
9	UNICOM-JS	32
10	MX-IPMS2-LACNIC	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	633
2	Taiwan	329
3	Mexico	299
4	India	167
5	Viet Nam	149
6	Colombia	88
7	Brazil	79
8	Iran	74
9	Peru	72
10	Turkey	49

Suspected Bot List [2016-07-18]

detection period: 2016-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 165

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-18]

detection period: 2016-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1915
number of botnet IPs notified to network operators: 1750
number of spam blocked: 1125
recipient count of spam blocked: 1556

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	311
2	HINET-NET	272
3	SONET-NET	261
4	UNICOM-ZJ	90
5	VNPT-VNNIC-VN	69
6	CHINANET-JS	62
7	CMNET	46
8	UNICOM-JS	40
9	WASU-BB	29
10	BSNLNET	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	649
2	Taiwan	533
3	Viet Nam	128
4	India	115
5	Mexico	55
6	Iran	34
7	Turkey	31
8	Philippines	27
9	Brazil	27
10	Peru	26

Suspected Bot List [2016-07-17]

detection period: 2016-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	71.95.169.126	United States

List from greylisting:

Botnet Statistics [2016-07-17]

detection period: 2016-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 891
number of botnet IPs notified to network operators: 881
number of spam blocked: 572
recipient count of spam blocked: 779

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	248
2	HINET-NET	198
3	SONET-NET	149
4	UNICOM-ZJ	81
5	WASU-BB	41
6	NorthStar	25
7	CHINANET-HN	25
8	CHINANET-JS	22
9	CMNET	18
10	UNICOM-JS	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	505
2	Taiwan	348
3	United States	7
4	India	3
5	Viet Nam	2
6	Serbia	2
7	Peru	2
8	Mexico	2
9	South Korea	2
10	Colombia	2

Suspected Bots' IP List for June 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-06-01]
Suspected Bots IP [2016-06-02]
Suspected Bots IP [2016-06-03]
Suspected Bots IP [2016-06-04]
Suspected Bots IP [2016-06-05]
Suspected Bots IP [2016-06-06]
Suspected Bots IP [2016-06-07]
Suspected Bots IP [2016-06-08]
Suspected Bots IP [2016-06-09]
Suspected Bots IP [2016-06-10]
Suspected Bots IP [2016-06-11]
Suspected Bots IP [2016-06-12]
Suspected Bots IP [2016-06-13]
Suspected Bots IP [2016-06-14]
Suspected Bots IP [2016-06-15]
Suspected Bots IP [2016-06-16]
Suspected Bots IP [2016-06-17]
Suspected Bots IP [2016-06-18]
Suspected Bots IP [2016-06-20]
Suspected Bots IP [2016-06-21]
Suspected Bots IP [2016-06-23]
Suspected Bots IP [2016-06-24]
Suspected Bots IP [2016-06-25]
Suspected Bots IP [2016-06-26]
Suspected Bots IP [2016-06-27]
Suspected Bots IP [2016-06-28]
Suspected Bots IP [2016-06-29]
Suspected Bots IP [2016-06-30]

Suspected Bot List [2016-07-16]

detection period: 2016-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	71.95.169.126	United States

List from greylisting:

Botnet Statistics [2016-07-16]

detection period: 2016-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 526
number of botnet IPs notified to network operators: 523
number of spam blocked: 3419
recipient count of spam blocked: 3419

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	257
2	HINET-NET	119
3	SONET-NET	95
4	WASU-BB	6
5	CMNET	5
6	CHINANET-GD	4
7	UNICOM-GD	3
8	UNICOM-HE	2
9	HICHINA	2
10	ALISOFT	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	285
2	Taiwan	217
3	United States	9
4	South Korea	2
5	Hong Kong	2
6	Russian Federation	1
7	Romania	1
8	Philippines	1
9	Netherlands	1
10	Mexico	1

Suspected Bot List [2016-07-15]

detection period: 2016-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 220

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	175.107.63.2	Pakistan

List from greylisting:

Botnet Statistics [2016-07-15]

detection period: 2016-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1560
number of botnet IPs notified to network operators: 1340
number of spam blocked: 2196
recipient count of spam blocked: 3656

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	287
2	HINET-NET	139
3	SONET-NET	117
4	VNPT-VNNIC-VN	50
5	UNICOM-ZJ	39
6	MX-USCV4-LACNIC	35
7	BSNLNET	27
8	BHARTI-IN	24
9	CMNET	20
10	PTCLBB-PK	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	423
2	Taiwan	263
3	India	168
4	Viet Nam	117
5	Mexico	66
6	Turkey	44
7	Iran	34
8	Pakistan	30
9	Peru	30
10	Indonesia	27

Suspected Bot List [2016-07-14]

detection period: 2016-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 106

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	175.107.63.2	Pakistan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-14]

detection period: 2016-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1463
number of botnet IPs notified to network operators: 1357
number of spam blocked: 950
recipient count of spam blocked: 14645

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	278
2	HINET-NET	178
3	SONET-NET	161
4	UNICOM-ZJ	79
5	WASU-BB	44
6	CHINANET-JS	44
7	UNICOM-JS	37
8	VNPT-VNNIC-VN	34
9	NorthStar	31
10	MX-USCV4-LACNIC	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	599
2	Taiwan	344
3	India	73
4	Viet Nam	61
5	Mexico	59
6	Peru	32
7	Turkey	26
8	Brazil	24
9	Iran	21
10	Colombia	20

Suspected Bot List [2016-07-13]

detection period: 2016-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 153

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-13]

detection period: 2016-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1664
number of botnet IPs notified to network operators: 1511
number of spam blocked: 17433
recipient count of spam blocked: 17433

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	328
2	SONET-NET	148
3	HINET-NET	143
4	VNPT-VNNIC-VN	76
5	UNICOM-ZJ	62
6	CHINANET-JS	43
7	UNICOM-JS	35
8	WASU-BB	32
9	CMNET	30
10	NorthStar	29

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	608
2	Taiwan	292
3	Viet Nam	144
4	India	118
5	Mexico	64
6	Iran	39
7	Peru	31
8	Turkey	26
9	Philippines	23
10	Brazil	21

Suspected Bot List [2016-07-12]

detection period: 2016-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 137

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.146.126	Colombia
PK	175.107.63.2	Pakistan
TW	123.195.84.216	Taiwan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-12]

detection period: 2016-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1741
number of botnet IPs notified to network operators: 1604
number of spam blocked: 41751
recipient count of spam blocked: 65012

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	388
2	HINET-NET	163
3	SONET-NET	119
4	UNICOM-ZJ	90
5	VNPT-VNNIC-VN	57
6	WASU-BB	36
7	UNICOM-JS	35
8	CMNET	34
9	MX-USCV4-LACNIC	31
10	CHINANET-JS	31

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	712
2	Taiwan	290
3	Viet Nam	115
4	India	109
5	Mexico	82
6	Brazil	49
7	Peru	33
8	Turkey	30
9	Iran	27
10	Colombia	20

Suspected Bot List [2016-07-11]

detection period: 2016-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 151

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.146.126	Colombia
PK	175.107.63.2	Pakistan
TR	213.14.64.190	Turkey
US	71.95.169.126	United States
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-11]

detection period: 2016-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 1870
number of botnet IPs notified to network operators: 1719
number of spam blocked: 8234
recipient count of spam blocked: 24136

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	394
2	HINET-NET	145
3	SONET-NET	134
4	UNICOM-ZJ	100
5	VNPT-VNNIC-VN	70
6	CMNET	47
7	CHINANET-JS	47
8	NorthStar	45
9	UNICOM-JS	43
10	WASU-BB	38

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	831
2	Taiwan	283
3	Viet Nam	125
4	India	109
5	Mexico	63
6	Peru	43
7	Iran	37
8	Indonesia	26
9	Brazil	26
10	Turkey	25

Suspected Bot List [2016-07-10]

detection period: 2016-07-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.146.126	Colombia
TR	213.14.64.190	Turkey
US	71.95.169.126	United States
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-10]

detection period: 2016-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1321
number of botnet IPs notified to network operators: 1275
number of spam blocked: 2007
recipient count of spam blocked: 3780

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	201
2	WASU	180
3	SONET-NET	143
4	CNCITYNET	122
5	UNICOM-ZJ	47
6	MSFT	41
7	RingLink	39
8	CMNET	32
9	UNICOM-JS	30
10	WASU-BB	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	690
2	Taiwan	346
3	United States	57
4	South Korea	26
5	Brazil	21
6	Viet Nam	16
7	Russian Federation	14
8	Iran	11
9	Turkey	9
10	Indonesia	9

Suspected Bot List [2016-07-09]

detection period: 2016-07-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.7.146.126	Colombia
PK	175.107.63.2	Pakistan
TR	213.14.64.190	Turkey
US	71.95.169.126	United States
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-09]

detection period: 2016-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 898
number of botnet IPs notified to network operators: 872
number of spam blocked: 7621
recipient count of spam blocked: 30994

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	207
2	SONET-NET	170
3	CNCITYNET	126
4	RingLink	29
5	KORNET-KR	24
6	CHINANET-GD	18
7	CMNET	10
8	CHINANET-JS	10
9	ALISOFT	10
10	TencentCloud	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	383
2	China	329
3	South Korea	26
4	United States	23
5	Brazil	18
6	Russian Federation	16
7	Turkey	9
8	Thailand	8
9	Hong Kong	8
10	Iran	7

Suspected Bot List [2016-07-08]

detection period: 2016-07-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 106

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.51.18.145	Argentina
BO	200.87.110.250	Bolivia
PK	175.107.63.2	Pakistan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-08]

detection period: 2016-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1578
number of botnet IPs notified to network operators: 1472
number of spam blocked: 702
recipient count of spam blocked: 9352

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	180
2	HINET-NET	156
3	SONET-NET	140
4	CNCITYNET	132
5	UNICOM-ZJ	49
6	RingLink	44
7	VNPT-VNNIC-VN	31
8	MX-USCV4-LACNIC	27
9	BSNLNET	25
10	KORNET-KR	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	604
2	Taiwan	301
3	India	126
4	Viet Nam	65
5	Mexico	49
6	Brazil	42
7	Peru	31
8	United States	25
9	South Korea	25
10	Russian Federation	24

Suspected Bot List [2016-07-07]

detection period: 2016-07-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 122

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.51.18.145	Argentina
BO	200.87.110.250	Bolivia
PK	175.107.63.2	Pakistan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-07]

detection period: 2016-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1974
number of botnet IPs notified to network operators: 1852
number of spam blocked: 2918
recipient count of spam blocked: 13736

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	442
2	SONET-NET	141
3	HINET-NET	134
4	CNCITYNET	128
5	UNICOM-ZJ	95
6	VNPT-VNNIC-VN	75
7	RingLink	37
8	CHINANET-JS	37
9	WASU-BB	34
10	UNICOM-JS	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	973
2	Taiwan	280
3	Viet Nam	137
4	India	113
5	Mexico	62
6	Brazil	46
7	South Korea	27
8	Peru	25
9	United States	21
10	Turkey	20

Suspected Bot List [2016-07-06]

detection period: 2016-07-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 91

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.51.18.145	Argentina
BO	200.87.110.250	Bolivia
PK	175.107.63.2	Pakistan
UY	179.27.71.147	Uruguay

List from greylisting:

Botnet Statistics [2016-07-06]

detection period: 2016-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 1521
number of botnet IPs notified to network operators: 1430
number of spam blocked: 8444
recipient count of spam blocked: 35064

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	355
2	SONET-NET	134
3	CNCITYNET	109
4	UNICOM-ZJ	85
5	VNPT-VNNIC-VN	45
6	RingLink	43
7	WASU-BB	40
8	CHINANET-JS	40
9	UNICOM-JS	36
10	MX-USCV4-LACNIC	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	844
2	Taiwan	141
3	Viet Nam	82
4	India	56
5	Brazil	46
6	Mexico	40
7	United States	26
8	Peru	24
9	Turkey	21
10	South Korea	19

Suspected Bot List [2016-07-05]

detection period: 2016-07-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 91

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-05]

detection period: 2016-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 1652
number of botnet IPs notified to network operators: 1561
number of spam blocked: 1236
recipient count of spam blocked: 9888

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	417
2	CNCITYNET	135
3	SONET-NET	120
4	UNICOM-ZJ	87
5	CHINANET-JS	59
6	HINET-NET	53
7	UNICOM-JS	48
8	RingLink	48
9	WASU-BB	33
10	VNPT-VNNIC-VN	33

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	964
2	Taiwan	173
3	India	76
4	Viet Nam	57
5	Mexico	33
6	Brazil	33
7	Iran	29
8	South Korea	26
9	United States	25
10	Russian Federation	20

Suspected Bot List [2016-07-04]

detection period: 2016-07-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 119

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.22.138.150	Argentina

List from greylisting:

Botnet Statistics [2016-07-04]

detection period: 2016-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 1699
number of botnet IPs notified to network operators: 1580
number of spam blocked: 2816
recipient count of spam blocked: 3819

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	404
2	SONET-NET	145
3	HINET-NET	101
4	UNICOM-ZJ	89
5	CNCITYNET	60
6	VNPT-VNNIC-VN	52
7	UNICOM-JS	46
8	WASU-BB	45
9	CHINANET-JS	33
10	MX-USCV4-LACNIC	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	786
2	Taiwan	249
3	India	132
4	Viet Nam	101
5	Mexico	46
6	Brazil	43
7	Iran	36
8	Turkey	20
9	United States	19
10	Peru	15

Suspected Bot List [2016-07-03]

detection period: 2016-07-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.22.138.150	Argentina

List from greylisting:

Botnet Statistics [2016-07-03]

detection period: 2016-07-03 00:00-23:59 UTC
total number of suspected botnet IPs: 1524
number of botnet IPs notified to network operators: 1422
number of spam blocked: 1465
recipient count of spam blocked: 25112

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	SONET-NET	202
2	CNCITYNET	168
3	WASU	156
4	HINET-NET	127
5	RingLink	59
6	UNICOM-ZJ	50
7	VNPT-VNNIC-VN	43
8	WASU-BB	23
9	KORNET-KR	17
10	CMNET	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	616
2	Taiwan	335
3	Viet Nam	83
4	India	54
5	Mexico	32
6	Iran	31
7	Brazil	31
8	United States	28
9	Peru	24
10	Turkey	21

Botnet Statistics for June 2016

detection period: 2016-06-01 00:00 - 2016-06-30 23:59 UTC
total number of suspected botnet IPs: 20395
number of blocked spams: 107043
recipient count of blocked spams: 1305723

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	11726
2	Taiwan	3865
3	Viet Nam	1027
4	India	546
5	United States	385
6	Mexico	282
7	Brazil	247
8	Iran	153
9	Turkey	138
10	Peru	118
11	Russian Federation	116
12	Indonesia	101
13	Colombia	100
14	Argentina	70
15	Pakistan	65
16	South Korea	65
17	Thailand	56
18	Philippines	56
19	Romania	54
20	United Kingdom	46
21	Saudi Arabia	44
22	Germany	44
23	Ukraine	43
24	Japan	43
25	Bangladesh	43

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Poland	35225
2	China	32794
3	Germany	13342
4	Taiwan	11953
5	United States	6278
6	South Korea	1076
7	Thailand	970
8	Turkey	574
9	Brazil	528
10	Colombia	470
11	United Kingdom	455
12	Mexico	415
13	Russian Federation	344
14	India	261
15	Peru	234
16	France	167
17	Romania	156
18	Indonesia	133
19	Netherlands	122
20	Iran	113
21	Hong Kong	112
22	Chile	112
23	Kenya	108
24	Pakistan	105
25	Macau	75

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2016-07-02]

detection period: 2016-07-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-07-02]

detection period: 2016-07-02 00:00-23:59 UTC
total number of suspected botnet IPs: 1044
number of botnet IPs notified to network operators: 969
number of spam blocked: 412
recipient count of spam blocked: 412

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	170
2	SONET-NET	139
3	CNCITYNET	129
4	RingLink	52
5	UNICOM-BJ	20
6	VNPT-VNNIC-VN	18
7	MX-USCV4-LACNIC	16
8	KORNET-KR	13
9	CHINANET-GD	13
10	TencentCloud	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	345
2	Taiwan	315
3	India	51
4	Viet Nam	33
5	Mexico	32
6	Iran	21
7	Peru	20
8	Brazil	19
9	Turkey	16
10	South Korea	16

Suspected Bot List [2016-07-01]

detection period: 2016-07-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.22.138.150	Argentina
BO	200.87.110.250	Bolivia

List from greylisting:

Botnet Statistics [2016-07-01]

detection period: 2016-07-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1110
number of botnet IPs notified to network operators: 1066
number of spam blocked: 4528
recipient count of spam blocked: 19759

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	171
2	CNCITYNET	115
3	SONET-NET	111
4	UNICOM-ZJ	97
5	WASU	60
6	RingLink	32
7	WASU-BB	26
8	CHINANET-JS	26
9	UNICOM-JS	17
10	CMNET	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	518
2	Taiwan	294
3	Viet Nam	34
4	United States	23
5	India	22
6	Brazil	21
7	Mexico	17
8	South Korea	17
9	Iran	13
10	Turkey	12

Suspected Bot List [2016-06-30]

detection period: 2016-06-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 72

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-06-30]

detection period: 2016-06-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1734
number of botnet IPs notified to network operators: 1662
number of spam blocked: 1671
recipient count of spam blocked: 4761

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	338
2	HINET-NET	182
3	CNCITYNET	155
4	SONET-NET	136
5	UNICOM-ZJ	102
6	RingLink	55
7	WASU-BB	45
8	UNICOM-JS	41
9	CHINANET-JS	41
10	VNPT-VNNIC-VN	36

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	941
2	Taiwan	320
3	Viet Nam	77
4	India	41
5	Brazil	30
6	Mexico	28
7	United States	23
8	South Korea	18
9	Russian Federation	17
10	Turkey	15