Suspected Bot List [2016-09-29]

detection period: 2016-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-29]

detection period: 2016-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 1215
number of botnet IPs notified to network operators: 1214
number of spam blocked: 44850
recipient count of spam blocked: 1187112

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1009
2	CHINANET-HN	190
3	CHINANET-JS	9
4	CHINANET-SD	4
5	PL-ZFIX-20151105	1
6	IR-DCC-20010403	1
7	CBC-CM-5	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	1009
2	China	203
3	United States	1
4	Poland	1
5	Iran	1

Suspected Bot List [2016-09-28]

detection period: 2016-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-28]

detection period: 2016-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 1204
number of botnet IPs notified to network operators: 1202
number of spam blocked: 49795
recipient count of spam blocked: 1298507

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1000
2	CHINANET-HN	184
3	CHINANET-SD	9
4	CHINANET-JS	9
5	PL-ZFIX-20151105	1
6	HN-HOND-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	1000
2	China	202
3	Poland	1
4	Honduras	1

Suspected Bot List [2016-09-27]

detection period: 2016-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-27]

detection period: 2016-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1167
number of botnet IPs notified to network operators: 1167
number of spam blocked: 48072
recipient count of spam blocked: 1264960

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	985
2	CHINANET-HN	166
3	CHINANET-JS	9
4	CHINANET-SD	5
5	PL-ZFIX-20151105	1
6	ARUBA-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	985
2	China	180
3	Poland	1
4	Italy	1

Suspected Bot List [2016-09-26]

detection period: 2016-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PH	121.54.44.166	Philippines

List from greylisting:

Botnet Statistics [2016-09-26]

detection period: 2016-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1314
number of botnet IPs notified to network operators: 1265
number of spam blocked: 45985
recipient count of spam blocked: 1312516

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	954
2	CHINANET-HN	133
3	VNPT-VNNIC-VN	29
4	BSNLNET	12
5	CHINANET-JS	8
6	PE-PETD2-LACNIC	7
7	CHINANET-HB	6
8	BHARTI-IN	6
9	BB-Multiplay	6
10	VIETEL-VNNIC-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	954
2	China	149
3	India	51
4	Viet Nam	46
5	Mexico	11
6	Brazil	10
7	Peru	9
8	Iran	8
9	Indonesia	7
10	Philippines	6

Suspected Bot List [2016-09-25]

detection period: 2016-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PH	121.54.44.152	Philippines

List from greylisting:

Botnet Statistics [2016-09-25]

detection period: 2016-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1475
number of botnet IPs notified to network operators: 1420
number of spam blocked: 45449
recipient count of spam blocked: 1268590

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1082
2	CHINANET-HN	71
3	VNPT-VNNIC-VN	28
4	CHINANET-AH	18
5	CHINANET-HB	13
6	MX-USCV4-LACNIC	10
7	UNICOM-NM	9
8	VIETEL-VNNIC-VN	8
9	CHINANET-ZJ-NB	8
10	CHINANET-SD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	1082
2	China	151
3	Viet Nam	57
4	India	37
5	Mexico	21
6	Brazil	11
7	Iran	9
8	Argentina	9
9	Colombia	8
10	Turkey	7

Suspected Bot List [2016-09-24]

detection period: 2016-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-24]

detection period: 2016-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1040
number of botnet IPs notified to network operators: 1040
number of spam blocked: 46180
recipient count of spam blocked: 1318051

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1009
2	CHINANET-JS	7
3	UNICOM-NM	5
4	CHINANET-HB	4
5	CHINANET-AH	4
6	CHINANET-ZJ-NB	2
7	CHINANET-HN	2
8	CHINANET-HA	2
9	UNICOM-JX	1
10	MAINT-CHINANET-HA	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	1009
2	China	30
3	Italy	1

Suspected Bot List [2016-09-23]

detection period: 2016-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-23]

detection period: 2016-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 210
number of botnet IPs notified to network operators: 210
number of spam blocked: 10985
recipient count of spam blocked: 319145

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	188
2	CHINANET-JS	8
3	CHINANET-HN	7
4	CHINANET-QH	2
5	TELSTRAINTERNET47-AU	1
6	LB-LB-ACTEL-20080606	1
7	ETPI	1
8	CBC-CM-5	1
9	ARUBA-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	188
2	China	17
3	United States	1
4	Philippines	1
5	Lebanon	1
6	Italy	1
7	Australia	1

Suspected Bot List [2016-09-22]

detection period: 2016-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-22]

detection period: 2016-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 286
number of botnet IPs notified to network operators: 265
number of spam blocked: 1880
recipient count of spam blocked: 2330

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	145
2	CHINANET-AH	10
3	CHINANET-JS	9
4	VNPT-VNNIC-VN	7
5	CHINANET-QH	6
6	MX-USCV4-LACNIC	5
7	CHINANET-HB	5
8	UNICOM-NM	4
9	BSNLNET	4
10	VIETEL-VNNIC-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	187
2	India	18
3	Viet Nam	15
4	Mexico	10
5	Peru	5
6	Iran	5
7	Brazil	5
8	Turkey	3
9	Indonesia	3
10	Bangladesh	3

Suspected Bot List [2016-09-21]

detection period: 2016-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PH	121.54.44.135	Philippines

List from greylisting:

Botnet Statistics [2016-09-21]

detection period: 2016-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 331
number of botnet IPs notified to network operators: 289
number of spam blocked: 1796
recipient count of spam blocked: 2352

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	140
2	VNPT-VNNIC-VN	25
3	ETC-VNNIC-VN	8
4	BSNLNET	7
5	BHARTI-IN	7
6	CHINANET-HB	5
7	CHINANET-AH	5
8	UNICOM-NM	4
9	VIETEL-VNNIC-VN	3
10	VIETEL-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	165
2	Viet Nam	46
3	India	34
4	Mexico	9
5	Turkey	5
6	Peru	5
7	Saudi Arabia	4
8	Thailand	3
9	Brazil	3
10	Argentina	3

Suspected Bot List [2016-09-20]

detection period: 2016-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-20]

detection period: 2016-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 644
number of botnet IPs notified to network operators: 610
number of spam blocked: 10799
recipient count of spam blocked: 272741

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	339
2	CHINANET-HN	131
3	VNPT-VNNIC-VN	24
4	MX-USCV4-LACNIC	14
5	ETC-VNNIC-VN	6
6	VIETEL-VNNIC-VN	5
7	PE-PETD2-LACNIC	4
8	FPT-VN	4
9	CHINANET-JS	4
10	BO-COLT-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	339
2	China	136
3	Viet Nam	46
4	Mexico	27
5	India	18
6	Turkey	8
7	Colombia	8
8	Brazil	7
9	Thailand	5
10	Peru	5

Suspected Bot List [2016-09-19]

detection period: 2016-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 144

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-19]

detection period: 2016-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1650
number of botnet IPs notified to network operators: 1506
number of spam blocked: 34115
recipient count of spam blocked: 961565

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	854
2	CHINANET-HN	142
3	VNPT-VNNIC-VN	47
4	MX-USCV4-LACNIC	31
5	BSNLNET	23
6	VIETEL-VNNIC-VN	13
7	BB-Multiplay	12
8	VE-CSVE-LACNIC	11
9	PE-PETD2-LACNIC	10
10	ABTS-DSl-DEL	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	855
2	China	147
3	India	115
4	Viet Nam	101
5	Mexico	79
6	Brazil	32
7	Colombia	28
8	Peru	26
9	Turkey	24
10	Iran	19

Suspected Bots' IP List for August 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-08-01]
Suspected Bots IP [2016-08-02]
Suspected Bots IP [2016-08-03]
Suspected Bots IP [2016-08-04]
Suspected Bots IP [2016-08-05]
Suspected Bots IP [2016-08-06]
Suspected Bots IP [2016-08-07]
Suspected Bots IP [2016-08-08]
Suspected Bots IP [2016-08-09]
Suspected Bots IP [2016-08-10]
Suspected Bots IP [2016-08-11]
Suspected Bots IP [2016-08-12]
Suspected Bots IP [2016-08-13]
Suspected Bots IP [2016-08-14]
Suspected Bots IP [2016-08-15]
Suspected Bots IP [2016-08-16]
Suspected Bots IP [2016-08-17]
Suspected Bots IP [2016-08-18]
Suspected Bots IP [2016-08-19]
Suspected Bots IP [2016-08-20]
Suspected Bots IP [2016-08-21]
Suspected Bots IP [2016-08-22]
Suspected Bots IP [2016-08-23]
Suspected Bots IP [2016-08-24]
Suspected Bots IP [2016-08-25]
Suspected Bots IP [2016-08-26]
Suspected Bots IP [2016-08-27]
Suspected Bots IP [2016-08-28]
Suspected Bots IP [2016-08-29]
Suspected Bots IP [2016-08-30]

Suspected Bot List [2016-09-18]

detection period: 2016-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-18]

detection period: 2016-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1077
number of botnet IPs notified to network operators: 1059
number of spam blocked: 33750
recipient count of spam blocked: 935959

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	866
2	CHINANET-HN	130
3	VNPT-VNNIC-VN	3
4	VE-CSVE-LACNIC	3
5	PE-PETD2-LACNIC	3
6	MX-USCV4-LACNIC	2
7	KCABLE	2
8	IPG	2
9	CO-CTSE-LACNIC	2
10	CHINANET-JS	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	866
2	China	132
3	India	12
4	Peru	8
5	Viet Nam	6
6	Venezuela	4
7	Brazil	4
8	Turkey	3
9	Saudi Arabia	3
10	Philippines	3

Suspected Bot List [2016-09-17]

detection period: 2016-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-17]

detection period: 2016-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 611
number of botnet IPs notified to network operators: 611
number of spam blocked: 66727
recipient count of spam blocked: 1961619

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	535
2	CHINANET-HN	71
3	CHINANET-JS	3
4	RACKRAY-EU-DC	1
5	ETPI	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	535
2	China	74
3	Philippines	1
4	Lithuania	1

Suspected Bot List [2016-09-16]

detection period: 2016-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-16]

detection period: 2016-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 241
number of botnet IPs notified to network operators: 195
number of spam blocked: 97587
recipient count of spam blocked: 2892361

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	53
2	VNPT-VNNIC-VN	13
3	MX-USCV4-LACNIC	10
4	PTCLBB-PK	5
5	PE-TPSA-LACNIC	5
6	ETC-VNNIC-VN	5
7	CO-ACSA-LACNIC	5
8	BSNLNET	5
9	FPT-VN	4
10	MX-CTSC6-LACNIC	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	54
2	India	37
3	Viet Nam	29
4	Mexico	22
5	Brazil	10
6	Peru	9
7	Turkey	8
8	Colombia	7
9	Iran	6
10	Pakistan	5

Suspected Bot List [2016-09-15]

detection period: 2016-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 86

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-15]

detection period: 2016-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 492
number of botnet IPs notified to network operators: 406
number of spam blocked: 102290
recipient count of spam blocked: 2864779

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	62
2	VNPT-VNNIC-VN	40
3	MX-USCV4-LACNIC	21
4	CHINANET-SD	12
5	BSNLNET	11
6	BHARTI-IN	10
7	VIETEL-VNNIC-VN	9
8	FPT-VN	8
9	VE-CSVE-LACNIC	7
10	PTCLBB-PK	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	73
2	India	64
3	Taiwan	62
4	Mexico	36
5	Brazil	22
6	Peru	21
7	Colombia	17
8	China	17
9	Iran	16
10	Turkey	14

Suspected Bot List [2016-09-14]

detection period: 2016-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 257

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-14]

detection period: 2016-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1306
number of botnet IPs notified to network operators: 1049
number of spam blocked: 116721
recipient count of spam blocked: 3153516

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	104
2	HINET-NET	87
3	MX-USCV4-LACNIC	50
4	BSNLNET	42
5	CHINANET-HN	41
6	BHARTI-IN	41
7	ETC-VNNIC-VN	26
8	PE-TPSA-LACNIC	25
9	VIETEL-VNNIC-VN	24
10	VIETEL-VN	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	India	240
2	Viet Nam	224
3	Mexico	88
4	Taiwan	87
5	Peru	53
6	China	51
7	Brazil	47
8	Iran	43
9	Turkey	30
10	Colombia	29

Suspected Bot List [2016-09-13]

detection period: 2016-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 323

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-13]

detection period: 2016-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1910
number of botnet IPs notified to network operators: 1587
number of spam blocked: 114211
recipient count of spam blocked: 3011012

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	137
2	VNPT-VNNIC-VN	115
3	MX-USCV4-LACNIC	106
4	HINET-NET	67
5	BSNLNET	40
6	PE-TPSA-LACNIC	36
7	VIETEL-VNNIC-VN	35
8	BHARTI-IN	31
9	VE-CSVE-LACNIC	27
10	FPT-VN	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	India	238
2	Viet Nam	237
3	Mexico	206
4	China	162
5	Brazil	117
6	Peru	104
7	Colombia	88
8	Iran	70
9	Taiwan	68
10	Turkey	37

Suspected Bot List [2016-09-12]

detection period: 2016-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 173

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-12]

detection period: 2016-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1101
number of botnet IPs notified to network operators: 928
number of spam blocked: 109725
recipient count of spam blocked: 2928353

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	144
2	VNPT-VNNIC-VN	76
3	HINET-NET	59
4	CHINANET-JS	44
5	MX-USCV4-LACNIC	41
6	BSNLNET	25
7	FPT-VN	22
8	CHINANET-SD	19
9	BHARTI-IN	19
10	VIETEL-VNNIC-VN	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	210
2	Viet Nam	162
3	India	136
4	Mexico	95
5	Taiwan	59
6	Brazil	49
7	Peru	38
8	Colombia	29
9	Turkey	22
10	Iran	21

Suspected Bot List [2016-09-11]

detection period: 2016-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 123

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-11]

detection period: 2016-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 922
number of botnet IPs notified to network operators: 799
number of spam blocked: 98368
recipient count of spam blocked: 2860301

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	135
2	CHINANET-SD	60
3	VNPT-VNNIC-VN	57
4	HINET-NET	48
5	CHINANET-JS	34
6	BSNLNET	23
7	MX-USCV4-LACNIC	22
8	FPT-VN	19
9	VIETEL-VN	16
10	PE-TPSA-LACNIC	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	231
2	Viet Nam	138
3	India	96
4	Taiwan	48
5	Mexico	46
6	Turkey	28
7	Iran	27
8	Peru	24
9	Brazil	22
10	Colombia	20

Suspected Bot List [2016-09-10]

detection period: 2016-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 127

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.138	Argentina

List from greylisting:

Botnet Statistics [2016-09-10]

detection period: 2016-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1012
number of botnet IPs notified to network operators: 885
number of spam blocked: 97464
recipient count of spam blocked: 2826551

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	146
2	VNPT-VNNIC-VN	82
3	HINET-NET	65
4	CHINANET-JS	59
5	CHINANET-SD	41
6	MX-USCV4-LACNIC	29
7	BSNLNET	21
8	ETC-VNNIC-VN	19
9	BHARTI-IN	19
10	PE-TPSA-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	254
2	Viet Nam	158
3	India	105
4	Mexico	70
5	Taiwan	68
6	Peru	44
7	Brazil	39
8	Colombia	23
9	Turkey	21
10	Iran	18

Suspected Bot List [2016-09-09]

detection period: 2016-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 180

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-09]

detection period: 2016-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1130
number of botnet IPs notified to network operators: 950
number of spam blocked: 109268
recipient count of spam blocked: 2866048

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	151
2	CHINANET-SD	101
3	VNPT-VNNIC-VN	91
4	HINET-NET	57
5	MX-USCV4-LACNIC	32
6	BSNLNET	23
7	VIETEL-VN	19
8	CHINANET-JS	17
9	VIETEL-VNNIC-VN	16
10	VE-CSVE-LACNIC	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	273
2	Viet Nam	161
3	India	112
4	Mexico	74
5	Taiwan	58
6	Brazil	50
7	Peru	29
8	Colombia	27
9	Turkey	26
10	Venezuela	21

Suspected Bot List [2016-09-08]

detection period: 2016-09-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 175

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-09-08]

detection period: 2016-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1429
number of botnet IPs notified to network operators: 1254
number of spam blocked: 104595
recipient count of spam blocked: 2721087

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-SD	276
2	CHINANET-HN	157
3	VNPT-VNNIC-VN	94
4	HINET-NET	61
5	CHINANET-JS	31
6	MX-USCV4-LACNIC	29
7	BSNLNET	29
8	VIETEL-VN	18
9	VE-CSVE-LACNIC	16
10	PE-TPSA-LACNIC	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	468
2	Viet Nam	168
3	India	148
4	Mexico	82
5	Brazil	63
6	Taiwan	61
7	Turkey	38
8	Peru	37
9	Iran	33
10	Colombia	27

Suspected Bot List [2016-09-07]

detection period: 2016-09-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 215

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.18.206.138	Argentina
AR	186.138.82.138	Argentina
PL	185.125.4.236	Poland

List from greylisting:

Botnet Statistics [2016-09-07]

detection period: 2016-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1189
number of botnet IPs notified to network operators: 974
number of spam blocked: 103109
recipient count of spam blocked: 2762675

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	141
2	VNPT-VNNIC-VN	84
3	HINET-NET	64
4	CHINANET-SD	40
5	CHINANET-JS	36
6	BSNLNET	36
7	MX-USCV4-LACNIC	27
8	FPT-VN	18
9	BHARTI-IN	18
10	PE-TPSA-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	237
2	Viet Nam	155
3	India	149
4	Mexico	73
5	Taiwan	66
6	Peru	44
7	Brazil	38
8	Turkey	34
9	Iran	34
10	Colombia	30

Suspected Bot List [2016-09-06]

detection period: 2016-09-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 106

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.18.206.138	Argentina
AR	186.138.82.138	Argentina
PL	185.125.4.236	Poland

List from greylisting:

Botnet Statistics [2016-09-06]

detection period: 2016-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 872
number of botnet IPs notified to network operators: 766
number of spam blocked: 89480
recipient count of spam blocked: 2502114

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	128
2	HINET-NET	71
3	VNPT-VNNIC-VN	66
4	CHINANET-JS	44
5	MX-USCV4-LACNIC	28
6	CHINANET-SD	25
7	BSNLNET	17
8	ETC-VNNIC-VN	14
9	BHARTI-IN	14
10	VIETEL-VNNIC-VN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	226
2	Viet Nam	116
3	India	75
4	Taiwan	72
5	Mexico	52
6	Brazil	32
7	Peru	29
8	Colombia	27
9	Turkey	25
10	Iran	23

Suspected Bot List [2016-09-05]

detection period: 2016-09-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 110

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.236	Poland

List from greylisting:

Botnet Statistics [2016-09-05]

detection period: 2016-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 734
number of botnet IPs notified to network operators: 624
number of spam blocked: 85658
recipient count of spam blocked: 2344987

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	109
2	HINET-NET	57
3	VNPT-VNNIC-VN	56
4	CHINANET-JS	32
5	CHINANET-SD	31
6	MX-USCV4-LACNIC	21
7	BHARTI-IN	12
8	BSNLNET	10
9	VIETEL-VNNIC-VN	9
10	ETC-VNNIC-VN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	192
2	Viet Nam	94
3	India	70
4	Taiwan	57
5	Mexico	45
6	Brazil	29
7	Turkey	21
8	Iran	18
9	Colombia	18
10	Peru	17

Suspected Bot List [2016-09-04]

detection period: 2016-09-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 136

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.138.82.138	Argentina

List from greylisting:

Botnet Statistics [2016-09-04]

detection period: 2016-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 928
number of botnet IPs notified to network operators: 792
number of spam blocked: 80708
recipient count of spam blocked: 2366027

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	83
2	HINET-NET	65
3	CHINANET-HN	53
4	CHINANET-SD	47
5	MX-USCV4-LACNIC	25
6	ETC-VNNIC-VN	25
7	BSNLNET	23
8	BHARTI-IN	22
9	FPT-VN	18
10	VIETEL-VNNIC-VN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	166
2	China	128
3	India	120
4	Taiwan	67
5	Mexico	48
6	Iran	31
7	Brazil	31
8	Peru	24
9	Thailand	23
10	Colombia	22

Botnet Statistics for August 2016

detection period: 2016-08-01 00:00 - 2016-08-31 23:59 UTC
total number of suspected botnet IPs: 40100
number of blocked spams: 546780
recipient count of blocked spams: 12709564

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	15749
2	Taiwan	12362
3	India	2544
4	Viet Nam	2009
5	Mexico	753
6	Iran	544
7	Brazil	522
8	Turkey	424
9	United States	344
10	Peru	321
11	Indonesia	293
12	Colombia	285
13	Pakistan	276
14	Venezuela	243
15	Bangladesh	173
16	Thailand	154
17	Argentina	152
18	Philippines	145
19	Arab Emirates	141
20	Tunisia	125
21	Saudi Arabia	125
22	Romania	98
23	Russian Federation	94
24	South Korea	89
25	Italy	85

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	413531
2	United States	47790
3	China	41376
4	Poland	35587
5	Germany	3357
6	Philippines	712
7	Thailand	641
8	France	384
9	South Korea	355
10	Mexico	339
11	Turkey	303
12	Argentina	301
13	Russian Federation	300
14	United Kingdom	287
15	Brazil	200
16	Viet Nam	167
17	India	140
18	Saudi Arabia	116
19	Hong Kong	94
20	Peru	77
21	Austria	71
22	Colombia	65
23	Iran	64
24	Indonesia	51
25	Ecuador	49

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2016-09-03]

detection period: 2016-09-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-03]

detection period: 2016-09-03 00:00-23:59 UTC
total number of suspected botnet IPs: 520
number of botnet IPs notified to network operators: 415
number of spam blocked: 56432
recipient count of spam blocked: 1638092

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-SD	37
2	CHINANET-JS	30
3	MX-USCV4-LACNIC	26
4	VNPT-VNNIC-VN	22
5	HINET-NET	13
6	PE-PETD2-LACNIC	11
7	BSNLNET	9
8	CO-ACSA-LACNIC	8
9	BHARTI-IN	8
10	PE-TPSA-LACNIC	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	81
2	India	52
3	Mexico	51
4	Viet Nam	43
5	Peru	32
6	Colombia	25
7	Brazil	24
8	Iran	15
9	Taiwan	13
10	Pakistan	11

Suspected Bot List [2016-09-02]

detection period: 2016-09-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 166

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-02]

detection period: 2016-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 1094
number of botnet IPs notified to network operators: 928
number of spam blocked: 73982
recipient count of spam blocked: 2180171

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	65
2	HINET-NET	58
3	CHINANET-JS	33
4	CHINANET-HN	33
5	BSNLNET	29
6	MX-USCV4-LACNIC	24
7	BHARTI-IN	21
8	CHINANET-AH	20
9	ETC-VNNIC-VN	18
10	VIETEL-VNNIC-VN	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	India	168
2	Viet Nam	154
3	China	151
4	Mexico	67
5	Taiwan	59
6	Brazil	57
7	Peru	37
8	Colombia	33
9	Turkey	31
10	Iran	24

Suspected Bot List [2016-09-01]

detection period: 2016-09-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 197

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-01]

detection period: 2016-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 1296
number of botnet IPs notified to network operators: 1099
number of spam blocked: 90515
recipient count of spam blocked: 2640183

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	100
2	VNPT-VNNIC-VN	85
3	HINET-NET	57
4	CHINANET-SD	52
5	MX-USCV4-LACNIC	44
6	VIETEL-VNNIC-VN	24
7	PE-TPSA-LACNIC	22
8	BSNLNET	20
9	BHARTI-IN	19
10	CO-ACSA-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	234
2	Viet Nam	177
3	India	135
4	Mexico	96
5	Brazil	64
6	Taiwan	58
7	Peru	54
8	Colombia	47
9	Turkey	38
10	Iran	29

Suspected Bot List [2016-08-31]

detection period: 2016-08-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 204

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.236	Poland

List from greylisting:

Botnet Statistics [2016-08-31]

detection period: 2016-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 1592
number of botnet IPs notified to network operators: 1388
number of spam blocked: 96901
recipient count of spam blocked: 2629019

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	178
2	VNPT-VNNIC-VN	122
3	CHINANET-HN	82
4	CHINANET-SD	79
5	HINET-NET	61
6	MX-USCV4-LACNIC	43
7	BSNLNET	40
8	BHARTI-IN	25
9	ETC-VNNIC-VN	22
10	FPT-VN	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	449
2	Viet Nam	225
3	India	168
4	Mexico	92
5	Brazil	67
6	Taiwan	62
7	Peru	43
8	Colombia	40
9	Turkey	35
10	Iran	34