Suspected Bot List [2016-10-30]

detection period: 2016-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-30]

detection period: 2016-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 561
number of botnet IPs notified to network operators: 547
number of spam blocked: 4322
recipient count of spam blocked: 4606

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	182
2	CHINANET-HN	137
3	UNICOM-ZJ	30
4	CHINANET-JS	27
5	WASU-BB	26
6	UNICOM-JS	26
7	CMNET	9
8	VNPT-VNNIC-VN	7
9	HUNAN-CATV	6
10	CHINANET-ZJ	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	478
2	Viet Nam	14
3	United States	8
4	Russian Federation	5
5	India	5
6	Ukraine	4
7	Taiwan	4
8	Pakistan	4
9	Hong Kong	4
10	Thailand	3

Suspected Bot List [2016-10-29]

detection period: 2016-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-29]

detection period: 2016-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 124
number of botnet IPs notified to network operators: 116
number of spam blocked: 8452
recipient count of spam blocked: 8469

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	6
2	CHINANET-JS	6
3	HUNAN-CATV	5
4	CHINANET-ZJ	4
5	CHINANET-HN	4
6	broadNnet-KR	3
7	VNPT-VNNIC-VN	3
8	UNICOM-TJ	3
9	CHINANET-SH	3
10	WEST263	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	51
2	United States	8
3	Brazil	6
4	Viet Nam	4
5	Russian Federation	4
6	South Korea	4
7	United Kingdom	4
8	Romania	3
9	Iran	3
10	India	3

Suspected Bot List [2016-10-28]

detection period: 2016-10-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 79

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-28]

detection period: 2016-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 973
number of botnet IPs notified to network operators: 894
number of spam blocked: 6141
recipient count of spam blocked: 6729

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	361
2	CHINANET-HN	143
3	CHINANET-JS	28
4	VNPT-VNNIC-VN	23
5	BSNLNET	18
6	BHARTI-IN	18
7	UNICOM-ZJ	17
8	WASU-BB	14
9	FPT-VN	11
10	VIETEL-VNNIC-VN	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	621
2	India	89
3	Viet Nam	61
4	Iran	17
5	Brazil	17
6	Pakistan	13
7	Turkey	12
8	Mexico	9
9	Russian Federation	8
10	Indonesia	7

Suspected Bot List [2016-10-27]

detection period: 2016-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-27]

detection period: 2016-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 1301
number of botnet IPs notified to network operators: 1248
number of spam blocked: 8001
recipient count of spam blocked: 8546

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	514
2	CHINANET-HN	164
3	UNICOM-ZJ	86
4	CHINANET-JS	58
5	UNICOM-JS	50
6	WASU-BB	39
7	BSNLNET	19
8	VNPT-VNNIC-VN	16
9	BHARTI-IN	14
10	VIETEL-VNNIC-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	963
2	India	86
3	Viet Nam	39
4	Iran	15
5	Brazil	15
6	Turkey	13
7	Mexico	12
8	United States	10
9	Pakistan	10
10	Indonesia	8

Suspected Bot List [2016-10-26]

detection period: 2016-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-26]

detection period: 2016-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1084
number of botnet IPs notified to network operators: 1044
number of spam blocked: 7148
recipient count of spam blocked: 7378

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	441
2	CHINANET-HN	176
3	UNICOM-ZJ	97
4	CHINANET-JS	54
5	UNICOM-JS	35
6	WASU-BB	28
7	BHARTI-IN	12
8	VNPT-VNNIC-VN	11
9	BSNLNET	11
10	VIETEL-VNNIC-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	882
2	India	58
3	Viet Nam	24
4	Russian Federation	15
5	United States	11
6	Turkey	7
7	Iran	7
8	Pakistan	6
9	Thailand	4
10	Serbia	3

Suspected Bot List [2016-10-25]

detection period: 2016-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-25]

detection period: 2016-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 1091
number of botnet IPs notified to network operators: 1059
number of spam blocked: 7325
recipient count of spam blocked: 8144

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	499
2	CHINANET-HN	146
3	UNICOM-ZJ	65
4	CHINANET-JS	54
5	UNICOM-JS	50
6	WASU-BB	22
7	CMNET	17
8	VNPT-VNNIC-VN	10
9	VIETEL-VNNIC-VN	7
10	VIETEL-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	901
2	Viet Nam	31
3	India	30
4	Brazil	10
5	Pakistan	7
6	Mexico	7
7	Iran	7
8	Turkey	6
9	United States	5
10	Russian Federation	5

Suspected Bot List [2016-10-24]

detection period: 2016-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
SE	83.209.97.130	Sweden
US	24.75.175.57	United States
US	64.53.118.218	United States
US	66.172.212.225	United States
US	68.179.186.14	United States
US	69.145.139.25	United States
US	69.146.53.153	United States
US	74.129.250.178	United States
US	74.131.166.221	United States
US	165.166.197.106	United States
US	165.166.211.121	United States
US	204.116.166.46	United States
US	206.74.30.73	United States
US	207.144.226.206	United States

List from greylisting:

Botnet Statistics [2016-10-24]

detection period: 2016-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1496
number of botnet IPs notified to network operators: 1446
number of spam blocked: 5786
recipient count of spam blocked: 6186

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	534
2	CHINANET-HN	147
3	UNICOM-ZJ	103
4	CHINANET-JS	44
5	UNICOM-JS	40
6	WASU-BB	21
7	BSNLNET	11
8	CDELIGHTBAND	10
9	VNPT-VNNIC-VN	9
10	HUNAN-CATV	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	979
2	United States	250
3	India	57
4	Sweden	26
5	Viet Nam	25
6	Ukraine	10
7	Russian Federation	10
8	Iran	10
9	Mexico	8
10	Bangladesh	8

Suspected Bot List [2016-10-23]

detection period: 2016-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-23]

detection period: 2016-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 592
number of botnet IPs notified to network operators: 583
number of spam blocked: 2623
recipient count of spam blocked: 2915

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	222
2	CHINANET-HN	123
3	UNICOM-ZJ	59
4	WASU-BB	25
5	UNICOM-JS	18
6	CHINANET-ZJ-HZ	11
7	HUNAN-CATV	10
8	CMNET	8
9	CHINANET-JS	6
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	537
2	Viet Nam	8
3	Russian Federation	5
4	India	5
5	Bangladesh	5
6	Thailand	2
7	Kazakhstan	2
8	Japan	2
9	Iran	2
10	United Kingdom	2

Suspected Bot List [2016-10-22]

detection period: 2016-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-22]

detection period: 2016-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 306
number of botnet IPs notified to network operators: 291
number of spam blocked: 2431
recipient count of spam blocked: 2841

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	141
2	CHINANET-ZJ-HZ	27
3	VNPT-VNNIC-VN	11
4	FPT-VN	7
5	CMNET	7
6	CHINANET-JS	7
7	CHINANET-ZJ-ZX	5
8	VIETEL-VNNIC-VN	4
9	VIETEL-VN	4
10	STANLEY	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	222
2	Viet Nam	28
3	United States	8
4	India	6
5	Taiwan	3
6	Brazil	3
7	Romania	2
8	Mexico	2
9	Cambodia	2
10	Indonesia	2

Suspected Bot List [2016-10-21]

detection period: 2016-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-21]

detection period: 2016-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 617
number of botnet IPs notified to network operators: 606
number of spam blocked: 5886
recipient count of spam blocked: 6014

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	276
2	CHINANET-HN	113
3	UNICOM-ZJ	45
4	WASU-BB	29
5	CHINANET-ZJ-HZ	20
6	CHINANET-JS	12
7	CMNET	9
8	CHINANET-ZJ	7
9	Chinafic	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	546
2	Viet Nam	9
3	United States	8
4	Pakistan	4
5	India	4
6	South Korea	3
7	Japan	3
8	Hong Kong	3
9	United Kingdom	3
10	Spain	3

Suspected Bot List [2016-10-20]

detection period: 2016-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-20]

detection period: 2016-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 969
number of botnet IPs notified to network operators: 960
number of spam blocked: 4817
recipient count of spam blocked: 4983

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	538
2	CHINANET-HN	132
3	UNICOM-ZJ	91
4	UNICOM-JS	38
5	WASU-BB	32
6	CHINANET-JS	27
7	CMNET	8
8	VNPT-VNNIC-VN	5
9	Chinafic	5
10	CHINANET-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	907
2	United States	9
3	Viet Nam	8
4	Kazakhstan	5
5	India	4
6	Ukraine	3
7	Russian Federation	3
8	Brazil	3
9	Turkey	2
10	Turkmenistan	2

Suspected Bot List [2016-10-19]

detection period: 2016-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.16.235	Arab Emirates
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
DZ	193.194.69.36	Algeria
ID	202.61.126.62	Indonesia
IN	125.16.240.197	India
IN	203.192.212.52	India
KH	43.255.114.242	Cambodia
KZ	213.157.57.102	Kazakhstan
PK	202.125.129.131	Pakistan
SG	112.140.186.170	Singapore
TW	118.232.150.18	Taiwan
TW	118.233.116.192	Taiwan
TW	123.195.189.36	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2016-10-19]

detection period: 2016-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1240
number of botnet IPs notified to network operators: 1219
number of spam blocked: 9973
recipient count of spam blocked: 130518

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	438
2	HINET-NET	117
3	CHINANET-HN	112
4	UNICOM-ZJ	67
5	CHINANET-JS	36
6	UNICOM-JS	34
7	CHINANET-GD	34
8	UNICOM-GX	27
9	WASU-BB	21
10	CMNET	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	918
2	Taiwan	144
3	Russian Federation	19
4	Brazil	18
5	United States	16
6	India	14
7	Turkey	10
8	South Korea	8
9	Germany	7
10	Colombia	6

Suspected Bot List [2016-10-18]

detection period: 2016-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.16.235	Arab Emirates
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
DZ	193.194.69.36	Algeria
ID	202.61.126.62	Indonesia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.215	India
IN	223.196.86.227	India
KH	43.255.114.242	Cambodia
KZ	213.157.57.102	Kazakhstan
PK	202.125.129.131	Pakistan
SG	112.140.186.170	Singapore
TW	118.233.116.192	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2016-10-18]

detection period: 2016-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1261
number of botnet IPs notified to network operators: 1234
number of spam blocked: 14360
recipient count of spam blocked: 223047

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	529
2	CHINANET-HN	116
3	HINET-NET	80
4	UNICOM-ZJ	61
5	UNICOM-JS	40
6	WASU-BB	34
7	CHINANET-GD	34
8	CHINANET-JS	20
9	UNICOM-GX	13
10	CMNET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	958
2	Taiwan	93
3	India	22
4	United States	16
5	Brazil	16
6	Russian Federation	14
7	Turkey	13
8	Viet Nam	11
9	Kazakhstan	10
10	Ukraine	6

Suspected Bot List [2016-10-17]

detection period: 2016-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.16.235	Arab Emirates
AR	190.18.194.149	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	223.196.86.215	India
KH	43.255.114.242	Cambodia
PK	202.125.129.131	Pakistan
TW	118.233.116.192	Taiwan

List from greylisting:

Botnet Statistics [2016-10-17]

detection period: 2016-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1131
number of botnet IPs notified to network operators: 1106
number of spam blocked: 3116
recipient count of spam blocked: 35073

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	548
2	UNICOM-ZJ	81
3	CHINANET-HN	63
4	CHINANET-JS	53
5	UNICOM-JS	46
6	WASU-BB	30
7	HINET-NET	24
8	CHINANET-GD	23
9	MSFT	15
10	CMNET	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	942
2	Taiwan	30
3	United States	27
4	India	18
5	Russian Federation	15
6	Viet Nam	11
7	Brazil	10
8	Pakistan	6
9	South Korea	6
10	Turkey	5

Suspected Bots' IP List for September 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-09-01]
Suspected Bots IP [2016-09-02]
Suspected Bots IP [2016-09-03]
Suspected Bots IP [2016-09-04]
Suspected Bots IP [2016-09-05]
Suspected Bots IP [2016-09-06]
Suspected Bots IP [2016-09-07]
Suspected Bots IP [2016-09-08]
Suspected Bots IP [2016-09-09]
Suspected Bots IP [2016-09-10]
Suspected Bots IP [2016-09-11]
Suspected Bots IP [2016-09-12]
Suspected Bots IP [2016-09-13]
Suspected Bots IP [2016-09-14]
Suspected Bots IP [2016-09-15]
Suspected Bots IP [2016-09-16]
Suspected Bots IP [2016-09-17]
Suspected Bots IP [2016-09-18]
Suspected Bots IP [2016-09-19]
Suspected Bots IP [2016-09-20]
Suspected Bots IP [2016-09-21]
Suspected Bots IP [2016-09-22]
Suspected Bots IP [2016-09-23]
Suspected Bots IP [2016-09-24]
Suspected Bots IP [2016-09-25]
Suspected Bots IP [2016-09-26]
Suspected Bots IP [2016-09-27]
Suspected Bots IP [2016-09-28]
Suspected Bots IP [2016-09-29]
Suspected Bots IP [2016-09-30]

Suspected Bot List [2016-10-16]

detection period: 2016-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-16]

detection period: 2016-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 783
number of botnet IPs notified to network operators: 767
number of spam blocked: 2771
recipient count of spam blocked: 3341

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	353
2	CHINANET-HN	128
3	UNICOM-ZJ	96
4	WASU-BB	36
5	CHINANET-JS	17
6	UNICOM-JS	13
7	VNPT-VNNIC-VN	10
8	Chinafic	5
9	SONET-NET	4
10	HINET-NET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	674
2	Viet Nam	22
3	India	10
4	Ukraine	8
5	Taiwan	8
6	Brazil	8
7	United States	6
8	Russian Federation	6
9	Romania	4
10	Kazakhstan	4

Suspected Bot List [2016-10-15]

detection period: 2016-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-15]

detection period: 2016-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 344
number of botnet IPs notified to network operators: 331
number of spam blocked: 3094
recipient count of spam blocked: 3671

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	140
2	WASU	32
3	UNICOM-ZJ	25
4	WASU-BB	13
5	CMNET	13
6	CHINANET-JS	9
7	VNPT-VNNIC-VN	5
8	CHINANET-GD	5
9	UNICOM-TJ	3
10	BSNLNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	267
2	India	12
3	Viet Nam	10
4	United States	8
5	Russian Federation	7
6	Brazil	6
7	Kazakhstan	4
8	South Korea	3
9	Ukraine	2
10	Taiwan	2

Suspected Bot List [2016-10-14]

detection period: 2016-10-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-14]

detection period: 2016-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 491
number of botnet IPs notified to network operators: 480
number of spam blocked: 5510
recipient count of spam blocked: 6042

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	154
2	WASU	103
3	UNICOM-ZJ	44
4	CHINANET-JS	31
5	UNICOM-JS	20
6	CMNET	16
7	WASU-BB	12
8	UNICOM-TJ	5
9	VNPT-VNNIC-VN	4
10	CHINANET-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	411
2	India	15
3	United States	14
4	Viet Nam	8
5	Russian Federation	6
6	Hong Kong	5
7	Germany	3
8	Ukraine	2
9	South Korea	2
10	Uzbekistan	1

Suspected Bot List [2016-10-13]

detection period: 2016-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-13]

detection period: 2016-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 930
number of botnet IPs notified to network operators: 919
number of spam blocked: 3010
recipient count of spam blocked: 3584

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	430
2	CHINANET-HN	189
3	UNICOM-ZJ	87
4	CHINANET-JS	40
5	WASU-BB	30
6	UNICOM-JS	30
7	CMNET	15
8	VNPT-VNNIC-VN	13
9	ETC-VNNIC-VN	6
10	FPT-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	845
2	Viet Nam	28
3	Taiwan	5
4	United States	4
5	Russian Federation	4
6	Kazakhstan	4
7	Brazil	4
8	India	3
9	Spain	3
10	Ukraine	2

Suspected Bot List [2016-10-12]

detection period: 2016-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-10-12]

detection period: 2016-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 759
number of botnet IPs notified to network operators: 751
number of spam blocked: 2863
recipient count of spam blocked: 3293

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	261
2	CHINANET-HN	177
3	UNICOM-ZJ	69
4	CHINANET-JS	47
5	UNICOM-JS	46
6	WASU-BB	23
7	CMNET	17
8	CHINANET-GD	7
9	HICHINA	4
10	KZ-KAZAKTELECOM-20080923	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	675
2	Russian Federation	11
3	India	10
4	United States	9
5	Viet Nam	6
6	Kazakhstan	5
7	Iran	4
8	Mexico	3
9	Pakistan	2
10	Peru	2

Suspected Bot List [2016-10-11]

detection period: 2016-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-10-11]

detection period: 2016-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 776
number of botnet IPs notified to network operators: 772
number of spam blocked: 2251
recipient count of spam blocked: 2715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	400
2	CHINANET-HN	138
3	UNICOM-ZJ	66
4	CHINANET-JS	33
5	WASU-BB	23
6	UNICOM-JS	23
7	CMNET	15
8	Chinafic	5
9	CHINANET-SH	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	735
2	Viet Nam	7
3	India	5
4	United States	4
5	Russian Federation	4
6	Ukraine	2
7	Nigeria	2
8	Kazakhstan	2
9	Spain	2
10	Germany	2

Suspected Bot List [2016-10-10]

detection period: 2016-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-10]

detection period: 2016-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 1121
number of botnet IPs notified to network operators: 1110
number of spam blocked: 4073
recipient count of spam blocked: 5015

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	661
2	CHINANET-HN	105
3	UNICOM-ZJ	89
4	CHINANET-JS	60
5	UNICOM-JS	46
6	WASU-BB	29
7	CHINANET-AH	27
8	CMNET	19
9	VNPT-VNNIC-VN	7
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	1065
2	Viet Nam	10
3	Russian Federation	6
4	India	6
5	United States	5
6	Kazakhstan	3
7	Taiwan	2
8	Pakistan	2
9	Netherlands	2
10	Iran	2

Suspected Bot List [2016-10-09]

detection period: 2016-10-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-09]

detection period: 2016-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 1010
number of botnet IPs notified to network operators: 1006
number of spam blocked: 1834
recipient count of spam blocked: 2263

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	598
2	CHINANET-HN	109
3	UNICOM-ZJ	85
4	WASU-BB	40
5	CHINANET-JS	32
6	UNICOM-JS	29
7	CMNET	14
8	CHINANET-AH	6
9	Chinafic	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	951
2	United States	7
3	Viet Nam	6
4	Taiwan	6
5	India	6
6	Russian Federation	5
7	Hong Kong	4
8	Iran	3
9	Thailand	2
10	Netherlands	2

Suspected Bot List [2016-10-08]

detection period: 2016-10-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-08]

detection period: 2016-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 1111
number of botnet IPs notified to network operators: 1107
number of spam blocked: 3634
recipient count of spam blocked: 30543

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	626
2	CHINANET-HN	166
3	UNICOM-ZJ	99
4	WASU-BB	38
5	HINET-NET	33
6	CHINANET-JS	13
7	CHINANET-AH	12
8	CMNET	9
9	UNICOM-NM	8
10	CHINANET-HB	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	1032
2	Taiwan	34
3	United States	7
4	Hong Kong	3
5	Viet Nam	2
6	Romania	2
7	Pakistan	2
8	Peru	2
9	Netherlands	2
10	Republic Of Moldova	2

Suspected Bot List [2016-10-07]

detection period: 2016-10-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-07]

detection period: 2016-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 1135
number of botnet IPs notified to network operators: 1132
number of spam blocked: 30267
recipient count of spam blocked: 715593

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	536
2	WASU	343
3	CHINANET-HN	108
4	UNICOM-ZJ	32
5	WASU-BB	27
6	CHINANET-JS	13
7	CMNET	11
8	CHINANET-AH	8
9	Chinafic	5
10	CHINANET-HB	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	581
2	Taiwan	537
3	United States	5
4	Hong Kong	2
5	Turkey	1
6	Slovakia	1
7	Russian Federation	1
8	Poland	1
9	Cambodia	1
10	Japan	1

Suspected Bot List [2016-10-06]

detection period: 2016-10-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-06]

detection period: 2016-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 991
number of botnet IPs notified to network operators: 989
number of spam blocked: 46244
recipient count of spam blocked: 1307374

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	898
2	CHINANET-AH	18
3	CHINANET-HB	15
4	CHINANET-HA	12
5	UNICOM-NM	11
6	CHINANET-JS	11
7	CHINANET-ZJ-NB	9
8	CHINANET-ZJ	7
9	RKXT	4
10	XINWEITELECOM-KH	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	898
2	China	89
3	United States	1
4	Poland	1
5	Cambodia	1
6	Canada	1

Suspected Bot List [2016-10-05]

detection period: 2016-10-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-05]

detection period: 2016-10-05 00:00-23:59 UTC
total number of suspected botnet IPs: 893
number of botnet IPs notified to network operators: 891
number of spam blocked: 40639
recipient count of spam blocked: 1190535

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	824
2	CHINANET-JS	12
3	CHINANET-HB	12
4	CHINANET-AH	11
5	UNICOM-NM	10
6	CHINANET-ZJ	6
7	CHINANET-ZJ-NB	5
8	MAINT-CHINANET-HA	4
9	CHINANET-HA	4
10	CHINANET-HN	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	824
2	China	66
3	Poland	1
4	Cambodia	1
5	Canada	1

Suspected Bot List [2016-10-04]

detection period: 2016-10-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-04]

detection period: 2016-10-04 00:00-23:59 UTC
total number of suspected botnet IPs: 925
number of botnet IPs notified to network operators: 923
number of spam blocked: 47267
recipient count of spam blocked: 1329427

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	909
2	CHINANET-JS	10
3	XINWEITELECOM-KH	1
4	SI-T-2	1
5	PL-ZFIX-20151105	1
6	CSLOXINFO-AS-AP	1
7	CMNET	1
8	ATT	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	909
2	China	11
3	United States	1
4	Thailand	1
5	Slovenia	1
6	Poland	1
7	Cambodia	1

Suspected Bot List [2016-10-03]

detection period: 2016-10-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia
PL	185.125.4.152	Poland

List from greylisting:

Botnet Statistics [2016-10-03]

detection period: 2016-10-03 00:00-23:59 UTC
total number of suspected botnet IPs: 914
number of botnet IPs notified to network operators: 912
number of spam blocked: 37362
recipient count of spam blocked: 1072005

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	901
2	CHINANET-JS	9
3	XINWEITELECOM-KH	1
4	SI-T-2	1
5	PL-ZFIX-20151105	1
6	CHINANET-ZJ-JH	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	901
2	China	10
3	Slovenia	1
4	Poland	1
5	Cambodia	1

Suspected Bot List [2016-10-02]

detection period: 2016-10-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	43.255.114.242	Cambodia

List from greylisting:

Botnet Statistics [2016-10-02]

detection period: 2016-10-02 00:00-23:59 UTC
total number of suspected botnet IPs: 935
number of botnet IPs notified to network operators: 934
number of spam blocked: 37694
recipient count of spam blocked: 1115109

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	925
2	CHINANET-JS	9
3	XINWEITELECOM-KH	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	925
2	China	9
3	Cambodia	1

Suspected Bot List [2016-10-01]

detection period: 2016-10-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-10-01]

detection period: 2016-10-01 00:00-23:59 UTC
total number of suspected botnet IPs: 974
number of botnet IPs notified to network operators: 974
number of spam blocked: 40106
recipient count of spam blocked: 1192304

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	959
2	CHINANET-JS	9
3	CHINANET-SD	5
4	XINWEITELECOM-KH	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	959
2	China	14
3	Cambodia	1

Botnet Statistics for September 2016

detection period: 2016-09-01 00:00 - 2016-09-30 23:59 UTC
total number of suspected botnet IPs: 24729
number of blocked spams: 568419
recipient count of blocked spams: 12868411

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	9260
2	China	3681
3	Viet Nam	2323
4	India	1971
5	Mexico	1058
6	Brazil	611
7	Peru	593
8	Iran	436
9	Colombia	436
10	Turkey	332
11	Thailand	208
12	Argentina	201
13	Indonesia	200
14	Venezuela	186
15	Pakistan	175
16	Saudi Arabia	171
17	Arab Emirates	146
18	Tunisia	129
19	Bolivia	128
20	Philippines	117
21	Macedonia	116
22	Italy	107
23	Serbia	79
24	South Africa	73
25	Spain	73

The top 17 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	423203
2	Poland	82741
3	China	44535
4	United States	8010
5	Italy	4174
6	Philippines	3356
7	United Kingdom	1130
8	Thailand	705
9	Argentina	260
10	Turkey	230
11	Canada	48
12	Ukraine	16
13	Romania	5
14	Arab Emirates	3
15	Mexico	1
16	Lithuania	1
17	Croatia	1

The top 17 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2016-09-30]

detection period: 2016-09-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2016-09-30]

detection period: 2016-09-30 00:00-23:59 UTC
total number of suspected botnet IPs: 1079
number of botnet IPs notified to network operators: 1079
number of spam blocked: 42141
recipient count of spam blocked: 1221703

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1001
2	CHINANET-HN	65
3	CHINANET-JS	9
4	CHINANET-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Taiwan	1001
2	China	78