Botnet Statistics [2017-05-30]

detection period: 2017-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 544
number of botnet IPs notified to network operators: 503
number of spam blocked: 23680
recipient count of spam blocked: 111296

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UA-VOLIA-20061124	57
2	WASU	52
3	CHINANET-GD	51
4	CMNET	48
5	UNICOM-ZJ	35
6	UK-ABSTATION-20120712	28
7	VNPT-VNNIC-VN	25
8	EONIX-NET-173-44-128-0-1-BLK-4	17
9	LADEDICATED2	13
10	CC-17	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	230
2	United States	87
3	Ukraine	60
4	Viet Nam	47
5	United Kingdom	28
6	Japan	10
7	Taiwan	7
8	India	5
9	France	5
10	Bulgaria	5

Suspected Bot List [2017-05-30]

detection period: 2017-05-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	45.124.145.118	India
US	24.42.239.106	United States
UY	167.57.0.129	Uruguay

List from greylisting:

Botnet Statistics [2017-05-29]

detection period: 2017-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 297
number of botnet IPs notified to network operators: 242
number of spam blocked: 17262
recipient count of spam blocked: 58859

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	44
2	HSI-4	25
3	UA-VOLIA-20080404	24
4	VNPT-VNNIC-VN	18
5	HU-112	15
6	WORLDSTREAM	10
7	FPT-VN	8
8	WASU	7
9	HICHINA	7
10	HSI-3	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	86
2	United States	66
3	Viet Nam	35
4	Ukraine	29
5	Netherlands	11
6	France	11
7	Taiwan	7
8	Japan	7
9	India	6
10	Thailand	4

Suspected Bot List [2017-05-29]

detection period: 2017-05-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	87.98.243.48	France
FR	195.154.53.245	France
IN	45.124.145.118	India

List from greylisting:

Botnet Statistics [2017-05-28]

detection period: 2017-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 295
number of botnet IPs notified to network operators: 281
number of spam blocked: 14384
recipient count of spam blocked: 134145

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	38
2	MAROSNET-193-124-176-0	26
3	UA-VOLIA-20061124	25
4	BAIDU-JP-NET	17
5	EONIX-NET-173-232-0-0-1-BLK-6	15
6	LSN-DLLSTX-2	13
7	VNPT-VNNIC-VN	12
8	FPT-VN	6
9	ALISOFT	6
10	AL-3	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	71
2	United States	50
3	Russian Federation	33
4	Ukraine	29
5	Viet Nam	28
6	Japan	20
7	France	9
8	Greece	6
9	Taiwan	4
10	India	4

Suspected Bot List [2017-05-28]

detection period: 2017-05-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ES	83.46.126.238	Spain
GR	46.176.239.183	Greece
GR	89.210.21.28	Greece
GR	89.210.225.237	Greece
GR	141.255.30.119	Greece
GR	141.255.59.131	Greece
GR	141.255.122.249	Greece
MN	202.9.41.227	Mongolia
PK	39.42.30.30	Pakistan
US	24.42.239.106	United States
US	24.97.59.122	United States

List from greylisting:

Botnet Statistics [2017-05-27]

detection period: 2017-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 471
number of botnet IPs notified to network operators: 426
number of spam blocked: 35142
recipient count of spam blocked: 113168

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	60
2	UA-VOLIA-20080404	55
3	VNPT-VNNIC-VN	43
4	UK-RAPIDSWITCH-20070418	30
5	HSI-3	22
6	HINET-NET	21
7	FPT-VN	16
8	HINET	13
9	VIETEL-VN	10
10	HSI-4	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	100
2	Viet Nam	96
3	Ukraine	59
4	United States	58
5	Taiwan	36
6	United Kingdom	31
7	India	13
8	France	11
9	Thailand	6
10	Romania	5

Suspected Bot List [2017-05-27]

detection period: 2017-05-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	24.97.59.122	United States
US	24.231.215.254	United States

List from greylisting:

Botnet Statistics [2017-05-26]

detection period: 2017-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 685
number of botnet IPs notified to network operators: 641
number of spam blocked: 19642
recipient count of spam blocked: 39500

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	141
2	CMNET	66
3	CHINANET-GD	51
4	WASU	41
5	VNPT-VNNIC-VN	33
6	HINET-NET	32
7	UA-VOLIA-20080404	27
8	CC-17	19
9	EONIX-NET-173-232-0-0-1-BLK-6	18
10	HINET	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	337
2	United States	98
3	Viet Nam	51
4	Taiwan	49
5	Ukraine	28
6	India	25
7	United Kingdom	15
8	Poland	11
9	Estonia	10
10	Brazil	5

Suspected Bot List [2017-05-26]

detection period: 2017-05-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	186.38.87.100	Argentina
AR	186.38.87.102	Argentina
AR	186.56.32.169	Argentina
AR	200.49.2.123	Argentina
IN	27.251.2.234	India
IN	122.165.237.29	India
IN	122.168.194.53	India
MX	148.243.192.238	Mexico
PK	182.191.65.193	Pakistan

List from greylisting:

Botnet Statistics [2017-05-25]

detection period: 2017-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 778
number of botnet IPs notified to network operators: 767
number of spam blocked: 27466
recipient count of spam blocked: 72539

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	169
2	WASU	128
3	CMNET	85
4	CHINANET-GD	44
5	HOSTENGINE	35
6	UA-VOLIA-20080404	29
7	UA-VOLIA-20061124	28
8	MAROSNET-194-67-196-0	22
9	HINET-NET	17
10	HINET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	460
2	United States	72
3	Ukraine	72
4	Taiwan	32
5	Russian Federation	23
6	Viet Nam	14
7	Turkey	13
8	Singapore	13
9	India	8
10	Italy	6

Suspected Bot List [2017-05-25]

detection period: 2017-05-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	69.58.106.210	Canada
FR	212.129.30.113	France
IN	27.251.2.234	India
MX	148.243.192.238	Mexico

List from greylisting:

Botnet Statistics [2017-05-24]

detection period: 2017-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 723
number of botnet IPs notified to network operators: 670
number of spam blocked: 59781
recipient count of spam blocked: 71939

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	158
2	WASU	97
3	CMNET	89
4	CHINANET-GD	46
5	UA-VOLIA-20080404	32
6	UA-VOLIA-20061124	31
7	HSI-3	24
8	EONIX-NET-173-232-0-0-1-BLK-6	17
9	HU-112	15
10	LSN-DLLSTX-1	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	423
2	United States	136
3	Ukraine	63
4	India	19
5	Viet Nam	15
6	Tunisia	5
7	South Korea	5
8	Iran	5
9	Russian Federation	4
10	Taiwan	3

Suspected Bot List [2017-05-24]

detection period: 2017-05-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.81.157.58	France
IN	59.144.167.233	India
KW	37.34.243.227	Kuwait

List from greylisting:

Botnet Statistics [2017-05-23]

detection period: 2017-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 798
number of botnet IPs notified to network operators: 778
number of spam blocked: 41734
recipient count of spam blocked: 42098

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	137
2	WASU	126
3	CMNET	114
4	CHINANET-GD	50
5	UA-VOLIA-20080404	29
6	UA-VOLIA-20061124	29
7	EONIX-NET-173-44-128-0-1-BLK-4	29
8	VNPT-VNNIC-VN	16
9	TZULO	16
10	HU-112	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	465
2	United States	116
3	Ukraine	60
4	Viet Nam	38
5	India	22
6	Poland	14
7	Russian Federation	12
8	Iran	8
9	Turkey	6
10	Italy	5

Suspected Bot List [2017-05-23]

detection period: 2017-05-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-22]

detection period: 2017-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 330
number of botnet IPs notified to network operators: 326
number of spam blocked: 11243
recipient count of spam blocked: 11243

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	56
2	WASU	55
3	CMNET	54
4	CHINANET-GD	16
5	UK-RAPIDSWITCH-20070418	15
6	RO-DATAROOM-20150616	15
7	LADEDICATED3	10
8	LSN-DLLSTX-2	7
9	EXMASTERS16	7
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	224
2	United States	20
3	Romania	16
4	United Kingdom	15
5	Russian Federation	8
6	Czech Republic	8
7	India	4
8	Viet Nam	3
9	South Korea	3
10	Thailand	2

Suspected Bot List [2017-05-22]

detection period: 2017-05-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-18]

detection period: 2017-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 720
number of botnet IPs notified to network operators: 706
number of spam blocked: 49499
recipient count of spam blocked: 120617

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	122
2	WASU	112
3	CMNET	61
4	UA-VOLIA-20061124	29
5	EONIX-NET-173-232-0-0-1-BLK-6	29
6	VNPT-VNNIC-VN	24
7	LSN-DLLSTX-2	22
8	DIMENOC	20
9	EXMASTERS16	18
10	CHINANET-GD	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	364
2	United States	123
3	Viet Nam	47
4	Ukraine	40
5	Russian Federation	18
6	Czech Republic	18
7	Virgin (British) Islands	16
8	Poland	14
9	Japan	6
10	South Korea	5

Suspected Bot List [2017-05-18]

detection period: 2017-05-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	182.191.65.193	Pakistan

List from greylisting:

Botnet Statistics [2017-05-17]

detection period: 2017-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 753
number of botnet IPs notified to network operators: 711
number of spam blocked: 58999
recipient count of spam blocked: 167614

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	134
2	WASU	123
3	CMNET	59
4	UA-VOLIA-20080404	29
5	UA-VOLIA-20061124	29
6	abstation	26
7	VNPT-VNNIC-VN	25
8	CHINANET-GD	22
9	RO-DATAROOM-20150616	16
10	LEASEWEB	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	391
2	United States	74
3	Ukraine	61
4	Viet Nam	48
5	United Kingdom	27
6	Romania	16
7	Japan	15
8	India	15
9	Netherlands	14
10	Italy	7

Suspected Bot List [2017-05-17]

detection period: 2017-05-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-16]

detection period: 2017-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 893
number of botnet IPs notified to network operators: 840
number of spam blocked: 56850
recipient count of spam blocked: 115979

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	132
2	CMNET	95
3	UNICOM-ZJ	84
4	CHINANET-JS	38
5	VNPT-VNNIC-VN	37
6	CHINANET-GD	37
7	UA-VOLIA-20080404	29
8	MIHK-HK	29
9	UA-VOLIA-20061124	28
10	PL-ARTNET-20120704	24

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	453
2	Viet Nam	71
3	Ukraine	62
4	United States	47
5	India	37
6	Hong Kong	32
7	Poland	28
8	Netherlands	19
9	United Kingdom	16
10	Lithuania	15

Suspected Bot List [2017-05-16]

detection period: 2017-05-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
NL	93.174.94.114	Netherlands
RS	89.216.28.123	Serbia

List from greylisting:

Botnet Statistics [2017-05-15]

detection period: 2017-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 849
number of botnet IPs notified to network operators: 783
number of spam blocked: 32031
recipient count of spam blocked: 135420

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	129
2	CMNET	88
3	UNICOM-ZJ	81
4	VNPT-VNNIC-VN	54
5	CHINANET-JS	44
6	CHINANET-GD	40
7	HSI-3	31
8	UNICOM-JS	25
9	NDCHOST-04	22
10	IS-ICENETWORKS	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	453
2	United States	116
3	Viet Nam	93
4	India	33
5	Netherlands	26
6	Iceland	16
7	Romania	9
8	Ukraine	6
9	Russian Federation	6
10	Iran	6

Suspected Bot List [2017-05-15]

detection period: 2017-05-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 66

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	212.83.138.221	France
IN	202.56.255.50	India
US	69.85.239.37	United States

List from greylisting:

Botnet Statistics [2017-05-14]

detection period: 2017-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 540
number of botnet IPs notified to network operators: 530
number of spam blocked: 18954
recipient count of spam blocked: 65639

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	56
2	WASU	49
3	VNPT-VNNIC-VN	41
4	CHINANET-GD	40
5	CMNET	35
6	TZULO	33
7	UA-VOLIA-20080404	29
8	CHINANET-JS	21
9	UNICOM-JS	17
10	BG-POWERNET-20070731	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	276
2	Viet Nam	80
3	United States	60
4	Ukraine	34
5	Bulgaria	15
6	Russian Federation	11
7	Taiwan	7
8	India	5
9	South Korea	4
10	South Africa	3

Suspected Bot List [2017-05-14]

detection period: 2017-05-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	103.254.107.10	Indonesia
MX	187.178.176.10	Mexico
MX	201.163.21.226	Mexico

List from greylisting:

Botnet Statistics [2017-05-13]

detection period: 2017-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1422
number of botnet IPs notified to network operators: 1306
number of spam blocked: 22239
recipient count of spam blocked: 57003

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	295
2	UNICOM-ZJ	73
3	FPT-VN	70
4	VIETEL-VN	60
5	VIETEL-VNNIC-VN	59
6	CHINANET-GD	40
7	ETC-VNNIC-VN	39
8	WASU	27
9	UA-VOLIA-20080404	27
10	UA-VOLIA-20061124	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	571
2	China	240
3	Ukraine	80
4	India	77
5	United States	49
6	South Korea	32
7	Argentina	30
8	Thailand	20
9	Russian Federation	20
10	Czech Republic	18

Suspected Bot List [2017-05-13]

detection period: 2017-05-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 116

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.60.61	Colombia
IN	1.186.128.5	India
KE	41.215.72.146	Kenya
MN	202.170.70.8	Mongolia
US	97.80.35.6	United States

List from greylisting:

Suspected Bots' IP List for April 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-04-01]
Suspected Bots IP [2017-04-02]
Suspected Bots IP [2017-04-03]
Suspected Bots IP [2017-04-04]
Suspected Bots IP [2017-04-05]
Suspected Bots IP [2017-04-06]
Suspected Bots IP [2017-04-07]
Suspected Bots IP [2017-04-08]
Suspected Bots IP [2017-04-09]
Suspected Bots IP [2017-04-10]
Suspected Bots IP [2017-04-14]
Suspected Bots IP [2017-04-15]
Suspected Bots IP [2017-04-16]
Suspected Bots IP [2017-04-17]
Suspected Bots IP [2017-04-18]
Suspected Bots IP [2017-04-19]
Suspected Bots IP [2017-04-21]
Suspected Bots IP [2017-04-22]
Suspected Bots IP [2017-04-23]
Suspected Bots IP [2017-04-24]
Suspected Bots IP [2017-04-25]
Suspected Bots IP [2017-04-26]
Suspected Bots IP [2017-04-27]
Suspected Bots IP [2017-04-28]
Suspected Bots IP [2017-04-29]
Suspected Bots IP [2017-04-30]

Botnet Statistics [2017-05-12]

detection period: 2017-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 777
number of botnet IPs notified to network operators: 711
number of spam blocked: 45654
recipient count of spam blocked: 56871

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	85
2	UNICOM-ZJ	74
3	VNPT-VNNIC-VN	62
4	UA-VOLIA-20061124	54
5	CMNET	44
6	CHINANET-GD	35
7	EONIX-NET-173-232-0-0-1-BLK-6	29
8	NFORCE_ENTERTAINMENT	23
9	TZULO	17
10	MIR-TELEMATIKI	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	304
2	Viet Nam	102
3	United States	96
4	Ukraine	60
5	Netherlands	24
6	Russian Federation	20
7	India	18
8	Argentina	18
9	Brazil	17
10	South Korea	9

Suspected Bot List [2017-05-12]

detection period: 2017-05-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 66

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BW	168.167.251.213	Botswana
CO	190.60.60.61	Colombia
ID	103.254.107.10	Indonesia
MX	201.163.21.226	Mexico
US	97.80.35.6	United States

List from greylisting:

Botnet Statistics [2017-05-11]

detection period: 2017-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 949
number of botnet IPs notified to network operators: 931
number of spam blocked: 48795
recipient count of spam blocked: 85795

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	120
2	UNICOM-ZJ	95
3	CMNET	94
4	UA-VOLIA-20080404	54
5	CHINANET-GD	49
6	VNPT-VNNIC-VN	43
7	NFORCE_ENTERTAINMENT	37
8	CHINANET-JS	36
9	MAROSNET-194-67-208-0	29
10	CC-17	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	495
2	Viet Nam	92
3	Ukraine	76
4	United States	65
5	Russian Federation	38
6	Netherlands	38
7	India	28
8	Bulgaria	20
9	Poland	9
10	Italy	6

Suspected Bot List [2017-05-11]

detection period: 2017-05-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CO	190.60.60.61	Colombia
ID	103.254.107.10	Indonesia
US	97.80.35.6	United States

List from greylisting:

Botnet Statistics [2017-05-10]

detection period: 2017-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 716
number of botnet IPs notified to network operators: 711
number of spam blocked: 39769
recipient count of spam blocked: 70465

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	141
2	UNICOM-ZJ	112
3	CMNET	71
4	CHINANET-GD	54
5	CHINANET-JS	47
6	NFORCE_ENTERTAINMENT	31
7	UA-VOLIA-20080404	29
8	TZULO	17
9	NL-WORLDSTREAM-20120917	15
10	UNICOM-JS	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	485
2	United States	89
3	Netherlands	46
4	Ukraine	30
5	Estonia	13
6	Bulgaria	8
7	Taiwan	5
8	France	4
9	Viet Nam	3
10	Thailand	3

Suspected Bot List [2017-05-10]

detection period: 2017-05-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	97.80.35.6	United States

List from greylisting:

Botnet Statistics [2017-05-09]

detection period: 2017-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 779
number of botnet IPs notified to network operators: 743
number of spam blocked: 56536
recipient count of spam blocked: 56811

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	102
2	UNICOM-ZJ	82
3	CMNET	76
4	UA-VOLIA-20080404	58
5	CHINANET-JS	45
6	CHINANET-GD	42
7	VNPT-VNNIC-VN	38
8	SHARKTECH	34
9	EE-WAVECOM-20101130	29
10	UNICOM-JS	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	404
2	United States	94
3	Viet Nam	81
4	Ukraine	60
5	Estonia	29
6	Romania	17
7	Bulgaria	17
8	Turkey	15
9	India	8
10	Netherlands	6

Suspected Bot List [2017-05-09]

detection period: 2017-05-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-08]

detection period: 2017-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 779
number of botnet IPs notified to network operators: 767
number of spam blocked: 53774
recipient count of spam blocked: 920030

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	87
2	WASU	72
3	CHINANET-JS	71
4	CMNET	64
5	UA-VOLIA-20061124	57
6	VNPT-VNNIC-VN	53
7	CHINANET-GD	33
8	EE-WAVECOM-20101130	29
9	SHARKTECH-3	28
10	EONIX-NET-107-158-0-0-1-BLK-10	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	389
2	Viet Nam	105
3	United States	82
4	Ukraine	57
5	Estonia	29
6	Netherlands	19
7	Turkey	14
8	India	13
9	Sweden	8
10	Bulgaria	8

Suspected Bot List [2017-05-08]

detection period: 2017-05-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	103.254.107.10	Indonesia
US	97.80.35.6	United States
UY	179.26.16.89	Uruguay

List from greylisting:

Botnet Statistics [2017-05-07]

detection period: 2017-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 533
number of botnet IPs notified to network operators: 520
number of spam blocked: 22917
recipient count of spam blocked: 291391

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	47
2	CHINANET-JS	39
3	CHINANET-GD	39
4	abstation	28
5	UA-VOLIA-20080404	28
6	UNICOM-ZJ	21
7	WASU	17
8	TZULO	17
9	LeaseVPS	16
10	Infium-2	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	179
2	Viet Nam	94
3	United States	88
4	Ukraine	46
5	United Kingdom	30
6	Netherlands	17
7	Bulgaria	12
8	Russian Federation	5
9	India	5
10	Indonesia	5

Suspected Bot List [2017-05-07]

detection period: 2017-05-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PK	202.61.51.123	Pakistan

List from greylisting:

Botnet Statistics for April 2017

detection period: 2017-04-01 00:00 - 2017-04-30 23:59 UTC
total number of suspected botnet IPs: 6465
number of blocked spams: 346245
recipient count of blocked spams: 1670097

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4132
2	Viet Nam	458
3	India	323
4	United States	185
5	Russian Federation	158
6	South Korea	120
7	Brazil	70
8	Indonesia	54
9	Ukraine	43
10	Taiwan	43
11	Thailand	40
12	Pakistan	38
13	Mexico	36
14	Iran	32
15	France	30
16	Bangladesh	29
17	Argentina	27
18	Japan	26
19	Italy	25
20	Germany	25
21	Antigua And Barbuda	24
22	Turkey	23
23	United Kingdom	22
24	Singapore	20
25	Netherlands	19

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	245766
2	Singapore	24784
3	Turkey	11557
4	Germany	10995
5	Russian Federation	8461
6	Ukraine	8403
7	Netherlands	6068
8	China	3469
9	France	2507
10	Canada	2470
11	United Kingdom	2206
12	Sweden	2188
13	Taiwan	1742
14	Czech Republic	1378
15	Thailand	1373
16	Romania	1241
17	India	1198
18	Viet Nam	1111
19	Estonia	1022
20	Tunisia	728
21	Poland	634
22	Mexico	513
23	Chile	481
24	Italy	428
25	Pakistan	340

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-05-06]

detection period: 2017-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 420
number of botnet IPs notified to network operators: 408
number of spam blocked: 51870
recipient count of spam blocked: 321269

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	38
2	CMNET	37
3	EXMASTERS16	32
4	WASU	31
5	UA-VOLIA-20061124	29
6	HOSTKEY-NET	16
7	VNPT-VNNIC-VN	15
8	DSV4-2	13
9	NFORCE_ENTERTAINMENT	12
10	NETBLK-NOBIS-TECHNOLOGY-GROUP-08	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	151
2	United States	83
3	Czech Republic	32
4	Viet Nam	30
5	Ukraine	30
6	Netherlands	28
7	Singapore	13
8	India	8
9	Russian Federation	4
10	Germany	4

Suspected Bot List [2017-05-06]

detection period: 2017-05-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-05]

detection period: 2017-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 638
number of botnet IPs notified to network operators: 631
number of spam blocked: 38965
recipient count of spam blocked: 86448

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	88
2	WASU	74
3	CHINANET-GD	53
4	SERVERYOU-NET-LAX	34
5	VNPT-VNNIC-VN	31
6	UA-VOLIA-20061124	29
7	UA-VOLIA-20080404	28
8	DIMENOC	20
9	NR-CUST-AUTONOMOI	13
10	LSN-DLLSTX-1	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	296
2	United States	128
3	Ukraine	58
4	Viet Nam	48
5	Netherlands	14
6	Poland	11
7	Russian Federation	7
8	India	7
9	France	4
10	Australia	4

Suspected Bot List [2017-05-05]

detection period: 2017-05-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MN	202.170.70.8	Mongolia

List from greylisting:

Botnet Statistics [2017-05-04]

detection period: 2017-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 681
number of botnet IPs notified to network operators: 672
number of spam blocked: 37935
recipient count of spam blocked: 434232

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	91
2	WASU	72
3	UA-VOLIA-20061124	54
4	CHINANET-GD	37
5	TZULO	32
6	UK-ABSTATION-20120712	29
7	VNPT-VNNIC-VN	25
8	CHINANET-JS	24
9	NFORCE_ENTERTAINMENT	18
10	PSYCHZ-NETWORKS	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	299
2	United States	112
3	Ukraine	57
4	Viet Nam	43
5	United Kingdom	31
6	Netherlands	18
7	Russian Federation	15
8	Turkey	14
9	Italy	10
10	Hong Kong	6

Suspected Bot List [2017-05-04]

detection period: 2017-05-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-05-03]

detection period: 2017-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 671
number of botnet IPs notified to network operators: 657
number of spam blocked: 44860
recipient count of spam blocked: 661184

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	101
2	WASU	86
3	VNPT-VNNIC-VN	46
4	UA-VOLIA-20061124	33
5	abstation	17
6	TZULO	17
7	TR-COMNET-TR	17
8	SHARKTECH-3	17
9	LINOSERVERS-NET	15
10	LT-ECOFON-20131231	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	276
2	United States	116
3	Viet Nam	94
4	Ukraine	46
5	Turkey	18
6	United Kingdom	18
7	Luxembourg	15
8	Lithuania	15
9	Thailand	7
10	Russian Federation	7

Suspected Bot List [2017-05-03]

detection period: 2017-05-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KW	37.34.243.227	Kuwait
SA	83.101.136.42	Saudi Arabia

List from greylisting:

Botnet Statistics [2017-05-02]

detection period: 2017-05-02 00:00-23:59 UTC
total number of suspected botnet IPs: 640
number of botnet IPs notified to network operators: 619
number of spam blocked: 82305
recipient count of spam blocked: 113173

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	78
2	WASU	65
3	CHINANET-JS	37
4	VNPT-VNNIC-VN	33
5	EE-WAVECOM-20101130	29
6	UNICOM-JS	25
7	UA-VOLIA-20061124	19
8	NL-HOSTKEY	16
9	WII-OAK-2	13
10	UNICOM-BJ	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	298
2	United States	77
3	Viet Nam	71
4	Estonia	29
5	Ukraine	26
6	Russian Federation	25
7	Netherlands	18
8	India	18
9	Turkey	7
10	South Korea	7

Suspected Bot List [2017-05-02]

detection period: 2017-05-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	148.243.192.238	Mexico
PK	203.215.183.119	Pakistan
RS	89.216.28.123	Serbia
SA	83.101.136.42	Saudi Arabia

List from greylisting:

Botnet Statistics [2017-05-01]

detection period: 2017-05-01 00:00-23:59 UTC
total number of suspected botnet IPs: 429
number of botnet IPs notified to network operators: 418
number of spam blocked: 118299
recipient count of spam blocked: 118302

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	32
2	CHINANET-GD	30
3	LSN-DLLSTX-8	25
4	abstation	23
5	CHINANET-JS	19
6	CMNET	17
7	UNICOM-JS	16
8	EONIX-NET-50-2-0-0-1-BLK-7	15
9	UNICOM-BJ	13
10	JOESDC-01	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	161
2	United States	86
3	Viet Nam	60
4	United Kingdom	24
5	Ukraine	15
6	Iceland	12
7	Russian Federation	11
8	South Korea	8
9	India	8
10	Brazil	6

Suspected Bot List [2017-05-01]

detection period: 2017-05-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-30]

detection period: 2017-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 237
number of botnet IPs notified to network operators: 227
number of spam blocked: 2446
recipient count of spam blocked: 48863

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	33
2	UNICOM-BJ	16
3	CMNET	16
4	VNPT-VNNIC-VN	8
5	UNICOM-GD	5
6	CHINANET-JS	4
7	ALISOFT	4
8	HICHINA	3
9	CHINANET-YN	3
10	CHINANET-JX	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	130
2	United States	18
3	Russian Federation	15
4	Viet Nam	9
5	India	8
6	Ukraine	4
7	Taiwan	4
8	Thailand	3
9	Hong Kong	3
10	France	3

Suspected Bot List [2017-04-30]

detection period: 2017-04-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	1.186.128.5	India
US	97.89.253.230	United States

List from greylisting: