Botnet Statistics [2017-07-30]

detection period: 2017-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 478
number of botnet IPs notified to network operators: 435
number of spam blocked: 82317
recipient count of spam blocked: 2161008

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HOST4GEEKS	53
2	Baidu	39
3	WASU	35
4	CMNET	35
5	CHINANET-HA	24
6	CHINANET-JS	20
7	EONIX-NET-173-44-128-0-1-BLK-4	17
8	EONIX-NET-50-2-0-0-1-BLK-7	16
9	CLOUD-SOUTH	16
10	CHINANET-HB	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	274
2	United States	92
3	Hong Kong	54
4	Netherlands	11
5	Russian Federation	9
6	Taiwan	5
7	South Korea	5
8	Brazil	3
9	Turkey	2
10	Saint Kitts And Nevis	2

Suspected Bot List [2017-07-30]

detection period: 2017-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
RU	91.197.234.102	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-29]

detection period: 2017-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 402
number of botnet IPs notified to network operators: 368
number of spam blocked: 94597
recipient count of spam blocked: 2523898

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HOST4GEEKS	41
2	CMNET	39
3	Baidu	39
4	CC-17	23
5	SHARKTECH-3	17
6	CHINANET-GD	14
7	CHINANET-ZJ	13
8	CHINANET-JS	12
9	EONIX-NET-173-44-128-0-1-BLK-4	11
10	SERVERCRATE-03	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	184
2	United States	92
3	Hong Kong	42
4	Netherlands	11
5	Poland	10
6	Russian Federation	9
7	Taiwan	7
8	Viet Nam	4
9	India	4
10	South Africa	3

Suspected Bot List [2017-07-29]

detection period: 2017-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
RU	91.197.234.102	Russian Federation
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-28]

detection period: 2017-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 656
number of botnet IPs notified to network operators: 596
number of spam blocked: 55938
recipient count of spam blocked: 1185101

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	94
2	WASU	69
3	HOST4GEEKS	44
4	Baidu	39
5	SHARKTECH-3	29
6	UNICOM-ZJ	28
7	dhakavoice	26
8	EONIX-NET-170-130-0-0-1-BLK-11	17
9	CHINANET-HA	17
10	HOSTKEY-NET	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	329
2	United States	99
3	Hong Kong	45
4	United Kingdom	38
5	Russian Federation	26
6	India	21
7	Poland	15
8	Netherlands	11
9	Viet Nam	9
10	Taiwan	8

Suspected Bot List [2017-07-28]

detection period: 2017-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
RU	91.197.234.102	Russian Federation

List from greylisting:

Botnet Statistics [2017-07-27]

detection period: 2017-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 790
number of botnet IPs notified to network operators: 777
number of spam blocked: 25313
recipient count of spam blocked: 272103

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	97
2	WASU	71
3	HOST4GEEKS	69
4	CHINANET-HB	60
5	UNICOM-ZJ	52
6	Baidu	39
7	UNICOM-HB	29
8	SHARKTECH-3	29
9	EONIX-NET-173-44-128-0-1-BLK-4	28
10	PL-ARTNET-20120704	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	459
2	United States	123
3	Hong Kong	72
4	Poland	30
5	Netherlands	24
6	United Kingdom	19
7	Taiwan	13
8	Russian Federation	8
9	Viet Nam	5
10	Italy	3

Suspected Bot List [2017-07-27]

detection period: 2017-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau

List from greylisting:

Botnet Statistics [2017-07-26]

detection period: 2017-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 693
number of botnet IPs notified to network operators: 654
number of spam blocked: 23307
recipient count of spam blocked: 241387

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	59
2	CMNET	59
3	HOST4GEEKS	54
4	CHINANET-HB	49
5	Baidu	39
6	UNICOM-HB	32
7	CHINANET-JS	32
8	UNICOM-ZJ	28
9	SERVERCRATE-03	23
10	HINET-NET	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	372
2	United States	122
3	Hong Kong	58
4	Netherlands	26
5	Taiwan	21
6	Poland	12
7	Viet Nam	9
8	Russian Federation	8
9	India	8
10	Germany	5

Suspected Bot List [2017-07-26]

detection period: 2017-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
RU	91.197.234.102	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-07-25]

detection period: 2017-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 727
number of botnet IPs notified to network operators: 707
number of spam blocked: 25165
recipient count of spam blocked: 240432

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	116
2	WASU	73
3	CHINANET-HB	56
4	Baidu	39
5	HOST4GEEKS	34
6	SHARKTECH-3	29
7	CHINANET-JS	28
8	UNICOM-HB	27
9	UNICOM-ZJ	26
10	UA-LIRUCC-20140708	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	448
2	United States	93
3	Hong Kong	37
4	Poland	29
5	Ukraine	26
6	Taiwan	19
7	Netherlands	15
8	Russian Federation	11
9	South Korea	5
10	Italy	4

Suspected Bot List [2017-07-25]

detection period: 2017-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-07-24]

detection period: 2017-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 771
number of botnet IPs notified to network operators: 713
number of spam blocked: 78611
recipient count of spam blocked: 1615147

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	82
2	CHINANET-JS	57
3	WASU	52
4	CHINANET-HB	50
5	HOST4GEEKS	41
6	Baidu	30
7	EONIX-NET-50-2-0-0-1-BLK-7	26
8	UNICOM-ZJ	24
9	CC-10	24
10	UNICOM-HB	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	428
2	United States	146
3	Hong Kong	45
4	Russian Federation	17
5	Poland	15
6	Netherlands	13
7	Singapore	12
8	Taiwan	11
9	Italy	8
10	Ukraine	6

Suspected Bot List [2017-07-24]

detection period: 2017-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MX	189.211.198.181	Mexico
NO	193.150.121.66	Norway
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-23]

detection period: 2017-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 644
number of botnet IPs notified to network operators: 595
number of spam blocked: 64694
recipient count of spam blocked: 1664933

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	51
2	WASU	50
3	CMNET	46
4	CHINANET-HB	41
5	CHINANET-JS	38
6	CLOUD-SOUTH	32
7	Baidu	30
8	HOST4GEEKS	25
9	EONIX-NET-173-44-128-0-1-BLK-4	18
10	HINET-NET	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	404
2	United States	108
3	Hong Kong	30
4	Taiwan	14
5	Russian Federation	14
6	Singapore	13
7	Germany	6
8	South Korea	5
9	Italy	5
10	France	4

Suspected Bot List [2017-07-23]

detection period: 2017-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MX	189.211.198.181	Mexico
MY	161.139.20.49	Malaysia
NO	193.150.121.66	Norway
RU	91.197.234.102	Russian Federation
RU	185.127.25.68	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	203.144.162.142	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-22]

detection period: 2017-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 535
number of botnet IPs notified to network operators: 510
number of spam blocked: 69749
recipient count of spam blocked: 1724837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	58
2	UNICOM-ZJ	42
3	HOST4GEEKS	42
4	CHINANET-JS	39
5	CHINANET-ZJ	27
6	WASU	23
7	Baidu	21
8	CLOUD-SOUTH	16
9	CHINANET-HB	13
10	SERVERCRATE	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	302
2	United States	106
3	Hong Kong	46
4	Singapore	12
5	Russian Federation	11
6	Taiwan	7
7	Brazil	6
8	Germany	5
9	Italy	4
10	France	4

Suspected Bot List [2017-07-22]

detection period: 2017-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
LY	197.215.136.166	Libya
RU	78.107.233.237	Russian Federation
RU	89.111.177.211	Russian Federation
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
RU	185.127.25.68	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-07-21]

detection period: 2017-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 861
number of botnet IPs notified to network operators: 799
number of spam blocked: 88272
recipient count of spam blocked: 2034731

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	77
2	CHINANET-HB	68
3	CHINANET-JS	62
4	HOST4GEEKS	61
5	UNICOM-HB	44
6	WASU	41
7	UNICOM-ZJ	34
8	SHARKTECH-3	29
9	Baidu	20
10	ThrustVPS_PT	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	500
2	United States	138
3	Hong Kong	65
4	Russian Federation	17
5	United Kingdom	15
6	Singapore	12
7	India	12
8	Viet Nam	10
9	Netherlands	10
10	Republic Of Moldova	10

Suspected Bot List [2017-07-21]

detection period: 2017-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 62

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.42.178.130	France
IN	122.174.69.252	India
LY	197.215.136.166	Libya
MX	189.211.198.181	Mexico
PL	91.185.189.179	Poland
RU	91.197.234.102	Russian Federation
RU	185.127.25.68	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
US	71.10.36.98	United States
US	206.125.41.139	United States
US	216.176.186.131	United States
US	216.176.186.132	United States
US	216.176.186.133	United States
US	216.176.186.134	United States

List from greylisting:

Botnet Statistics [2017-07-20]

detection period: 2017-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 920
number of botnet IPs notified to network operators: 853
number of spam blocked: 94272
recipient count of spam blocked: 2140063

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	126
2	CMNET	109
3	WASU	78
4	CHINANET-JS	61
5	UNICOM-HB	45
6	PSINETA	29
7	UNICOM-ZJ	24
8	CHINANET-GD	23
9	Baidu	22
10	HOST4GEEKS	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	604
2	United States	131
3	Netherlands	24
4	Hong Kong	24
5	Russian Federation	19
6	Poland	15
7	Germany	14
8	Singapore	12
9	Taiwan	8
10	Viet Nam	7

Suspected Bot List [2017-07-20]

detection period: 2017-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 67

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
ID	219.83.84.146	Indonesia
IN	106.201.37.191	India
IN	106.201.116.222	India
IN	110.227.108.231	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MX	189.211.198.181	Mexico
MY	161.139.20.49	Malaysia
PH	210.1.87.118	Philippines
PL	91.185.189.179	Poland
RU	91.197.234.102	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
US	206.125.41.139	United States
US	216.176.186.131	United States
US	216.176.186.132	United States
US	216.176.186.133	United States
US	216.176.186.134	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-19]

detection period: 2017-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1017
number of botnet IPs notified to network operators: 969
number of spam blocked: 116636
recipient count of spam blocked: 2803077

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	135
2	WASU	111
3	UNICOM-ZJ	96
4	CHINANET-HB	63
5	CHINANET-JS	52
6	CHINANET-GD	37
7	UNICOM-HB	33
8	MELBICOM-NL	29
9	HOSTKEY-NET	28
10	HOST4GEEKS	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	667
2	United States	90
3	Russian Federation	49
4	Netherlands	28
5	Hong Kong	27
6	Viet Nam	19
7	Germany	15
8	Singapore	13
9	Poland	13
10	Taiwan	12

Suspected Bot List [2017-07-19]

detection period: 2017-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.42.178.130	France
ID	219.83.84.146	Indonesia
IN	1.186.128.5	India
IN	182.73.244.70	India
IN	203.115.99.218	India
KW	37.34.243.227	Kuwait
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MX	148.243.192.238	Mexico
PL	91.185.189.179	Poland
RS	24.135.172.134	Serbia
RU	90.188.18.74	Russian Federation
RU	91.197.234.102	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
TH	203.146.249.104	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-18]

detection period: 2017-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1049
number of botnet IPs notified to network operators: 995
number of spam blocked: 124506
recipient count of spam blocked: 3048600

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	188
2	WASU	112
3	CMNET	82
4	CHINANET-JS	62
5	CHINANET-GD	44
6	CHINANET-HB	41
7	SHARKTECH-3	29
8	LU-ROOT-20081021	25
9	UNICOM-HB	20
10	HOST4GEEKS	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	699
2	United States	116
3	Luxembourg	26
4	Russian Federation	25
5	Hong Kong	24
6	Germany	19
7	Netherlands	15
8	Singapore	13
9	India	13
10	Viet Nam	9

Suspected Bot List [2017-07-18]

detection period: 2017-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 54

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CN	111.231.0.79	China
CN	118.89.153.22	China
CN	118.89.163.233	China
ID	219.83.84.146	Indonesia
IN	171.60.196.13	India
IN	182.64.70.26	India
IN	182.73.97.202	India
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MY	161.139.20.49	Malaysia
NO	193.150.121.66	Norway
PL	91.185.189.179	Poland
RU	90.188.18.74	Russian Federation
RU	91.197.234.102	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bots' IP List for June 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-06-01]
Suspected Bots IP [2017-06-02]
Suspected Bots IP [2017-06-03]
Suspected Bots IP [2017-06-04]
Suspected Bots IP [2017-06-05]
Suspected Bots IP [2017-06-06]
Suspected Bots IP [2017-06-07]
Suspected Bots IP [2017-06-08]
Suspected Bots IP [2017-06-09]
Suspected Bots IP [2017-06-10]
Suspected Bots IP [2017-06-11]
Suspected Bots IP [2017-06-12]
Suspected Bots IP [2017-06-13]
Suspected Bots IP [2017-06-14]
Suspected Bots IP [2017-06-15]
Suspected Bots IP [2017-06-16]
Suspected Bots IP [2017-06-17]
Suspected Bots IP [2017-06-18]
Suspected Bots IP [2017-06-19]
Suspected Bots IP [2017-06-20]
Suspected Bots IP [2017-06-21]
Suspected Bots IP [2017-06-22]
Suspected Bots IP [2017-06-23]
Suspected Bots IP [2017-06-24]
Suspected Bots IP [2017-06-25]
Suspected Bots IP [2017-06-26]
Suspected Bots IP [2017-06-27]
Suspected Bots IP [2017-06-28]
Suspected Bots IP [2017-06-29]
Suspected Bots IP [2017-06-30]

Botnet Statistics [2017-07-17]

detection period: 2017-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1195
number of botnet IPs notified to network operators: 1153
number of spam blocked: 65049
recipient count of spam blocked: 1473608

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	201
2	WASU	180
3	CMNET	118
4	CHINANET-JS	96
5	CHINANET-GD	42
6	CHINANET-HB	28
7	dhakavoice	26
8	UNICOM-JS	23
9	LSN-DLLSTX-2	20
10	VPLSNET	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	840
2	United States	143
3	United Kingdom	28
4	Russian Federation	27
5	Netherlands	21
6	Hong Kong	19
7	Germany	17
8	Poland	16
9	Taiwan	15
10	Singapore	13

Suspected Bot List [2017-07-17]

detection period: 2017-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MX	189.211.198.181	Mexico
MY	161.139.20.49	Malaysia
PL	91.185.189.179	Poland
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
RU	91.201.117.228	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-16]

detection period: 2017-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 966
number of botnet IPs notified to network operators: 883
number of spam blocked: 76693
recipient count of spam blocked: 1727435

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	179
2	WASU	135
3	CMNET	95
4	CHINANET-JS	59
5	CHINANET-GD	45
6	EONIX-NET-173-44-128-0-1-BLK-4	29
7	VPLSNET	18
8	PVS-BLOCK02	16
9	UNICOM-JS	15
10	SERVERCRATE-03	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	691
2	United States	124
3	Russian Federation	21
4	Netherlands	20
5	Germany	14
6	Singapore	12
7	Poland	9
8	Taiwan	5
9	Hong Kong	5
10	France	5

Suspected Bot List [2017-07-16]

detection period: 2017-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 83

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MY	161.139.20.49	Malaysia
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	90.188.95.206	Russian Federation
RU	194.79.7.70	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-15]

detection period: 2017-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 688
number of botnet IPs notified to network operators: 653
number of spam blocked: 94788
recipient count of spam blocked: 2120235

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	109
2	WASU	73
3	CHINANET-JS	54
4	CMNET	36
5	CHINANET-GD	35
6	CHINANET-HA	23
7	HINET-NET	22
8	CHINANET-AH	21
9	SERVERYOU-NET-LAX	17
10	CHINANET-HN	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	476
2	United States	80
3	Taiwan	22
4	Russian Federation	19
5	Singapore	13
6	Poland	11
7	Germany	9
8	France	5
9	South Korea	4
10	Viet Nam	3

Suspected Bot List [2017-07-15]

detection period: 2017-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MY	161.139.20.49	Malaysia
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
TH	203.151.206.113	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-14]

detection period: 2017-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 675
number of botnet IPs notified to network operators: 657
number of spam blocked: 77064
recipient count of spam blocked: 1810016

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	130
2	WASU	74
3	CMNET	56
4	CHINANET-JS	44
5	CHINANET-AH	32
6	CHINANET-GD	31
7	CHINANET-HN	24
8	HINET-NET	18
9	CHINANET-HA	18
10	ALISOFT	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	528
2	United States	25
3	Russian Federation	23
4	Taiwan	18
5	Singapore	10
6	South Korea	6
7	Italy	4
8	Hong Kong	4
9	France	4
10	Germany	4

Suspected Bot List [2017-07-14]

detection period: 2017-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
NO	193.150.121.66	Norway
PL	91.185.189.179	Poland
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
RU	194.67.184.222	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	203.151.206.113	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-13]

detection period: 2017-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 740
number of botnet IPs notified to network operators: 726
number of spam blocked: 41430
recipient count of spam blocked: 750712

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	145
2	UNICOM-ZJ	125
3	CMNET	69
4	CHINANET-AH	58
5	CHINANET-HN	41
6	CHINANET-GD	41
7	CHINANET-JS	32
8	ALISOFT	16
9	CHINANET-HA	12
10	Baidu	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	635
2	United States	19
3	Russian Federation	13
4	Taiwan	10
5	Netherlands	5
6	South Korea	5
7	Germany	5
8	Italy	4
9	Brazil	4
10	Ukraine	2

Suspected Bot List [2017-07-13]

detection period: 2017-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	72.55.186.57	Canada
IN	203.115.99.218	India
MK	62.162.139.19	Macedonia
MO	116.193.10.34	Macau
RU	91.197.234.102	Russian Federation
RU	194.67.184.222	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-12]

detection period: 2017-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 841
number of botnet IPs notified to network operators: 815
number of spam blocked: 36854
recipient count of spam blocked: 795998

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	169
2	UNICOM-ZJ	158
3	CMNET	106
4	CHINANET-JS	50
5	CHINANET-GD	48
6	CHINANET-AH	37
7	ALISOFT	23
8	CHINANET-HB	15
9	CHINANET-ZJ-JH	9
10	CHINANET-ZJ	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	719
2	United States	33
3	Russian Federation	14
4	Brazil	7
5	South Korea	6
6	Viet Nam	5
7	Italy	5
8	India	4
9	Taiwan	3
10	Iran	3

Suspected Bot List [2017-07-12]

detection period: 2017-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
PK	202.61.51.123	Pakistan
RU	83.242.139.67	Russian Federation
RU	91.197.234.102	Russian Federation
RU	109.111.189.234	Russian Federation
RU	194.67.184.222	Russian Federation
SA	212.76.76.242	Saudi Arabia
SG	112.140.187.82	Singapore
TH	203.156.163.35	Thailand
UY	167.57.140.123	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-11]

detection period: 2017-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 844
number of botnet IPs notified to network operators: 811
number of spam blocked: 70961
recipient count of spam blocked: 823835

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	140
2	UNICOM-ZJ	133
3	WASU	117
4	CHINANET-GD	40
5	MELBICOM-DE	27
6	CHINANET-AH	27
7	CHINANET-JS	24
8	CHINANET-ZJ	20
9	CHINANET-HA	13
10	CC-17	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	636
2	United States	79
3	Russian Federation	42
4	Hong Kong	8
5	Viet Nam	7
6	South Korea	7
7	Taiwan	6
8	Colombia	4
9	Brazil	4
10	Ukraine	3

Suspected Bot List [2017-07-11]

detection period: 2017-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ID	103.254.107.10	Indonesia
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
RU	80.254.115.87	Russian Federation
RU	83.242.222.4	Russian Federation
RU	91.197.234.102	Russian Federation
RU	95.53.247.194	Russian Federation
RU	194.67.184.222	Russian Federation
SA	212.76.76.242	Saudi Arabia
TH	61.19.202.171	Thailand
TH	122.154.239.122	Thailand
TH	123.242.161.20	Thailand
UY	167.57.1.221	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-09]

detection period: 2017-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 558
number of botnet IPs notified to network operators: 505
number of spam blocked: 62327
recipient count of spam blocked: 913359

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	107
2	CMNET	95
3	WASU	93
4	EONIX-NET-173-44-128-0-1-BLK-4	16
5	CHINANET-GD	16
6	SERVERYOU-NET-LAX	14
7	AHRDIRECT-NET	14
8	EONIX-NET-50-2-0-0-1-BLK-7	13
9	BG-POWERNET-20070731	13
10	CC-17	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	368
2	United States	79
3	Netherlands	16
4	Russian Federation	13
5	Bulgaria	13
6	South Korea	11
7	Taiwan	6
8	Viet Nam	4
9	Italy	3
10	India	3

Suspected Bot List [2017-07-09]

detection period: 2017-07-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 54

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	1.186.128.5	India
IN	122.165.237.29	India
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
NO	193.150.121.66	Norway
PK	202.61.49.204	Pakistan
PL	91.185.189.179	Poland
RU	81.23.145.254	Russian Federation
RU	91.197.234.102	Russian Federation
RU	95.53.247.194	Russian Federation
RU	95.165.236.130	Russian Federation
SA	212.76.76.242	Saudi Arabia
TH	122.154.239.122	Thailand
TH	203.151.206.113	Thailand
UY	167.57.124.15	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-08]

detection period: 2017-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 324
number of botnet IPs notified to network operators: 264
number of spam blocked: 53061
recipient count of spam blocked: 896992

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	49
2	SHUB-NETBLK-DAL	29
3	WASU	21
4	CMNET	19
5	NL-HOSTKEY	16
6	COLOAT	11
7	CC-10	11
8	JOESDC-01	10
9	EONIX-NET-50-2-0-0-1-BLK-7	7
10	CHINANET-GD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	136
2	United States	90
3	Netherlands	18
4	Russian Federation	13
5	Taiwan	7
6	South Korea	6
7	Hong Kong	5
8	Italy	4
9	Viet Nam	3
10	Thailand	3

Suspected Bot List [2017-07-08]

detection period: 2017-07-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 60

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
NO	193.150.121.66	Norway
SA	212.76.76.242	Saudi Arabia
SG	112.140.187.82	Singapore
TH	123.242.161.20	Thailand
TH	203.146.249.104	Thailand
TH	203.151.206.113	Thailand
UY	167.57.148.137	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-07]

detection period: 2017-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 699
number of botnet IPs notified to network operators: 670
number of spam blocked: 96670
recipient count of spam blocked: 1922629

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	169
2	WASU	96
3	CMNET	78
4	CUBEMOTION	34
5	CHINANET-JS	17
6	HOSTKEY-NET	16
7	CC-18	12
8	UNIFIEDLAYER-NETWORK-11	9
9	CHINANET-GD	8
10	ALISOFT	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	467
2	United States	75
3	Russian Federation	21
4	Netherlands	18
5	Poland	13
6	Singapore	10
7	Italy	8
8	South Korea	7
9	Brazil	7
10	Taiwan	6

Suspected Bot List [2017-07-07]

detection period: 2017-07-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.41.87.215	Argentina
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
NO	193.150.121.66	Norway
PK	202.83.163.219	Pakistan
RU	90.188.18.74	Russian Federation
RU	90.188.95.206	Russian Federation
RU	91.197.234.102	Russian Federation
RU	109.111.189.234	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
TH	122.154.239.122	Thailand
TH	203.151.206.113	Thailand
TH	203.156.163.35	Thailand
US	206.125.41.139	United States
VE	150.187.41.90	Venezuela
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-06]

detection period: 2017-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 782
number of botnet IPs notified to network operators: 737
number of spam blocked: 102100
recipient count of spam blocked: 1965266

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	127
2	WASU	103
3	CMNET	91
4	CHINANET-JS	30
5	SERVERCRATE	25
6	ALISOFT	25
7	BG-POWERNET-20070731	22
8	CHINANET-GD	20
9	CHINANET-HA	15
10	EONIX-NET-50-2-0-0-1-BLK-7	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	500
2	United States	113
3	Russian Federation	23
4	Bulgaria	22
5	Germany	16
6	Singapore	11
7	Taiwan	10
8	Poland	8
9	Hong Kong	7
10	South Korea	6

Suspected Bot List [2017-07-06]

detection period: 2017-07-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 45

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	200.41.87.215	Argentina
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
NO	193.150.121.66	Norway
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	91.197.234.102	Russian Federation
RU	109.111.189.234	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	61.7.228.51	Thailand
TH	203.151.206.113	Thailand
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-05]

detection period: 2017-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 874
number of botnet IPs notified to network operators: 840
number of spam blocked: 114671
recipient count of spam blocked: 2229423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	164
2	WASU	109
3	CMNET	95
4	CHINANET-JS	44
5	CC-15	22
6	CHINANET-GD	18
7	PVS-BLOCK02	16
8	CHINANET-HA	16
9	ALISOFT	14
10	VIRPUS-KC-2	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	566
2	United States	111
3	Russian Federation	31
4	Netherlands	18
5	Singapore	12
6	Poland	12
7	Romania	10
8	Taiwan	9
9	Hong Kong	9
10	South Korea	8

Suspected Bot List [2017-07-05]

detection period: 2017-07-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
ID	219.83.84.146	Indonesia
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	31.173.216.163	Russian Federation
RU	82.179.134.236	Russian Federation
RU	87.226.213.86	Russian Federation
RU	109.194.197.79	Russian Federation
RU	185.76.145.20	Russian Federation
RU	185.127.25.68	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.34.39.230	Russian Federation
RU	212.46.215.107	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	103.40.132.18	Thailand
TH	203.146.249.104	Thailand
TH	203.151.206.113	Thailand
US	71.14.28.163	United States
US	96.33.171.230	United States
US	206.125.41.139	United States
VE	150.187.41.90	Venezuela
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-07-04]

detection period: 2017-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 910
number of botnet IPs notified to network operators: 856
number of spam blocked: 104680
recipient count of spam blocked: 2087985

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	182
2	WASU	107
3	CMNET	103
4	CHINANET-JS	32
5	MELBICOM-NL	30
6	CUBEMOTION	23
7	CHINANET-GD	19
8	VNPT-VNNIC-VN	18
9	SERVERYOU-NET-LAX	18
10	CHINANET-HA	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	579
2	United States	85
3	Russian Federation	63
4	Viet Nam	33
5	Brazil	14
6	India	13
7	Singapore	12
8	Taiwan	9
9	Poland	8
10	France	7

Suspected Bot List [2017-07-04]

detection period: 2017-07-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 54

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
DZ	193.194.86.122	Algeria
IN	203.115.99.218	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
MX	201.163.21.226	Mexico
NO	193.150.121.66	Norway
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RS	89.216.28.123	Serbia
RU	37.1.11.205	Russian Federation
RU	37.29.7.122	Russian Federation
RU	62.183.72.122	Russian Federation
RU	82.179.134.236	Russian Federation
RU	87.226.213.86	Russian Federation
RU	90.188.18.74	Russian Federation
RU	91.122.195.202	Russian Federation
RU	91.197.234.102	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	178.141.249.246	Russian Federation
RU	185.52.69.197	Russian Federation
RU	185.76.145.20	Russian Federation
RU	185.127.25.68	Russian Federation
RU	194.67.184.222	Russian Federation
RU	194.79.7.70	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.46.215.107	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	103.40.132.18	Thailand
TH	203.151.206.113	Thailand
TW	106.1.195.68	Taiwan
US	96.33.171.230	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting: