Botnet Statistics [2017-09-29]

detection period: 2017-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 218
number of botnet IPs notified to network operators: 199
number of spam blocked: 36927
recipient count of spam blocked: 616412

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	ALISOFT	10
3	CHINANET-JS	8
4	CHINANET-GD	7
5	LGTELECOM-KR	6
6	VNPT-VNNIC-VN	5
7	LSN-DLLSTX-2	5
8	FPT-VN	5
9	CMNET	5
10	UNIFIEDLAYER-NETWORK-13	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	101
2	Viet Nam	17
3	United States	13
4	India	12
5	South Korea	10
6	Russian Federation	6
7	Turkey	4
8	Thailand	4
9	Germany	4
10	Brazil	4

Suspected Bot List [2017-09-29]

detection period: 2017-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
TH	122.155.197.9	Thailand
TH	125.26.207.22	Thailand
TH	183.89.126.186	Thailand
UY	167.57.172.164	Uruguay

List from greylisting:

Botnet Statistics [2017-09-28]

detection period: 2017-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 223
number of botnet IPs notified to network operators: 201
number of spam blocked: 39060
recipient count of spam blocked: 545748

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	25
3	CHINANET-HB	12
4	CMNET	11
5	UNIFIEDLAYER-NETWORK-14	6
6	LSN-DLLSTX-1	6
7	CHINANET-ZJ	5
8	CHINANET-GD	5
9	VNPT-VNNIC-VN	3
10	HICHINA	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	131
2	United States	16
3	India	15
4	Viet Nam	7
5	Russian Federation	7
6	Brazil	5
7	Turkey	3
8	Pakistan	3
9	South Korea	3
10	Indonesia	2

Suspected Bot List [2017-09-28]

detection period: 2017-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
GB	185.190.57.88	United Kingdom
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-09-27]

detection period: 2017-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 212
number of botnet IPs notified to network operators: 189
number of spam blocked: 54893
recipient count of spam blocked: 1108778

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-FJ	9
3	CHINANET-JS	8
4	CHINANET-GD	8
5	CMNET	7
6	VNPT-VNNIC-VN	6
7	LSN-DLLSTX-1	5
8	RO-SCCH-CENTER-185-123-220-0-23	4
9	HICHINA	4
10	ETC-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	107
2	India	14
3	Viet Nam	13
4	United States	8
5	Russian Federation	7
6	Brazil	6
7	Romania	5
8	Bulgaria	5
9	Turkey	3
10	Macedonia	3

Suspected Bot List [2017-09-27]

detection period: 2017-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-09-26]

detection period: 2017-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 243
number of botnet IPs notified to network operators: 215
number of spam blocked: 35308
recipient count of spam blocked: 591945

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-GD	14
3	VNPT-VNNIC-VN	11
4	CHINANET-JS	9
5	BHARTI-IN	8
6	Turkbil-internet-hizmetleri	6
7	RO-SCCH-CENTER-185-123-220-0-23	6
8	LSN-DLLSTX-1	6
9	HINET-NET	5
10	UNICOM	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	116
2	Viet Nam	14
3	India	14
4	United States	9
5	Taiwan	8
6	Turkey	8
7	Romania	7
8	Mexico	7
9	Russian Federation	6
10	South Korea	5

Suspected Bot List [2017-09-26]

detection period: 2017-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	206.125.41.139	United States
UY	167.57.172.213	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-09-25]

detection period: 2017-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 214
number of botnet IPs notified to network operators: 188
number of spam blocked: 19532
recipient count of spam blocked: 116861

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	CHINANET-FJ	11
3	CHINANET-GD	10
4	VNPT-VNNIC-VN	9
5	CHINANET-JS	8
6	BHARTI-IN	8
7	Turkbil-internet-hizmetleri	6
8	RO-SCCH-CENTER-185-123-220-0-23	6
9	LSN-DLLSTX-1	6
10	CHINANET-HB	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	102
2	India	16
3	Viet Nam	13
4	United States	12
5	Brazil	8
6	Turkey	7
7	Romania	7
8	Italy	6
9	Russian Federation	4
10	South Korea	4

Suspected Bot List [2017-09-25]

detection period: 2017-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	223.191.25.64	India
RS	89.216.28.123	Serbia

List from greylisting:

Botnet Statistics [2017-09-24]

detection period: 2017-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 105
number of botnet IPs notified to network operators: 99
number of spam blocked: 3820
recipient count of spam blocked: 50811

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	CHINANET-JS	9
3	CHINANET-FJ	9
4	CHINANET-GD	5
5	LSN-DLLSTX-2	3
6	ALISOFT	3
7	IT-TECHNORAIL-20080814	2
8	CMNET	2
9	CHINANET-HB	2
10	origo-com-tr-22949	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	87
2	Russian Federation	5
3	United States	4
4	Italy	3
5	Turkey	1
6	Tunisia	1
7	Mexico	1
8	South Korea	1
9	Iran	1
10	United Kingdom	1

Suspected Bot List [2017-09-24]

detection period: 2017-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-23]

detection period: 2017-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 184
number of botnet IPs notified to network operators: 180
number of spam blocked: 8350
recipient count of spam blocked: 56123

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	CHINANET-GD	48
3	CHINANET-JS	18
4	CHINANET-FJ	8
5	CHINANET-HB	5
6	CHINANET-ZJ	4
7	IT-TECHNORAIL-20080814	3
8	HOSTWINDS-19-1	3
9	CMNET	3
10	CHINANET-ZJ-NB	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	157
2	United States	8
3	Italy	4
4	Russian Federation	2
5	South Korea	2
6	Viet Nam	1
7	Turkey	1
8	Tunisia	1
9	Malaysia	1
10	Mexico	1

Suspected Bot List [2017-09-23]

detection period: 2017-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-22]

detection period: 2017-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 216
number of botnet IPs notified to network operators: 207
number of spam blocked: 16773
recipient count of spam blocked: 30344

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-GD	39
3	CHINANET-FJ	14
4	WASU	11
5	CHINANET-JS	7
6	RO-SCCH-CENTER-185-123-220-0-23	6
7	HOSTWINDS-19-1	6
8	ALISOFT	6
9	VNPT-VNNIC-VN	5
10	CMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	154
2	United States	10
3	India	8
4	Viet Nam	7
5	Romania	6
6	Russian Federation	5
7	Italy	4
8	South Korea	3
9	Brazil	3
10	Iran	2

Suspected Bot List [2017-09-22]

detection period: 2017-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-21]

detection period: 2017-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 319
number of botnet IPs notified to network operators: 297
number of spam blocked: 25448
recipient count of spam blocked: 72756

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	WASU	50
3	CMNET	49
4	CHINANET-GD	21
5	CHINANET-FJ	10
6	Turkbil-internet-hizmetleri	9
7	CHINANET-JS	8
8	VNPT-VNNIC-VN	5
9	UNIFIEDLAYER-NETWORK-14	5
10	ALISOFT	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	224
2	United States	16
3	Turkey	11
4	Viet Nam	9
5	Italy	6
6	Indonesia	6
7	Taiwan	3
8	Mexico	3
9	France	3
10	Thailand	2

Suspected Bot List [2017-09-21]

detection period: 2017-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
LK	122.255.31.42	Sri Lanka
RU	80.254.115.87	Russian Federation
TH	61.7.236.60	Thailand
TH	122.154.239.123	Thailand

List from greylisting:

Botnet Statistics [2017-09-20]

detection period: 2017-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 355
number of botnet IPs notified to network operators: 322
number of spam blocked: 24285
recipient count of spam blocked: 96271

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	WASU	47
3	CMNET	41
4	CHINANET-JS	29
5	VNPT-VNNIC-VN	13
6	CHINANET-FJ	7
7	BHARTI-IN	7
8	UNIFIEDLAYER-NETWORK-13	6
9	CHINANET-GD	6
10	UNIFIEDLAYER-NETWORK-14	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	221
2	United States	21
3	India	16
4	Viet Nam	14
5	South Korea	9
6	Italy	6
7	Turkey	5
8	Mexico	5
9	Indonesia	5
10	Spain	4

Suspected Bot List [2017-09-20]

detection period: 2017-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BW	168.167.251.213	Botswana
TH	182.53.243.228	Thailand

List from greylisting:

Botnet Statistics [2017-09-19]

detection period: 2017-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 339
number of botnet IPs notified to network operators: 320
number of spam blocked: 17766
recipient count of spam blocked: 96678

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	74
2	Baidu	52
3	WASU	30
4	VNPT-VNNIC-VN	15
5	CHINANET-FJ	14
6	Turkbil-internet-hizmetleri	11
7	CHINANET-JS	10
8	CHINANET-GD	10
9	UNIFIEDLAYER-NETWORK-14	7
10	LGTELECOM-KR	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	225
2	United States	21
3	Viet Nam	20
4	Turkey	13
5	India	9
6	South Korea	6
7	Mexico	5
8	Brazil	5
9	Italy	3
10	Singapore	2

Suspected Bot List [2017-09-19]

detection period: 2017-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-18]

detection period: 2017-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 287
number of botnet IPs notified to network operators: 278
number of spam blocked: 16097
recipient count of spam blocked: 71844

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	WASU	42
3	CMNET	32
4	CHINANET-SD	10
5	CHINANET-GD	9
6	HICHINA	8
7	CHINANET-JS	8
8	ALISOFT	8
9	CHINANET-ZJ-NB	5
10	UNIFIEDLAYER-NETWORK-14	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	213
2	United States	16
3	Mexico	5
4	Colombia	5
5	Taiwan	4
6	Italy	4
7	Japan	3
8	Indonesia	3
9	Chile	3
10	Bolivia	3

Suspected Bot List [2017-09-18]

detection period: 2017-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.7.103	Canada
TH	61.7.236.60	Thailand
TH	125.26.207.22	Thailand

List from greylisting:

Botnet Statistics [2017-09-17]

detection period: 2017-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 151
number of botnet IPs notified to network operators: 147
number of spam blocked: 4124
recipient count of spam blocked: 29408

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	MSFT	14
3	CHINANET-FJ	11
4	CHINANET-GD	9
5	CHINANET-JS	8
6	CMNET	7
7	HICHINA	6
8	CHINANET-SD	6
9	ALISOFT	5
10	CHINANET-AH	3

The top 8 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	122
2	United States	17
3	Russian Federation	4
4	Japan	3
5	Italy	2
6	Tunisia	1
7	Hong Kong	1
8	France	1

Suspected Bot List [2017-09-17]

detection period: 2017-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-16]

detection period: 2017-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 123
number of botnet IPs notified to network operators: 119
number of spam blocked: 6939
recipient count of spam blocked: 8409

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-FJ	13
3	CHINANET-JS	5
4	CMNET	4
5	CHINANET-GD	4
6	UNIFIEDLAYER-NETWORK-13	3
7	HICHINA	3
8	CHINANET-SN	3
9	UNIFIEDLAYER-NETWORK-14	2
10	UNICOM-HA	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	100
2	United States	10
3	Russian Federation	3
4	Japan	3
5	Viet Nam	1
6	Tunisia	1
7	Netherlands	1
8	Indonesia	1
9	France	1
10	Germany	1

Suspected Bot List [2017-09-16]

detection period: 2017-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-15]

detection period: 2017-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 173
number of botnet IPs notified to network operators: 172
number of spam blocked: 16068
recipient count of spam blocked: 25378

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	WASU	33
3	CHINANET-JS	15
4	UNIFIEDLAYER-NETWORK-13	8
5	CHINANET-SD	8
6	CHINANET-FJ	7
7	CHINANET-GD	6
8	UNIFIEDLAYER-NETWORK-14	4
9	CHINANET-JX	4
10	CMNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	146
2	United States	17
3	Japan	2
4	Hong Kong	2
5	Taiwan	1
6	Tunisia	1
7	Singapore	1
8	Russian Federation	1
9	France	1
10	Canada	1

Suspected Bot List [2017-09-15]

detection period: 2017-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-14]

detection period: 2017-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 334
number of botnet IPs notified to network operators: 324
number of spam blocked: 6626
recipient count of spam blocked: 50086

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	84
2	CMNET	65
3	Baidu	52
4	CHINANET-FJ	12
5	CHINANET-JX	9
6	CHINANET-SD	7
7	CHINANET-JS	6
8	HICHINA	5
9	CHINANET-GD	5
10	CHINANET-ZJ-ZX	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	277
2	India	8
3	United States	6
4	Viet Nam	5
5	Brazil	5
6	Iran	3
7	Bulgaria	3
8	Taiwan	2
9	Tunisia	2
10	Nigeria	2

Suspected Bot List [2017-09-14]

detection period: 2017-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-13]

detection period: 2017-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 572
number of botnet IPs notified to network operators: 548
number of spam blocked: 20837
recipient count of spam blocked: 125573

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	233
2	WASU	78
3	Baidu	52
4	CMNET	50
5	CHINANET-JS	14
6	CHINANET-FJ	14
7	ALISOFT	12
8	UNIFIEDLAYER-NETWORK-14	7
9	CHINANET-SD	7
10	CHINANET-HB	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	287
2	United States	250
3	Taiwan	7
4	Thailand	3
5	Japan	3
6	Bulgaria	3
7	Tunisia	2
8	Chile	2
9	Brazil	2
10	Viet Nam	1

Suspected Bot List [2017-09-13]

detection period: 2017-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	200.7.160.167	Bolivia
TH	61.7.236.60	Thailand
TH	125.26.207.22	Thailand
TW	123.194.224.234	Taiwan
UY	179.25.182.47	Uruguay

List from greylisting:

Suspected Bots' IP List for August 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-08-01]
Suspected Bots IP [2017-08-02]
Suspected Bots IP [2017-08-03]
Suspected Bots IP [2017-08-04]
Suspected Bots IP [2017-08-05]
Suspected Bots IP [2017-08-06]
Suspected Bots IP [2017-08-07]
Suspected Bots IP [2017-08-08]
Suspected Bots IP [2017-08-09]
Suspected Bots IP [2017-08-10]
Suspected Bots IP [2017-08-11]
Suspected Bots IP [2017-08-12]
Suspected Bots IP [2017-08-13]
Suspected Bots IP [2017-08-14]
Suspected Bots IP [2017-08-15]
Suspected Bots IP [2017-08-16]
Suspected Bots IP [2017-08-17]
Suspected Bots IP [2017-08-18]
Suspected Bots IP [2017-08-19]
Suspected Bots IP [2017-08-20]
Suspected Bots IP [2017-08-21]
Suspected Bots IP [2017-08-22]
Suspected Bots IP [2017-08-23]
Suspected Bots IP [2017-08-24]
Suspected Bots IP [2017-08-25]
Suspected Bots IP [2017-08-26]
Suspected Bots IP [2017-08-27]
Suspected Bots IP [2017-08-28]
Suspected Bots IP [2017-08-29]
Suspected Bots IP [2017-08-30]
Suspected Bots IP [2017-08-31]

Botnet Statistics [2017-09-12]

detection period: 2017-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 379
number of botnet IPs notified to network operators: 369
number of spam blocked: 19591
recipient count of spam blocked: 19620

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	82
2	MSFT	59
3	Baidu	52
4	WASU	40
5	CHINANET-FJ	12
6	CHINANET-JS	11
7	IINET-AU	8
8	UNIFIEDLAYER-NETWORK-15	7
9	CHINANET-JX	7
10	CHINANET-AH	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	255
2	United States	74
3	India	8
4	Australia	8
5	Viet Nam	5
6	Iran	4
7	Mexico	3
8	Japan	3
9	Peru	2
10	Ukraine	1

Suspected Bot List [2017-09-12]

detection period: 2017-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-11]

detection period: 2017-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 334
number of botnet IPs notified to network operators: 311
number of spam blocked: 17042
recipient count of spam blocked: 17051

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	59
2	Baidu	52
3	WASU	28
4	MSFT	14
5	CHINANET-FJ	11
6	UNIFIEDLAYER-NETWORK-15	8
7	CHINANET-JS	7
8	VNPT-VNNIC-VN	6
9	UNIFIEDLAYER-NETWORK-14	6
10	CHINANET-HN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	203
2	United States	33
3	Viet Nam	18
4	India	10
5	Iran	6
6	Brazil	6
7	Turkey	5
8	Mexico	4
9	Italy	4
10	Colombia	4

Suspected Bot List [2017-09-11]

detection period: 2017-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-10]

detection period: 2017-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 150
number of botnet IPs notified to network operators: 144
number of spam blocked: 4086
recipient count of spam blocked: 4086

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	53
2	Baidu	52
3	IINET-AU	5
4	CHINANET-JS	4
5	UNIFIEDLAYER-NETWORK-14	3
6	CHINANET-SD	3
7	CHINANET-GD	3
8	CHINANET-FJ	3
9	UNIFIEDLAYER-NETWORK-15	2
10	tonghnetwork	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	76
2	United States	61
3	Australia	5
4	Viet Nam	1
5	Tunisia	1
6	Russian Federation	1
7	Nigeria	1
8	South Korea	1
9	Japan	1
10	Italy	1

Suspected Bot List [2017-09-10]

detection period: 2017-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-07]

detection period: 2017-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 259
number of botnet IPs notified to network operators: 227
number of spam blocked: 18426
recipient count of spam blocked: 71151

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-GD	16
3	CHINANET-FJ	13
4	UNIFIEDLAYER-NETWORK-14	12
5	CHINANET-JS	9
6	VNPT-VNNIC-VN	8
7	VIETEL-VNNIC-VN	4
8	CHINANET-SD	4
9	CHINANET-AH	4
10	BHARTI-IN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	133
2	Viet Nam	20
3	United States	19
4	India	16
5	Mexico	9
6	Italy	6
7	Taiwan	4
8	Thailand	4
9	Colombia	4
10	Argentina	3

Suspected Bot List [2017-09-07]

detection period: 2017-09-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	200.7.160.167	Bolivia
TH	61.7.241.50	Thailand
TH	123.242.161.20	Thailand
UY	179.25.175.155	Uruguay

List from greylisting:

Botnet Statistics [2017-09-06]

detection period: 2017-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 293
number of botnet IPs notified to network operators: 261
number of spam blocked: 20935
recipient count of spam blocked: 46279

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	CHINANET-GD	12
3	CHINANET-SD	11
4	CHINANET-FJ	11
5	VNPT-VNNIC-VN	10
6	CHINANET-JS	9
7	UNIFIEDLAYER-NETWORK-14	7
8	UNIFIEDLAYER-NETWORK-15	6
9	HICHINA	6
10	ALISOFT	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	150
2	United States	19
3	Viet Nam	17
4	India	13
5	Mexico	10
6	Iran	8
7	Brazil	8
8	Colombia	6
9	Chile	6
10	Indonesia	5

Suspected Bot List [2017-09-06]

detection period: 2017-09-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	200.7.160.167	Bolivia
TH	125.26.207.22	Thailand

List from greylisting:

Botnet Statistics [2017-09-05]

detection period: 2017-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 203
number of botnet IPs notified to network operators: 177
number of spam blocked: 19208
recipient count of spam blocked: 19208

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	11
3	CHINANET-GD	10
4	UNIFIEDLAYER-NETWORK-14	7
5	CHINANET-SD	7
6	LSN-DLLSTX-2	6
7	CMNET	6
8	CHINANET-FJ	6
9	BHARTI-IN	5
10	CHINANET-HN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	116
2	India	18
3	United States	16
4	Viet Nam	8
5	Brazil	5
6	Iran	4
7	Philippines	3
8	Russian Federation	2
9	Netherlands	2
10	Mexico	2

Suspected Bot List [2017-09-05]

detection period: 2017-09-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-04]

detection period: 2017-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 161
number of botnet IPs notified to network operators: 149
number of spam blocked: 5937
recipient count of spam blocked: 135193

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-GD	6
3	CHINANET-JS	5
4	VNPT-VNNIC-VN	4
5	HICHINA	4
6	UNICOM-GD	3
7	LSN-DLLSTX-2	3
8	CHINANET-JX	3
9	CHINANET-HB	3
10	CHINANET-HA	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	India	14
3	Viet Nam	8
4	United States	7
5	Iran	6
6	Indonesia	5
7	Bangladesh	2
8	Argentina	2
9	Venezuela	1
10	Taiwan	1

Suspected Bot List [2017-09-04]

detection period: 2017-09-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-03]

detection period: 2017-09-03 00:00-23:59 UTC
total number of suspected botnet IPs: 100
number of botnet IPs notified to network operators: 96
number of spam blocked: 3652
recipient count of spam blocked: 3652

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	48
2	CHINANET-GD	8
3	CMNET	4
4	LSN-DLLSTX-2	3
5	CHINANET-ZJ	3
6	HICHINA	2
7	DXTNET	2
8	CHINANET-SN	2
9	CHINANET-JS	2
10	tonghnetwork	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	87
2	United States	3
3	Romania	1
4	Mexico	1
5	Kuwait	1
6	South Korea	1
7	Italy	1
8	India	1
9	United Kingdom	1
10	Spain	1

Suspected Bot List [2017-09-03]

detection period: 2017-09-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-09-02]

detection period: 2017-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 139
number of botnet IPs notified to network operators: 127
number of spam blocked: 8716
recipient count of spam blocked: 39692

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	44
2	CHINANET-GD	12
3	HICHINA	8
4	ALISOFT	7
5	LSN-DLLSTX-2	5
6	CHINANET-JS	5
7	CHINANET-JX	3
8	totnet	2
9	TencentCloud	2
10	OVH-ARIN-6	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	97
2	United States	8
3	Thailand	6
4	Russian Federation	4
5	Canada	4
6	Taiwan	2
7	South Korea	2
8	Indonesia	2
9	Germany	2
10	Chile	2

Suspected Bot List [2017-09-02]

detection period: 2017-09-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
TH	61.7.236.60	Thailand
TH	61.7.241.50	Thailand
TH	61.19.33.74	Thailand
TH	125.24.137.52	Thailand
TH	125.26.207.22	Thailand

List from greylisting:

Botnet Statistics for August 2017

detection period: 2017-08-01 00:00 - 2017-08-31 23:59 UTC
total number of suspected botnet IPs: 9013
number of blocked spams: 1396677
recipient count of blocked spams: 30757477

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4954
2	United States	1497
3	India	358
4	Viet Nam	283
5	Taiwan	184
6	Poland	128
7	Brazil	113
8	Hong Kong	111
9	Russian Federation	97
10	Netherlands	95
11	Czech Republic	73
12	Iran	68
13	United Kingdom	59
14	Indonesia	56
15	Bulgaria	48
16	Chile	44
17	Pakistan	41
18	Germany	40
19	Canada	38
20	Italy	37
21	Mexico	35
22	Colombia	33
23	Bangladesh	33
24	Turkey	32
25	Thailand	29

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	416753
2	United States	219893
3	South Korea	146727
4	Poland	130592
5	Brazil	128491
6	Russian Federation	66056
7	Venezuela	40183
8	United Kingdom	26491
9	South Africa	21861
10	Hong Kong	20718
11	Canada	16188
12	Netherlands	15145
13	Azerbaijan	14865
14	Czech Republic	13094
15	Saint Kitts And Nevis	12073
16	Germany	11993
17	Viet Nam	11733
18	Singapore	10211
19	Japan	8896
20	France	8158
21	Bulgaria	7076
22	Arab Emirates	6979
23	Libya	4352
24	Mexico	3705
25	Norway	3428

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-09-01]

detection period: 2017-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 214
number of botnet IPs notified to network operators: 178
number of spam blocked: 17265
recipient count of spam blocked: 17265

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	43
2	Baidu	36
3	WASU	18
4	UNIFIEDLAYER-NETWORK-14	11
5	CHINANET-GD	6
6	VNPT-VNNIC-VN	5
7	CHINANET-JS	5
8	UNICOM	4
9	CHINANET-YN	4
10	BSNLNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	134
2	India	20
3	United States	16
4	Viet Nam	13
5	Russian Federation	3
6	Brazil	3
7	Thailand	2
8	Pakistan	2
9	Spain	2
10	Ukraine	1

Suspected Bot List [2017-09-01]

detection period: 2017-09-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-08-31]

detection period: 2017-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 391
number of botnet IPs notified to network operators: 353
number of spam blocked: 24226
recipient count of spam blocked: 86214

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	81
2	WASU	43
3	Baidu	36
4	CHINANET-JS	25
5	VNPT-VNNIC-VN	11
6	CHINANET-GD	9
7	BSNLNET	8
8	BHARTI-IN	8
9	UNICOM	7
10	HICHINA	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	242
2	India	39
3	Viet Nam	21
4	United States	16
5	Brazil	5
6	Bangladesh	5
7	Turkey	4
8	Pakistan	4
9	Iran	4
10	Indonesia	4

Suspected Bot List [2017-08-31]

detection period: 2017-08-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BO	190.129.65.242	Bolivia
CA	167.114.39.68	Canada
GR	62.169.214.53	Greece
PK	202.61.51.123	Pakistan
TH	125.26.207.22	Thailand

List from greylisting: