Botnet Statistics [2018-03-30]

detection period: 2018-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 119
number of botnet IPs notified to network operators: 111
number of spam blocked: 39673
recipient count of spam blocked: 1187638

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	10
2	TENCENT-CN	7
3	GOOGLE-CLOUD	4
4	broadNnet-KR	3
5	VNPT-VNNIC-VN	3
6	UCLOUD-NET	3
7	VIETEL-VN	2
8	OVH-SG-1	2
9	KORNET-KR	2
10	INET-ISP-ID	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	39
2	United States	13
3	France	10
4	Viet Nam	6
5	South Korea	6
6	Russian Federation	3
7	Netherlands	3
8	Canada	3
9	Taiwan	2
10	Mexico	2

Suspected Bot List [2018-03-30]

detection period: 2018-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-29]

detection period: 2018-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 187
number of botnet IPs notified to network operators: 180
number of spam blocked: 39479
recipient count of spam blocked: 1200785

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	10
2	GOOGLE-CLOUD	7
3	KORNET-KR	4
4	HOSTWAY-05	4
5	GO-DADDY-COM-LLC	4
6	hcmccable-net	3
7	NETVIGATOR	3
8	MSFT	3
9	broadNnet-KR	2
10	VNPT-VNNIC-VN	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	40
2	China	40
3	France	13
4	Viet Nam	8
5	South Korea	8
6	India	8
7	Indonesia	8
8	Brazil	7
9	Russian Federation	6
10	United Kingdom	5

Suspected Bot List [2018-03-29]

detection period: 2018-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-28]

detection period: 2018-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 97
number of botnet IPs notified to network operators: 94
number of spam blocked: 38713
recipient count of spam blocked: 1158722

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	5
2	MSFT	3
3	CHINANET-JS	3
4	UNICOM-LN	2
5	UNICOM-HE	2
6	RU-KAMCHATKA	2
7	HOSTWAY-05	2
8	CHINANET-ZJ	2
9	AT-88-Z	2
10	hcmccable-net	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	27
2	United States	17
3	Russian Federation	9
4	Viet Nam	3
5	South Korea	3
6	India	3
7	Indonesia	3
8	Germany	3
9	Taiwan	2
10	Poland	2

Suspected Bot List [2018-03-28]

detection period: 2018-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Suspected Bots' IP List for February 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-02-01]
Suspected Bots IP [2018-02-02]
Suspected Bots IP [2018-02-03]
Suspected Bots IP [2018-02-04]
Suspected Bots IP [2018-02-05]
Suspected Bots IP [2018-02-06]
Suspected Bots IP [2018-02-07]
Suspected Bots IP [2018-02-08]
Suspected Bots IP [2018-02-09]
Suspected Bots IP [2018-02-10]
Suspected Bots IP [2018-02-11]
Suspected Bots IP [2018-02-12]
Suspected Bots IP [2018-02-13]
Suspected Bots IP [2018-02-14]
Suspected Bots IP [2018-02-15]
Suspected Bots IP [2018-02-16]
Suspected Bots IP [2018-02-17]
Suspected Bots IP [2018-02-18]
Suspected Bots IP [2018-02-19]
Suspected Bots IP [2018-02-20]
Suspected Bots IP [2018-02-21]
Suspected Bots IP [2018-02-22]
Suspected Bots IP [2018-02-23]
Suspected Bots IP [2018-02-24]
Suspected Bots IP [2018-02-25]
Suspected Bots IP [2018-02-26]
Suspected Bots IP [2018-02-27]
Suspected Bots IP [2018-02-28]

Botnet Statistics [2018-03-27]

detection period: 2018-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 92
number of botnet IPs notified to network operators: 90
number of spam blocked: 44339
recipient count of spam blocked: 1211729

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	SS8	3
2	GO-DADDY-COM-LLC	3
3	CHINANET-ZJ	3
4	broadNnet-KR	2
5	UNICOM-LN	2
6	NETVIGATOR	2
7	MSFT	2
8	HINET-NET	2
9	DOPI1	2
10	CHINANET-JS	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	19
2	United States	16
3	United Kingdom	5
4	Viet Nam	4
5	South Korea	4
6	Taiwan	3
7	Netherlands	3
8	Indonesia	3
9	France	3
10	Russian Federation	2

Suspected Bot List [2018-03-27]

detection period: 2018-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-26]

detection period: 2018-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 129
number of botnet IPs notified to network operators: 125
number of spam blocked: 37081
recipient count of spam blocked: 1051385

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	broadNnet-KR	5
2	SS8	4
3	hcmccable-net	3
4	GO-DADDY-COM-LLC	3
5	DOPI1	3
6	UNICOM-LN	2
7	TencentCloud	2
8	TELKOMNET	2
9	KORNET-KR	2
10	HINET	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	19
2	China	19
3	France	14
4	South Korea	10
5	United Kingdom	7
6	Viet Nam	6
7	India	6
8	Indonesia	5
9	Brazil	5
10	Taiwan	4

Suspected Bot List [2018-03-26]

detection period: 2018-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-25]

detection period: 2018-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 94
number of botnet IPs notified to network operators: 92
number of spam blocked: 44679
recipient count of spam blocked: 963631

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	4
2	VNPT-VNNIC-VN	3
3	hcmccable-net	2
4	broadNnet-KR	2
5	SC-QUASI67	2
6	NETVIGATOR	2
7	MSFT	2
8	KORNET-KR	2
9	HINET-NET	2
10	GO-DADDY-COM-LLC	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	22
2	Viet Nam	9
3	France	9
4	United States	6
5	India	6
6	South Korea	5
7	Brazil	4
8	Taiwan	3
9	Russian Federation	3
10	Netherlands	3

Suspected Bot List [2018-03-25]

detection period: 2018-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-24]

detection period: 2018-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 40
number of botnet IPs notified to network operators: 39
number of spam blocked: 47446
recipient count of spam blocked: 1030720

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-LN	2
2	KORNET-KR	2
3	CHINANET-ZJ	2
4	Xpeed-KR	1
5	VPSONLINE-VN	1
6	VNPT-VNNIC-VN	1
7	VIETEL-VN	1
8	VE-CSVE-LACNIC	1
9	UNITEDPROTECTION-NET	1
10	UNIMELB	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	12
2	United States	4
3	Viet Nam	3
4	Russian Federation	3
5	South Korea	3
6	Venezuela	1
7	Thailand	1
8	Singapore	1
9	Kazakhstan	1
10	Cambodia	1

Suspected Bot List [2018-03-24]

detection period: 2018-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-23]

detection period: 2018-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 42
number of botnet IPs notified to network operators: 41
number of spam blocked: 37440
recipient count of spam blocked: 1120184

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	2
2	KORNET-KR	2
3	CHINANET-ZJ	2
4	VPSONLINE-VN	1
5	VIETEL-VNNIC-VN	1
6	VE-CSVE-LACNIC	1
7	UNITEDPROTECTION-NET	1
8	UNICOM-TJ	1
9	UNICOM-LN	1
10	UNICOM-CN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	10
2	Viet Nam	4
3	United States	4
4	Russian Federation	4
5	South Korea	2
6	India	2
7	Colombia	2
8	Canada	2
9	Venezuela	1
10	Taiwan	1

Suspected Bot List [2018-03-23]

detection period: 2018-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-22]

detection period: 2018-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 44
number of botnet IPs notified to network operators: 43
number of spam blocked: 38545
recipient count of spam blocked: 1187811

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JX	3
2	HINET-NET	2
3	CMNET	2
4	CHINANET-ZJ	2
5	libnet	1
6	broadNnet-KR	1
7	ZING-NET	1
8	WebShield	1
9	WAINSCOTTING	1
10	VPSONLINE-VN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	13
2	United States	6
3	Russian Federation	3
4	India	3
5	Taiwan	2
6	South Korea	2
7	Italy	2
8	Hong Kong	2
9	Viet Nam	1
10	Venezuela	1

Suspected Bot List [2018-03-22]

detection period: 2018-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-21]

detection period: 2018-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 43
number of botnet IPs notified to network operators: 41
number of spam blocked: 41642
recipient count of spam blocked: 997308

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	CHINANET-ZJ	3
3	RO-JUMP-20051129	2
4	CHINANET-TJ	2
5	CHINANET-JX	2
6	VNPT-VNNIC-VN	1
7	VE-CSVE-LACNIC	1
8	UNITEDPROTECTION-NET	1
9	UNIMELB	1
10	UNICOM-SD	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	13
2	South Korea	4
3	United States	3
4	India	3
5	Viet Nam	2
6	Russian Federation	2
7	Italy	2
8	Ecuador	2
9	Chile	2
10	Australia	2

Suspected Bot List [2018-03-21]

detection period: 2018-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-20]

detection period: 2018-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 40
number of botnet IPs notified to network operators: 39
number of spam blocked: 15529
recipient count of spam blocked: 453690

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	FR-PROXAD-20051003	3
2	CMNET	2
3	CHINANET-ZJ	2
4	CHINANET-GD	2
5	broadNnet-KR	1
6	VPSONLINE-VN	1
7	VNPT-VNNIC-VN	1
8	USI_ADSL_USERS	1
9	UNITEDPROTECTION-NET	1
10	UNICOM-LN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	17
2	Viet Nam	3
3	France	3
4	Brazil	3
5	United States	2
6	Russian Federation	2
7	South Korea	2
8	Singapore	1
9	Poland	1
10	Philippines	1

Suspected Bot List [2018-03-20]

detection period: 2018-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-19]

detection period: 2018-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 56
number of botnet IPs notified to network operators: 55
number of spam blocked: 9535
recipient count of spam blocked: 287081

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	4
2	VNPT-VNNIC-VN	2
3	UNICOM-CN	2
4	KORNET	2
5	CHINANET-ZJ	2
6	CHINANET-JX	2
7	broadNnet-KR	1
8	WebShield	1
9	VIETEL-VN	1
10	VE-CSVE-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	13
2	South Korea	7
3	United States	5
4	Russian Federation	4
5	Viet Nam	3
6	Germany	3
7	India	2
8	Egypt	2
9	Brazil	2
10	Venezuela	1

Suspected Bot List [2018-03-19]

detection period: 2018-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-18]

detection period: 2018-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 45
number of botnet IPs notified to network operators: 43
number of spam blocked: 14315
recipient count of spam blocked: 428841

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	4
2	VNPT-VNNIC-VN	3
3	CHINANET-ZJ	2
4	broadNnet-KR	1
5	VPSONLINE-VN	1
6	VE-CSVE-LACNIC	1
7	UNITEDPROTECTION-NET	1
8	UNICOM-SD	1
9	UNICOM-LN	1
10	UNICOM-CN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	11
2	United States	5
3	South Korea	5
4	Viet Nam	4
5	India	2
6	France	2
7	Egypt	2
8	Venezuela	1
9	Thailand	1
10	Russian Federation	1

Suspected Bot List [2018-03-18]

detection period: 2018-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics for February 2018

detection period: 2018-02-01 00:00 - 2018-02-28 23:59 UTC
total number of suspected botnet IPs: 210
number of blocked spams: 1004028
recipient count of blocked spams: 23191753

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	South Korea	66
2	United States	23
3	Egypt	12
4	Nigeria	10
5	Saudi Arabia	8
6	South Africa	6
7	India	6
8	Spain	6
9	Argentina	6
10	Viet Nam	5
11	Iran	5
12	China	5
13	Thailand	4
14	Netherlands	4
15	France	4
16	Serbia	3
17	Pakistan	3
18	Hong Kong	3
19	Portugal	2
20	Indonesia	2
21	Germany	2
22	Brazil	2
23	Australia	2
24	Venezuela	1
25	Taiwan	1

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	465677
2	Czech Republic	110209
3	Brazil	108146
4	France	104255
5	Iran	65393
6	Sweden	49602
7	Hong Kong	38985
8	Seychelles	20583
9	United States	19625
10	Venezuela	12189
11	Tunisia	2578
12	South Korea	2302
13	ZZ	711
14	New Caledonia	611
15	Colombia	611
16	Netherlands	526
17	India	474
18	Nigeria	462
19	Saudi Arabia	172
20	Pakistan	160
21	Greece	109
22	Kuwait	97
23	Egypt	84
24	Australia	74
25	Serbia	51

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-03-17]

detection period: 2018-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 39
number of botnet IPs notified to network operators: 37
number of spam blocked: 22526
recipient count of spam blocked: 494008

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	CHINANET-ZJ	2
3	WebShield	1
4	WIMORE	1
5	VPSONLINE-VN	1
6	VNPT-VNNIC-VN	1
7	VIS-BLOCK	1
8	VE-CSVE-LACNIC	1
9	UNITEDPROTECTION-NET	1
10	UNICOM-ZJ	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	11
2	United States	6
3	Viet Nam	3
4	South Korea	3
5	Russian Federation	2
6	Venezuela	1
7	Tanzania	1
8	Poland	1
9	Philippines	1
10	Italy	1

Suspected Bot List [2018-03-17]

detection period: 2018-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-16]

detection period: 2018-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 42
number of botnet IPs notified to network operators: 39
number of spam blocked: 29571
recipient count of spam blocked: 837279

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	2
2	KORNET-KR	2
3	CHINANET-ZJ	2
4	broadNnet-KR	1
5	Vox-Telecom	1
6	VPSONLINE-VN	1
7	VE-CSVE-LACNIC	1
8	UNITEDPROTECTION-NET	1
9	UNICOM-CN	1
10	UNICOM	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	11
2	India	4
3	Viet Nam	3
4	South Korea	3
5	Brazil	3
6	United Kingdom	2
7	South Africa	1
8	Venezuela	1
9	United States	1
10	Singapore	1

Suspected Bot List [2018-03-16]

detection period: 2018-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
SC	185.56.80.110	Seychelles

List from greylisting:

Botnet Statistics [2018-03-15]

detection period: 2018-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 62
number of botnet IPs notified to network operators: 58
number of spam blocked: 32849
recipient count of spam blocked: 859962

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	4
2	VNPT-VNNIC-VN	3
3	broadNnet-KR	2
4	CHINANET-ZJ	2
5	CHINANET-JX	2
6	Xpeed-KR	1
7	Xiaoniaoyun	1
8	WebShield	1
9	VOLUMEDRIVE	1
10	VE-CSVE-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	15
2	South Korea	8
3	United States	5
4	Viet Nam	3
5	Russian Federation	3
6	India	3
7	Brazil	3
8	Netherlands	2
9	Japan	2
10	Argentina	2

Suspected Bot List [2018-03-15]

detection period: 2018-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-14]

detection period: 2018-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 48
number of botnet IPs notified to network operators: 45
number of spam blocked: 37466
recipient count of spam blocked: 810403

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	CHINANET-ZJ	3
3	CHINANET-JX	3
4	WebShield	1
5	WEBSTREAM	1
6	WASUHZ	1
7	VNPT-VNNIC-VN	1
8	VE-CSVE-LACNIC	1
9	UNITEDPROTECTION-NET	1
10	UNICOM-CN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	14
2	United States	8
3	Russian Federation	3
4	South Korea	3
5	Viet Nam	2
6	India	2
7	Germany	2
8	Venezuela	1
9	Thailand	1
10	Seychelles	1

Suspected Bot List [2018-03-14]

detection period: 2018-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
SC	185.56.80.110	Seychelles

List from greylisting:

Botnet Statistics [2018-03-13]

detection period: 2018-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 42
number of botnet IPs notified to network operators: 41
number of spam blocked: 34048
recipient count of spam blocked: 981000

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	UNICOM-LN	2
3	CHINANET-ZJ	2
4	CHINANET-JX	2
5	Xpeed-KR	1
6	X-ATOM	1
7	WAYNE-V4-1	1
8	VPSONLINE-VN	1
9	VE-CSVE-LACNIC	1
10	UNITEDPROTECTION-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	9
2	United States	6
3	South Korea	4
4	Russian Federation	3
5	France	3
6	Ukraine	2
7	Brazil	2
8	Viet Nam	1
9	Venezuela	1
10	Turkey	1

Suspected Bot List [2018-03-13]

detection period: 2018-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-12]

detection period: 2018-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 120
number of botnet IPs notified to network operators: 109
number of spam blocked: 26671
recipient count of spam blocked: 726470

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	30
2	KORNET-KR	10
3	VNPT-VNNIC-VN	3
4	KTFWING-KR	3
5	broadNnet-KR	2
6	VE-CSVE-LACNIC	2
7	UNICOM-LN	2
8	CHINANET-ZJ	2
9	CHINANET-JX	2
10	CHINANET-GD	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	46
2	China	17
3	United States	10
4	Viet Nam	5
5	Russian Federation	5
6	United Kingdom	3
7	Brazil	3
8	Venezuela	2
9	Saudi Arabia	2
10	Iran	2

Suspected Bot List [2018-03-12]

detection period: 2018-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.82.101	Argentina
CZ	185.82.212.95	Czech Republic
DZ	193.194.69.186	Algeria
EG	41.199.248.205	Egypt
IR	212.33.206.132	Iran
MX	187.178.176.10	Mexico
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
SA	90.148.130.93	Saudi Arabia
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-11]

detection period: 2018-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 56
number of botnet IPs notified to network operators: 54
number of spam blocked: 23948
recipient count of spam blocked: 717599

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	5
2	broadNnet-KR	2
3	NETVIGATOR	2
4	CHINANET-ZJ	2
5	CHINANET-GS	2
6	ZING-NET	1
7	YUEQING-GAOSHENGKEJI	1
8	XCITC-CN	1
9	VNPT-VNNIC-VN	1
10	UNITEDPROTECTION-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	15
2	United States	7
3	South Korea	7
4	Russian Federation	3
5	Italy	3
6	Viet Nam	2
7	Hong Kong	2
8	France	2
9	Germany	2
10	Ukraine	1

Suspected Bot List [2018-03-11]

detection period: 2018-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-10]

detection period: 2018-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 101
number of botnet IPs notified to network operators: 95
number of spam blocked: 22685
recipient count of spam blocked: 679100

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	9
2	LGTELECOM-KR	7
3	VNPT-VNNIC-VN	3
4	UNICOM-LN	2
5	TATANET	2
6	NETVIGATOR	2
7	CMNET	2
8	CHINANET-ZJ	2
9	CHINANET-TJ	2
10	BORANET-KR	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	21
2	China	21
3	United States	10
4	India	6
5	Viet Nam	5
6	Russian Federation	3
7	Hong Kong	3
8	France	3
9	Pakistan	2
10	Japan	2

Suspected Bot List [2018-03-10]

detection period: 2018-03-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.63.36.151	Argentina
CZ	185.82.212.95	Czech Republic
MX	187.178.176.10	Mexico
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-09]

detection period: 2018-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 63
number of botnet IPs notified to network operators: 59
number of spam blocked: 24567
recipient count of spam blocked: 735510

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	VNPT-VNNIC-VN	2
3	UNICOM-LN	2
4	CHINANET-ZJ	2
5	broadNnet-KR	1
6	XinnetIDC	1
7	WEBAIRINTERNET	1
8	VPSONLINE-VN	1
9	VE-CSVE-LACNIC	1
10	UNITEDPROTECTION-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	14
2	United States	7
3	South Korea	5
4	Viet Nam	4
5	Russian Federation	4
6	France	3
7	Brazil	3
8	Nigeria	2
9	Hong Kong	2
10	Czech Republic	2

Suspected Bot List [2018-03-09]

detection period: 2018-03-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
NG	197.242.109.82	Nigeria
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-08]

detection period: 2018-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 96
number of botnet IPs notified to network operators: 90
number of spam blocked: 37395
recipient count of spam blocked: 849569

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	6
2	LGTELECOM-KR	5
3	CHINANET-ZJ	3
4	VNPT-VNNIC-VN	2
5	TELEPAC-DSL-RES	2
6	KTFWING-KR	2
7	IP2000-ADSL-BAS	2
8	BORANET-KR	2
9	AR-CTLI2-LACNIC	2
10	broadNnet-KR	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	18
2	South Korea	17
3	United States	7
4	France	5
5	Viet Nam	4
6	Russian Federation	4
7	Portugal	3
8	Italy	3
9	Taiwan	2
10	Pakistan	2

Suspected Bot List [2018-03-08]

detection period: 2018-03-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.81.119	Argentina
AR	131.108.83.249	Argentina
CZ	185.82.212.95	Czech Republic
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
TW	123.195.250.35	Taiwan

List from greylisting:

Botnet Statistics [2018-03-07]

detection period: 2018-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 61
number of botnet IPs notified to network operators: 58
number of spam blocked: 47020
recipient count of spam blocked: 1052223

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Xpeed-KR	2
2	UNICOM-CN	2
3	KORNET-KR	2
4	CHINANET-ZJ	2
5	CHINANET-YN	2
6	CHINANET-JS	2
7	002.558.157/0001-62	2
8	broadNnet-KR	1
9	WSUNET	1
10	VOLUMEDRIVE	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	17
2	United States	7
3	South Korea	6
4	Brazil	4
5	Italy	3
6	France	3
7	India	2
8	Viet Nam	1
9	Venezuela	1
10	Taiwan	1

Suspected Bot List [2018-03-07]

detection period: 2018-03-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.83.249	Argentina
AZ	89.147.210.206	Azerbaijan
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-03-06]

detection period: 2018-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 89
number of botnet IPs notified to network operators: 83
number of spam blocked: 43154
recipient count of spam blocked: 947896

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	9
2	KORNET-KR	3
3	VNPT-VNNIC-VN	2
4	UNICOM-LN	2
5	UNICOM-CN	2
6	TEDATA-20091105	2
7	RRNY	2
8	ONLINE_NET_DEDICATED_SERVERS	2
9	NETVIGATOR	2
10	HSI-7	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	17
2	South Korea	15
3	United States	9
4	Viet Nam	4
5	Italy	3
6	Hong Kong	3
7	France	3
8	Egypt	3
9	Russian Federation	2
10	Netherlands	2

Suspected Bot List [2018-03-06]

detection period: 2018-03-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.83.249	Argentina
CZ	185.82.212.95	Czech Republic
RS	178.149.102.210	Serbia
SA	212.76.76.242	Saudi Arabia
TW	123.195.250.35	Taiwan

List from greylisting:

Botnet Statistics [2018-03-05]

detection period: 2018-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 80
number of botnet IPs notified to network operators: 72
number of spam blocked: 38317
recipient count of spam blocked: 943344

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	5
2	KORNET-KR	5
3	CHINANET-ZJ	2
4	CHINANET-JX	2
5	broadNnet-KR	1
6	Xpeed-KR	1
7	WebShield	1
8	WINDSTREAM	1
9	WEBAIRINTERNET	1
10	VPSONLINE-VN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	15
2	China	11
3	United States	8
4	Russian Federation	3
5	Pakistan	3
6	France	3
7	Egypt	3
8	Viet Nam	2
9	Saudi Arabia	2
10	Netherlands	2

Suspected Bot List [2018-03-05]

detection period: 2018-03-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.82.214	Argentina
AR	200.63.36.151	Argentina
CZ	185.82.212.95	Czech Republic
EG	41.65.218.72	Egypt
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
SA	213.181.172.244	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-04]

detection period: 2018-03-04 00:00-23:59 UTC
total number of suspected botnet IPs: 41
number of botnet IPs notified to network operators: 38
number of spam blocked: 25843
recipient count of spam blocked: 800096

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	3
2	HINET-NET	2
3	DO-CODE-LACNIC	2
4	CHINANET-ZJ	2
5	CHINANET-JX	2
6	WEBAIRINTERNET	1
7	VOLUMEDRIVE	1
8	VNPT-VNNIC-VN	1
9	VIETEL-VNNIC-VN	1
10	VE-CSVE-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	12
2	South Korea	4
3	Viet Nam	3
4	United States	3
5	Egypt	3
6	Taiwan	2
7	Dominican Republic	2
8	Venezuela	1
9	Saudi Arabia	1
10	Pakistan	1

Suspected Bot List [2018-03-04]

detection period: 2018-03-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
EG	41.65.218.72	Egypt
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-03]

detection period: 2018-03-03 00:00-23:59 UTC (data from SSH probes included for the first time)
total number of suspected botnet IPs: 51
number of botnet IPs notified to network operators: 45
number of spam blocked: 26136
recipient count of spam blocked: 806929

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	3
2	KORNET-KR	3
3	VNPT-VNNIC-VN	2
4	TELEPAC-DSL-RES	2
5	CHINANET-ZJ	2
6	broadNnet-KR	1
7	WINDSTREAM-COMMUNICATIONS	1
8	WEBAIRINTERNET	1
9	VODAFONE-NET-IN	1
10	VIETEL-VNNIC-VN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	10
2	China	8
3	United States	4
4	Viet Nam	3
5	Egypt	3
6	Portugal	2
7	Pakistan	2
8	India	2
9	Spain	2
10	South Africa	1

Suspected Bot List [2018-03-03]

detection period: 2018-03-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.83.48	Argentina
CZ	185.82.212.95	Czech Republic
EG	41.65.218.72	Egypt
KW	37.34.243.227	Kuwait
PK	202.61.51.123	Pakistan
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-02]

detection period: 2018-03-02 00:00-23:59 UTC
total number of suspected botnet IPs: 45
number of botnet IPs notified to network operators: 38
number of spam blocked: 32149
recipient count of spam blocked: 963136

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	4
2	VNPT-VNNIC-VN	2
3	TELEPAC-DSL-RES	2
4	KTFWING-KR	2
5	CHINANET-ZJ	2
6	broadNnet-KR	1
7	ZOOMNIGERIA	1
8	WINDSTREAM-COMMUNICATIONS	1
9	WEBAIRINTERNET	1
10	VE-CSVE-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	9
2	United States	5
3	Egypt	4
4	China	4
5	Viet Nam	2
6	Portugal	2
7	Pakistan	2
8	South Africa	1
9	Venezuela	1
10	Saudi Arabia	1

Suspected Bot List [2018-03-02]

detection period: 2018-03-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.82.55	Argentina
CZ	185.82.212.95	Czech Republic
EG	41.65.218.72	Egypt
KW	37.34.243.227	Kuwait
PK	182.180.89.184	Pakistan
PK	202.61.51.123	Pakistan
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-03-01]

detection period: 2018-03-01 00:00-23:59 UTC
total number of suspected botnet IPs: 56
number of botnet IPs notified to network operators: 49
number of spam blocked: 33616
recipient count of spam blocked: 950486

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	5
2	RRNY	2
3	CHINANET-ZJ	2
4	broadNnet-KR	1
5	WINDSTREAM-COMMUNICATIONS	1
6	WEBAIRINTERNET	1
7	VNPT-VNNIC-VN	1
8	VIETEL-VNNIC-VN	1
9	VE-CSVE-LACNIC	1
10	UNICOM-CN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	9
2	South Korea	8
3	China	4
4	Viet Nam	3
5	Egypt	3
6	South Africa	2
7	Pakistan	2
8	Nigeria	2
9	India	2
10	Hong Kong	2

Suspected Bot List [2018-03-01]

detection period: 2018-03-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.82.55	Argentina
CZ	185.82.212.95	Czech Republic
EG	41.65.218.72	Egypt
KW	37.34.243.227	Kuwait
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
SA	212.76.76.242	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-02-28]

detection period: 2018-02-28 00:00-23:59 UTC
total number of suspected botnet IPs: 51
number of botnet IPs notified to network operators: 43
number of spam blocked: 34465
recipient count of spam blocked: 946272

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	LGTELECOM-KR	5
2	TOT-NET	2
3	RRNY	2
4	KORNET-KR	2
5	CHINANET-ZJ	2
6	broadNnet-KR	1
7	WINDSTREAM-COMMUNICATIONS	1
8	WEBAIRINTERNET	1
9	VIETEL-VN	1
10	VE-CSVE-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	South Korea	9
2	United States	6
3	China	4
4	Pakistan	3
5	South Africa	2
6	Thailand	2
7	Nigeria	2
8	Iran	2
9	India	2
10	Egypt	2

Suspected Bot List [2018-02-28]

detection period: 2018-02-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	131.108.80.141	Argentina
CZ	185.82.212.95	Czech Republic
KW	37.34.243.227	Kuwait
NG	197.255.173.209	Nigeria
PK	182.176.166.172	Pakistan
PK	202.61.51.123	Pakistan
RS	178.149.102.210	Serbia
SA	212.76.76.242	Saudi Arabia

List from greylisting: