Botnet Statistics [2018-07-30]

detection period: 2018-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 315
number of botnet IPs notified to network operators: 285
number of spam blocked: 8776
recipient count of spam blocked: 249511

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	14
2	KORNET-KR	10
3	TELKOMNET	5
4	HO-2	5
5	HINET-NET	5
6	CHINANET-GD	5
7	VNPT-VNNIC-VN	4
8	TENCENT-CN	4
9	MSFT	4
10	CHINANET-JS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	62
2	United States	38
3	France	20
4	South Korea	19
5	Canada	16
6	Netherlands	13
7	Viet Nam	11
8	Russian Federation	11
9	India	11
10	Brazil	11

Suspected Bot List [2018-07-30]

detection period: 2018-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-29]

detection period: 2018-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 231
number of botnet IPs notified to network operators: 203
number of spam blocked: 8477
recipient count of spam blocked: 253877

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	7
3	Baidu	5
4	TELKOMNET	4
5	CHINANET-ZJ	4
6	CABLE-1	4
7	VNPT-VNNIC-VN	3
8	UNICOM-JS	3
9	TEDATA-20091105	3
10	HOSTWAY-05	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	73
2	United States	26
3	France	13
4	South Korea	11
5	India	7
6	United Kingdom	7
7	Brazil	7
8	Indonesia	6
9	Viet Nam	5
10	Italy	5

Suspected Bot List [2018-07-29]

detection period: 2018-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-28]

detection period: 2018-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 427
number of botnet IPs notified to network operators: 384
number of spam blocked: 8140
recipient count of spam blocked: 243881

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	21
2	KORNET-KR	20
3	broadNnet-KR	7
4	TENCENT-CN	7
5	AT-88-Z	7
6	VNPT-VNNIC-VN	6
7	GO-DADDY-COM-LLC	6
8	Baidu	6
9	HINET-NET	5
10	CO-ACSA-LACNIC	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	92
2	United States	55
3	South Korea	36
4	France	34
5	India	21
6	Brazil	18
7	Viet Nam	15
8	Italy	14
9	Indonesia	14
10	Russian Federation	10

Suspected Bot List [2018-07-28]

detection period: 2018-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-27]

detection period: 2018-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 372
number of botnet IPs notified to network operators: 335
number of spam blocked: 8390
recipient count of spam blocked: 250831

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	14
2	TencentCloud	9
3	TENCENT-CN	7
4	CMNET	6
5	CHINANET-JS	5
6	VNPT-VNNIC-VN	4
7	CHINANET-JX	4
8	broadNnet-KR	3
9	UNICOM-JS	3
10	TELKOMNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	90
2	United States	48
3	France	29
4	South Korea	23
5	Indonesia	15
6	India	13
7	Viet Nam	12
8	Italy	11
9	Russian Federation	10
10	United Kingdom	9

Suspected Bot List [2018-07-27]

detection period: 2018-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ES	81.45.136.229	Spain
KR	125.141.200.3	South Korea
NL	37.49.224.85	Netherlands
US	107.151.149.45	United States

List from greylisting:

Botnet Statistics [2018-07-26]

detection period: 2018-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 477
number of botnet IPs notified to network operators: 433
number of spam blocked: 7621
recipient count of spam blocked: 228340

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	16
2	TencentCloud	12
3	TENCENT-CN	7
4	HO-2	7
5	FR-OVH-20060920	6
6	CMNET	6
7	HINET-NET	5
8	FR-OVH-20150522	5
9	DIGITALOCEAN-AP	5
10	CHINANET-ZJ	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	76
2	United States	67
3	France	43
4	South Korea	28
5	India	26
6	Brazil	21
7	Russian Federation	19
8	Italy	19
9	Canada	15
10	Indonesia	13

Suspected Bot List [2018-07-26]

detection period: 2018-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-25]

detection period: 2018-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 412
number of botnet IPs notified to network operators: 371
number of spam blocked: 12513
recipient count of spam blocked: 256647

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	13
2	TencentCloud	12
3	VNPT-VNNIC-VN	6
4	TELKOMNET	6
5	LLU-POOL-KLN	5
6	HO-2	5
7	FR-OVH-20150522	5
8	CO-ACSA-LACNIC	5
9	CHINANET-SH	5
10	TENCENT-CN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	80
2	United States	48
3	France	35
4	Russian Federation	25
5	South Korea	23
6	Brazil	17
7	India	16
8	Netherlands	15
9	Italy	11
10	Indonesia	11

Suspected Bot List [2018-07-25]

detection period: 2018-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
SA	37.216.248.54	Saudi Arabia

List from greylisting:

Botnet Statistics [2018-07-24]

detection period: 2018-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 481
number of botnet IPs notified to network operators: 444
number of spam blocked: 8320
recipient count of spam blocked: 249339

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	21
2	TencentCloud	16
3	broadNnet-KR	6
4	VNPT-VNNIC-VN	6
5	UNKNOWN	5
6	TENCENT-CN	5
7	HO-2	5
8	GO-DADDY-COM-LLC	5
9	FR-OVH-20150522	5
10	FR-OVH-20060920	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	96
2	United States	52
3	France	44
4	South Korea	37
5	Brazil	29
6	India	21
7	Italy	18
8	Indonesia	13
9	Russian Federation	12
10	Netherlands	12

Suspected Bot List [2018-07-24]

detection period: 2018-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-23]

detection period: 2018-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 352
number of botnet IPs notified to network operators: 331
number of spam blocked: 7976
recipient count of spam blocked: 239037

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	KORNET-KR	14
3	TENCENT-CN	6
4	CHINANET-JS	6
5	BSNLNET	6
6	broadNnet-KR	5
7	HO-2	5
8	002.558.157/0001-62	4
9	VIETEL-VN	3
10	UCLOUD-NET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	84
2	United States	33
3	France	29
4	South Korea	27
5	Brazil	15
6	India	14
7	Russian Federation	12
8	Italy	11
9	United Kingdom	10
10	Viet Nam	8

Suspected Bot List [2018-07-23]

detection period: 2018-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.220.129.85	Argentina

List from greylisting:

Botnet Statistics [2018-07-22]

detection period: 2018-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 308
number of botnet IPs notified to network operators: 283
number of spam blocked: 8769
recipient count of spam blocked: 279170

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	22
2	KORNET-KR	8
3	UNICOM-JS	5
4	Baidu	5
5	CHINANET-ZJ	4
6	CHINANET-GD	4
7	AT-88-Z	4
8	VNPT-VNNIC-VN	3
9	TENCENT-CN	3
10	SELECTEL-NET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	81
2	United States	33
3	France	32
4	South Korea	15
5	Russian Federation	14
6	Italy	13
7	India	13
8	United Kingdom	10
9	Indonesia	8
10	Brazil	6

Suspected Bot List [2018-07-22]

detection period: 2018-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics for June 2018

detection period: 2018-06-01 00:00 - 2018-06-30 23:59 UTC
total number of suspected botnet IPs: 4163
number of blocked spams: 652347
recipient count of blocked spams: 15476893

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	851
2	United States	525
3	France	278
4	Brazil	204
5	South Korea	171
6	Russian Federation	151
7	Germany	151
8	Viet Nam	144
9	India	130
10	Italy	119
11	Ecuador	116
12	Indonesia	78
13	United Kingdom	78
14	Canada	77
15	Thailand	68
16	Egypt	54
17	Taiwan	53
18	Netherlands	51
19	Colombia	48
20	Mexico	42
21	Argentina	38
22	South Africa	35
23	Poland	33
24	Spain	30
25	Singapore	29

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	461225
2	Italy	85908
3	Canada	50854
4	Venezuela	16079
5	United States	13800
6	Tunisia	6919
7	Poland	6414
8	Romania	5950
9	Netherlands	1542
10	ZZ	1429
11	South Korea	836
12	Colombia	548
13	Brazil	261
14	India	224
15	United Kingdom	200
16	Viet Nam	114
17	Indonesia	14
18	Lebanon	5
19	Antigua And Barbuda	4
20	Taiwan	3
21	Hong Kong	3
22	France	3
23	Spain	3
24	South Africa	1
25	Singapore	1

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-07-21]

detection period: 2018-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 477
number of botnet IPs notified to network operators: 441
number of spam blocked: 30735
recipient count of spam blocked: 808067

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	23
2	KORNET-KR	15
3	FR-OVH-20060920	9
4	CHINANET-JS	8
5	HO-2	6
6	Baidu	6
7	AT-88-Z	6
8	TENCENT-CN	5
9	TELKOMNET	5
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	104
2	United States	58
3	France	39
4	South Korea	29
5	Brazil	25
6	Italy	21
7	Indonesia	20
8	India	17
9	United Kingdom	15
10	Canada	13

Suspected Bot List [2018-07-21]

detection period: 2018-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-20]

detection period: 2018-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 356
number of botnet IPs notified to network operators: 311
number of spam blocked: 30983
recipient count of spam blocked: 854467

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	12
2	CHINANET-JS	9
3	AT-88-Z	6
4	TELKOMNET	5
5	CHINANET-GD	5
6	VNPT-VNNIC-VN	4
7	TencentCloud	4
8	HO-2	4
9	UNKNOWN	3
10	THAINET-TH	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	57
2	United States	46
3	France	25
4	South Korea	21
5	Brazil	18
6	India	15
7	Indonesia	15
8	Italy	14
9	Russian Federation	10
10	United Kingdom	10

Suspected Bot List [2018-07-20]

detection period: 2018-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-19]

detection period: 2018-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 303
number of botnet IPs notified to network operators: 273
number of spam blocked: 32273
recipient count of spam blocked: 908711

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	11
2	KORNET-KR	10
3	TencentCloud	8
4	FR-OVH-20060920	7
5	VNPT-VNNIC-VN	6
6	IUNET4	6
7	CHINANET-GD	6
8	HO-2	4
9	FR-OVH-20120320	4
10	SINGNET-SG	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	67
2	France	37
3	United States	25
4	South Korea	16
5	Russian Federation	15
6	India	11
7	Italy	10
8	Brazil	10
9	Canada	9
10	Viet Nam	8

Suspected Bot List [2018-07-19]

detection period: 2018-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-18]

detection period: 2018-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 363
number of botnet IPs notified to network operators: 331
number of spam blocked: 31835
recipient count of spam blocked: 898400

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	KORNET-KR	13
3	CHINANET-JS	13
4	VNPT-VNNIC-VN	5
5	TENCENT-CN	5
6	IPG	4
7	GO-DADDY-COM-LLC	4
8	CHINANET-GD	4
9	Baidu	4
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	102
2	United States	44
3	France	26
4	South Korea	20
5	Brazil	14
6	Russian Federation	12
7	Italy	10
8	Indonesia	10
9	India	8
10	Viet Nam	7

Suspected Bot List [2018-07-18]

detection period: 2018-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-17]

detection period: 2018-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 441
number of botnet IPs notified to network operators: 399
number of spam blocked: 31525
recipient count of spam blocked: 818353

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	CHINANET-JS	12
3	KORNET-KR	9
4	CMNET	7
5	TENCENT-CN	5
6	HINET-NET	5
7	VNPT-VNNIC-VN	4
8	HO-2	4
9	CHINANET-ZJ	4
10	CHINANET-JX	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	98
2	United States	51
3	France	35
4	India	22
5	Brazil	20
6	South Korea	17
7	Italy	15
8	Indonesia	13
9	Viet Nam	12
10	Russian Federation	11

Suspected Bot List [2018-07-17]

detection period: 2018-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-16]

detection period: 2018-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 401
number of botnet IPs notified to network operators: 371
number of spam blocked: 27989
recipient count of spam blocked: 793647

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	14
2	TencentCloud	13
3	CHINANET-JS	10
4	VNPT-VNNIC-VN	5
5	TENCENT-CN	5
6	CMNET	5
7	CHINANET-GD	5
8	002.558.157/0001-62	5
9	GO-DADDY-COM-LLC	4
10	CO-ACSA-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	106
2	United States	41
3	South Korea	24
4	Brazil	23
5	India	20
6	France	18
7	Italy	17
8	Russian Federation	13
9	Colombia	10
10	Viet Nam	8

Suspected Bot List [2018-07-16]

detection period: 2018-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
NL	185.22.192.120	Netherlands

List from greylisting:

Botnet Statistics [2018-07-15]

detection period: 2018-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 345
number of botnet IPs notified to network operators: 316
number of spam blocked: 25229
recipient count of spam blocked: 755623

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	KORNET-KR	11
3	HINET-NET	7
4	CHINANET-JS	7
5	Baidu	6
6	CMNET	5
7	CHINANET-ZJ	5
8	TENCENT-CN	4
9	CHINANET-GD	4
10	BORANET-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	80
2	United States	37
3	France	23
4	South Korea	22
5	Russian Federation	20
6	Brazil	16
7	India	15
8	Taiwan	11
9	Germany	11
10	Italy	8

Suspected Bot List [2018-07-15]

detection period: 2018-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-14]

detection period: 2018-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 433
number of botnet IPs notified to network operators: 397
number of spam blocked: 28245
recipient count of spam blocked: 715980

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	KORNET-KR	8
3	CHINANET-JS	8
4	Baidu	6
5	BT-INFRA	6
6	AT-88-Z	6
7	CABLE-1	5
8	broadNnet-KR	4
9	HO-2	4
10	HINET-NET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	75
2	United States	58
3	France	37
4	South Korea	19
5	India	19
6	Italy	17
7	Brazil	17
8	Germany	13
9	Russian Federation	12
10	United Kingdom	12

Suspected Bot List [2018-07-14]

detection period: 2018-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-13]

detection period: 2018-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 398
number of botnet IPs notified to network operators: 370
number of spam blocked: 24851
recipient count of spam blocked: 806101

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	11
3	VNPT-VNNIC-VN	8
4	HO-2	7
5	CHINANET-JS	7
6	AT-88-Z	7
7	TENCENT-CN	6
8	UNICOM-JS	5
9	CMNET	5
10	broadNnet-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	85
2	United States	51
3	France	32
4	South Korea	24
5	India	18
6	Italy	16
7	Viet Nam	15
8	Russian Federation	13
9	United Kingdom	11
10	Canada	11

Suspected Bot List [2018-07-13]

detection period: 2018-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ZA	197.149.160.59	South Africa

List from greylisting:

Botnet Statistics [2018-07-12]

detection period: 2018-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 242
number of botnet IPs notified to network operators: 225
number of spam blocked: 26961
recipient count of spam blocked: 719256

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	CHINANET-JS	9
3	KORNET-KR	6
4	CHINANET-GD	5
5	Baidu	5
6	CMNET	4
7	BSNLNET	4
8	VNPT-VNNIC-VN	3
9	UNICOM-JS	3
10	IUNET4	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	68
2	United States	31
3	France	16
4	South Korea	14
5	Russian Federation	8
6	Viet Nam	7
7	Italy	7
8	Brazil	7
9	India	6
10	Colombia	6

Suspected Bot List [2018-07-12]

detection period: 2018-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela
ZA	197.149.160.59	South Africa

List from greylisting:

Botnet Statistics [2018-07-11]

detection period: 2018-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 343
number of botnet IPs notified to network operators: 315
number of spam blocked: 35659
recipient count of spam blocked: 835202

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	8
2	KORNET-KR	8
3	CHINANET-GD	8
4	VNPT-VNNIC-VN	7
5	CHINANET-JS	7
6	CMNET	6
7	GO-DADDY-COM-LLC	5
8	MSFT	4
9	HO-2	4
10	FR-OVH-20120320	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	85
2	United States	41
3	France	29
4	South Korea	21
5	Brazil	18
6	Italy	14
7	Russian Federation	12
8	India	12
9	Indonesia	12
10	Viet Nam	10

Suspected Bot List [2018-07-11]

detection period: 2018-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 28

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-10]

detection period: 2018-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 466
number of botnet IPs notified to network operators: 431
number of spam blocked: 23612
recipient count of spam blocked: 663207

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	14
2	KORNET-KR	12
3	VNPT-VNNIC-VN	8
4	CHINANET-JS	7
5	GO-DADDY-COM-LLC	5
6	DOPI1	5
7	IUNET4	4
8	FR-OVH-20060920	4
9	CMNET	4
10	Baidu	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	93
2	United States	51
3	France	39
4	South Korea	27
5	Brazil	24
6	Viet Nam	20
7	Italy	18
8	India	18
9	United Kingdom	16
10	Indonesia	15

Suspected Bot List [2018-07-10]

detection period: 2018-07-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-09]

detection period: 2018-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 281
number of botnet IPs notified to network operators: 256
number of spam blocked: 25743
recipient count of spam blocked: 720844

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	11
2	TencentCloud	8
3	VNPT-VNNIC-VN	5
4	UNICOM-JS	5
5	HINET-NET	4
6	CHINANET-ZJ	4
7	SELECTEL-NET	3
8	IE-POOL-BUSINESS-HOSTING	3
9	FR-OVH-20120823	3
10	FR-OVH-20060920	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	56
2	United States	29
3	France	24
4	Russian Federation	15
5	South Korea	15
6	United Kingdom	11
7	Brazil	11
8	Germany	9
9	Canada	8
10	Taiwan	7

Suspected Bot List [2018-07-09]

detection period: 2018-07-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-08]

detection period: 2018-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 321
number of botnet IPs notified to network operators: 303
number of spam blocked: 26678
recipient count of spam blocked: 799267

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	11
2	TencentCloud	10
3	KORNET-KR	6
4	EC-ANSA-LACNIC	5
5	HINET-TW	4
6	DOPI1	4
7	CHINANET-JX	4
8	UNICOM-JS	3
9	MSFT	3
10	IPG	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	81
2	United States	41
3	France	25
4	South Korea	17
5	Russian Federation	13
6	Italy	9
7	India	9
8	Brazil	9
9	United Kingdom	7
10	Germany	7

Suspected Bot List [2018-07-08]

detection period: 2018-07-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-07]

detection period: 2018-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 455
number of botnet IPs notified to network operators: 415
number of spam blocked: 29419
recipient count of spam blocked: 881121

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	9
3	AT-88-Z	7
4	DOPI1	6
5	CMNET	6
6	VNPT-VNNIC-VN	5
7	TENCENT-CN	5
8	FR-OVH	5
9	Baidu	5
10	BHARTI-IN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	83
2	United States	67
3	France	44
4	India	21
5	South Korea	20
6	Brazil	18
7	Russian Federation	14
8	Italy	14
9	Viet Nam	11
10	United Kingdom	9

Suspected Bot List [2018-07-07]

detection period: 2018-07-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 40

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-06]

detection period: 2018-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 382
number of botnet IPs notified to network operators: 345
number of spam blocked: 29547
recipient count of spam blocked: 859121

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	10
2	KORNET-KR	8
3	VNPT-VNNIC-VN	6
4	CHINANET-JS	6
5	HINET-NET	5
6	DIGITALOCEAN-31	5
7	CMNET	5
8	CHINANET-ZJ	5
9	Baidu	5
10	UNICOM-JS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	91
2	United States	56
3	France	32
4	Brazil	18
5	South Korea	17
6	Russian Federation	12
7	Italy	10
8	India	10
9	Viet Nam	9
10	Colombia	9

Suspected Bot List [2018-07-06]

detection period: 2018-07-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-05]

detection period: 2018-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 449
number of botnet IPs notified to network operators: 411
number of spam blocked: 37849
recipient count of spam blocked: 904282

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	18
2	TencentCloud	15
3	CHINANET-GD	8
4	FR-OVH	6
5	CHINANET-JS	6
6	AT-88-Z	6
7	TENCENT-CN	5
8	GO-DADDY-COM-LLC	5
9	Baidu	5
10	broadNnet-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	United States	62
3	South Korea	32
4	France	30
5	Brazil	20
6	Italy	17
7	India	15
8	Russian Federation	12
9	Indonesia	11
10	Viet Nam	9

Suspected Bot List [2018-07-05]

detection period: 2018-07-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-04]

detection period: 2018-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 435
number of botnet IPs notified to network operators: 403
number of spam blocked: 37382
recipient count of spam blocked: 890823

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	8
3	HINET-NET	8
4	CHINANET-JS	8
5	broadNnet-KR	6
6	AT-88-Z	6
7	CMNET	5
8	CHINANET-GD	5
9	MX-USCV4-LACNIC	4
10	KRNIC-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	83
2	United States	55
3	France	38
4	South Korea	24
5	India	22
6	Russian Federation	17
7	Brazil	16
8	Italy	14
9	Taiwan	11
10	Viet Nam	10

Suspected Bot List [2018-07-04]

detection period: 2018-07-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-03]

detection period: 2018-07-03 00:00-23:59 UTC
total number of suspected botnet IPs: 508
number of botnet IPs notified to network operators: 467
number of spam blocked: 35262
recipient count of spam blocked: 824265

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	20
2	TencentCloud	15
3	CHINANET-JS	11
4	CHINANET-GD	8
5	MSFT	6
6	FR-OVH	6
7	VNPT-VNNIC-VN	5
8	UNICOM-BJ	5
9	HINET-NET	5
10	GO-DADDY-COM-LLC	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	108
2	United States	63
3	France	47
4	South Korea	32
5	India	31
6	Russian Federation	17
7	Indonesia	16
8	Brazil	15
9	Italy	13
10	Viet Nam	12

Suspected Bot List [2018-07-03]

detection period: 2018-07-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-07-02]

detection period: 2018-07-02 00:00-23:59 UTC
total number of suspected botnet IPs: 378
number of botnet IPs notified to network operators: 346
number of spam blocked: 31609
recipient count of spam blocked: 880483

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	15
2	TencentCloud	12
3	CHINANET-JS	7
4	BHARTI-IN	7
5	FR-OVH-20060920	6
6	CHINANET-GD	6
7	CHINANET-ZJ	5
8	UNKNOWN	4
9	HINET-NET	4
10	DIGITALOCEAN-31	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	72
2	United States	53
3	France	34
4	Russian Federation	24
5	South Korea	23
6	India	19
7	Brazil	19
8	United Kingdom	11
9	Italy	10
10	Viet Nam	7

Suspected Bot List [2018-07-02]

detection period: 2018-07-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	92.154.96.85	France
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-07-01]

detection period: 2018-07-01 00:00-23:59 UTC
total number of suspected botnet IPs: 348
number of botnet IPs notified to network operators: 312
number of spam blocked: 42857
recipient count of spam blocked: 1102450

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	10
2	CHINANET-JS	8
3	KORNET-KR	7
4	MSFT	5
5	FR-OVH	5
6	broadNnet-KR	4
7	CHINANET-GD	4
8	AT-88-Z	4
9	VNPT-VNNIC-VN	3
10	UNKNOWN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	71
2	United States	49
3	France	26
4	South Korea	22
5	Brazil	18
6	India	15
7	Indonesia	11
8	Russian Federation	10
9	Italy	10
10	Germany	10

Suspected Bot List [2018-07-01]

detection period: 2018-07-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Suspected Bots' IP List for May 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-05-01]
Suspected Bots IP [2018-05-02]
Suspected Bots IP [2018-05-03]
Suspected Bots IP [2018-05-04]
Suspected Bots IP [2018-05-05]
Suspected Bots IP [2018-05-06]
Suspected Bots IP [2018-05-07]
Suspected Bots IP [2018-05-08]
Suspected Bots IP [2018-05-09]
Suspected Bots IP [2018-05-10]
Suspected Bots IP [2018-05-11]
Suspected Bots IP [2018-05-12]
Suspected Bots IP [2018-05-13]
Suspected Bots IP [2018-05-14]
Suspected Bots IP [2018-05-15]
Suspected Bots IP [2018-05-16]
Suspected Bots IP [2018-05-17]
Suspected Bots IP [2018-05-18]
Suspected Bots IP [2018-05-19]
Suspected Bots IP [2018-05-20]
Suspected Bots IP [2018-05-21]
Suspected Bots IP [2018-05-22]
Suspected Bots IP [2018-05-23]
Suspected Bots IP [2018-05-24]
Suspected Bots IP [2018-05-25]
Suspected Bots IP [2018-05-26]
Suspected Bots IP [2018-05-27]
Suspected Bots IP [2018-05-28]
Suspected Bots IP [2018-05-29]
Suspected Bots IP [2018-05-30]
Suspected Bots IP [2018-05-31]

Botnet Statistics [2018-06-30]

detection period: 2018-06-30 00:00-23:59 UTC
total number of suspected botnet IPs: 566
number of botnet IPs notified to network operators: 518
number of spam blocked: 29661
recipient count of spam blocked: 840350

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	15
2	TencentCloud	12
3	CHINANET-JS	9
4	CMNET	8
5	CHINANET-GD	7
6	AT-88-Z	7
7	VNPT-VNNIC-VN	6
8	OVH	6
9	GO-DADDY-COM-LLC	6
10	FR-OVH-20060920	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	105
2	United States	95
3	France	46
4	South Korea	33
5	India	30
6	Brazil	19
7	Russian Federation	16
8	Germany	16
9	Indonesia	15
10	Viet Nam	14

Suspected Bot List [2018-06-30]

detection period: 2018-06-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting: