Botnet Statistics [2019-05-30]

detection period: 2019-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 12173
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11459
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	421
2	TENCENT-CN	313
3	HINET-NET	258
4	DO-13	254
5	Baidu	249
6	VNPT-VN	227
7	KORNET	186
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	160
9	OVH	139
10	02.558.157/0001-62	131

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2289
2	United States	1826
3	France	667
4	India	546
5	Viet Nam	500
6	Brazil	489
7	Russian Federation	403
8	South Korea	340
9	Indonesia	313
10	Taiwan	302

Suspected Bot List [2019-05-30]

detection period: 2019-05-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 714

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	88.10.39.183	Spain

List from TCP port scans:

Botnet Statistics [2019-05-29]

detection period: 2019-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 12958
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12205
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	419
2	TENCENT-CN	332
3	HINET-NET	316
4	DO-13	269
5	Baidu	259
6	VNPT-VN	229
7	KORNET	210
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	167
9	OVH	151
10	02.558.157/0001-62	129

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2364
2	United States	1908
3	France	697
4	India	563
5	Brazil	514
6	Viet Nam	499
7	Russian Federation	448
8	Indonesia	410
9	South Korea	377
10	Taiwan	354

Suspected Bot List [2019-05-29]

detection period: 2019-05-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 753

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	88.10.39.183	Spain

List from TCP port scans:

Botnet Statistics [2019-05-28]

detection period: 2019-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 12102
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11366
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	438
2	TENCENT-CN	321
3	HINET-NET	317
4	Baidu	244
5	VNPT-VN	237
6	DO-13	232
7	KORNET	183
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	158
9	OVH	145
10	02.558.157/0001-62	136

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2337
2	United States	1691
3	France	662
4	India	501
5	Viet Nam	483
6	Brazil	470
7	Russian Federation	390
8	Indonesia	376
9	Taiwan	365
10	South Korea	331

Suspected Bot List [2019-05-28]

detection period: 2019-05-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 736

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ZA	196.2.73.190	South Africa

List from TCP port scans:

Botnet Statistics [2019-05-27]

detection period: 2019-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 12233
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11513
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	437
2	TENCENT-CN	328
3	HINET-NET	274
4	Baidu	246
5	DO-13	235
6	VNPT-VN	196
7	KORNET	175
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	168
9	OVH	147
10	02.558.157/0001-62	129

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2361
2	United States	1733
3	France	689
4	India	538
5	Brazil	504
6	Viet Nam	459
7	Indonesia	394
8	Russian Federation	361
9	South Korea	329
10	Taiwan	313

Suspected Bot List [2019-05-27]

detection period: 2019-05-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 721

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
CN	193.112.42.88	China
ES	88.10.39.183	Spain
NL	185.244.25.105	Netherlands
PL	188.114.89.11	Poland
ZA	156.155.136.254	South Africa

List from TCP port scans:

Botnet Statistics [2019-05-26]

detection period: 2019-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 11803
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11103
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	452
2	TENCENT-CN	340
3	HINET-NET	297
4	Baidu	261
5	DO-13	244
6	KORNET	202
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	165
8	OVH	151
9	CHINANET-GD	108
10	HO-2	107

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2476
2	United States	1745
3	France	699
4	Brazil	485
5	India	393
6	Russian Federation	372
7	South Korea	358
8	Taiwan	335
9	Indonesia	301
10	Viet Nam	272

Suspected Bot List [2019-05-26]

detection period: 2019-05-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 700

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
CA	50.66.116.189	Canada
CN	193.112.42.88	China
ES	88.10.39.183	Spain
NL	185.244.25.105	Netherlands
NL	185.244.25.235	Netherlands
TG	196.171.154.255	Togo

List from TCP port scans:

Botnet Statistics [2019-05-25]

detection period: 2019-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 11623
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10990
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	427
2	TENCENT-CN	325
3	HINET-NET	309
4	Baidu	256
5	DO-13	229
6	KORNET	195
7	VNPT-VN	155
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	154
9	OVH	143
10	02.558.157/0001-62	115

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2301
2	United States	1668
3	France	676
4	India	491
5	Brazil	487
6	Russian Federation	428
7	Viet Nam	383
8	South Korea	345
9	Taiwan	339
10	Indonesia	338

Suspected Bot List [2019-05-25]

detection period: 2019-05-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 633

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-05-24]

detection period: 2019-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 11629
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10987
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	423
2	TENCENT-CN	331
3	HINET-NET	295
4	Baidu	251
5	DO-13	230
6	VNPT-VN	202
7	KORNET	183
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	158
9	OVH	139
10	VIETTEL-VN	112

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2302
2	United States	1636
3	France	686
4	India	487
5	Viet Nam	448
6	Brazil	446
7	Russian Federation	433
8	Taiwan	337
9	Indonesia	328
10	South Korea	325

Suspected Bot List [2019-05-24]

detection period: 2019-05-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 642

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ES	88.12.15.22	Spain

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KR	210.115.227.132	South Korea

List from TCP port scans:

Botnet Statistics [2019-05-23]

detection period: 2019-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 12556
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11847
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	428
2	TENCENT-CN	327
3	HINET-NET	297
4	Baidu	257
5	DO-13	230
6	VNPT-VN	226
7	KORNET	195
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	161
9	OVH	144
10	02.558.157/0001-62	136

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2376
2	United States	1833
3	France	698
4	Viet Nam	534
5	India	520
6	Brazil	516
7	Russian Federation	465
8	Indonesia	396
9	South Korea	349
10	Taiwan	337

Suspected Bot List [2019-05-23]

detection period: 2019-05-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 709

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
CN	193.112.46.249	China

List from TCP port scans:

Botnet Statistics [2019-05-22]

detection period: 2019-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 12649
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11901
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	435
2	TENCENT-CN	342
3	HINET-NET	288
4	Baidu	265
5	VNPT-VN	224
6	DO-13	224
7	KORNET	210
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	162
9	OVH	150
10	02.558.157/0001-62	147

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2456
2	United States	1796
3	France	716
4	Brazil	530
5	India	501
6	Viet Nam	474
7	Russian Federation	451
8	Indonesia	415
9	South Korea	355
10	Taiwan	329

Suspected Bot List [2019-05-22]

detection period: 2019-05-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 748

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
DE	116.203.182.45	Germany
ES	80.30.231.55	Spain

List from TCP port scans:

Botnet Statistics [2019-05-21]

detection period: 2019-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 11865
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11201
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	419
2	TENCENT-CN	333
3	HINET-NET	258
4	Baidu	256
5	DO-13	238
6	VNPT-VN	201
7	KORNET	168
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	157
9	OVH	154
10	TELKOMNET	130

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2406
2	United States	1703
3	France	656
4	India	475
5	Brazil	465
6	Viet Nam	457
7	Russian Federation	423
8	Indonesia	409
9	South Korea	305
10	Taiwan	291

Suspected Bot List [2019-05-21]

detection period: 2019-05-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 664

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	81.45.72.92	Spain

List from TCP port scans:

Botnet Statistics [2019-05-20]

detection period: 2019-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 12369
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11706
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	428
2	TENCENT-CN	342
3	DO-13	270
4	Baidu	269
5	HINET-NET	234
6	VNPT-VN	210
7	KORNET	175
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	161
9	OVH	152
10	VIETTEL-VN	135

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2477
2	United States	1851
3	France	680
4	India	539
5	Viet Nam	495
6	Brazil	479
7	Russian Federation	457
8	Indonesia	379
9	South Korea	307
10	Taiwan	271

Suspected Bot List [2019-05-20]

detection period: 2019-05-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 663

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-05-19]

detection period: 2019-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 12694
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11992
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	388
2	TENCENT-CN	305
3	DO-13	278
4	Baidu	267
5	HINET-NET	262
6	KORNET	170
7	VNPT-VN	167
8	OVH	156
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	137
10	AT-88-Z	123

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2367
2	United States	2001
3	France	685
4	Russian Federation	569
5	Brazil	506
6	Viet Nam	421
7	India	407
8	Indonesia	366
9	South Korea	315
10	Taiwan	308

Suspected Bot List [2019-05-19]

detection period: 2019-05-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 702

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	81.45.72.92	Spain

List from TCP port scans:

Botnet Statistics [2019-05-18]

detection period: 2019-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 11693
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11068
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	319
2	HINET-NET	253
3	TENCENT-CN	250
4	Baidu	240
5	DO-13	236
6	VNPT-VN	208
7	AT-88-Z	145
8	OVH	139
9	KORNET	130
10	02.558.157/0001-62	124

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2081
2	United States	1909
3	France	610
4	Russian Federation	541
5	Viet Nam	465
6	India	462
7	Brazil	354
8	Indonesia	335
9	Taiwan	297
10	South Korea	259

Suspected Bot List [2019-05-18]

detection period: 2019-05-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 625

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Suspected Bot List [2019-05-17]

detection period: 2019-05-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 728

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CN	218.75.36.70	China

List from greylisting:

Botnet Statistics [2019-05-17]

detection period: 2019-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 12505
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11777
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	399
2	TENCENT-CN	312
3	VNPT-VN	296
4	DO-13	248
5	HINET-NET	245
6	Baidu	243
7	VIETTEL-VN	151
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	147
9	AT-88-Z	142
10	OVH	138

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2253
2	United States	1942
3	Viet Nam	618
4	Russian Federation	597
5	France	597
6	India	526
7	Indonesia	401
8	Brazil	368
9	Taiwan	286
10	South Korea	252

Botnet Statistics [2019-05-16]

detection period: 2019-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 12784
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12032
number of spam blocked: 5
recipient count of spam blocked: 5

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	404
2	TENCENT-CN	314
3	VNPT-VN	286
4	Baidu	251
5	DO-13	250
6	HINET-NET	238
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	155
8	02.558.157/0001-62	149
9	TELKOMNET	146
10	KORNET	146

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2297
2	United States	1832
3	France	633
4	Viet Nam	586
5	Russian Federation	578
6	India	535
7	Indonesia	451
8	Brazil	433
9	Taiwan	284
10	South Korea	274

Suspected Bot List [2019-05-16]

detection period: 2019-05-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 752

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	88.205.135.21	Russian Federation

List from greylisting:

Botnet Statistics [2019-05-15]

detection period: 2019-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 13096
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12345
number of spam blocked: 6
recipient count of spam blocked: 6

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	407
2	TENCENT-CN	318
3	VNPT-VN	287
4	Baidu	256
5	DO-13	246
6	HINET-NET	231
7	VIETTEL-VN	153
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	151
9	OVH	147
10	KORNET	143

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2432
2	United States	1828
3	France	647
4	Viet Nam	631
5	Russian Federation	624
6	India	514
7	Indonesia	448
8	Brazil	382
9	South Korea	280
10	Taiwan	263

Suspected Bot List [2019-05-15]

detection period: 2019-05-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 751

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	103.107.37.113	India

List from greylisting:

Botnet Statistics [2019-05-14]

detection period: 2019-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 13216
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12414
number of spam blocked: 5
recipient count of spam blocked: 5

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	421
2	TENCENT-CN	335
3	VNPT-VN	262
4	DO-13	255
5	Baidu	247
6	HINET-NET	216
7	VIETTEL-VN	161
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	160
9	OVH	153
10	02.558.157/0001-62	141

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2398
2	United States	1884
3	France	662
4	Viet Nam	590
5	Russian Federation	571
6	India	567
7	Brazil	423
8	Indonesia	420
9	South Korea	277
10	Taiwan	255

Suspected Bot List [2019-05-14]

detection period: 2019-05-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 802

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BR	201.182.91.254	Brazil
RU	91.144.142.125	Russian Federation

List from greylisting:

Botnet Statistics [2019-05-13]

detection period: 2019-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 13303
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12553
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	417
2	TENCENT-CN	330
3	VNPT-VN	323
4	DO-13	262
5	Baidu	254
6	HINET-NET	224
7	VIETTEL-VN	162
8	TELKOMNET	161
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	161
10	OVH	149

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2451
2	United States	1795
3	Viet Nam	678
4	France	652
5	Russian Federation	594
6	India	560
7	Indonesia	468
8	Brazil	438
9	South Korea	266
10	Taiwan	264

Suspected Bot List [2019-05-13]

detection period: 2019-05-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 750

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
KH	203.189.142.33	Cambodia

List from greylisting:

Botnet Statistics for April 2019

detection period: 2019-04-01 00:00 - 2019-04-30 23:59 UTC
total number of suspected botnet IPs: 95805

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	8806
2	Viet Nam	7727
3	United States	6977
4	Indonesia	3956
5	India	2788
6	Taiwan	2435
7	Brazil	2029
8	Russian Federation	1726
9	France	1422
10	Venezuela	1413
11	Thailand	1302
12	Mexico	1110
13	South Korea	927
14	Turkey	909
15	Egypt	580
16	Hong Kong	567
17	Colombia	549
18	Canada	481
19	Netherlands	465
20	Italy	457
21	Singapore	439
22	Pakistan	401
23	Germany	391
24	United Kingdom	359
25	Ukraine	338

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	4383
2	TELKOMNET	2492
3	HINET-NET	2239
4	VIETTEL-VN	2223
5	02.558.157/0001-62	1539
6	VE-CSVE-LACNIC	1384
7	AT-88-Z	1010
8	TencentCloud	798
9	CHINANET-GD	794
10	DO-13	763
11	MX-USCV4-LACNIC	629
12	TENCENT-CN	598
13	BSNLNET	584
14	KORNET	539
15	AMAZON-2011L	530
16	CHINANET-JS	489
17	Baidu	438
18	BHARTI-IN	417
19	FPTDYNAMICIP-NET	404
20	CMNET	402
21	CHINANET-SH	364
22	FPT-STATICIP-NET	331
23	CHINANET-SC	317
24	CHINANET-SD	307
25	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	306

Botnet Statistics for March 2019

detection period: 2019-03-01 00:00 - 2019-03-31 23:59 UTC
total number of suspected botnet IPs: 127410

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	13586
2	China	8860
3	United States	6820
4	Indonesia	6593
5	India	3848
6	Taiwan	3303
7	Brazil	2527
8	Thailand	2284
9	Russian Federation	2274
10	Venezuela	1719
11	France	1493
12	Mexico	1213
13	Turkey	1200
14	South Korea	1062
15	Egypt	884
16	Hong Kong	766
17	Colombia	638
18	Pakistan	617
19	Italy	534
20	Netherlands	472
21	Germany	466
22	Canada	466
23	Singapore	410
24	Ukraine	391
25	Spain	381

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	7860
2	TELKOMNET	4274
3	VIETTEL-VN	3885
4	HINET-NET	2940
5	02.558.157/0001-62	2130
6	VE-CSVE-LACNIC	1697
7	AT-88-Z	1081
8	BSNLNET	889
9	TencentCloud	854
10	CHINANET-GD	850
11	FPTDYNAMICIP-NET	721
12	MX-USCV4-LACNIC	711
13	KORNET	625
14	TRIPLETNET-TH	599
15	BHARTI-IN	593
16	TENCENT-CN	580
17	CHINANET-JS	567
18	FPT-STATICIP-NET	515
19	AMAZON-2011L	503
20	DO-13	476
21	Baidu	457
22	CMNET	436
23	CHINANET-SH	422
24	BEELINE-BROADBAND	370
25	TOT-NET	351

Botnet Statistics for February 2019

detection period: 2019-02-01 00:00 - 2019-02-28 23:59 UTC
total number of suspected botnet IPs: 112759

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	9075
2	China	8591
3	United States	6195
4	Indonesia	5605
5	India	3426
6	Taiwan	3081
7	Brazil	2262
8	Venezuela	2176
9	Thailand	2021
10	Russian Federation	1972
11	France	1403
12	South Korea	1136
13	Mexico	1130
14	Turkey	919
15	Egypt	713
16	Hong Kong	684
17	Colombia	553
18	Pakistan	497
19	Canada	478
20	Germany	439
21	Italy	380
22	Iran	377
23	Netherlands	358
24	Philippines	313
25	United Kingdom	313

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	5307
2	TELKOMNET	3765
3	HINET-NET	2768
4	VIETTEL-VN	2624
5	VE-CSVE-LACNIC	2144
6	02.558.157/0001-62	1907
7	AT-88-Z	1221
8	TencentCloud	802
9	BSNLNET	791
10	CHINANET-JS	715
11	CHINANET-GD	692
12	KORNET	659
13	MX-USCV4-LACNIC	647
14	AMAZON-2011L	561
15	CMNET	550
16	BHARTI-IN	507
17	TRIPLETNET-TH	492
18	TENCENT-CN	426
19	FPTDYNAMICIP-NET	370
20	FPT-STATICIP-NET	356
21	DO-13	337
22	MSFT	324
23	CHINANET-SH	321
24	CAT-BB-NET	319
25	Baidu	300

Botnet Statistics for January 2019

detection period: 2019-01-01 00:00 - 2019-01-31 23:59 UTC
total number of suspected botnet IPs: 141404
Because very few bots are detected through spam mail now, the relevant statistics will no longer be listed here.

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Viet Nam	14764
2	China	11209
3	Indonesia	7883
4	United States	6399
5	Taiwan	4535
6	India	4275
7	Venezuela	3208
8	Brazil	2649
9	Thailand	2579
10	Russian Federation	2433
11	Mexico	1350
12	France	1327
13	South Korea	1135
14	Turkey	1120
15	Egypt	968
16	Hong Kong	711
17	Pakistan	659
18	Colombia	607
19	Canada	516
20	Iran	481
21	Italy	410
22	Ukraine	387
23	Germany	382
24	Philippines	377
25	Netherlands	324

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	8824
2	TELKOMNET	5297
3	VIETTEL-VN	4162
4	HINET-NET	4155
5	VE-CSVE-LACNIC	3167
6	02.558.157/0001-62	2394
7	AT-88-Z	1165
8	CHINANET-GD	1119
9	BSNLNET	1067
10	CMNET	865
11	TencentCloud	861
12	CHINANET-JS	838
13	MX-USCV4-LACNIC	787
14	AMAZON-2011L	709
15	TRIPLETNET-TH	688
16	FPTDYNAMICIP-NET	656
17	KORNET	635
18	BHARTI-IN	633
19	FPT-STATICIP-NET	504
20	CHINANET-SH	481
21	CHINANET-JX	462
22	CHINANET-SC	456
23	CHINANET-SD	453
24	BEELINE-BROADBAND	446
25	CHINANET-ZJ	418

Botnet Statistics [2019-05-11]

detection period: 2019-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 12527
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11784
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	439
2	TENCENT-CN	355
3	Baidu	262
4	DO-13	258
5	VNPT-VN	213
6	HINET-NET	187
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	164
8	KORNET	157
9	OVH	145
10	02.558.157/0001-62	126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2477
2	United States	1780
3	France	666
4	Russian Federation	509
5	India	494
6	Viet Nam	454
7	Brazil	376
8	Indonesia	367
9	South Korea	299
10	United Kingdom	231

Suspected Bot List [2019-05-11]

detection period: 2019-05-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 743

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-10]

detection period: 2019-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 13172
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12401
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	445
2	TENCENT-CN	353
3	Baidu	282
4	DO-13	259
5	VNPT-VN	257
6	HINET-NET	170
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	161
8	KORNET	149
9	OVH	142
10	02.558.157/0001-62	142

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2559
2	United States	1941
3	France	679
4	Viet Nam	562
5	India	531
6	Russian Federation	507
7	Brazil	499
8	Indonesia	439
9	South Korea	282
10	United Kingdom	246

Suspected Bot List [2019-05-10]

detection period: 2019-05-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 771

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-09]

detection period: 2019-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 12769
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12018
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	394
2	TENCENT-CN	339
3	VNPT-VN	268
4	DO-13	251
5	Baidu	244
6	AT-88-Z	173
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	161
8	KORNET	150
9	VIETTEL-VN	136
10	HINET-NET	134

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2411
2	United States	1911
3	France	636
4	Viet Nam	557
5	Russian Federation	546
6	India	498
7	Brazil	477
8	Indonesia	417
9	South Korea	282
10	Singapore	228

Suspected Bot List [2019-05-09]

detection period: 2019-05-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 751

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-08]

detection period: 2019-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 13682
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12864
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	422
2	TENCENT-CN	343
3	VNPT-VN	259
4	DO-13	255
5	Baidu	248
6	HINET-NET	213
7	AT-88-Z	207
8	KORNET	171
9	02.558.157/0001-62	170
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	157

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2616
2	United States	1964
3	France	700
4	Russian Federation	584
5	Viet Nam	578
6	Brazil	568
7	India	522
8	Indonesia	429
9	South Korea	301
10	Taiwan	255

Suspected Bot List [2019-05-08]

detection period: 2019-05-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 818

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-07]

detection period: 2019-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 13880
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13043
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	442
2	TENCENT-CN	352
3	DO-13	283
4	VNPT-VN	261
5	Baidu	257
6	HINET-NET	203
7	AT-88-Z	197
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	172
9	KORNET	170
10	OVH	164

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2614
2	United States	2100
3	France	738
4	Russian Federation	584
5	Viet Nam	576
6	Brazil	562
7	India	502
8	Indonesia	405
9	South Korea	309
10	Singapore	266

Suspected Bot List [2019-05-07]

detection period: 2019-05-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 837

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-06]

detection period: 2019-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 13054
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12279
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	415
2	TENCENT-CN	323
3	DO-13	258
4	Baidu	250
5	VNPT-VN	234
6	HINET-NET	173
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	164
8	AT-88-Z	161
9	VIETTEL-VN	160
10	OVH	143

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2422
2	United States	1873
3	France	667
4	Russian Federation	605
5	Viet Nam	550
6	Brazil	528
7	India	518
8	Indonesia	445
9	South Korea	264
10	Singapore	235

Suspected Bot List [2019-05-06]

detection period: 2019-05-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 775

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-05]

detection period: 2019-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 12583
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11840
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	417
2	TENCENT-CN	346
3	DO-13	273
4	Baidu	248
5	AT-88-Z	200
6	HINET-NET	192
7	VNPT-VN	174
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	163
9	OVH	154
10	KORNET	131

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2519
2	United States	2046
3	France	685
4	Russian Federation	541
5	Brazil	461
6	Viet Nam	392
7	India	381
8	Indonesia	305
9	South Korea	279
10	Singapore	242

Suspected Bot List [2019-05-05]

detection period: 2019-05-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 743

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-04]

detection period: 2019-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 12839
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12050
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	410
2	TENCENT-CN	343
3	VNPT-VN	263
4	AT-88-Z	259
5	DO-13	251
6	Baidu	239
7	HINET-NET	215
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	165
9	02.558.157/0001-62	141
10	OVH	137

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2424
2	United States	2036
3	France	629
4	Viet Nam	560
5	Russian Federation	535
6	Brazil	492
7	India	474
8	Indonesia	370
9	South Korea	256
10	Taiwan	247

Suspected Bot List [2019-05-04]

detection period: 2019-05-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 789

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2019-05-03]

detection period: 2019-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 13318
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12526
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	414
2	TENCENT-CN	340
3	VNPT-VN	327
4	DO-13	266
5	AT-88-Z	242
6	Baidu	235
7	HINET-NET	216
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	164
9	VIETTEL-VN	147
10	OVH	140

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2428
2	United States	2097
3	Viet Nam	664
4	France	654
5	Russian Federation	545
6	Brazil	530
7	India	509
8	Indonesia	453
9	South Korea	258
10	Taiwan	247