Suspected Bots' IP List for May 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-05-01]
Suspected Bots IP [2018-05-02]
Suspected Bots IP [2018-05-03]
Suspected Bots IP [2018-05-04]
Suspected Bots IP [2018-05-05]
Suspected Bots IP [2018-05-06]
Suspected Bots IP [2018-05-07]
Suspected Bots IP [2018-05-08]
Suspected Bots IP [2018-05-09]
Suspected Bots IP [2018-05-10]
Suspected Bots IP [2018-05-11]
Suspected Bots IP [2018-05-12]
Suspected Bots IP [2018-05-13]
Suspected Bots IP [2018-05-14]
Suspected Bots IP [2018-05-15]
Suspected Bots IP [2018-05-16]
Suspected Bots IP [2018-05-17]
Suspected Bots IP [2018-05-18]
Suspected Bots IP [2018-05-19]
Suspected Bots IP [2018-05-20]
Suspected Bots IP [2018-05-21]
Suspected Bots IP [2018-05-22]
Suspected Bots IP [2018-05-23]
Suspected Bots IP [2018-05-24]
Suspected Bots IP [2018-05-25]
Suspected Bots IP [2018-05-26]
Suspected Bots IP [2018-05-27]
Suspected Bots IP [2018-05-28]
Suspected Bots IP [2018-05-29]
Suspected Bots IP [2018-05-30]
Suspected Bots IP [2018-05-31]

Botnet Statistics [2018-06-30]

detection period: 2018-06-30 00:00-23:59 UTC
total number of suspected botnet IPs: 566
number of botnet IPs notified to network operators: 518
number of spam blocked: 29661
recipient count of spam blocked: 840350

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	15
2	TencentCloud	12
3	CHINANET-JS	9
4	CMNET	8
5	CHINANET-GD	7
6	AT-88-Z	7
7	VNPT-VNNIC-VN	6
8	OVH	6
9	GO-DADDY-COM-LLC	6
10	FR-OVH-20060920	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	105
2	United States	95
3	France	46
4	South Korea	33
5	India	30
6	Brazil	19
7	Russian Federation	16
8	Germany	16
9	Indonesia	15
10	Viet Nam	14

Suspected Bot List [2018-06-30]

detection period: 2018-06-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting: