Suspected Bot List [2017-01-30]

detection period: 2017-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.197	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
KZ	185.19.194.234	Kazakhstan
SA	212.12.175.222	Saudi Arabia
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
TW	123.194.119.227	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-30]

detection period: 2017-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 645
number of botnet IPs notified to network operators: 622
number of spam blocked: 25642
recipient count of spam blocked: 285411

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-SD	58
2	HINET-NET	57
3	CHINANET-JS	56
4	UNICOM-GX	32
5	UNICOM-LN	28
6	UNICOM-SX	21
7	CHINANET-ZJ	15
8	CHINANET-AH	13
9	CHINANET-GZ	12
10	CHINANET-GD	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	432
2	Taiwan	98
3	United States	14
4	Brazil	13
5	Russian Federation	11
6	Germany	9
7	India	7
8	Colombia	7
9	Netherlands	5
10	Italy	4

Suspected Bot List [2017-01-29]

detection period: 2017-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	190.104.231.246	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
KZ	185.19.194.234	Kazakhstan
SA	212.12.175.222	Saudi Arabia
TW	106.1.54.147	Taiwan
TW	118.233.116.192	Taiwan
TW	118.233.118.79	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-29]

detection period: 2017-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 637
number of botnet IPs notified to network operators: 618
number of spam blocked: 3793
recipient count of spam blocked: 105175

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	58
2	HINET-NET	53
3	UNICOM-SD	52
4	UNICOM-GX	35
5	UNICOM-LN	28
6	CHINANET-GZ	19
7	CHINANET-ZJ	18
8	UNICOM-HE	17
9	UNICOM-SX	16
10	CHINANET-GD	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	463
2	Taiwan	83
3	United States	11
4	Brazil	11
5	Russian Federation	9
6	Colombia	6
7	India	5
8	Germany	5
9	Italy	3
10	United Kingdom	3

Suspected Bot List [2017-01-28]

detection period: 2017-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
CO	190.242.119.197	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
KZ	185.19.194.234	Kazakhstan
TR	84.51.57.149	Turkey
TW	106.1.62.35	Taiwan
TW	118.233.118.79	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-28]

detection period: 2017-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 563
number of botnet IPs notified to network operators: 544
number of spam blocked: 4686
recipient count of spam blocked: 127286

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	43
2	HINET-NET	42
3	UNICOM-SD	39
4	UNICOM-GX	24
5	UNICOM-LN	20
6	CHINANET-ZJ	15
7	UNICOM-SX	14
8	CHINANET-XJ	13
9	CHINANET-AH	13
10	CHINANET-GZ	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	372
2	Taiwan	77
3	Brazil	18
4	United States	13
5	Colombia	9
6	Russian Federation	8
7	India	7
8	Germany	6
9	Ukraine	4
10	Kazakhstan	3

Suspected Bot List [2017-01-27]

detection period: 2017-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.18.223	Arab Emirates
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
SA	212.12.175.222	Saudi Arabia
TR	84.51.57.149	Turkey
TW	118.233.116.192	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-27]

detection period: 2017-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 155
number of botnet IPs notified to network operators: 140
number of spam blocked: 2462
recipient count of spam blocked: 55700

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	RingLink	6
2	ALISOFT	6
3	TencentCloud	5
4	CHINANET-ZJ	5
5	CHINANET-GD	5
6	002.558.157/0001-62	5
7	LIGHTWAVENET-V4-1	3
8	tonghnetwork	2
9	broadNnet-KR	2
10	UNICOM-GD	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	55
2	Brazil	16
3	United States	10
4	Russian Federation	8
5	Colombia	6
6	Taiwan	5
7	Spain	5
8	South Korea	4
9	Italy	4
10	Germany	4

Suspected Bot List [2017-01-26]

detection period: 2017-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 26

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.18.223	Arab Emirates
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
IT	94.177.225.212	Italy
SA	212.12.175.222	Saudi Arabia
TR	84.51.57.149	Turkey
TR	213.74.209.50	Turkey
TW	118.233.116.192	Taiwan
US	206.125.41.139	United States
US	206.125.47.5	United States
US	206.125.47.7	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-26]

detection period: 2017-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 257
number of botnet IPs notified to network operators: 232
number of spam blocked: 8198
recipient count of spam blocked: 195864

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-GX	15
2	DOPI1	8
3	ALISOFT	8
4	TencentCloud	6
5	RingLink	6
6	UNKNOWN	5
7	UNICOM-GD	5
8	CHINANET-ZJ	5
9	KORNET-KR	4
10	CHINANET-HN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	90
2	Brazil	23
3	United States	21
4	Russian Federation	17
5	Italy	12
6	Taiwan	8
7	United Kingdom	8
8	Germany	8
9	Colombia	7
10	South Korea	5

Suspected Bot List [2017-01-25]

detection period: 2017-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
BO	186.27.126.130	Bolivia
CO	190.60.234.186	Colombia
IN	125.16.240.197	India
IN	203.192.212.52	India
IN	223.196.86.228	India
MX	189.206.98.28	Mexico
SA	212.12.175.222	Saudi Arabia
TR	213.74.209.50	Turkey
TW	118.233.116.192	Taiwan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-01-25]

detection period: 2017-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 277
number of botnet IPs notified to network operators: 254
number of spam blocked: 15066
recipient count of spam blocked: 336957

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-GX	33
2	CHINANET-HN	14
3	CHINANET-HB	8
4	CHINANET-GD	8
5	TencentCloud	6
6	RingLink	6
7	DOPI1	5
8	CHINANET-ZJ	5
9	ALISOFT	4
10	UNICOM-SD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	118
2	United States	16
3	Brazil	14
4	Russian Federation	13
5	Italy	12
6	Taiwan	9
7	Colombia	8
8	Germany	7
9	Argentina	7
10	United Kingdom	6

Suspected Bot List [2017-01-24]

detection period: 2017-01-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-24]

detection period: 2017-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 70
number of botnet IPs notified to network operators: 63
number of spam blocked: 2091
recipient count of spam blocked: 2091

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	4
2	ALISOFT	3
3	CHINANET-ZJ	2
4	CHINANET-SN	2
5	tonghnetwork	1
6	smartnetTransfernetze	1
7	XIAOZHIYUN1-AP	1
8	WEB24	1
9	VODAFONE-IT	1
10	VNPT-VNNIC-VN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	21
2	Italy	6
3	United States	5
4	Russian Federation	3
5	India	3
6	Brazil	3
7	Viet Nam	2
8	Ukraine	2
9	Hong Kong	2
10	Spain	2

Suspected Bot List [2017-01-23]

detection period: 2017-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-23]

detection period: 2017-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 75
number of botnet IPs notified to network operators: 67
number of spam blocked: 226
recipient count of spam blocked: 226

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	04.151.097/0001-94	5
2	ALISOFT	4
3	UNICOM-GX	3
4	CHINANET-GD	3
5	KORNET-KR	2
6	CMNET	2
7	tonghnetwork	1
8	smartnetISDNeinwahl	1
9	UNICOM-CN	1
10	Timer	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	20
2	Brazil	11
3	United States	4
4	Russian Federation	4
5	Spain	4
6	Italy	3
7	Colombia	3
8	Turkey	2
9	Poland	2
10	South Korea	2

Suspected Bot List [2017-01-22]

detection period: 2017-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-22]

detection period: 2017-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 75
number of botnet IPs notified to network operators: 65
number of spam blocked: 310
recipient count of spam blocked: 310

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-GX	5
2	CHINANET-GD	5
3	UNICOM-BJ	3
4	RO-JUMP-20051129	3
5	ALISOFT	3
6	RingLink	2
7	KORNET-KR	2
8	CHINANET-SH	2
9	AR-CASA10-LACNIC	2
10	002.558.157/0001-62	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	28
2	Brazil	8
3	Russian Federation	5
4	Romania	4
5	Colombia	4
6	Argentina	4
7	Italy	3
8	Czech Republic	3
9	Ukraine	2
10	South Korea	2

Suspected Bot List [2017-01-21]

detection period: 2017-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-21]

detection period: 2017-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 61
number of botnet IPs notified to network operators: 55
number of spam blocked: 137
recipient count of spam blocked: 137

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	tonghnetwork	3
2	UNICOM-GX	2
3	SMARTONE-MO	2
4	MX-ALES-LACNIC	2
5	CO-ETBE-LACNIC	2
6	CHINANET-GD	2
7	ALISOFT	2
8	WIMORE	1
9	VDC-NET	1
10	UNIFIEDLAYER-NETWORK-14	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	21
2	Brazil	7
3	Viet Nam	3
4	United States	3
5	Italy	3
6	Colombia	3
7	Russian Federation	2
8	Mexico	2
9	Macau	2
10	India	2

Suspected Bot List [2017-01-20]

detection period: 2017-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-20]

detection period: 2017-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 60
number of botnet IPs notified to network operators: 55
number of spam blocked: 156
recipient count of spam blocked: 156

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	5
2	UNICOM-GX	2
3	UNICOM-GD	2
4	TencentCloud	2
5	RingLink	2
6	RO-JUMP-20051129	2
7	CO-ACSA-LACNIC	2
8	CHINANET-SN	2
9	ALISOFT	2
10	WEBSTREAM	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	29
2	Russian Federation	4
3	Colombia	4
4	United States	3
5	India	3
6	Brazil	2
7	Venezuela	1
8	Ukraine	1
9	Saudi Arabia	1
10	Romania	1

Suspected Bots' IP List for December 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-12-01]
Suspected Bots IP [2016-12-02]
Suspected Bots IP [2016-12-03]
Suspected Bots IP [2016-12-04]
Suspected Bots IP [2016-12-05]
Suspected Bots IP [2016-12-06]
Suspected Bots IP [2016-12-07]
Suspected Bots IP [2016-12-08]
Suspected Bots IP [2016-12-09]
Suspected Bots IP [2016-12-10]
Suspected Bots IP [2016-12-11]
Suspected Bots IP [2016-12-12]
Suspected Bots IP [2016-12-13]
Suspected Bots IP [2016-12-14]
Suspected Bots IP [2016-12-15]
Suspected Bots IP [2016-12-16]
Suspected Bots IP [2016-12-17]
Suspected Bots IP [2016-12-18]
Suspected Bots IP [2016-12-19]
Suspected Bots IP [2016-12-20]
Suspected Bots IP [2016-12-21]
Suspected Bots IP [2016-12-22]
Suspected Bots IP [2016-12-23]
Suspected Bots IP [2016-12-24]
Suspected Bots IP [2016-12-25]
Suspected Bots IP [2016-12-26]
Suspected Bots IP [2016-12-27]
Suspected Bots IP [2016-12-28]
Suspected Bots IP [2016-12-29]
Suspected Bots IP [2016-12-30]
Suspected Bots IP [2016-12-31]

Suspected Bot List [2017-01-19]

detection period: 2017-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-19]

detection period: 2017-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 60
number of botnet IPs notified to network operators: 58
number of spam blocked: 246
recipient count of spam blocked: 246

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	5
2	TencentCloud	4
3	CHINANET-SH	4
4	RO-JUMP-20051129	2
5	CHINANET-ZJ	2
6	CHINANET-SN	2
7	CHINANET-JS	2
8	ALISOFT	2
9	tonghnetwork	1
10	UK-WEBFUSION-LEEDS	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	30
2	Brazil	4
3	United States	3
4	Germany	3
5	Taiwan	2
6	Russian Federation	2
7	Romania	2
8	Hong Kong	2
9	Thailand	1
10	Pakistan	1

Suspected Bot List [2017-01-18]

detection period: 2017-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-18]

detection period: 2017-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 62
number of botnet IPs notified to network operators: 55
number of spam blocked: 305
recipient count of spam blocked: 305

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	8
2	UNIFIEDLAYER-NETWORK-10	2
3	RingLink	2
4	RO-JUMP-20051129	2
5	DIRECT-HOSTING-KR	2
6	CHINANET-ZJ	2
7	002.558.157/0001-62	2
8	tonghnetwork	1
9	UNICOM-GD	1
10	TencentCloud	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	25
2	Brazil	6
3	United States	4
4	Netherlands	3
5	Taiwan	2
6	Saudi Arabia	2
7	South Korea	2
8	Italy	2
9	Germany	2
10	South Africa	1

Suspected Bot List [2017-01-17]

detection period: 2017-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

I haven't got a new VPS for fake open relay yet.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-17]

detection period: 2017-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 118
number of botnet IPs notified to network operators: 111
number of spam blocked: 410
recipient count of spam blocked: 410

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	11
2	CHINANET-GD	7
3	FPT-VN	4
4	FPT-NET	4
5	CMNET	4
6	RingLink	3
7	OCN	3
8	tonghnetwork	2
9	UNICOM-GD	2
10	TencentCloud	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	34
2	Viet Nam	23
3	Japan	7
4	Taiwan	5
5	United States	4
6	Romania	4
7	Brazil	4
8	Russian Federation	3
9	Poland	3
10	Pakistan	3

Suspected Bot List [2017-01-16]

detection period: 2017-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

The VPS used for fake open relay is gone today since its provider stops their operation.

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-16]

detection period: 2017-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 68
number of botnet IPs notified to network operators: 65
number of spam blocked: 255
recipient count of spam blocked: 255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	5
2	GIANT	4
3	RingLink	3
4	CHINANET-GD	3
5	tonghnetwork	2
6	RJNET	2
7	HINET-NET	2
8	ALISOFT	2
9	002.558.157/0001-62	2
10	Xenius-Interoute-2	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	34
2	Taiwan	4
3	Germany	4
4	United States	3
5	Netherlands	3
6	Brazil	3
7	Romania	2
8	Italy	2
9	Colombia	2
10	Viet Nam	1

Suspected Bot List [2017-01-15]

detection period: 2017-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-15]

detection period: 2017-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 76
number of botnet IPs notified to network operators: 71
number of spam blocked: 80223
recipient count of spam blocked: 401067

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	7
2	CHINANET-GD	6
3	TencentCloud	4
4	HINET-NET	3
5	CHINANET-ZJ	3
6	tonghnetwork	2
7	RingLink	2
8	HINET-TW	2
9	ALISOFT	2
10	002.558.157/0001-62	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	41
2	Taiwan	5
3	United States	4
4	Germany	4
5	Brazil	3
6	Singapore	2
7	Russian Federation	2
8	Colombia	2
9	Bolivia	2
10	Argentina	2

Suspected Bot List [2017-01-14]

detection period: 2017-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-14]

detection period: 2017-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 71
number of botnet IPs notified to network operators: 70
number of spam blocked: 391
recipient count of spam blocked: 543

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	6
2	UNICOM-BJ	5
3	TencentCloud	3
4	CHINANET-GD	3
5	002.558.157/0001-62	3
6	tonghnetwork	2
7	UNICOM-GX	2
8	KORNET-KR	2
9	HICHINA	2
10	GIANT	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	36
2	United States	7
3	Brazil	4
4	Germany	3
5	Russian Federation	2
6	South Korea	2
7	India	2
8	United Kingdom	2
9	Colombia	2
10	Venezuela	1

Suspected Bot List [2017-01-13]

detection period: 2017-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-13]

detection period: 2017-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 84
number of botnet IPs notified to network operators: 80
number of spam blocked: 2075
recipient count of spam blocked: 2075

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-BJ	7
2	CHINANET-GD	7
3	TencentCloud	6
4	CMNET	4
5	tonghnetwork	3
6	HICHINA	3
7	UNICOM-SD	2
8	CAT	2
9	ALISOFT	2
10	Xenius-Interoute-2	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	51
2	Russian Federation	6
3	United States	5
4	Thailand	2
5	Japan	2
6	Italy	2
7	Germany	2
8	South Africa	1
9	Ukraine	1
10	Taiwan	1

Suspected Bot List [2017-01-12]

detection period: 2017-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	27.147.151.50	Bangladesh
BD	202.5.37.132	Bangladesh
ES	88.28.209.187	Spain
GE	37.131.224.106	Republic Of Georgia
IN	59.145.146.94	India
IN	182.75.205.202	India
NI	190.124.32.202	Nicaragua
PK	110.36.63.25	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-12]

detection period: 2017-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 258
number of botnet IPs notified to network operators: 236
number of spam blocked: 3500
recipient count of spam blocked: 3662

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	27
2	CMNET	12
3	UNICOM-BJ	9
4	CHINANET-HB	7
5	UNICOM-JX	6
6	UNICOM-GD	6
7	TencentCloud	6
8	SV-CSCV-LACNIC	6
9	CHINANET-YN	6
10	CHINANET-GX	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	147
2	India	8
3	Viet Nam	7
4	Colombia	7
5	El Salvador	6
6	South Korea	6
7	Brazil	6
8	United States	5
9	Taiwan	5
10	Italy	5

Suspected Bot List [2017-01-11]

detection period: 2017-01-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.71.25.62	India
IN	182.71.119.162	India
IN	182.75.205.202	India
NI	190.124.32.202	Nicaragua
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.122	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador
ZM	155.0.27.5	Zambia

List from greylisting:

Botnet Statistics [2017-01-11]

detection period: 2017-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 565
number of botnet IPs notified to network operators: 536
number of spam blocked: 37755
recipient count of spam blocked: 40001

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	195
2	CMNET	20
3	HINET-NET	16
4	UNICOM-BJ	14
5	BSNLNET	11
6	UNICOM-JX	10
7	UNICOM-GD	10
8	UCOM-GPON	9
9	SV-CSCV-LACNIC	8
10	CHINANET-YN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	353
2	India	22
3	Taiwan	19
4	Italy	12
5	Colombia	11
6	Bangladesh	9
7	Armenia	9
8	El Salvador	8
9	Cambodia	8
10	United States	7

Suspected Bot List [2017-01-10]

detection period: 2017-01-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	191.85.174.242	Argentina
BD	202.5.37.132	Bangladesh
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.75.205.202	India
NI	190.124.32.202	Nicaragua
PK	110.36.63.25	Pakistan
PK	110.38.217.122	Pakistan
RO	89.165.156.233	Romania
RO	109.166.146.198	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-10]

detection period: 2017-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 543
number of botnet IPs notified to network operators: 519
number of spam blocked: 61281
recipient count of spam blocked: 64743

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	207
2	HINET-NET	27
3	CMNET	18
4	UNICOM-GD	11
5	BSNLNET	9
6	SV-CSCV-LACNIC	8
7	CHINANET-HB	8
8	CHINANET-YN	7
9	CHINANET-GX	7
10	UNICOM-JX	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	349
2	Taiwan	29
3	India	20
4	Colombia	9
5	Brazil	9
6	El Salvador	8
7	Russian Federation	8
8	South Korea	8
9	Italy	8
10	Bangladesh	8

Suspected Bot List [2017-01-09]

detection period: 2017-01-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.75.205.202	India
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-09]

detection period: 2017-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 531
number of botnet IPs notified to network operators: 508
number of spam blocked: 57128
recipient count of spam blocked: 61291

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	225
2	HINET-NET	28
3	CMNET	13
4	CHINANET-HB	13
5	UNICOM-GD	9
6	UNICOM-BJ	7
7	UNICOM-JX	6
8	BSNLNET	6
9	SV-CSCV-LACNIC	5
10	CHINANET-YN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	348
2	Taiwan	32
3	India	16
4	Italy	11
5	South Korea	10
6	Brazil	10
7	Russian Federation	7
8	Colombia	7
9	United States	6
10	Cambodia	6

Botnet Statistics for the year of 2016

detection period: 2016-01-01 00:00 - 2016-12-31 23:59 UTC
total number of suspected botnet IPs: 277464
number of blocked spams: 4349886
recipient count of blocked spams: 55283278
detection methods: fake open relay + greylisting

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	95112
2	Taiwan	47932
3	Viet Nam	26200
4	India	22097
5	Mexico	12547
6	Iran	6308
7	Brazil	5402
8	Colombia	3633
9	Turkey	3611
10	Indonesia	3423
11	Pakistan	3408
12	United States	3315
13	Peru	2773
14	Tunisia	1720
15	Thailand	1498
16	Bangladesh	1477
17	Argentina	1452
18	Romania	1391
19	Russian Federation	1354
20	Italy	1310
21	Venezuela	1269
22	Arab Emirates	1267
23	Philippines	1210
24	Poland	1135
25	Bolivia	1090

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1448316
2	China	1168680
3	United States	665790
4	Poland	499047
5	Brazil	210130
6	Mexico	65594
7	Germany	40658
8	Thailand	21382
9	India	20017
10	Romania	18195
11	Hong Kong	13715
12	Turkey	12433
13	Italy	11855
14	Russian Federation	11528
15	Slovenia	10707
16	Colombia	10418
17	France	9188
18	Viet Nam	9010
19	South Korea	8593
20	Bolivia	5335
21	Argentina	4944
22	United Kingdom	4870
23	Sweden	4663
24	Spain	4642
25	Philippines	4093

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2017-01-08]

detection period: 2017-01-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 14

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	191.85.155.115	Argentina
BD	202.5.37.132	Bangladesh
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.75.205.202	India
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-08]

detection period: 2017-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 552
number of botnet IPs notified to network operators: 539
number of spam blocked: 59692
recipient count of spam blocked: 62628

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	269
2	HINET-NET	36
3	CHINANET-HB	23
4	CMNET	12
5	UNICOM-BJ	11
6	UNICOM-GD	10
7	UNICOM-GX	8
8	CHINANET-JS	8
9	CHINANET-GX	7
10	SV-CSCV-LACNIC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	414
2	Taiwan	38
3	India	12
4	Cambodia	7
5	Bangladesh	7
6	El Salvador	6
7	Italy	6
8	Brazil	6
9	South Korea	5
10	Colombia	5

Botnet Statistics for December 2016

detection period: 2016-12-01 00:00 - 2016-12-31 23:59 UTC
total number of suspected botnet IPs: 12468
number of blocked spams: 562466
recipient count of blocked spams: 699850

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6896
2	Viet Nam	1229
3	India	1195
4	Brazil	251
5	Iran	223
6	Indonesia	166
7	Pakistan	153
8	United States	149
9	Mexico	149
10	Taiwan	121
11	Colombia	105
12	Italy	104
13	Bangladesh	101
14	Turkey	99
15	Russian Federation	93
16	Thailand	68
17	Philippines	54
18	Argentina	52
19	Poland	42
20	Cambodia	42
21	Antigua And Barbuda	42
22	South Korea	37
23	Tunisia	34
24	Serbia	34
25	Ukraine	33

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	503171
2	Romania	16089
3	India	4917
4	United States	4772
5	Poland	4530
6	Slovenia	3572
7	Italy	2938
8	Russian Federation	1957
9	El Salvador	1333
10	Colombia	1274
11	Taiwan	1263
12	South Korea	1146
13	Brazil	1090
14	Ukraine	1020
15	Germany	983
16	Bangladesh	896
17	Antigua And Barbuda	759
18	Cambodia	758
19	Armenia	731
20	Azerbaijan	648
21	Pakistan	578
22	Indonesia	519
23	Mexico	506
24	Gabon	410
25	Spain	402

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Suspected Bot List [2017-01-07]

detection period: 2017-01-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
ID	118.98.125.58	Indonesia
ID	202.75.97.154	Indonesia
ID	203.190.113.186	Indonesia
IN	59.145.146.94	India
IN	182.75.205.202	India
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.194	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-07]

detection period: 2017-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 615
number of botnet IPs notified to network operators: 593
number of spam blocked: 103366
recipient count of spam blocked: 106814

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	232
2	HINET-NET	67
3	CHINANET-HB	22
4	UNICOM-BJ	18
5	CMNET	16
6	UNICOM-GD	10
7	CHINANET-GD	9
8	UNICOM-SD	8
9	SV-CSCV-LACNIC	7
10	UNICOM-JX	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	414
2	Taiwan	71
3	India	13
4	Bangladesh	8
5	El Salvador	7
6	Cambodia	7
7	Colombia	7
8	South Korea	6
9	United States	5
10	Russian Federation	5

Suspected Bot List [2017-01-06]

detection period: 2017-01-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
IN	59.145.146.94	India
IN	182.73.193.250	India
IN	182.75.205.202	India
PK	110.36.33.37	Pakistan
PK	110.36.63.25	Pakistan
PK	110.38.217.122	Pakistan
RO	89.165.156.233	Romania
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-06]

detection period: 2017-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 577
number of botnet IPs notified to network operators: 554
number of spam blocked: 18656
recipient count of spam blocked: 22952

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	248
2	CMNET	18
3	CHINANET-HB	18
4	UNICOM-GD	14
5	UNICOM-JX	10
6	UNICOM-SD	9
7	UNICOM-BJ	9
8	HINET-NET	9
9	CHINANET-YN	9
10	UNICOM-HA	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	425
2	India	14
3	Taiwan	12
4	United States	9
5	El Salvador	7
6	Russian Federation	7
7	Pakistan	7
8	Colombia	7
9	Bangladesh	7
10	South Korea	6

Suspected Bot List [2017-01-05]

detection period: 2017-01-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BD	202.5.37.132	Bangladesh
FR	193.252.26.9	France
GA	197.231.141.29	Gabon
GE	37.131.224.106	Republic Of Georgia
HT	200.113.221.17	Haiti
ID	118.98.125.58	Indonesia
IN	59.145.146.94	India
IN	182.73.193.250	India
IN	182.74.247.122	India
IN	182.75.114.174	India
IN	182.75.205.202	India
PK	110.36.35.128	Pakistan
PK	110.36.63.25	Pakistan
SC	41.86.56.47	Seychelles
SV	179.5.32.178	El Salvador
SV	179.5.32.182	El Salvador
SV	179.5.32.186	El Salvador
SV	179.5.32.190	El Salvador
SV	179.5.33.10	El Salvador
SV	179.5.33.137	El Salvador
SV	179.5.33.190	El Salvador
SV	179.5.33.202	El Salvador

List from greylisting:

Botnet Statistics [2017-01-05]

detection period: 2017-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 595
number of botnet IPs notified to network operators: 549
number of spam blocked: 15342
recipient count of spam blocked: 18283

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	226
2	CHINANET-HB	26
3	MSFT	18
4	CMNET	18
5	UNICOM-GD	13
6	UNICOM-BJ	13
7	CHINANET-YN	10
8	UNICOM-HA	9
9	SV-CSCV-LACNIC	8
10	CHINANET-GD	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	421
2	United States	28
3	India	16
4	Taiwan	9
5	El Salvador	8
6	Colombia	7
7	Brazil	7
8	Bangladesh	7
9	Russian Federation	6
10	Cambodia	6

Suspected Bot List [2017-01-04]

detection period: 2017-01-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-01-04]

detection period: 2017-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 317
number of botnet IPs notified to network operators: 312
number of spam blocked: 14040
recipient count of spam blocked: 17229

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HN	197
2	CHINANET-HB	12
3	UNICOM-BJ	10
4	HINET-NET	7
5	UNICOM-GX	6
6	CHINANET-GD	6
7	UNICOM-SD	5
8	CMNET	4
9	CHINANET-JS	4
10	RingLink	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	277
2	United States	7
3	Taiwan	7
4	Hong Kong	3
5	Austria	2
6	South Africa	1
7	Viet Nam	1
8	Venezuela	1
9	Ukraine	1
10	Thailand	1