Botnet Statistics [2017-04-29]

detection period: 2017-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 217
number of botnet IPs notified to network operators: 207
number of spam blocked: 39714
recipient count of spam blocked: 78387

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	27
2	CMNET	17
3	VNPT-VNNIC-VN	13
4	UNICOM-BJ	6
5	KORNET-KR	5
6	CHINANET-JS	5
7	CHINANET-AH	5
8	BSNLNET	4
9	VIETEL-VNNIC-VN	3
10	UNICOM-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	Viet Nam	24
3	United States	14
4	India	11
5	Russian Federation	8
6	South Korea	8
7	Brazil	6
8	Italy	4
9	Ukraine	3
10	Taiwan	3

Suspected Bot List [2017-04-29]

detection period: 2017-04-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ME	46.161.98.232	Montenegro
MX	201.163.21.226	Mexico
US	97.89.253.230	United States

List from greylisting:

Botnet Statistics [2017-04-28]

detection period: 2017-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 411
number of botnet IPs notified to network operators: 401
number of spam blocked: 129360
recipient count of spam blocked: 129372

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	81
2	WASU	69
3	VNPT-VNNIC-VN	46
4	CHINANET-JS	18
5	CHINANET-GD	18
6	FPT-VN	11
7	VIETEL-VN	10
8	UNICOM-JS	10
9	BSNLNET	8
10	VIETEL-VNNIC-VN	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	227
2	Viet Nam	86
3	United States	15
4	Ukraine	10
5	Russian Federation	10
6	India	9
7	South Korea	6
8	Thailand	4
9	United Kingdom	4
10	Brazil	4

Suspected Bot List [2017-04-28]

detection period: 2017-04-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics for March 2017

detection period: 2017-03-01 00:00 - 2017-03-31 23:59 UTC
total number of suspected botnet IPs: 16031
number of blocked spams: 1211856
recipient count of blocked spams: 33008055

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	Taiwan	7963
2	China	5025
3	Viet Nam	387
4	India	332
5	United States	254
6	Mexico	148
7	Russian Federation	140
8	Brazil	135
9	Iran	116
10	Indonesia	90
11	Peru	83
12	Pakistan	72
13	South Korea	72
14	Turkey	64
15	Colombia	61
16	Argentina	57
17	Saudi Arabia	45
18	Italy	44
19	France	38
20	Tunisia	36
21	Thailand	32
22	Ukraine	29
23	Germany	28
24	South Africa	26
25	Bangladesh	26

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	1157391
2	United States	36098
3	China	8055
4	Russian Federation	1587
5	Sweden	1128
6	Netherlands	1074
7	Estonia	1060
8	Mexico	571
9	Romania	455
10	South Korea	435
11	Benin	424
12	Chile	411
13	Thailand	343
14	Colombia	332
15	Brazil	330
16	Canada	207
17	France	204
18	India	189
19	Ukraine	175
20	United Kingdom	145
21	Peru	131
22	Hong Kong	128
23	Ecuador	119
24	Italy	118
25	Macau	102

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-04-27]

detection period: 2017-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 522
number of botnet IPs notified to network operators: 509
number of spam blocked: 46207
recipient count of spam blocked: 95410

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	82
2	WASU	72
3	VNPT-VNNIC-VN	47
4	CHINANET-JS	35
5	CHINANET-GD	28
6	ETC-VNNIC-VN	13
7	UNICOM-JS	11
8	UNICOM-BJ	11
9	FPT-VN	11
10	BB-Multiplay	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	280
2	Viet Nam	98
3	India	27
4	United States	19
5	Brazil	12
6	Netherlands	10
7	Russian Federation	9
8	Thailand	8
9	Ukraine	7
10	Taiwan	4

Suspected Bot List [2017-04-27]

detection period: 2017-04-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
SA	37.216.243.35	Saudi Arabia
US	97.89.253.230	United States

List from greylisting:

Botnet Statistics [2017-04-26]

detection period: 2017-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 407
number of botnet IPs notified to network operators: 396
number of spam blocked: 97195
recipient count of spam blocked: 118436

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	68
2	WASU	59
3	CHINANET-JS	57
4	VNPT-VNNIC-VN	29
5	CHINANET-GD	26
6	UNICOM-JS	12
7	UNICOM-BJ	12
8	VIETEL-VN	5
9	Chinafic	5
10	WASU-BB	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	270
2	Viet Nam	46
3	United States	14
4	Russian Federation	13
5	South Korea	5
6	India	5
7	United Kingdom	4
8	France	4
9	Germany	4
10	Brazil	4

Suspected Bot List [2017-04-26]

detection period: 2017-04-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
SA	37.216.243.35	Saudi Arabia
US	97.89.253.230	United States

List from greylisting:

Botnet Statistics [2017-04-25]

detection period: 2017-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 416
number of botnet IPs notified to network operators: 381
number of spam blocked: 189627
recipient count of spam blocked: 189627

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	60
2	CMNET	44
3	CHINANET-JS	38
4	VNPT-VNNIC-VN	27
5	UNICOM-JS	15
6	CHINANET-GD	15
7	UNICOM-BJ	10
8	VIETEL-VN	7
9	FPT-VN	7
10	BM-ID	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	219
2	Viet Nam	48
3	India	32
4	United States	19
5	Indonesia	9
6	Bangladesh	8
7	Turkey	5
8	Thailand	5
9	Singapore	5
10	Brazil	5

Suspected Bot List [2017-04-25]

detection period: 2017-04-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-24]

detection period: 2017-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 289
number of botnet IPs notified to network operators: 278
number of spam blocked: 102460
recipient count of spam blocked: 132955

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	78
2	CMNET	39
3	UNICOM-BJ	16
4	CHINANET-GD	13
5	PUHI-AP	7
6	Chinafic	5
7	ALISOFT	4
8	HINET-NET	3
9	HICHINA	3
10	BSNLNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	179
2	India	15
3	United States	13
4	Singapore	9
5	Viet Nam	8
6	Brazil	8
7	Taiwan	5
8	Thailand	4
9	Hong Kong	4
10	Russian Federation	3

Suspected Bot List [2017-04-24]

detection period: 2017-04-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	97.89.253.230	United States

List from greylisting:

Botnet Statistics [2017-04-23]

detection period: 2017-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 286
number of botnet IPs notified to network operators: 283
number of spam blocked: 1030
recipient count of spam blocked: 1030

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	94
2	CMNET	81
3	CHINANET-GD	17
4	UNICOM-BJ	14
5	Chinafic	5
6	WASU-BB	4
7	NETERRA-TSHOOT-NET	3
8	TELSTRAINTERNET2-AU	2
9	KORNET-KR	2
10	CHINANET-SC	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	236
2	United States	6
3	Russian Federation	6
4	South Korea	4
5	United Kingdom	4
6	France	3
7	Germany	3
8	Brazil	3
9	Bulgaria	3
10	Australia	3

Suspected Bot List [2017-04-23]

detection period: 2017-04-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Suspected Bots' IP List for March 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-03-01]
Suspected Bots IP [2017-03-02]
Suspected Bots IP [2017-03-03]
Suspected Bots IP [2017-03-04]
Suspected Bots IP [2017-03-05]
Suspected Bots IP [2017-03-06]
Suspected Bots IP [2017-03-07]
Suspected Bots IP [2017-03-08]
Suspected Bots IP [2017-03-09]
Suspected Bots IP [2017-03-10]
Suspected Bots IP [2017-03-11]
Suspected Bots IP [2017-03-12]
Suspected Bots IP [2017-03-13]
Suspected Bots IP [2017-03-14]
Suspected Bots IP [2017-03-15]
Suspected Bots IP [2017-03-16]
Suspected Bots IP [2017-03-17]
Suspected Bots IP [2017-03-18]
Suspected Bots IP [2017-03-19]
Suspected Bots IP [2017-03-20]
Suspected Bots IP [2017-03-21]
Suspected Bots IP [2017-03-22]
Suspected Bots IP [2017-03-23]
Suspected Bots IP [2017-03-24]
Suspected Bots IP [2017-03-25]
Suspected Bots IP [2017-03-26]
Suspected Bots IP [2017-03-27]
Suspected Bots IP [2017-03-28]
Suspected Bots IP [2017-03-29]
Suspected Bots IP [2017-03-30]
Suspected Bots IP [2017-03-31]

Botnet Statistics [2017-04-22]

detection period: 2017-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 112
number of botnet IPs notified to network operators: 110
number of spam blocked: 13414
recipient count of spam blocked: 65342

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	24
2	CHINANET-GD	15
3	NETERRA-TSHOOT-NET	7
4	UNICOM-BJ	5
5	Chinafic	5
6	tonghnetwork	2
7	xDSL-CLNT-KAMENSKTEL	1
8	ZZTB-MIB	1
9	YITAIFENG	1
10	WESTCALL-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	70
2	Bulgaria	7
3	United States	5
4	Russian Federation	5
5	Germany	3
6	Viet Nam	2
7	Taiwan	2
8	Poland	2
9	South Korea	2
10	India	2

Suspected Bot List [2017-04-22]

detection period: 2017-04-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-21]

detection period: 2017-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 354
number of botnet IPs notified to network operators: 336
number of spam blocked: 19061
recipient count of spam blocked: 125006

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	78
2	WASU	68
3	CHINANET-GD	12
4	UNICOM-BJ	11
5	VNPT-VNNIC-VN	6
6	KORNET-KR	5
7	Chinafic	5
8	CHINANET-JS	5
9	CHINANET-AH	5
10	ALISOFT	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	232
2	Russian Federation	19
3	India	14
4	Viet Nam	13
5	United States	13
6	South Korea	6
7	Germany	5
8	Hong Kong	3
9	Argentina	3
10	Venezuela	2

Suspected Bot List [2017-04-21]

detection period: 2017-04-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.42.24.98	Argentina
MX	148.243.192.238	Mexico
RS	89.216.28.123	Serbia
RU	77.72.82.21	Russian Federation
US	74.222.4.250	United States
US	97.89.253.230	United States
US	140.239.81.98	United States
UY	167.56.2.57	Uruguay

List from greylisting:

Botnet Statistics [2017-04-19]

detection period: 2017-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 509
number of botnet IPs notified to network operators: 491
number of spam blocked: 15483
recipient count of spam blocked: 67999

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	115
2	WASU	96
3	CHINANET-GD	20
4	CHINANET-AH	12
5	VNPT-VNNIC-VN	10
6	KORNET-KR	10
7	UNICOM-BJ	9
8	CHINANET-JS	8
9	CHINANET-YN	7
10	UNICOM-SD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	345
2	Russian Federation	22
3	Viet Nam	19
4	United States	19
5	India	18
6	South Korea	14
7	Ukraine	5
8	Iran	5
9	Hong Kong	4
10	South Africa	3

Suspected Bot List [2017-04-19]

detection period: 2017-04-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-18]

detection period: 2017-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 409
number of botnet IPs notified to network operators: 396
number of spam blocked: 3754
recipient count of spam blocked: 20779

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	91
2	WASU	79
3	CHINANET-GD	23
4	VNPT-VNNIC-VN	8
5	CHINANET-AH	7
6	KORNET-KR	6
7	UNICOM-GD	5
8	Chinafic	5
9	ALISOFT	5
10	UNICOM-HA	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	278
2	Russian Federation	20
3	Viet Nam	18
4	United States	11
5	South Korea	11
6	India	9
7	Thailand	5
8	Ukraine	4
9	Argentina	4
10	Romania	3

Suspected Bot List [2017-04-18]

detection period: 2017-04-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.42.24.98	Argentina
US	97.89.253.230	United States
UY	167.56.227.204	Uruguay

List from greylisting:

Botnet Statistics [2017-04-17]

detection period: 2017-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 303
number of botnet IPs notified to network operators: 295
number of spam blocked: 2582
recipient count of spam blocked: 79400

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	88
2	CMNET	87
3	CHINANET-GD	20
4	UNICOM-BJ	11
5	Chinafic	5
6	tonghnetwork	3
7	KORNET-KR	2
8	CHINANET-SX	2
9	CBC-CM-4	2
10	xDSL-CLNT-KAMENSKTEL	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	235
2	United States	9
3	Russian Federation	8
4	Singapore	3
5	South Korea	3
6	Japan	3
7	Hong Kong	3
8	United Kingdom	3
9	France	3
10	Spain	3

Suspected Bot List [2017-04-17]

detection period: 2017-04-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BJ	197.234.219.18	Benin

List from greylisting:

Botnet Statistics [2017-04-16]

detection period: 2017-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 273
number of botnet IPs notified to network operators: 263
number of spam blocked: 1923
recipient count of spam blocked: 31981

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	83
2	WASU	60
3	UNICOM-BJ	8
4	CHINANET-GD	8
5	Chinafic	5
6	UNICOM-HA	4
7	SMARTONE-MB	4
8	ALISOFT	4
9	UY-ANTA-LACNIC	3
10	CAT	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	198
2	United States	17
3	Hong Kong	7
4	Russian Federation	6
5	Thailand	5
6	Uruguay	3
7	Taiwan	3
8	South Korea	3
9	Japan	3
10	United Kingdom	3

Suspected Bot List [2017-04-16]

detection period: 2017-04-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	200.42.24.98	Argentina
PK	182.185.1.163	Pakistan
US	97.89.253.230	United States
UY	167.57.0.19	Uruguay
UY	179.25.64.127	Uruguay
UY	179.26.148.20	Uruguay

List from greylisting:

Botnet Statistics [2017-04-15]

detection period: 2017-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 168
number of botnet IPs notified to network operators: 165
number of spam blocked: 3708
recipient count of spam blocked: 16463

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	45
2	WASU	33
3	CHINANET-GD	9
4	UNICOM-BJ	8
5	VNPT-VNNIC-VN	3
6	BSNLNET	3
7	UNICOM-HA	2
8	UNICOM-GD	2
9	CHINANET-ZJ	2
10	CHINANET-SC	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	119
2	United States	10
3	Russian Federation	6
4	Viet Nam	4
5	Japan	4
6	India	3
7	United Kingdom	3
8	Thailand	2
9	Netherlands	2
10	South Korea	2

Suspected Bot List [2017-04-15]

detection period: 2017-04-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-14]

detection period: 2017-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 312
number of botnet IPs notified to network operators: 295
number of spam blocked: 18091
recipient count of spam blocked: 103257

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	55
2	WASU	33
3	UNICOM-BJ	10
4	CHINANET-GD	10
5	CHINANET-AH	10
6	KORNET-KR	6
7	Chinafic	5
8	CHINANET-JS	5
9	VNPT-VNNIC-VN	4
10	UNICOM-SD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	183
2	United States	18
3	Russian Federation	17
4	India	11
5	Viet Nam	9
6	South Korea	8
7	Ukraine	6
8	Thailand	3
9	Netherlands	3
10	Japan	3

Suspected Bot List [2017-04-14]

detection period: 2017-04-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
PS	178.214.77.180	Occupied Palestinian Territory
RS	89.216.28.123	Serbia
TR	85.99.231.121	Turkey
US	74.222.4.250	United States
US	97.89.253.230	United States

List from greylisting:

Botnet Statistics [2017-04-10]

detection period: 2017-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 343
number of botnet IPs notified to network operators: 333
number of spam blocked: 15318
recipient count of spam blocked: 67229

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	102
2	WASU	59
3	CHINANET-GD	23
4	UNICOM-BJ	11
5	CHINANET-JS	6
6	MSFT	5
7	KORNET-KR	5
8	Chinafic	5
9	UNICOM-HA	3
10	KRNIC-KR	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	243
2	United States	19
3	India	18
4	South Korea	9
5	Russian Federation	7
6	Indonesia	5
7	Viet Nam	4
8	Iran	4
9	Japan	3
10	Italy	3

Suspected Bot List [2017-04-10]

detection period: 2017-04-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 10

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-09]

detection period: 2017-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 265
number of botnet IPs notified to network operators: 257
number of spam blocked: 12529
recipient count of spam blocked: 59644

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	99
2	WASU	72
3	WASU-BB	13
4	UNICOM-BJ	13
5	CHINANET-GD	7
6	Chinafic	5
7	JUMPLINE-COM	3
8	VE-TTRU-LACNIC	2
9	UNICOM-JL	2
10	HINET-NET	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	226
2	United States	9
3	Brazil	4
4	Taiwan	3
5	Venezuela	2
6	Russian Federation	2
7	South Korea	2
8	Japan	2
9	Italy	2
10	Hong Kong	2

Suspected Bot List [2017-04-09]

detection period: 2017-04-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-08]

detection period: 2017-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 248
number of botnet IPs notified to network operators: 235
number of spam blocked: 13466
recipient count of spam blocked: 89825

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	47
2	WASU	31
3	UNICOM-BJ	10
4	CHINANET-GD	8
5	CHINANET-JS	6
6	BSNLNET	4
7	ALISOFT	4
8	UNICOM-SD	3
9	UNICOM-GD	3
10	KORNET-KR	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	157
2	United States	13
3	Russian Federation	12
4	India	9
5	South Korea	5
6	Thailand	4
7	Viet Nam	3
8	Taiwan	3
9	Pakistan	3
10	Ukraine	2

Suspected Bot List [2017-04-08]

detection period: 2017-04-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 13

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	122.174.127.201	India
MX	200.79.121.225	Mexico
US	67.229.103.42	United States

List from greylisting:

Botnet Statistics [2017-04-07]

detection period: 2017-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 352
number of botnet IPs notified to network operators: 335
number of spam blocked: 10680
recipient count of spam blocked: 104397

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	76
2	WASU	21
3	UNICOM-BJ	9
4	CHINANET-JS	9
5	CHINANET-HN	9
6	CHINANET-GD	8
7	CHINANET-AH	8
8	KORNET-KR	6
9	VNPT-VNNIC-VN	5
10	UNICOM-SD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	213
2	United States	16
3	India	14
4	Viet Nam	13
5	South Korea	7
6	Russian Federation	6
7	Taiwan	5
8	Bangladesh	5
9	Pakistan	4
10	France	4

Suspected Bot List [2017-04-07]

detection period: 2017-04-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
MX	200.79.121.225	Mexico
TW	123.195.73.108	Taiwan

List from greylisting:

Botnet Statistics [2017-04-06]

detection period: 2017-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 440
number of botnet IPs notified to network operators: 420
number of spam blocked: 10255
recipient count of spam blocked: 53974

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	111
2	WASU	52
3	CHINANET-GD	28
4	UNICOM-BJ	13
5	CHINANET-AH	13
6	CHINANET-HN	8
7	CHINANET-JS	7
8	KORNET-KR	6
9	CHINANET-YN	6
10	BSNLNET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	314
2	India	18
3	Russian Federation	16
4	United States	15
5	South Korea	10
6	Viet Nam	5
7	Ukraine	5
8	Japan	4
9	Taiwan	3
10	Thailand	3

Suspected Bot List [2017-04-06]

detection period: 2017-04-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-05]

detection period: 2017-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 537
number of botnet IPs notified to network operators: 507
number of spam blocked: 5165
recipient count of spam blocked: 63217

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	95
2	WASU	38
3	CHINANET-JS	21
4	KORNET-KR	19
5	CHINANET-AH	16
6	CHINANET-GD	14
7	UNICOM-SD	8
8	UNICOM-BJ	8
9	CHINANET-HN	8
10	BSNLNET	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	319
2	Russian Federation	32
3	United States	25
4	India	25
5	South Korea	24
6	Viet Nam	11
7	Ukraine	9
8	Taiwan	8
9	Pakistan	7
10	Mexico	4

Suspected Bot List [2017-04-05]

detection period: 2017-04-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
DZ	105.104.21.224	Algeria
MX	200.79.121.225	Mexico
US	97.89.253.230	United States
UY	179.26.55.78	Uruguay

List from greylisting:

Botnet Statistics [2017-04-04]

detection period: 2017-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 567
number of botnet IPs notified to network operators: 535
number of spam blocked: 2955
recipient count of spam blocked: 4423

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	53
2	WASU	40
3	CHINANET-AH	26
4	KORNET-KR	23
5	CHINANET-GD	23
6	BSNLNET	19
7	CHINANET-JS	16
8	UNICOM-BJ	12
9	CHINANET-HN	10
10	CHINANET-SC	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	329
2	India	43
3	Russian Federation	32
4	South Korea	32
5	United States	22
6	Viet Nam	12
7	Ukraine	7
8	Antigua And Barbuda	6
9	Taiwan	5
10	Japan	5

Suspected Bot List [2017-04-04]

detection period: 2017-04-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-03]

detection period: 2017-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 555
number of botnet IPs notified to network operators: 528
number of spam blocked: 1975
recipient count of spam blocked: 3115

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	67
2	WASU	36
3	CHINANET-AH	20
4	CHINANET-GD	18
5	CHINANET-JS	17
6	KORNET-KR	14
7	BSNLNET	13
8	VNPT-VNNIC-VN	10
9	UNICOM-SD	7
10	CHINANET-YN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	313
2	India	33
3	Russian Federation	29
4	United States	26
5	South Korea	20
6	Viet Nam	18
7	Iran	8
8	Ukraine	7
9	Indonesia	7
10	Taiwan	6

Suspected Bot List [2017-04-03]

detection period: 2017-04-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 27

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-02]

detection period: 2017-04-02 00:00-23:59 UTC
total number of suspected botnet IPs: 490
number of botnet IPs notified to network operators: 454
number of spam blocked: 1020
recipient count of spam blocked: 1020

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	85
2	CHINANET-GD	19
3	WASU	15
4	KORNET-KR	14
5	CHINANET-AH	11
6	CHINANET-JS	10
7	BSNLNET	10
8	CHINANET-HN	7
9	BHARTI-IN	7
10	UNICOM-SD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	259
2	India	29
3	Russian Federation	25
4	United States	24
5	South Korea	16
6	Viet Nam	10
7	Mexico	9
8	Indonesia	8
9	Japan	5
10	Canada	5

Suspected Bot List [2017-04-02]

detection period: 2017-04-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-04-01]

detection period: 2017-04-01 00:00-23:59 UTC
total number of suspected botnet IPs: 390
number of botnet IPs notified to network operators: 358
number of spam blocked: 847
recipient count of spam blocked: 847

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	35
2	CHINANET-GD	16
3	BSNLNET	11
4	CHINANET-JS	10
5	VNPT-VNNIC-VN	9
6	KORNET-KR	9
7	CHINANET-AH	8
8	CHINANET-GZ	6
9	UNICOM-GD	5
10	IDTELKOM-ID	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	177
2	India	34
3	Russian Federation	19
4	Viet Nam	18
5	United States	16
6	South Korea	15
7	Mexico	10
8	Ukraine	9
9	Indonesia	8
10	Japan	6

Suspected Bot List [2017-04-01]

detection period: 2017-04-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-03-31]

detection period: 2017-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 363
number of botnet IPs notified to network operators: 314
number of spam blocked: 944
recipient count of spam blocked: 944

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	17
2	CHINANET-GD	15
3	CHINANET-JS	13
4	VNPT-VNNIC-VN	11
5	KORNET-KR	9
6	CHINANET-AH	8
7	BHARTI-IN	7
8	UNICOM-GD	5
9	SINGLEHOP	5
10	Chinafic	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	138
2	India	26
3	Viet Nam	18
4	United States	17
5	South Korea	17
6	Russian Federation	15
7	Indonesia	11
8	Pakistan	9
9	Peru	8
10	Mexico	7

Suspected Bot List [2017-03-31]

detection period: 2017-03-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting: