Botnet Statistics [2017-06-29]

detection period: 2017-06-29 00:00-23:59 UTC
total number of suspected botnet IPs: 721
number of botnet IPs notified to network operators: 676
number of spam blocked: 74608
recipient count of spam blocked: 1069399

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	135
2	WASU	111
3	CMNET	101
4	MOL-LEASE13	27
5	CC-14	24
6	VNPT-VNNIC-VN	23
7	CUBEMOTION	19
8	CHINANET-GD	17
9	SC7002-162-216-1-64-28	16
10	HOSTKEY-NET	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	440
2	United States	92
3	Viet Nam	56
4	Russian Federation	33
5	Netherlands	16
6	Brazil	11
7	Taiwan	8
8	Romania	7
9	United Kingdom	7
10	South Korea	6

Suspected Bot List [2017-06-29]

detection period: 2017-06-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 70

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
IN	1.186.128.5	India
IN	182.74.55.246	India
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
NL	185.130.225.101	Netherlands
NL	185.130.225.102	Netherlands
NL	185.130.225.103	Netherlands
NL	185.130.225.104	Netherlands
NL	185.130.225.105	Netherlands
NL	185.130.225.106	Netherlands
NL	185.130.225.107	Netherlands
NL	185.130.225.108	Netherlands
NL	185.130.225.109	Netherlands
NL	185.130.225.110	Netherlands
NL	185.130.225.111	Netherlands
NL	185.130.225.112	Netherlands
NL	185.130.225.113	Netherlands
NL	185.130.225.114	Netherlands
NL	185.130.225.115	Netherlands
NL	185.130.225.116	Netherlands
RU	90.188.18.74	Russian Federation
RU	176.118.237.85	Russian Federation
TH	119.46.209.163	Thailand
TH	122.154.239.123	Thailand
US	198.167.142.17	United States
US	198.167.142.34	United States
US	198.167.142.41	United States
US	198.167.142.42	United States
US	198.167.142.43	United States
US	198.167.142.44	United States
US	198.167.142.45	United States
US	198.167.142.47	United States
US	198.167.142.48	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-28]

detection period: 2017-06-28 00:00-23:59 UTC
total number of suspected botnet IPs: 649
number of botnet IPs notified to network operators: 615
number of spam blocked: 64788
recipient count of spam blocked: 776767

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	132
2	WASU	103
3	CMNET	102
4	UA-VOLIA-20061124	29
5	UK-ABSTATION-20120712	25
6	CHINANET-GD	22
7	EONIX-NET-50-2-0-0-1-BLK-7	14
8	LSN-DLLSTX-8	12
9	CC-10	12
10	CC-09	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	424
2	United States	92
3	Ukraine	30
4	United Kingdom	27
5	Viet Nam	11
6	Russian Federation	9
7	Brazil	6
8	India	5
9	Taiwan	4
10	Poland	4

Suspected Bot List [2017-06-28]

detection period: 2017-06-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 48

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
AR	200.41.87.215	Argentina
IN	122.181.137.17	India
IN	203.115.99.218	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
PL	91.185.189.179	Poland
RU	37.1.16.4	Russian Federation
RU	90.188.18.74	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	185.130.104.198	Russian Federation
TH	203.151.206.113	Thailand
US	50.2.13.15	United States
US	50.2.13.16	United States
US	50.2.13.17	United States
US	50.2.13.18	United States
US	50.2.13.19	United States
US	50.2.13.20	United States
US	50.2.13.21	United States
US	50.2.13.22	United States
US	50.2.13.23	United States
US	50.2.13.24	United States
US	50.2.13.25	United States
US	50.2.13.26	United States
US	50.2.13.27	United States
US	50.2.13.28	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-27]

detection period: 2017-06-27 00:00-23:59 UTC
total number of suspected botnet IPs: 732
number of botnet IPs notified to network operators: 692
number of spam blocked: 72054
recipient count of spam blocked: 1006344

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	119
2	CMNET	119
3	UNICOM-ZJ	109
4	MOL-LEASE13	57
5	PVS-BLOCK01	16
6	CUBEMOTION	12
7	CHINANET-GD	12
8	CC-17	11
9	VNPT-VNNIC-VN	10
10	EONIX-NET-173-44-128-0-1-BLK-4	10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	450
2	Russian Federation	66
3	United States	63
4	Viet Nam	22
5	Netherlands	16
6	Brazil	11
7	Taiwan	9
8	South Korea	9
9	Germany	9
10	India	8

Suspected Bot List [2017-06-27]

detection period: 2017-06-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 54

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
ID	103.254.107.10	Indonesia
IN	203.115.99.218	India
JO	79.173.252.192	Jordan
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
PL	91.185.189.179	Poland
RO	86.34.184.170	Romania
RU	37.1.9.189	Russian Federation
RU	83.242.222.4	Russian Federation
RU	84.53.192.243	Russian Federation
RU	90.188.18.74	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.130.104.198	Russian Federation
TH	103.253.73.95	Thailand
TH	203.151.206.113	Thailand
US	50.2.191.75	United States
US	50.2.191.76	United States
US	50.2.191.77	United States
US	50.2.191.78	United States
US	173.44.228.34	United States
US	173.44.228.35	United States
US	173.44.228.36	United States
US	173.44.228.37	United States
US	173.44.228.38	United States
US	173.44.228.39	United States
US	173.44.228.40	United States
US	173.44.228.41	United States
US	173.44.228.42	United States
US	173.44.228.43	United States
VE	190.202.116.101	Venezuela
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-26]

detection period: 2017-06-26 00:00-23:59 UTC
total number of suspected botnet IPs: 753
number of botnet IPs notified to network operators: 668
number of spam blocked: 78304
recipient count of spam blocked: 1640555

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	114
2	CMNET	114
3	WASU	98
4	CUBEMOTION	34
5	RU-ANDERS-20081028	29
6	CHINANET-GD	18
7	VNPT-VNNIC-VN	16
8	SERVERYOU-NET-LAX	16
9	PL-ARTNET-20120704	13
10	VIRTONO-NETWORKS-SRL	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	419
2	United States	102
3	Viet Nam	41
4	Russian Federation	40
5	India	24
6	Poland	17
7	Romania	15
8	Brazil	10
9	Taiwan	8
10	Thailand	7

Suspected Bot List [2017-06-26]

detection period: 2017-06-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 120

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
IN	1.186.128.5	India
IN	122.179.15.42	India
IN	171.48.48.175	India
IN	182.73.244.70	India
IN	202.56.255.50	India
IN	202.142.81.58	India
IN	203.115.99.218	India
IN	203.115.109.254	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.207.180.18	Mexico
PL	91.185.189.179	Poland
RU	37.1.46.238	Russian Federation
RU	80.254.115.87	Russian Federation
RU	84.53.192.243	Russian Federation
RU	109.194.197.79	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	185.130.104.198	Russian Federation
RU	212.164.221.82	Russian Federation
RU	213.183.45.226	Russian Federation
RU	213.183.45.227	Russian Federation
RU	213.183.45.228	Russian Federation
RU	213.183.45.229	Russian Federation
RU	213.183.45.230	Russian Federation
RU	213.183.45.232	Russian Federation
RU	213.183.45.233	Russian Federation
RU	213.183.45.234	Russian Federation
RU	213.183.45.235	Russian Federation
RU	213.183.45.236	Russian Federation
RU	213.183.45.237	Russian Federation
RU	213.183.45.238	Russian Federation
RU	213.183.45.239	Russian Federation
RU	213.183.45.240	Russian Federation
RU	213.183.45.241	Russian Federation
RU	213.183.45.242	Russian Federation
RU	213.183.45.243	Russian Federation
RU	213.183.45.244	Russian Federation
RU	213.183.45.245	Russian Federation
RU	213.183.45.246	Russian Federation
RU	213.183.45.247	Russian Federation
RU	213.183.45.248	Russian Federation
RU	213.183.45.249	Russian Federation
RU	213.183.45.250	Russian Federation
RU	213.183.45.251	Russian Federation
RU	213.183.45.252	Russian Federation
RU	213.183.45.253	Russian Federation
RU	213.183.45.254	Russian Federation
TH	103.40.132.18	Thailand
TH	122.155.197.9	Thailand
TH	203.151.206.113	Thailand
US	50.2.13.2	United States
US	50.2.13.5	United States
US	50.2.13.7	United States
US	50.2.13.8	United States
US	50.2.13.10	United States
US	50.2.13.12	United States
US	50.2.13.14	United States
US	206.125.41.139	United States
VE	150.187.41.90	Venezuela
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-25]

detection period: 2017-06-25 00:00-23:59 UTC
total number of suspected botnet IPs: 577
number of botnet IPs notified to network operators: 539
number of spam blocked: 67821
recipient count of spam blocked: 980661

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	101
2	WASU	76
3	UNICOM-ZJ	66
4	CHINANET-GD	32
5	VNPT-VNNIC-VN	26
6	CC-15	21
7	UK-RAPIDSWITCH-20070418	13
8	HOSTKEY-NET	13
9	CUBEMOTION	13
10	ALISOFT	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	350
2	United States	50
3	Viet Nam	46
4	United Kingdom	17
5	Taiwan	13
6	Netherlands	13
7	Brazil	7
8	Romania	5
9	Argentina	5
10	Russian Federation	4

Suspected Bot List [2017-06-25]

detection period: 2017-06-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
IN	203.115.109.254	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
NL	5.39.220.14	Netherlands
NL	5.39.220.15	Netherlands
NL	5.39.220.16	Netherlands
NL	5.39.220.17	Netherlands
NL	5.39.220.18	Netherlands
NL	5.39.220.19	Netherlands
NL	5.39.220.20	Netherlands
NL	5.39.220.21	Netherlands
NL	5.39.220.22	Netherlands
NL	5.39.220.23	Netherlands
NL	5.39.220.27	Netherlands
RU	176.118.237.85	Russian Federation
TH	103.3.65.51	Thailand
TH	103.253.73.95	Thailand
TH	203.151.206.113	Thailand
UY	167.56.130.139	Uruguay
UY	167.56.165.183	Uruguay
ZA	105.3.229.42	South Africa
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-24]

detection period: 2017-06-24 00:00-23:59 UTC
total number of suspected botnet IPs: 346
number of botnet IPs notified to network operators: 313
number of spam blocked: 65488
recipient count of spam blocked: 1101725

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	27
2	CHINANET-GD	24
3	UA-VOLIA-20061124	21
4	BG-POWERNET-20070731	19
5	COLOAT	15
6	WASU	14
7	CMNET	13
8	CC-14	12
9	VIETEL-VN	9
10	UNICOM-ZJ	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	106
2	Viet Nam	55
3	United States	43
4	Ukraine	25
5	Bulgaria	20
6	Taiwan	10
7	Brazil	10
8	India	8
9	Russian Federation	7
10	Romania	7

Suspected Bot List [2017-06-24]

detection period: 2017-06-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
IN	203.115.109.254	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
PL	91.185.189.179	Poland
RU	46.146.229.93	Russian Federation
RU	83.220.182.226	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.130.104.198	Russian Federation
TH	203.151.206.113	Thailand
US	68.188.71.230	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-23]

detection period: 2017-06-23 00:00-23:59 UTC
total number of suspected botnet IPs: 649
number of botnet IPs notified to network operators: 592
number of spam blocked: 66323
recipient count of spam blocked: 1372610

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	106
2	WASU	83
3	UNICOM-ZJ	58
4	VNPT-VNNIC-VN	24
5	UK-RAPIDSWITCH-20070418	15
6	AHRDIRECT-NET	15
7	CHINANET-GD	14
8	COLOAT	13
9	VOLUMEDRIVE	12
10	CC-17	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	319
2	United States	78
3	Viet Nam	50
4	India	44
5	Netherlands	16
6	United Kingdom	16
7	Brazil	16
8	South Korea	12
9	Romania	10
10	Russian Federation	8

Suspected Bot List [2017-06-23]

detection period: 2017-06-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 57

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	181.231.28.20	Argentina
ES	79.148.86.159	Spain
ID	103.254.107.10	Indonesia
IN	182.73.244.70	India
IN	202.62.88.81	India
IN	203.115.109.254	India
MO	116.193.10.34	Macau
PK	202.61.51.123	Pakistan
PL	91.185.189.179	Poland
RU	90.188.18.74	Russian Federation
RU	176.118.237.85	Russian Federation
RU	212.164.221.82	Russian Federation
TH	58.137.112.204	Thailand
TH	203.151.206.113	Thailand

List from greylisting:

Botnet Statistics [2017-06-22]

detection period: 2017-06-22 00:00-23:59 UTC
total number of suspected botnet IPs: 769
number of botnet IPs notified to network operators: 691
number of spam blocked: 65359
recipient count of spam blocked: 1404851

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	109
2	CMNET	108
3	UNICOM-ZJ	57
4	VNPT-VNNIC-VN	51
5	CHINANET-JS	32
6	SERVERCRATE-03	26
7	CHINANET-GD	17
8	HOSTKEY-NET	16
9	VIRTONO-NETWORKS-SRL	13
10	FPT-VN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	413
2	Viet Nam	89
3	United States	72
4	Russian Federation	39
5	Romania	18
6	India	14
7	Brazil	14
8	Bulgaria	9
9	Taiwan	7
10	Poland	6

Suspected Bot List [2017-06-22]

detection period: 2017-06-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
ES	79.148.86.159	Spain
ID	103.254.107.10	Indonesia
IN	122.165.237.29	India
IN	182.73.244.70	India
IN	203.115.109.254	India
IN	223.196.86.227	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
PK	203.135.54.91	Pakistan
RU	46.17.101.213	Russian Federation
RU	46.17.101.219	Russian Federation
RU	46.17.101.220	Russian Federation
RU	46.17.101.221	Russian Federation
RU	46.17.101.222	Russian Federation
RU	46.17.101.223	Russian Federation
RU	46.17.101.224	Russian Federation
RU	46.17.101.225	Russian Federation
RU	46.17.101.226	Russian Federation
RU	46.17.101.227	Russian Federation
RU	46.17.101.228	Russian Federation
RU	46.249.2.197	Russian Federation
RU	84.53.192.243	Russian Federation
RU	90.188.18.74	Russian Federation
RU	176.118.237.85	Russian Federation
RU	213.183.47.230	Russian Federation
RU	213.183.47.231	Russian Federation
RU	213.183.47.232	Russian Federation
RU	213.183.47.233	Russian Federation
RU	213.183.47.234	Russian Federation
RU	213.183.47.235	Russian Federation
TH	103.40.132.18	Thailand
TH	183.89.120.171	Thailand
TH	203.151.206.113	Thailand
UY	167.56.19.172	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-21]

detection period: 2017-06-21 00:00-23:59 UTC
total number of suspected botnet IPs: 796
number of botnet IPs notified to network operators: 707
number of spam blocked: 83205
recipient count of spam blocked: 1613959

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	122
2	WASU	94
3	CHINANET-JS	54
4	UNICOM-ZJ	47
5	CHINANET-GD	36
6	UA-VOLIA-20061124	27
7	VNPT-VNNIC-VN	26
8	EONIX-NET-173-44-128-0-1-BLK-4	23
9	MIR-TELEMATIKI	15
10	CUBEMOTION	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	470
2	United States	85
3	Viet Nam	50
4	Ukraine	30
5	Russian Federation	27
6	Brazil	16
7	India	14
8	Taiwan	13
9	Poland	10
10	Hong Kong	10

Suspected Bot List [2017-06-21]

detection period: 2017-06-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
IN	203.115.109.254	India
IN	223.196.86.227	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
PL	91.185.189.179	Poland
RU	46.17.98.70	Russian Federation
RU	46.17.98.85	Russian Federation
RU	46.249.2.197	Russian Federation
RU	84.53.192.243	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	90.188.18.74	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	195.98.189.178	Russian Federation
US	173.44.228.59	United States
US	173.44.228.60	United States
US	173.44.228.61	United States
US	173.44.228.62	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bots' IP List for May 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-05-01]
Suspected Bots IP [2017-05-02]
Suspected Bots IP [2017-05-03]
Suspected Bots IP [2017-05-04]
Suspected Bots IP [2017-05-05]
Suspected Bots IP [2017-05-06]
Suspected Bots IP [2017-05-07]
Suspected Bots IP [2017-05-08]
Suspected Bots IP [2017-05-09]
Suspected Bots IP [2017-05-10]
Suspected Bots IP [2017-05-11]
Suspected Bots IP [2017-05-12]
Suspected Bots IP [2017-05-13]
Suspected Bots IP [2017-05-14]
Suspected Bots IP [2017-05-15]
Suspected Bots IP [2017-05-16]
Suspected Bots IP [2017-05-17]
Suspected Bots IP [2017-05-18]
Suspected Bots IP [2017-05-22]
Suspected Bots IP [2017-05-23]
Suspected Bots IP [2017-05-24]
Suspected Bots IP [2017-05-25]
Suspected Bots IP [2017-05-26]
Suspected Bots IP [2017-05-27]
Suspected Bots IP [2017-05-28]
Suspected Bots IP [2017-05-29]
Suspected Bots IP [2017-05-30]
Suspected Bots IP [2017-05-31]

Botnet Statistics [2017-06-20]

detection period: 2017-06-20 00:00-23:59 UTC
total number of suspected botnet IPs: 864
number of botnet IPs notified to network operators: 776
number of spam blocked: 120495
recipient count of spam blocked: 2762404

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	104
2	WASU	78
3	UNICOM-ZJ	50
4	CHINANET-GD	49
5	CHINANET-JS	31
6	UA-VOLIA-20061124	23
7	VNPT-VNNIC-VN	17
8	HOSTKEY-NET	16
9	JOESDC-01	15
10	JLU-CN	15

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	503
2	United States	88
3	Viet Nam	42
4	Ukraine	27
5	Russian Federation	25
6	Netherlands	17
7	Brazil	17
8	India	14
9	Taiwan	11
10	Hong Kong	8

Suspected Bot List [2017-06-20]

detection period: 2017-06-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 98

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
IN	182.73.244.70	India
IN	203.115.109.254	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
MX	201.163.21.226	Mexico
MY	161.139.20.49	Malaysia
NL	5.39.220.65	Netherlands
NL	5.39.220.76	Netherlands
NL	5.39.220.77	Netherlands
NL	5.39.220.78	Netherlands
NL	5.39.220.79	Netherlands
NL	5.39.220.80	Netherlands
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	37.1.58.244	Russian Federation
RU	37.29.7.122	Russian Federation
RU	46.47.227.236	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	90.188.18.74	Russian Federation
RU	90.188.95.206	Russian Federation
RU	91.122.195.202	Russian Federation
RU	95.53.247.194	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	178.141.249.246	Russian Federation
RU	185.52.68.8	Russian Federation
RU	194.79.7.70	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
TH	45.122.48.162	Thailand
TH	49.231.180.196	Thailand
TH	183.89.127.32	Thailand
TH	203.151.206.113	Thailand
TH	203.157.30.1	Thailand
TW	106.1.195.68	Taiwan
US	173.44.228.36	United States
US	173.44.228.37	United States
US	173.44.228.38	United States
US	173.44.228.39	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-19]

detection period: 2017-06-19 00:00-23:59 UTC
total number of suspected botnet IPs: 893
number of botnet IPs notified to network operators: 781
number of spam blocked: 112259
recipient count of spam blocked: 2757738

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	91
2	WASU	61
3	VNPT-VNNIC-VN	56
4	UNICOM-ZJ	39
5	EONIX-NET-50-2-0-0-1-BLK-7	29
6	SHARKTECH-3	28
7	CHINANET-GD	26
8	CHINANET-JS	21
9	JLU-CN	17
10	MSFT	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	424
2	United States	106
3	Viet Nam	105
4	Russian Federation	33
5	Brazil	20
6	United Kingdom	17
7	Romania	16
8	Taiwan	14
9	Bulgaria	13
10	South Korea	11

Suspected Bot List [2017-06-19]

detection period: 2017-06-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 112

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
ID	219.83.84.146	Indonesia
IN	203.115.109.254	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	37.1.39.132	Russian Federation
RU	37.29.7.122	Russian Federation
RU	46.47.227.236	Russian Federation
RU	78.25.98.230	Russian Federation
RU	80.71.240.160	Russian Federation
RU	83.220.188.72	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	90.188.18.74	Russian Federation
RU	90.188.95.206	Russian Federation
RU	91.122.195.202	Russian Federation
RU	95.53.247.194	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	109.194.197.79	Russian Federation
RU	176.118.237.85	Russian Federation
RU	178.141.104.178	Russian Federation
RU	178.141.249.246	Russian Federation
RU	185.127.25.68	Russian Federation
RU	194.79.7.70	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.34.39.230	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
SG	112.140.184.139	Singapore
SG	112.140.187.82	Singapore
TH	103.3.65.51	Thailand
TH	203.151.206.113	Thailand
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-18]

detection period: 2017-06-18 00:00-23:59 UTC
total number of suspected botnet IPs: 766
number of botnet IPs notified to network operators: 708
number of spam blocked: 111100
recipient count of spam blocked: 2747151

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	83
2	WASU	53
3	CHINANET-JS	39
4	CHINANET-GD	34
5	VNPT-VNNIC-VN	30
6	HINET-NET	28
7	PVS-BLOCK01	16
8	UK-RAPIDSWITCH-20090225	14
9	JLU-CN	14
10	HINET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	404
2	Viet Nam	56
3	United States	53
4	Taiwan	44
5	United Kingdom	25
6	Russian Federation	18
7	Netherlands	17
8	Brazil	15
9	Germany	13
10	Hong Kong	11

Suspected Bot List [2017-06-18]

detection period: 2017-06-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
CZ	93.170.122.30	Czech Republic
ID	219.83.84.146	Indonesia
IN	202.62.88.81	India
IN	203.115.109.254	India
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PL	91.185.189.179	Poland
RU	80.71.246.68	Russian Federation
RU	83.169.208.218	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	95.53.247.194	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	178.141.186.48	Russian Federation
RU	185.127.25.68	Russian Federation
RU	195.98.189.178	Russian Federation
RU	212.34.39.230	Russian Federation
RU	212.46.215.107	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	49.231.180.196	Thailand
TH	103.3.65.51	Thailand
TH	203.151.206.113	Thailand
TH	203.156.163.35	Thailand
TW	106.1.195.68	Taiwan
TW	118.233.116.192	Taiwan
US	206.125.41.139	United States
UY	167.57.14.125	Uruguay
UY	167.57.135.202	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics for May 2017

detection period: 2017-05-01 00:00 - 2017-05-31 23:59 UTC
total number of suspected botnet IPs: 14571
number of blocked spams: 643100
recipient count of blocked spams: 4254342

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	6404
2	Viet Nam	2010
3	United States	1789
4	Ukraine	1089
5	India	375
6	Netherlands	279
7	Russian Federation	226
8	United Kingdom	192
9	Taiwan	158
10	Brazil	122
11	Estonia	119
12	South Korea	92
13	Argentina	82
14	Turkey	80
15	Romania	78
16	Bulgaria	78
17	Indonesia	72
18	Poland	68
19	Japan	63
20	Thailand	62
21	Italy	59
22	France	55
23	Iran	50
24	Hong Kong	49
25	Lithuania	45

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	221666
2	Ukraine	98435
3	United Kingdom	49720
4	Netherlands	37318
5	China	36733
6	Poland	32928
7	Russian Federation	24025
8	Hong Kong	16047
9	Bangladesh	13834
10	Estonia	13343
11	Belgium	12617
12	Canada	11208
13	Czech Republic	10411
14	Sweden	7141
15	Romania	6995
16	Turkey	5582
17	Bulgaria	5555
18	Virgin (British) Islands	4608
19	Lithuania	3737
20	Colombia	3358
21	Viet Nam	3233
22	Taiwan	2740
23	Nigeria	2402
24	Iceland	2147
25	Australia	2120

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-06-17]

detection period: 2017-06-17 00:00-23:59 UTC
total number of suspected botnet IPs: 743
number of botnet IPs notified to network operators: 679
number of spam blocked: 116713
recipient count of spam blocked: 2930076

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	61
2	CHINANET-GD	48
3	WASU	47
4	VNPT-VNNIC-VN	43
5	CC-15	23
6	CHINANET-JS	22
7	JLU-CN	18
8	PL-ARTNET-20120704	13
9	CHINANET-JX	13
10	BG-POWERNET-20070731	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	366
2	Viet Nam	86
3	United States	72
4	Russian Federation	29
5	Poland	19
6	Brazil	15
7	Taiwan	14
8	Bulgaria	14
9	India	12
10	Singapore	11

Suspected Bot List [2017-06-17]

detection period: 2017-06-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
DE	136.243.22.27	Germany
IN	203.115.109.254	India
IN	223.196.86.227	India
JO	79.173.252.192	Jordan
JO	185.98.225.114	Jordan
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PL	91.185.189.179	Poland
RU	37.29.7.122	Russian Federation
RU	80.71.246.68	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	195.98.189.178	Russian Federation
RU	212.34.39.230	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
SA	88.85.228.90	Saudi Arabia
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TR	185.26.146.61	Turkey
TW	106.1.195.68	Taiwan
US	96.33.171.230	United States
US	104.176.105.3	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-16]

detection period: 2017-06-16 00:00-23:59 UTC
total number of suspected botnet IPs: 738
number of botnet IPs notified to network operators: 672
number of spam blocked: 139539
recipient count of spam blocked: 3170456

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	55
2	WASU	52
3	CHINANET-GD	48
4	CHINANET-JS	30
5	UK-ABSTATION-20120712	24
6	VNPT-VNNIC-VN	21
7	JLU-CN	19
8	EONIX-NET-173-44-128-0-1-BLK-4	15
9	PL-ARTNET-20120704	13
10	CUBEMOTION	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	393
2	United States	89
3	Viet Nam	37
4	United Kingdom	25
5	Russian Federation	24
6	Poland	16
7	Brazil	15
8	Singapore	11
9	Romania	10
10	France	9

Suspected Bot List [2017-06-16]

detection period: 2017-06-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 66

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
IN	122.168.194.53	India
IN	223.196.86.227	India
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
MX	189.211.198.181	Mexico
MY	161.139.20.49	Malaysia
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	31.173.216.163	Russian Federation
RU	37.29.7.122	Russian Federation
RU	46.47.227.236	Russian Federation
RU	46.249.12.24	Russian Federation
RU	80.71.246.68	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	90.188.18.74	Russian Federation
RU	91.122.195.202	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	185.188.182.25	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.34.39.230	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
SG	112.140.184.147	Singapore
SG	112.140.187.82	Singapore
TH	103.3.65.51	Thailand
TH	122.154.239.122	Thailand
TH	203.151.206.113	Thailand
TW	106.1.195.68	Taiwan
US	96.33.171.230	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-15]

detection period: 2017-06-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1032
number of botnet IPs notified to network operators: 948
number of spam blocked: 138018
recipient count of spam blocked: 2946944

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	168
2	CMNET	114
3	WASU	87
4	CHINANET-GD	43
5	VNPT-VNNIC-VN	34
6	CHINANET-JS	29
7	JLU-CN	23
8	CHINANET-HA	16
9	DELTAHOST-NET	15
10	CNCBTJQ-NET	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	679
2	United States	88
3	Viet Nam	52
4	Russian Federation	42
5	Ukraine	28
6	France	15
7	Germany	15
8	Singapore	10
9	Taiwan	9
10	Brazil	9

Suspected Bot List [2017-06-15]

detection period: 2017-06-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 84

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
ID	219.83.84.146	Indonesia
LY	197.215.136.166	Libya
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PK	202.83.163.219	Pakistan
PL	91.185.189.179	Poland
RU	37.1.43.163	Russian Federation
RU	37.29.7.122	Russian Federation
RU	46.47.227.236	Russian Federation
RU	78.25.98.230	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	90.188.18.74	Russian Federation
RU	91.122.195.202	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.111.189.234	Russian Federation
RU	109.171.97.88	Russian Federation
RU	109.194.197.79	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	185.188.182.25	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	213.221.32.42	Russian Federation
SG	112.140.184.139	Singapore
SG	112.140.187.82	Singapore
TH	49.231.180.196	Thailand
TH	61.7.228.51	Thailand
TH	203.151.206.113	Thailand
TW	106.1.195.68	Taiwan
US	96.33.171.230	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-14]

detection period: 2017-06-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1020
number of botnet IPs notified to network operators: 941
number of spam blocked: 115660
recipient count of spam blocked: 2507972

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	179
2	CMNET	102
3	WASU	84
4	CHINANET-GD	43
5	VNPT-VNNIC-VN	33
6	CHINANET-JS	25
7	JLU-CN	19
8	CNCBTJQ-NET	14
9	CHINANET-HA	14
10	LADEDICATED2	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	635
2	United States	105
3	Viet Nam	67
4	Russian Federation	38
5	France	18
6	India	16
7	Brazil	15
8	South Korea	9
9	Singapore	8
10	Romania	8

Suspected Bot List [2017-06-14]

detection period: 2017-06-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 79

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
ID	219.83.84.146	Indonesia
IN	223.196.86.227	India
IT	31.14.140.139	Italy
MM	103.27.118.146	Myanmar
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	148.243.192.238	Mexico
MX	189.211.198.181	Mexico
PK	202.83.163.219	Pakistan
PK	203.135.54.91	Pakistan
RU	37.1.43.163	Russian Federation
RU	78.25.98.230	Russian Federation
RU	87.226.213.86	Russian Federation
RU	89.188.229.14	Russian Federation
RU	91.122.195.202	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.188.182.25	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.46.215.107	Russian Federation
RU	212.164.221.82	Russian Federation
RU	213.221.32.42	Russian Federation
SG	112.140.184.139	Singapore
SG	112.140.187.82	Singapore
TH	49.231.180.196	Thailand
TH	61.7.228.51	Thailand
TH	119.46.90.105	Thailand
TH	203.151.206.113	Thailand
TH	203.156.163.35	Thailand
TW	106.1.195.68	Taiwan
US	69.85.239.37	United States
US	96.33.171.230	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-13]

detection period: 2017-06-13 00:00-23:59 UTC
total number of suspected botnet IPs: 903
number of botnet IPs notified to network operators: 845
number of spam blocked: 103968
recipient count of spam blocked: 2197315

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	138
2	CMNET	108
3	WASU	66
4	VNPT-VNNIC-VN	44
5	COLOAT	26
6	JLU-CN	23
7	UK-RAPIDSWITCH-20090225	16
8	LSN-DLLSTX-1	14
9	CHINANET-GD	14
10	CC-18	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	496
2	United States	106
3	Viet Nam	80
4	India	40
5	Russian Federation	19
6	United Kingdom	16
7	Brazil	14
8	Netherlands	12
9	Indonesia	10
10	Taiwan	9

Suspected Bot List [2017-06-13]

detection period: 2017-06-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
CO	190.60.234.186	Colombia
IT	31.14.140.139	Italy
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
PK	202.83.163.219	Pakistan
RU	37.1.5.35	Russian Federation
RU	37.29.7.122	Russian Federation
RU	78.25.98.230	Russian Federation
RU	87.226.213.86	Russian Federation
RU	90.188.18.74	Russian Federation
RU	91.122.195.202	Russian Federation
RU	109.111.189.234	Russian Federation
RU	176.118.237.85	Russian Federation
RU	195.98.189.178	Russian Federation
RU	195.190.124.202	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
TW	106.1.195.68	Taiwan
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-12]

detection period: 2017-06-12 00:00-23:59 UTC
total number of suspected botnet IPs: 945
number of botnet IPs notified to network operators: 868
number of spam blocked: 114548
recipient count of spam blocked: 2773334

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	107
2	CMNET	102
3	WASU	81
4	HSI-4	32
5	VNPT-VNNIC-VN	30
6	CHINANET-JS	25
7	JLU-CN	22
8	CHINANET-GD	22
9	UK-RAPIDSWITCH-20070418	16
10	CHINANET-JX	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	553
2	United States	114
3	Viet Nam	66
4	United Kingdom	23
5	Brazil	20
6	France	18
7	Russian Federation	16
8	India	11
9	Taiwan	10
10	Indonesia	9

Suspected Bot List [2017-06-12]

detection period: 2017-06-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 77

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
CO	190.60.234.186	Colombia
DK	217.157.8.180	Denmark
ID	219.83.84.146	Indonesia
IN	223.196.86.227	India
KW	37.34.243.227	Kuwait
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PK	202.61.49.204	Pakistan
PK	202.83.163.219	Pakistan
PK	203.135.54.91	Pakistan
PL	91.185.189.179	Poland
RU	37.1.5.35	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.171.97.88	Russian Federation
RU	109.194.197.79	Russian Federation
RU	176.118.237.85	Russian Federation
RU	178.141.249.246	Russian Federation
RU	194.79.7.70	Russian Federation
RU	195.98.189.178	Russian Federation
RU	212.46.215.107	Russian Federation
RU	213.221.32.42	Russian Federation
SE	88.83.40.246	Sweden
SG	112.140.184.136	Singapore
SG	112.140.184.139	Singapore
TW	106.1.195.68	Taiwan
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-06-11]

detection period: 2017-06-11 00:00-23:59 UTC
total number of suspected botnet IPs: 922
number of botnet IPs notified to network operators: 873
number of spam blocked: 118398
recipient count of spam blocked: 3203698

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	104
2	CMNET	100
3	WASU	89
4	VNPT-VNNIC-VN	45
5	CHINANET-JS	33
6	VIRTONO-NETWORKS-SRL	30
7	NDCHOST	29
8	JLU-CN	25
9	CHINANET-GD	22
10	FPT-VN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	534
2	Viet Nam	98
3	United States	61
4	Romania	35
5	Russian Federation	18
6	Brazil	14
7	Taiwan	13
8	United Kingdom	13
9	Bulgaria	13
10	Indonesia	11

Suspected Bot List [2017-06-11]

detection period: 2017-06-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AE	83.110.72.131	Arab Emirates
AR	181.231.28.20	Argentina
CO	190.60.234.186	Colombia
ID	219.83.84.146	Indonesia
JO	79.173.252.192	Jordan
MM	103.27.118.146	Myanmar
MO	116.193.10.34	Macau
MO	116.193.10.35	Macau
MX	189.211.198.181	Mexico
PK	202.61.49.204	Pakistan
PL	91.185.189.179	Poland
RU	37.1.5.35	Russian Federation
RU	37.1.38.108	Russian Federation
RU	87.226.213.86	Russian Federation
RU	109.94.95.237	Russian Federation
RU	109.171.97.88	Russian Federation
RU	176.118.237.85	Russian Federation
RU	185.127.25.68	Russian Federation
RU	195.98.189.178	Russian Federation
RU	212.46.215.107	Russian Federation
TW	106.1.195.68	Taiwan
US	206.125.41.139	United States
UY	167.57.43.8	Uruguay
ZA	196.46.23.122	South Africa

List from greylisting: