Botnet Statistics [2017-10-30]

detection period: 2017-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 367
number of botnet IPs notified to network operators: 349
number of spam blocked: 72438
recipient count of spam blocked: 1718001

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	72
2	WASU	36
3	CHINANET-GD	31
4	CHINANET-JS	24
5	Baidu	15
6	CMNET	13
7	CHINANET-HB	12
8	UNIFIEDLAYER-NETWORK-14	7
9	VNPT-VNNIC-VN	5
10	UNICOM-HB	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	264
2	United States	21
3	Viet Nam	7
4	Brazil	7
5	India	6
6	Russian Federation	5
7	Turkey	4
8	Romania	4
9	Israel	4
10	Germany	4

Suspected Bot List [2017-10-30]

detection period: 2017-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
FR	82.64.21.28	France
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States

List from greylisting:

Botnet Statistics [2017-10-29]

detection period: 2017-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 341
number of botnet IPs notified to network operators: 320
number of spam blocked: 56830
recipient count of spam blocked: 1330539

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	40
2	UNICOM-ZJ	32
3	VNPT-VNNIC-VN	22
4	CHINANET-GD	15
5	Baidu	15
6	WASU	13
7	FPT-VN	9
8	CMNET	8
9	CHINANET-ZJ	8
10	CHINANET-LN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	208
2	Viet Nam	50
3	United States	11
4	Brazil	10
5	Russian Federation	8
6	Romania	6
7	Germany	6
8	Argentina	6
9	South Korea	3
10	India	3

Suspected Bot List [2017-10-29]

detection period: 2017-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
FR	82.64.21.28	France
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States

List from greylisting:

Botnet Statistics [2017-10-27]

detection period: 2017-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 441
number of botnet IPs notified to network operators: 425
number of spam blocked: 65988
recipient count of spam blocked: 1279481

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	80
2	CHINANET-JS	41
3	Baidu	40
4	WASU	29
5	VNPT-VNNIC-VN	24
6	CMNET	23
7	CHINANET-GD	21
8	VIETEL-VN	11
9	UNIFIEDLAYER-NETWORK-14	10
10	FPT-VN	9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	298
2	Viet Nam	61
3	United States	22
4	Germany	7
5	Italy	6
6	Thailand	4
7	Russian Federation	4
8	Brazil	4
9	Romania	3
10	South Korea	3

Suspected Bot List [2017-10-27]

detection period: 2017-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
FR	82.64.21.28	France
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-26]

detection period: 2017-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 371
number of botnet IPs notified to network operators: 359
number of spam blocked: 67326
recipient count of spam blocked: 1308837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	81
2	Baidu	59
3	WASU	36
4	CMNET	27
5	CHINANET-JS	21
6	VNPT-VNNIC-VN	16
7	UNIFIEDLAYER-NETWORK-14	8
8	CHINANET-HB	7
9	CHINANET-GD	7
10	FPT-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	265
2	Viet Nam	26
3	United States	25
4	Russian Federation	8
5	Taiwan	5
6	South Korea	5
7	Germany	5
8	Romania	3
9	Italy	3
10	Hong Kong	3

Suspected Bot List [2017-10-26]

detection period: 2017-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States

List from greylisting:

Botnet Statistics [2017-10-25]

detection period: 2017-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 418
number of botnet IPs notified to network operators: 397
number of spam blocked: 50905
recipient count of spam blocked: 843840

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	85
2	Baidu	56
3	WASU	41
4	CMNET	24
5	CHINANET-JS	23
6	VNPT-VNNIC-VN	18
7	CHINANET-HB	11
8	CHINANET-LN	10
9	CHINANET-GD	10
10	UNIFIEDLAYER-NETWORK-14	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	289
2	Viet Nam	39
3	United States	24
4	India	8
5	Russian Federation	6
6	Taiwan	5
7	Thailand	5
8	Germany	4
9	Romania	3
10	South Korea	3

Suspected Bot List [2017-10-25]

detection period: 2017-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States

List from greylisting:

Botnet Statistics [2017-10-24]

detection period: 2017-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 477
number of botnet IPs notified to network operators: 441
number of spam blocked: 69080
recipient count of spam blocked: 1534065

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	66
2	Baidu	64
3	WASU	29
4	CMNET	28
5	CHINANET-GD	27
6	CHINANET-JS	21
7	VNPT-VNNIC-VN	19
8	CHINANET-HB	12
9	CHINANET-HN	9
10	CHINANET-LN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	304
2	Viet Nam	41
3	United States	27
4	Russian Federation	11
5	India	11
6	Brazil	9
7	Taiwan	6
8	Romania	5
9	Germany	5
10	Colombia	4

Suspected Bot List [2017-10-24]

detection period: 2017-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	190.173.254.28	Argentina
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-23]

detection period: 2017-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 377
number of botnet IPs notified to network operators: 366
number of spam blocked: 71753
recipient count of spam blocked: 1572987

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	75
2	Baidu	67
3	WASU	34
4	CHINANET-GD	34
5	CHINANET-JS	24
6	CMNET	16
7	CHINANET-HB	10
8	UNIFIEDLAYER-NETWORK-14	7
9	UNICOM-HB	5
10	CHINANET-LN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	308
2	United States	19
3	Russian Federation	5
4	Germany	5
5	Taiwan	4
6	Turkey	4
7	Argentina	3
8	Sweden	2
9	Romania	2
10	South Korea	2

Suspected Bot List [2017-10-23]

detection period: 2017-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RS	89.216.28.123	Serbia
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-22]

detection period: 2017-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 347
number of botnet IPs notified to network operators: 332
number of spam blocked: 62348
recipient count of spam blocked: 1432527

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	67
2	CHINANET-JS	38
3	CHINANET-GD	31
4	VNPT-VNNIC-VN	29
5	UNICOM-ZJ	22
6	CMNET	11
7	WASU	9
8	ETC-VNNIC-VN	8
9	CHINANET-HB	8
10	VIETEL-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	216
2	Viet Nam	64
3	United States	12
4	Germany	7
5	Russian Federation	5
6	Brazil	5
7	Taiwan	3
8	Romania	3
9	South Korea	3
10	Sweden	2

Suspected Bot List [2017-10-22]

detection period: 2017-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-21]

detection period: 2017-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 296
number of botnet IPs notified to network operators: 280
number of spam blocked: 54106
recipient count of spam blocked: 1166226

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	67
2	CHINANET-JS	30
3	CHINANET-GD	30
4	VNPT-VNNIC-VN	20
5	CHINANET-HB	10
6	VIETEL-VN	8
7	FPT-VN	7
8	LSN-DLLSTX-2	6
9	VIETEL-VNNIC-VN	5
10	Turkbil-internet-hizmetleri	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	164
2	Viet Nam	44
3	United States	13
4	Brazil	8
5	Germany	7
6	Russian Federation	6
7	Thailand	5
8	Turkey	4
9	Taiwan	3
10	South Korea	3

Suspected Bot List [2017-10-21]

detection period: 2017-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ES	176.86.145.47	Spain
RS	89.216.28.123	Serbia
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
TH	61.7.236.60	Thailand
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-20]

detection period: 2017-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 416
number of botnet IPs notified to network operators: 380
number of spam blocked: 46038
recipient count of spam blocked: 550435

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	74
2	Baidu	67
3	CHINANET-JS	32
4	WASU	27
5	VNPT-VNNIC-VN	26
6	CHINANET-GD	20
7	UNIFIEDLAYER-NETWORK-14	10
8	CMNET	10
9	FPT-VN	8
10	CHINANET-HB	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	260
2	Viet Nam	55
3	India	19
4	United States	17
5	Taiwan	5
6	Russian Federation	5
7	Germany	4
8	Thailand	3
9	Pakistan	3
10	South Korea	3

Suspected Bot List [2017-10-20]

detection period: 2017-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-19]

detection period: 2017-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 474
number of botnet IPs notified to network operators: 430
number of spam blocked: 48926
recipient count of spam blocked: 969921

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	75
2	Baidu	67
3	WASU	42
4	CHINANET-JS	25
5	CMNET	21
6	CHINANET-GD	18
7	VNPT-VNNIC-VN	17
8	UNIFIEDLAYER-NETWORK-14	10
9	VIETEL-VN	9
10	CHINANET-HB	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	294
2	Viet Nam	38
3	India	21
4	United States	19
5	Romania	6
6	Pakistan	6
7	Brazil	6
8	South Korea	5
9	South Africa	4
10	Taiwan	4

Suspected Bot List [2017-10-19]

detection period: 2017-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
TH	61.7.236.60	Thailand
US	23.129.64.11	United States
US	23.129.64.12	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-18]

detection period: 2017-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 419
number of botnet IPs notified to network operators: 385
number of spam blocked: 67965
recipient count of spam blocked: 1007246

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	UNICOM-ZJ	71
2	Baidu	60
3	WASU	41
4	CHINANET-JS	23
5	CMNET	14
6	VNPT-VNNIC-VN	11
7	CHINANET-HB	11
8	UNIFIEDLAYER-NETWORK-14	10
9	CHINANET-GD	9
10	FPT-VN	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	276
2	Viet Nam	30
3	United States	22
4	India	9
5	Iran	6
6	Indonesia	6
7	Brazil	6
8	Russian Federation	5
9	Taiwan	4
10	Romania	4

Suspected Bot List [2017-10-18]

detection period: 2017-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
TH	61.7.236.60	Thailand
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	24.231.215.254	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-17]

detection period: 2017-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 468
number of botnet IPs notified to network operators: 427
number of spam blocked: 50485
recipient count of spam blocked: 1004539

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	67
2	UNICOM-ZJ	65
3	CHINANET-JS	37
4	WASU	27
5	VNPT-VNNIC-VN	24
6	CHINANET-GD	23
7	CMNET	19
8	CHINANET-HB	11
9	UNIFIEDLAYER-NETWORK-14	9
10	FPT-VN	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	271
2	Viet Nam	52
3	United States	20
4	India	12
5	South Korea	10
6	Russian Federation	8
7	Thailand	6
8	Romania	6
9	Brazil	5
10	Turkey	4

Suspected Bot List [2017-10-17]

detection period: 2017-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
MN	202.170.70.8	Mongolia
RS	89.216.28.123	Serbia
RU	95.68.240.209	Russian Federation
RU	185.127.25.68	Russian Federation
TH	203.156.163.35	Thailand
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States

List from greylisting:

Botnet Statistics [2017-10-16]

detection period: 2017-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 975
number of botnet IPs notified to network operators: 813
number of spam blocked: 57311
recipient count of spam blocked: 1102116

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	88
2	UNICOM-ZJ	73
3	Baidu	67
4	WASU	34
5	CHINANET-JS	34
6	CMNET	26
7	CHINANET-GD	26
8	VIETEL-VN	20
9	FPT-VN	14
10	BHARTI-IN	13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	305
2	Viet Nam	154
3	India	61
4	Brazil	42
5	Mexico	35
6	Iran	29
7	United States	27
8	Peru	26
9	Saudi Arabia	19
10	Turkey	16

Suspected Bot List [2017-10-16]

detection period: 2017-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 162

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
RU	185.127.25.68	Russian Federation
TH	61.7.236.60	Thailand
TH	61.91.22.88	Thailand
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States

List from greylisting:

Botnet Statistics [2017-10-15]

detection period: 2017-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 986
number of botnet IPs notified to network operators: 776
number of spam blocked: 44712
recipient count of spam blocked: 919899

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	83
2	Baidu	66
3	UNICOM-ZJ	24
4	CHINANET-JS	18
5	VIETEL-VN	16
6	IPxDSL-NET	16
7	PE-TPSA-LACNIC	13
8	ETC-VNNIC-VN	12
9	BHARTI-IN	12
10	PTCLBB-PK	11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	171
2	Viet Nam	151
3	India	73
4	Iran	50
5	Mexico	49
6	Brazil	42
7	Peru	29
8	Colombia	22
9	Indonesia	18
10	Pakistan	17

Suspected Bot List [2017-10-15]

detection period: 2017-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 210

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
BG	93.123.73.123	Bulgaria
CZ	185.82.212.7	Czech Republic
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bots' IP List for September 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-09-01]
Suspected Bots IP [2017-09-02]
Suspected Bots IP [2017-09-03]
Suspected Bots IP [2017-09-04]
Suspected Bots IP [2017-09-05]
Suspected Bots IP [2017-09-06]
Suspected Bots IP [2017-09-07]
Suspected Bots IP [2017-09-10]
Suspected Bots IP [2017-09-11]
Suspected Bots IP [2017-09-12]
Suspected Bots IP [2017-09-13]
Suspected Bots IP [2017-09-14]
Suspected Bots IP [2017-09-15]
Suspected Bots IP [2017-09-16]
Suspected Bots IP [2017-09-17]
Suspected Bots IP [2017-09-18]
Suspected Bots IP [2017-09-19]
Suspected Bots IP [2017-09-20]
Suspected Bots IP [2017-09-21]
Suspected Bots IP [2017-09-22]
Suspected Bots IP [2017-09-23]
Suspected Bots IP [2017-09-24]
Suspected Bots IP [2017-09-25]
Suspected Bots IP [2017-09-26]
Suspected Bots IP [2017-09-27]
Suspected Bots IP [2017-09-28]
Suspected Bots IP [2017-09-29]
Suspected Bots IP [2017-09-30]

Botnet Statistics [2017-10-14]

detection period: 2017-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1427
number of botnet IPs notified to network operators: 1115
number of spam blocked: 47006
recipient count of spam blocked: 902148

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	124
2	Baidu	64
3	CHINANET-JS	30
4	BHARTI-IN	27
5	PE-TPSA-LACNIC	25
6	VIETEL-VN	23
7	FPT-VN	23
8	VIETEL-VNNIC-VN	22
9	PE-PETD2-LACNIC	17
10	ETC-VNNIC-VN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	239
2	China	143
3	India	131
4	Iran	86
5	Mexico	72
6	Peru	64
7	Brazil	48
8	Turkey	43
9	Colombia	42
10	Saudi Arabia	32

Suspected Bot List [2017-10-14]

detection period: 2017-10-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 312

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-13]

detection period: 2017-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1360
number of botnet IPs notified to network operators: 1088
number of spam blocked: 47507
recipient count of spam blocked: 810180

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	111
2	Baidu	58
3	VIETEL-VN	31
4	ETC-VNNIC-VN	26
5	PE-TPSA-LACNIC	25
6	VIETEL-VNNIC-VN	24
7	FPT-VN	21
8	BHARTI-IN	21
9	TN-ATI-20061212	18
10	CHINANET-JS	18

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Viet Nam	236
2	China	154
3	India	110
4	Mexico	80
5	Peru	59
6	Brazil	57
7	Colombia	44
8	Turkey	41
9	Iran	41
10	Argentina	27

Suspected Bot List [2017-10-13]

detection period: 2017-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 272

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-12]

detection period: 2017-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 977
number of botnet IPs notified to network operators: 788
number of spam blocked: 44452
recipient count of spam blocked: 918545

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	VNPT-VNNIC-VN	46
3	CHINANET-JS	25
4	PE-TPSA-LACNIC	20
5	MX-IPMS2-LACNIC	15
6	BHARTI-IN	15
7	FPT-VN	14
8	VIETEL-VNNIC-VN	13
9	CO-ACSA-LACNIC	13
10	CMNET	12

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	129
2	Viet Nam	102
3	Mexico	87
4	India	71
5	Peru	57
6	Colombia	47
7	Iran	38
8	United States	36
9	Brazil	35
10	Turkey	24

Suspected Bot List [2017-10-12]

detection period: 2017-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 189

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	1.186.128.5	India
MN	202.170.70.8	Mongolia
RU	185.127.25.68	Russian Federation
US	23.129.64.11	United States
US	23.129.64.12	United States
US	23.129.64.13	United States
US	23.129.64.14	United States
US	23.129.64.15	United States
US	24.231.215.254	United States
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-10-11]

detection period: 2017-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 225
number of botnet IPs notified to network operators: 204
number of spam blocked: 23962
recipient count of spam blocked: 262110

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	33
3	CHINANET-SD	13
4	WASU	7
5	UNICOM-HB	6
6	VNPT-VNNIC-VN	5
7	LSN-DLLSTX-2	5
8	CHINANET-HB	5
9	LSN-DLLSTX-1	4
10	CMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	143
2	Russian Federation	15
3	United States	14
4	India	9
5	Viet Nam	8
6	Pakistan	4
7	Germany	4
8	Bulgaria	3
9	Romania	2
10	Japan	2

Suspected Bot List [2017-10-11】

detection period: 2017-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-10-10]

detection period: 2017-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 274
number of botnet IPs notified to network operators: 251
number of spam blocked: 46943
recipient count of spam blocked: 929848

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	CHINANET-JS	25
3	WASU	24
4	CHINANET-HB	18
5	UNICOM-HB	13
6	CMNET	12
7	LSN-DLLSTX-2	6
8	EE-WAVECOM-20050318	6
9	CHINANET-YN	6
10	ENCRYPTED-TRANSIT-IPV4	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	177
2	United States	17
3	India	15
4	Russian Federation	8
5	Estonia	6
6	Brazil	5
7	Viet Nam	3
8	Romania	3
9	Iran	3
10	Taiwan	2

Suspected Bot List [2017-10-10]

detection period: 2017-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IL	62.219.3.48	Israel
MO	116.193.10.34	Macau
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-10-08]

detection period: 2017-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 158
number of botnet IPs notified to network operators: 157
number of spam blocked: 907
recipient count of spam blocked: 2125

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	32
3	UK-RAPIDSWITCH-20070418	9
4	PSYCHZ-NETWORKS	7
5	CHINANET-HB	7
6	SHARKTECH-3	6
7	CHINANET-YN	5
8	CMNET	4
9	CHINANET-GD	3
10	CHINANET-CQ	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	120
2	United States	19
3	United Kingdom	9
4	Russian Federation	2
5	Brazil	2
6	Ukraine	1
7	Laos	1
8	Japan	1
9	France	1
10	Egypt	1

Suspected Bot List [2017-10-08]

detection period: 2017-10-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-10-07]

detection period: 2017-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 155
number of botnet IPs notified to network operators: 144
number of spam blocked: 6137
recipient count of spam blocked: 48119

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	11
3	CHINANET-ZJ	6
4	CHINANET-AH	6
5	LSN-DLLSTX-3	4
6	CMNET	4
7	UNICOM	3
8	HICHINA	3
9	CHINANET-HB	3
10	CHINANET-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	106
2	United States	17
3	Viet Nam	3
4	Taiwan	3
5	Russian Federation	3
6	Brazil	3
7	Uruguay	2
8	Indonesia	2
9	France	2
10	Venezuela	1

Suspected Bot List [2017-10-07]

detection period: 2017-10-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
SA	212.76.76.242	Saudi Arabia
US	24.231.215.254	United States
UY	167.56.17.100	Uruguay
UY	167.57.68.153	Uruguay

List from greylisting:

Botnet Statistics [2017-10-06]

detection period: 2017-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 200
number of botnet IPs notified to network operators: 177
number of spam blocked: 53459
recipient count of spam blocked: 966747

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	10
3	LSN-DLLSTX-8	6
4	LSN-DLLSTX-3	6
5	ALISOFT	5
6	HINET-NET	4
7	HICHINA	4
8	VNPT-VNNIC-VN	3
9	CMNET	3
10	CHINANET-AH	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	90
2	United States	21
3	India	11
4	Viet Nam	8
5	Russian Federation	7
6	Taiwan	6
7	Turkey	4
8	Brazil	4
9	Pakistan	3
10	Italy	3

Suspected Bot List [2017-10-06]

detection period: 2017-10-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
RU	185.127.25.68	Russian Federation
TH	61.7.236.60	Thailand
TH	183.89.121.82	Thailand
US	206.125.41.139	United States
UY	167.56.156.116	Uruguay
UY	167.57.126.80	Uruguay

List from greylisting:

Botnet Statistics [2017-10-05]

detection period: 2017-10-05 00:00-23:59 UTC
total number of suspected botnet IPs: 204
number of botnet IPs notified to network operators: 187
number of spam blocked: 41699
recipient count of spam blocked: 709241

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	49
2	CHINANET-JS	14
3	LSN-DLLSTX-6	7
4	CHINANET-YN	6
5	VNPT-VNNIC-VN	5
6	PSINETA	5
7	CMNET	4
8	CHINANET-JX	4
9	CHINANET-HB	4
10	CHINANET-GD	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	94
2	United States	24
3	India	12
4	Viet Nam	9
5	Russian Federation	6
6	Mexico	4
7	Iran	4
8	Germany	4
9	Israel	3
10	Indonesia	3

Suspected Bot List [2017-10-05]

detection period: 2017-10-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
NL	185.56.80.15	Netherlands
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-10-04]

detection period: 2017-10-04 00:00-23:59 UTC
total number of suspected botnet IPs: 222
number of botnet IPs notified to network operators: 203
number of spam blocked: 52861
recipient count of spam blocked: 1013156

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-JS	20
3	PSINETA	6
4	LSN-DLLSTX-6	6
5	CHINANET-HB	6
6	ALISOFT	6
7	HINET-NET	5
8	CHINANET-ZJ	5
9	CHINANET-YN	5
10	FPT-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	111
2	United States	18
3	India	11
4	Iran	10
5	Taiwan	8
6	Viet Nam	6
7	Russian Federation	6
8	Indonesia	4
9	Turkey	3
10	Brazil	3

Suspected Bot List [2017-10-04]

detection period: 2017-10-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.7	Czech Republic
RU	185.127.25.68	Russian Federation
TH	183.89.126.186	Thailand
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics [2017-10-02]

detection period: 2017-10-02 00:00-23:59 UTC
total number of suspected botnet IPs: 178
number of botnet IPs notified to network operators: 162
number of spam blocked: 33209
recipient count of spam blocked: 432410

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	51
2	Turkbil-internet-hizmetleri	7
3	LGTELECOM-KR	7
4	CC-17	4
5	LSN-DLLSTX-3	3
6	KORNET-KR	3
7	CHINANET-ZJ	3
8	CHINANET-JX	3
9	CHINANET-GD	3
10	BSNLNET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	72
2	United States	15
3	South Korea	12
4	India	11
5	Russian Federation	9
6	Turkey	8
7	Viet Nam	6
8	Germany	4
9	Pakistan	3
10	Iran	3

Suspected Bot List [2017-10-02]

detection period: 2017-10-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
IN	1.186.128.5	India
IR	212.33.199.144	Iran
LK	122.255.31.42	Sri Lanka
NL	185.56.80.15	Netherlands
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-10-01]

detection period: 2017-10-01 00:00-23:59 UTC
total number of suspected botnet IPs: 122
number of botnet IPs notified to network operators: 115
number of spam blocked: 25170
recipient count of spam blocked: 660515

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CHINANET-GD	5
3	CMNET	3
4	CHINANET-JS	3
5	ALISOFT	3
6	broadNnet-KR	2
7	NAZWAPL	2
8	LSN-DLLSTX-2	2
9	KORNET-KR	2
10	IT-TECHNORAIL-20011212	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	76
2	Russian Federation	7
3	United States	6
4	South Korea	4
5	Turkey	2
6	Poland	2
7	Italy	2
8	France	2
9	Germany	2
10	Canada	2

Suspected Bot List [2017-10-01]

detection period: 2017-10-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting:

Botnet Statistics for September 2017

detection period: 2017-09-01 00:00 - 2017-09-30 23:59 UTC
total number of suspected botnet IPs: 4286
number of blocked spams: 614627
recipient count of blocked spams: 4749324

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	2362
2	United States	552
3	India	221
4	Viet Nam	216
5	Brazil	72
6	Turkey	56
7	Mexico	54
8	Iran	50
9	Indonesia	45
10	South Korea	41
11	Italy	37
12	Colombia	36
13	Romania	32
14	Russian Federation	31
15	Taiwan	26
16	Pakistan	22
17	Chile	22
18	Bulgaria	21
19	Argentina	20
20	Thailand	18
21	Spain	17
22	Japan	14
23	Australia	14
24	Canada	13
25	Bolivia	13

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	United States	270485
2	China	140539
3	United Kingdom	36928
4	Netherlands	36139
5	Brazil	14301
6	Ukraine	13128
7	Russian Federation	13123
8	Tunisia	12617
9	Canada	11729
10	Romania	8219
11	Germany	6869
12	Hong Kong	5770
13	Singapore	5265
14	Poland	4739
15	Turkey	4511
16	India	3638
17	Bulgaria	3482
18	Republic Of Moldova	3053
19	Hungary	2782
20	South Korea	2539
21	Albania	2292
22	Estonia	1990
23	Taiwan	1767
24	Saint Kitts And Nevis	1606
25	Thailand	952

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-09-30]

detection period: 2017-09-30 00:00-23:59 UTC
total number of suspected botnet IPs: 162
number of botnet IPs notified to network operators: 151
number of spam blocked: 28310
recipient count of spam blocked: 695056

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	52
2	CMNET	10
3	CHINANET-JS	10
4	ALISOFT	6
5	CHINANET-GD	5
6	CHINANET-ZJ-NB	4
7	CHINANET-HB	4
8	CHINANET-FJ	4
9	UNIFIEDLAYER-NETWORK-14	3
10	CHINANET-ZJ	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	104
2	United States	9
3	Russian Federation	5
4	India	5
5	South Korea	4
6	Viet Nam	3
7	Pakistan	3
8	Mexico	3
9	Tunisia	2
10	Italy	2

Suspected Bot List [2017-09-30]

detection period: 2017-09-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
RU	185.127.25.68	Russian Federation
US	206.125.41.139	United States

List from greylisting: