Botnet Statistics [2017-12-30]

detection period: 2017-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 37
number of botnet IPs notified to network operators: 33
number of spam blocked: 33301
recipient count of spam blocked: 997783

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	DE-CCC-20171201	3
4	SC-FLOKINET-LTD-20160826	2
5	KORNET-KR	2
6	CHINANET-ZJ	2
7	hostio	1
8	WestVPS-NET	1
9	UNICOM-CN	1
10	ULVT-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	5
4	Germany	4
5	Russian Federation	2
6	Netherlands	2
7	South Korea	2
8	Iceland	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-30]

detection period: 2017-12-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	5.188.11.166	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-29]

detection period: 2017-12-29 00:00-23:59 UTC
total number of suspected botnet IPs: 36
number of botnet IPs notified to network operators: 33
number of spam blocked: 62273
recipient count of spam blocked: 1865812

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	DE-CCC-20171201	4
4	SC-FLOKINET-LTD-20160826	2
5	CHINANET-ZJ	2
6	hostio	1
7	WestVPS-NET	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	SMARTWEB-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Germany	6
2	United States	5
3	Costa Rica	5
4	China	4
5	Russian Federation	2
6	Netherlands	2
7	Iceland	2
8	Norway	1
9	Macau	1
10	Kyrgyzstan	1

Suspected Bot List [2017-12-29]

detection period: 2017-12-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	5.188.11.166	Russian Federation

List from greylisting:

Botnet Statistics [2017-12-28]

detection period: 2017-12-28 00:00-23:59 UTC
total number of suspected botnet IPs: 36
number of botnet IPs notified to network operators: 25
number of spam blocked: 37910
recipient count of spam blocked: 955586

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	TEMPORARY-CONGRESS-NET	3
3	ENCRYPTED-TRANSIT-IPV4	3
4	SC-FLOKINET-LTD-20160826	2
5	KORNET-KR	2
6	CHINANET-ZJ	2
7	hostio	1
8	WestVPS-NET	1
9	UNICOM-CN	1
10	ULVT-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Germany	5
2	Costa Rica	5
3	United States	4
4	China	4
5	Russian Federation	2
6	Netherlands	2
7	South Korea	2
8	Iceland	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-28]

detection period: 2017-12-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
DE	151.217.47.72	Germany
DE	151.217.63.41	Germany
DE	151.217.68.28	Germany
KG	31.135.255.209	Kyrgyzstan
RU	5.188.11.166	Russian Federation
RU	95.68.240.209	Russian Federation
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-27]

detection period: 2017-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 36
number of botnet IPs notified to network operators: 25
number of spam blocked: 46887
recipient count of spam blocked: 1395303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	TEMPORARY-CONGRESS-NET	2
4	SC-FLOKINET-LTD-20160826	2
5	KORNET-KR	2
6	CHINANET-ZJ	2
7	hostio	1
8	WestVPS-NET	1
9	UNICOM-CN	1
10	ULVT-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Germany	5
3	Costa Rica	5
4	China	4
5	Russian Federation	2
6	Netherlands	2
7	South Korea	2
8	Iceland	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-27]

detection period: 2017-12-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
DE	151.217.47.72	Germany
DE	151.217.68.28	Germany
KG	31.135.255.209	Kyrgyzstan
RU	5.188.11.166	Russian Federation
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-26]

detection period: 2017-12-26 00:00-23:59 UTC
total number of suspected botnet IPs: 30
number of botnet IPs notified to network operators: 22
number of spam blocked: 10236
recipient count of spam blocked: 306616

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	SC-FLOKINET-LTD-20160826	2
3	KORNET-KR	2
4	ENCRYPTED-TRANSIT-IPV4	2
5	CHINANET-ZJ	2
6	hostio	1
7	WestVPS-NET	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	TEMPORARY-CONGRESS-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Costa Rica	5
2	China	4
3	United States	3
4	Russian Federation	2
5	Netherlands	2
6	South Korea	2
7	Iceland	2
8	Hong Kong	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-26]

detection period: 2017-12-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
DE	151.217.68.28	Germany
KG	31.135.255.209	Kyrgyzstan
RU	5.188.11.166	Russian Federation
RU	95.68.240.209	Russian Federation
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-25]

detection period: 2017-12-25 00:00-23:59 UTC
total number of suspected botnet IPs: 31
number of botnet IPs notified to network operators: 24
number of spam blocked: 34103
recipient count of spam blocked: 1018247

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	CHINANET-ZJ	2
5	hostio	1
6	WestVPS-NET	1
7	UNICOM-CN	1
8	STADTWERKE-SCHWEDT-NET	1
9	SMARTWEB-NET	1
10	SC-FLOKINET-LTD-20121116	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	Germany	3
5	Netherlands	2
6	Iceland	2
7	Seychelles	1
8	Russian Federation	1
9	Norway	1
10	South Korea	1

Suspected Bot List [2017-12-25]

detection period: 2017-12-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	5.188.11.166	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2017-12-24]

detection period: 2017-12-24 00:00-23:59 UTC
total number of suspected botnet IPs: 36
number of botnet IPs notified to network operators: 27
number of spam blocked: 50807
recipient count of spam blocked: 1520208

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	CHINANET-ZJ	3
4	SC-FLOKINET-LTD-20160826	2
5	KORNET-KR	2
6	hostio	1
7	WestVPS-NET	1
8	UNICOM-SX	1
9	UNICOM-CN	1
10	ULVT-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	6
2	United States	5
3	Costa Rica	5
4	Russian Federation	3
5	Netherlands	2
6	South Korea	2
7	Iceland	2
8	Hong Kong	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-24]

detection period: 2017-12-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	5.188.11.166	Russian Federation
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-23]

detection period: 2017-12-23 00:00-23:59 UTC
total number of suspected botnet IPs: 36
number of botnet IPs notified to network operators: 28
number of spam blocked: 70618
recipient count of spam blocked: 2129724

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	KORNET-KR	3
4	SC-FLOKINET-LTD-20160826	2
5	CHINANET-ZJ	2
6	hostio	1
7	WestVPS-NET	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	SMARTWEB-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	South Korea	3
5	Germany	3
6	Russian Federation	2
7	Netherlands	2
8	Iceland	2
9	South Africa	1
10	Norway	1

Suspected Bot List [2017-12-23]

detection period: 2017-12-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-22]

detection period: 2017-12-22 00:00-23:59 UTC
total number of suspected botnet IPs: 28
number of botnet IPs notified to network operators: 23
number of spam blocked: 19535
recipient count of spam blocked: 585151

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	3
3	SC-FLOKINET-LTD-20160826	2
4	CHINANET-ZJ	2
5	hostio	1
6	WestVPS-NET	1
7	UNICOM-CN	1
8	SMARTWEB-NET	1
9	NO-UPC-20050707	1
10	NETVIGATOR	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Costa Rica	5
2	United States	4
3	China	4
4	Netherlands	2
5	Iceland	2
6	Germany	2
7	Russian Federation	1
8	Norway	1
9	South Korea	1
10	Israel	1

Suspected Bot List [2017-12-22]

detection period: 2017-12-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2017-12-21]

detection period: 2017-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 37
number of botnet IPs notified to network operators: 30
number of spam blocked: 42175
recipient count of spam blocked: 1280087

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	KORNET-KR	3
4	SC-FLOKINET-LTD-20160826	2
5	IL-BEZEQ-INTERNATIONAL-20001229	2
6	CHINANET-ZJ	2
7	hostio	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	TakeWYN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	South Korea	3
5	Germany	3
6	Russian Federation	2
7	Netherlands	2
8	Iceland	2
9	Israel	2
10	Hong Kong	2

Suspected Bot List [2017-12-21]

detection period: 2017-12-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bots' IP List for November 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-11-01]
Suspected Bots IP [2017-11-02]
Suspected Bots IP [2017-11-03]
Suspected Bots IP [2017-11-04]
Suspected Bots IP [2017-11-05]
Suspected Bots IP [2017-11-06]
Suspected Bots IP [2017-11-07]
Suspected Bots IP [2017-11-08]
Suspected Bots IP [2017-11-09]
Suspected Bots IP [2017-11-10]
Suspected Bots IP [2017-11-11]
Suspected Bots IP [2017-11-12]
Suspected Bots IP [2017-11-13]
Suspected Bots IP [2017-11-14]
Suspected Bots IP [2017-11-15]
Suspected Bots IP [2017-11-16]
Suspected Bots IP [2017-11-17]
Suspected Bots IP [2017-11-18]
Suspected Bots IP [2017-11-19]
Suspected Bots IP [2017-11-20]
Suspected Bots IP [2017-11-21]
Suspected Bots IP [2017-11-22]
Suspected Bots IP [2017-11-23]
Suspected Bots IP [2017-11-24]
Suspected Bots IP [2017-11-25]
Suspected Bots IP [2017-11-26]
Suspected Bots IP [2017-11-27]
Suspected Bots IP [2017-11-28]
Suspected Bots IP [2017-11-29]
Suspected Bots IP [2017-11-30]

Botnet Statistics [2017-12-20]

detection period: 2017-12-20 00:00-23:59 UTC
total number of suspected botnet IPs: 41
number of botnet IPs notified to network operators: 39
number of spam blocked: 67930
recipient count of spam blocked: 1969911

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	IL-BEZEQ-INTERNATIONAL-20001229	2
6	CHINANET-ZJ	2
7	hostio	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	TakeWYN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	6
2	Costa Rica	5
3	China	4
4	Russian Federation	2
5	Netherlands	2
6	South Korea	2
7	Iceland	2
8	Israel	2
9	Hong Kong	2
10	Germany	2

Suspected Bot List [2017-12-20]

detection period: 2017-12-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation

List from greylisting:

Botnet Statistics [2017-12-19]

detection period: 2017-12-19 00:00-23:59 UTC
total number of suspected botnet IPs: 40
number of botnet IPs notified to network operators: 37
number of spam blocked: 57585
recipient count of spam blocked: 1683935

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	IL-BEZEQ-INTERNATIONAL-20001229	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	ULVT-NET	1
9	TakeWYN	1
10	STADTWERKE-SCHWEDT-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	Netherlands	3
5	Germany	3
6	Russian Federation	2
7	Iceland	2
8	Israel	2
9	Belize	2
10	Ukraine	1

Suspected Bot List [2017-12-19]

detection period: 2017-12-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 3

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation

List from greylisting:

Botnet Statistics [2017-12-18]

detection period: 2017-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 35
number of botnet IPs notified to network operators: 31
number of spam blocked: 27528
recipient count of spam blocked: 803046

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	SC-FLOKINET-LTD-20160826	2
3	IL-BEZEQ-INTERNATIONAL-20001229	2
4	ENCRYPTED-TRANSIT-IPV4	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	ULVT-NET	1
9	SMARTONE-MO	1
10	SAA	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	Costa Rica	5
2	China	4
3	United States	3
4	Netherlands	3
5	Iceland	2
6	Israel	2
7	Belize	2
8	South Africa	1
9	Ukraine	1
10	Taiwan	1

Suspected Bot List [2017-12-18]

detection period: 2017-12-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-17]

detection period: 2017-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 42
number of botnet IPs notified to network operators: 40
number of spam blocked: 14297
recipient count of spam blocked: 430572

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	5
2	CR-RACO-LACNIC	5
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	IL-BEZEQ-INTERNATIONAL-20001229	2
6	HINET-NET	2
7	ENCRYPTED-TRANSIT-IPV4	2
8	CHINANET-ZJ	2
9	hostio	1
10	UNICOM-CN	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	11
2	Costa Rica	5
3	United States	3
4	Netherlands	3
5	Taiwan	2
6	South Korea	2
7	Iceland	2
8	Israel	2
9	Germany	2
10	Belize	2

Suspected Bot List [2017-12-17]

detection period: 2017-12-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-16]

detection period: 2017-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 141
number of botnet IPs notified to network operators: 135
number of spam blocked: 35121
recipient count of spam blocked: 625426

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	24
2	Baidu	11
3	CHINANET-GD	10
4	VNPT-VNNIC-VN	9
5	CHINANET-HB	8
6	UNIFIEDLAYER-NETWORK-14	7
7	CHINANET-ZJ-HZ	7
8	CR-RACO-LACNIC	5
9	CHINANET-ZJ-ZX	5
10	CHINANET-JS	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	80
2	Viet Nam	12
3	United States	9
4	Costa Rica	5
5	Netherlands	3
6	Italy	3
7	Thailand	2
8	Russian Federation	2
9	South Korea	2
10	Iceland	2

Suspected Bot List [2017-12-16]

detection period: 2017-12-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2017-12-15]

detection period: 2017-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 256
number of botnet IPs notified to network operators: 235
number of spam blocked: 62940
recipient count of spam blocked: 1228379

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	31
2	CHINANET-ZJ-HZ	21
3	Baidu	16
4	CHINANET-GD	13
5	UNIFIEDLAYER-NETWORK-14	10
6	CHINANET-HB	9
7	VNPT-VNNIC-VN	8
8	CHINANET-ZJ	7
9	CHINANET-ZJ-ZX	6
10	CHINANET-JS	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	136
2	United States	17
3	Viet Nam	15
4	India	14
5	Brazil	7
6	Germany	5
7	Costa Rica	5
8	Taiwan	4
9	Pakistan	4
10	South Korea	4

Suspected Bot List [2017-12-15]

detection period: 2017-12-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-14]

detection period: 2017-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 236
number of botnet IPs notified to network operators: 228
number of spam blocked: 92821
recipient count of spam blocked: 2110080

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	WASU	24
2	CHINANET-ZJ-HZ	23
3	CHINANET-HB	23
4	Baidu	14
5	CHINANET-GD	13
6	UNIFIEDLAYER-NETWORK-14	12
7	CHINANET-JS	10
8	VNPT-VNNIC-VN	9
9	CHINANET-ZJ	8
10	CR-RACO-LACNIC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	143
2	United States	23
3	Viet Nam	17
4	Costa Rica	6
5	Russian Federation	4
6	Netherlands	4
7	South Korea	4
8	India	4
9	Brazil	4
10	Taiwan	3

Suspected Bot List [2017-12-14]

detection period: 2017-12-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-13]

detection period: 2017-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 221
number of botnet IPs notified to network operators: 210
number of spam blocked: 60339
recipient count of spam blocked: 1265579

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	23
2	CHINANET-ZJ-HZ	20
3	WASU	18
4	Baidu	16
5	UNIFIEDLAYER-NETWORK-14	13
6	CHINANET-GD	10
7	CHINANET-ZJ	8
8	CHINANET-JS	7
9	HINET-NET	5
10	002.578.819/0001-66	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	127
2	United States	20
3	Brazil	13
4	Viet Nam	9
5	India	8
6	Taiwan	5
7	Netherlands	4
8	Italy	4
9	South Korea	3
10	Germany	3

Suspected Bot List [2017-12-13]

detection period: 2017-12-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-12]

detection period: 2017-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 270
number of botnet IPs notified to network operators: 251
number of spam blocked: 52077
recipient count of spam blocked: 930188

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	24
2	CHINANET-ZJ-HZ	23
3	CHINANET-HB	18
4	Baidu	15
5	WASU	10
6	UNIFIEDLAYER-NETWORK-14	9
7	UNICOM-GD	9
8	VNPT-VNNIC-VN	8
9	CHINANET-JS	7
10	CHINANET-ZJ	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	143
2	United States	20
3	Viet Nam	16
4	Brazil	13
5	India	11
6	Taiwan	6
7	Thailand	6
8	Czech Republic	6
9	South Korea	4
10	Iran	4

Suspected Bot List [2017-12-12]

detection period: 2017-12-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-11]

detection period: 2017-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 313
number of botnet IPs notified to network operators: 244
number of spam blocked: 57173
recipient count of spam blocked: 1380124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	57
2	CHINANET-HB	34
3	CHINANET-GD	25
4	WASU	21
5	Baidu	18
6	CHINANET-ZJ-HZ	17
7	CHINANET-JS	16
8	VNPT-VNNIC-VN	11
9	HOSTWINDS-17-6	10
10	CHINANET-ZJ	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	158
2	United States	72
3	Viet Nam	17
4	Brazil	9
5	Spain	5
6	Czech Republic	5
7	Italy	4
8	Germany	4
9	India	3
10	Slovakia	2

Suspected Bot List [2017-12-11]

detection period: 2017-12-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 69

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
US	23.129.64.101	United States
US	23.129.64.102	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-10]

detection period: 2017-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 281
number of botnet IPs notified to network operators: 272
number of spam blocked: 72004
recipient count of spam blocked: 1579249

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	34
2	CHINANET-HB	29
3	VNPT-VNNIC-VN	24
4	CHINANET-ZJ-HZ	18
5	Baidu	18
6	CHINANET-JS	16
7	UNICOM-GD	8
8	CHINANET-ZJ	8
9	FPT-VN	7
10	WASU	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	158
2	Viet Nam	44
3	Brazil	16
4	United States	7
5	Germany	5
6	Russian Federation	4
7	Czech Republic	4
8	Netherlands	3
9	South Korea	3
10	Spain	3

Suspected Bot List [2017-12-10]

detection period: 2017-12-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
US	23.129.64.102	United States

List from greylisting:

Botnet Statistics [2017-12-09]

detection period: 2017-12-09 00:00-23:59 UTC
total number of suspected botnet IPs: 285
number of botnet IPs notified to network operators: 276
number of spam blocked: 59867
recipient count of spam blocked: 1437541

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	52
2	UNICOM-GD	27
3	CHINANET-ZJ-HZ	23
4	CHINANET-GD	18
5	Baidu	18
6	VNPT-VNNIC-VN	16
7	UNIFIEDLAYER-NETWORK-14	7
8	CHINANET-JS	7
9	CHINANET-ZJ	5
10	002.578.819/0001-66	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	168
2	Viet Nam	26
3	Brazil	15
4	United States	13
5	India	5
6	Germany	5
7	Czech Republic	5
8	Thailand	3
9	Netherlands	3
10	Italy	3

Suspected Bot List [2017-12-09]

detection period: 2017-12-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 9

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
US	23.129.64.101	United States
US	23.129.64.102	United States

List from greylisting:

Botnet Statistics [2017-12-08]

detection period: 2017-12-08 00:00-23:59 UTC
total number of suspected botnet IPs: 237
number of botnet IPs notified to network operators: 220
number of spam blocked: 48796
recipient count of spam blocked: 995903

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	38
2	Baidu	18
3	CHINANET-ZJ-HZ	16
4	UNICOM-GD	12
5	CHINANET-JS	11
6	VNPT-VNNIC-VN	10
7	CHINANET-GD	10
8	UNIFIEDLAYER-NETWORK-14	7
9	CHINANET-ZJ	7
10	KORNET-KR	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	126
2	Viet Nam	22
3	Brazil	14
4	United States	11
5	Russian Federation	7
6	India	4
7	Thailand	3
8	Romania	3
9	South Korea	3
10	Iran	3

Suspected Bot List [2017-12-08]

detection period: 2017-12-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-07]

detection period: 2017-12-07 00:00-23:59 UTC
total number of suspected botnet IPs: 236
number of botnet IPs notified to network operators: 224
number of spam blocked: 74863
recipient count of spam blocked: 1970187

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	30
2	CHINANET-HB	21
3	CHINANET-ZJ-HZ	18
4	Baidu	18
5	UNICOM-GD	9
6	CHINANET-JS	8
7	VNPT-VNNIC-VN	7
8	UNIFIEDLAYER-NETWORK-14	7
9	CHINANET-ZJ	5
10	UNICOM-HB	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	133
2	Brazil	14
3	United States	12
4	Viet Nam	10
5	India	7
6	Russian Federation	6
7	Czech Republic	5
8	Germany	4
9	Turkey	3
10	Netherlands	3

Suspected Bot List [2017-12-07]

detection period: 2017-12-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan

List from greylisting:

Botnet Statistics [2017-12-06]

detection period: 2017-12-06 00:00-23:59 UTC
total number of suspected botnet IPs: 257
number of botnet IPs notified to network operators: 234
number of spam blocked: 46569
recipient count of spam blocked: 813627

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	38
2	Baidu	18
3	CHINANET-ZJ-HZ	16
4	CHINANET-GD	13
5	VNPT-VNNIC-VN	10
6	UNIFIEDLAYER-NETWORK-14	10
7	UNICOM-HB	6
8	CHINANET-JS	6
9	CHINANET-ZJ	4
10	CHINANET-FJ	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	124
2	United States	20
3	Viet Nam	17
4	Brazil	15
5	Russian Federation	14
6	Czech Republic	9
7	India	5
8	Germany	5
9	Iran	4
10	Netherlands	3

Suspected Bot List [2017-12-06]

detection period: 2017-12-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 23

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
RU	95.68.240.209	Russian Federation
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-05]

detection period: 2017-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 243
number of botnet IPs notified to network operators: 218
number of spam blocked: 30225
recipient count of spam blocked: 380487

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ-HZ	20
2	Baidu	18
3	VNPT-VNNIC-VN	16
4	CHINANET-HB	16
5	CHINANET-ZJ	8
6	CHINANET-GD	7
7	UNIFIEDLAYER-NETWORK-14	6
8	CHINANET-JS	6
9	VIETEL-VNNIC-VN	5
10	002.578.819/0001-66	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	102
2	Viet Nam	28
3	United States	18
4	Brazil	14
5	Russian Federation	8
6	India	7
7	Mexico	4
8	Czech Republic	4
9	Argentina	4
10	Netherlands	3

Suspected Bot List [2017-12-05]

detection period: 2017-12-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KG	31.135.255.209	Kyrgyzstan
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-04]

detection period: 2017-12-04 00:00-23:59 UTC
total number of suspected botnet IPs: 241
number of botnet IPs notified to network operators: 224
number of spam blocked: 13105
recipient count of spam blocked: 13105

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	26
2	VNPT-VNNIC-VN	22
3	Baidu	16
4	CHINANET-GD	15
5	CHINANET-ZJ-HZ	14
6	LSN-DLLSTX-7	10
7	FPT-VN	7
8	CHINANET-ZJ-ZX	7
9	CHINANET-AH	6
10	ETC-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	112
2	Viet Nam	41
3	United States	16
4	Brazil	10
5	India	8
6	Iran	7
7	Russian Federation	6
8	Czech Republic	5
9	Thailand	3
10	Pakistan	2

Suspected Bot List [2017-12-04]

detection period: 2017-12-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2017-12-03]

detection period: 2017-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 238
number of botnet IPs notified to network operators: 227
number of spam blocked: 22416
recipient count of spam blocked: 292667

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	30
2	CHINANET-GD	26
3	VNPT-VNNIC-VN	17
4	Baidu	16
5	CHINANET-ZJ-HZ	15
6	CHINANET-ZJ	8
7	CHINANET-JS	8
8	CHINANET-ZJ-ZX	5
9	CHINANET-AH	5
10	CHINANET-HN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	137
2	Viet Nam	31
3	Brazil	18
4	United States	9
5	Romania	4
6	Germany	4
7	Argentina	4
8	Iran	3
9	Ukraine	2
10	Taiwan	2

Suspected Bot List [2017-12-03]

detection period: 2017-12-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 11

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States

List from greylisting:

Botnet Statistics [2017-12-02]

detection period: 2017-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 204
number of botnet IPs notified to network operators: 198
number of spam blocked: 29085
recipient count of spam blocked: 267639

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ-HZ	19
2	CHINANET-GD	18
3	CHINANET-HB	17
4	Baidu	13
5	VNPT-VNNIC-VN	9
6	CHINANET-JS	8
7	001.766.744/0001-84	6
8	CHINANET-AH	5
9	LSN-DLLSTX-2	4
10	CHINANET-ZJ-ZX	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	114
2	Brazil	20
3	Viet Nam	12
4	United States	12
5	Iran	4
6	Czech Republic	4
7	Romania	3
8	South Korea	3
9	Italy	3
10	India	3

Suspected Bot List [2017-12-02]

detection period: 2017-12-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
RU	95.68.240.209	Russian Federation

List from greylisting:

Botnet Statistics for November 2017

detection period: 2017-11-01 00:00 - 2017-11-30 23:59 UTC
total number of suspected botnet IPs: 6407
number of blocked spams: 2288563
recipient count of blocked spams: 43448606

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	4171
2	Viet Nam	765
3	United States	412
4	India	140
5	Brazil	132
6	Russian Federation	89
7	Thailand	60
8	Italy	50
9	Ukraine	38
10	Indonesia	36
11	Romania	34
12	France	28
13	Taiwan	23
14	Iran	23
15	Argentina	23
16	Poland	19
17	Turkey	18
18	Czech Republic	18
19	South Korea	16
20	Pakistan	15
21	Kazakhstan	15
22	Colombia	15
23	United Kingdom	13
24	Germany	12
25	Mexico	11

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	724360
2	United States	540104
3	Brazil	165226
4	Canada	118316
5	Germany	117359
6	Hong Kong	85123
7	Venezuela	72241
8	Netherlands	57282
9	Russian Federation	55201
10	Romania	48568
11	United Kingdom	47301
12	Ukraine	43094
13	Czech Republic	41096
14	Israel	29650
15	Belize	27923
16	Poland	21072
17	Norway	20682
18	Iceland	16829
19	South Korea	13478
20	Kyrgyzstan	13106
21	Tunisia	7022
22	Mexico	5711
23	Macau	3595
24	South Africa	2594
25	Singapore	2513

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2017-12-01]

detection period: 2017-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 278
number of botnet IPs notified to network operators: 258
number of spam blocked: 29732
recipient count of spam blocked: 50201

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	36
2	CHINANET-HB	25
3	CHINANET-ZJ-HZ	19
4	001.766.744/0001-84	18
5	CHINANET-JS	14
6	Baidu	11
7	LSN-DLLSTX-2	10
8	VNPT-VNNIC-VN	8
9	FPT-VN	6
10	CHINANET-ZJ	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	128
2	Brazil	36
3	Viet Nam	21
4	United States	14
5	Poland	9
6	India	9
7	Czech Republic	7
8	Romania	4
9	Italy	4
10	Argentina	4