Botnet Statistics [2018-01-30]

detection period: 2018-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 15
number of botnet IPs notified to network operators: 13
number of spam blocked: 33321
recipient count of spam blocked: 1077700

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	UNICOM-CN	1
3	SAA	1
4	RHINO-3	1
5	NG-CYBERSPACE-990114	1
6	MRNET	1
7	KORNET-KR	1
8	IP2000-ADSL-BAS	1
9	ESTROWEB-01	1
10	CZ-WHOISPROTECTION-20141231	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	United States	2
3	South Africa	1
4	Singapore	1
5	Netherlands	1
6	Nigeria	1
7	South Korea	1
8	India	1
9	France	1
10	Czech Republic	1

Suspected Bot List [2018-01-30]

detection period: 2018-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-29]

detection period: 2018-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 14
number of botnet IPs notified to network operators: 12
number of spam blocked: 114754
recipient count of spam blocked: 722304

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	VIS-BLOCK	1
3	UNICOM-CN	1
4	SAA	1
5	NETBLOCK-SHENTEL-HELICONCABLE	1
6	KORNET-KR	1
7	IP2000-ADSL-BAS	1
8	EURONET-ISP	1
9	CZ-WHOISPROTECTION-20141231	1
10	CHINANET-TJ	1

The top 9 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	United States	3
3	South Africa	1
4	Poland	1
5	South Korea	1
6	India	1
7	France	1
8	Czech Republic	1
9	Brazil	1

Suspected Bot List [2018-01-29]

detection period: 2018-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-28]

detection period: 2018-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 15
number of botnet IPs notified to network operators: 13
number of spam blocked: 62382
recipient count of spam blocked: 653199

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	UNICOM-CN	1
3	SAA	1
4	RRNY	1
5	MRNET	1
6	KORNET-KR	1
7	IP2000-ADSL-BAS	1
8	INTERSERVER	1
9	IE-NTL-20060222	1
10	CZ-WHOISPROTECTION-20141231	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	United States	3
3	South Africa	1
4	Singapore	1
5	South Korea	1
6	India	1
7	Ireland	1
8	France	1
9	Czech Republic	1
10	Brazil	1

Suspected Bot List [2018-01-28]

detection period: 2018-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Suspected Bots' IP List for December 2017

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2017-12-01]
Suspected Bots IP [2017-12-02]
Suspected Bots IP [2017-12-03]
Suspected Bots IP [2017-12-04]
Suspected Bots IP [2017-12-05]
Suspected Bots IP [2017-12-06]
Suspected Bots IP [2017-12-07]
Suspected Bots IP [2017-12-08]
Suspected Bots IP [2017-12-09]
Suspected Bots IP [2017-12-10]
Suspected Bots IP [2017-12-11]
Suspected Bots IP [2017-12-12]
Suspected Bots IP [2017-12-13]
Suspected Bots IP [2017-12-14]
Suspected Bots IP [2017-12-15]
Suspected Bots IP [2017-12-16]
Suspected Bots IP [2017-12-17]
Suspected Bots IP [2017-12-18]
Suspected Bots IP [2017-12-19]
Suspected Bots IP [2017-12-20]
Suspected Bots IP [2017-12-21]
Suspected Bots IP [2017-12-22]
Suspected Bots IP [2017-12-23]
Suspected Bots IP [2017-12-24]
Suspected Bots IP [2017-12-25]
Suspected Bots IP [2017-12-26]
Suspected Bots IP [2017-12-27]
Suspected Bots IP [2017-12-28]
Suspected Bots IP [2017-12-29]
Suspected Bots IP [2017-12-30]
Suspected Bots IP [2017-12-31]

Botnet Statistics [2018-01-27]

detection period: 2018-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 12
number of botnet IPs notified to network operators: 10
number of spam blocked: 22952
recipient count of spam blocked: 611275

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	UNICOM-CN	1
3	SAA	1
4	RRNY	1
5	NEXTGENTEL-NO-T2	1
6	KORNET-KR	1
7	IE-NTL-20060222	1
8	CZ-WHOISPROTECTION-20141231	1
9	CHINANET-TJ	1
10	AIRLINERES-CALPOP-COM	1

The top 8 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	United States	2
3	South Africa	1
4	Norway	1
5	South Korea	1
6	Ireland	1
7	Czech Republic	1
8	Brazil	1

Suspected Bot List [2018-01-27]

detection period: 2018-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-26]

detection period: 2018-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 10
number of botnet IPs notified to network operators: 9
number of spam blocked: 16161
recipient count of spam blocked: 484424

The top 9 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	UNICOM-CN	1
3	NL-WORLDSTREAM-20090204	1
4	KORNET-KR	1
5	INTERSERVER	1
6	CZ-WHOISPROTECTION-20141231	1
7	CHINANET-TJ	1
8	AIRLINERES-CALPOP-COM	1
9	002.558.157/0001-62	1

The top 6 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	United States	2
3	Netherlands	1
4	South Korea	1
5	Czech Republic	1
6	Brazil	1

Suspected Bot List [2018-01-26]

detection period: 2018-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-01-25]

detection period: 2018-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 6
number of botnet IPs notified to network operators: 5
number of spam blocked: 63
recipient count of spam blocked: 1890

The top 5 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-ZJ	2
2	UNICOM-CN	1
3	CZ-WHOISPROTECTION-20141231	1
4	CHINANET-TJ	1
5	002.558.157/0001-62	1

The top 3 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	4
2	Czech Republic	1
3	Brazil	1

Suspected Bot List [2018-01-25]

detection period: 2018-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-01-23]

detection period: 2018-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24
number of botnet IPs notified to network operators: 23
number of spam blocked: 18303
recipient count of spam blocked: 548307

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	HO-2	2
3	CHINANET-ZJ	2
4	hostio	1
5	UNICOM-CN	1
6	SC-FLOKINET-LTD-20160826	1
7	NO-UPC-20050707	1
8	LIVESHELLS-SRL	1
9	KSS-Telecom-net	1
10	KORNET-KR	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Netherlands	2
4	Canada	2
5	Belize	2
6	Romania	1
7	Norway	1
8	South Korea	1
9	Kyrgyzstan	1
10	Iceland	1

Suspected Bot List [2018-01-23]

detection period: 2018-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic

List from greylisting:

Botnet Statistics [2018-01-22]

detection period: 2018-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 26
number of botnet IPs notified to network operators: 24
number of spam blocked: 18521
recipient count of spam blocked: 554818

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	HO-2	2
3	CHINANET-ZJ	2
4	hostio	1
5	UNICOM-CN	1
6	SMARTWEB-NET	1
7	SC-FLOKINET-LTD-20160826	1
8	SAA	1
9	NO-UPC-20050707	1
10	LIVESHELLS-SRL	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Canada	3
4	Netherlands	2
5	Belize	2
6	South Africa	1
7	Romania	1
8	Norway	1
9	Iceland	1
10	India	1

Suspected Bot List [2018-01-22]

detection period: 2018-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-21]

detection period: 2018-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 26
number of botnet IPs notified to network operators: 24
number of spam blocked: 17996
recipient count of spam blocked: 539155

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	HO-2	2
3	CHINANET-ZJ	2
4	hostio	1
5	UNICOM-CN	1
6	SC-FLOKINET-LTD-20160826	1
7	SAA	1
8	NO-UPC-20050707	1
9	LIVESHELLS-SRL	1
10	KORNET-KR	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Canada	3
4	Netherlands	2
5	Belize	2
6	South Africa	1
7	Ukraine	1
8	Romania	1
9	Norway	1
10	South Korea	1

Suspected Bot List [2018-01-21]

detection period: 2018-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-20]

detection period: 2018-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 30
number of botnet IPs notified to network operators: 28
number of spam blocked: 31925
recipient count of spam blocked: 786869

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	SC-FLOKINET-LTD-20160826	2
3	HO-2	2
4	CHINANET-ZJ	2
5	hostio	1
6	UNICOM-CN	1
7	STADTWERKE-SCHWEDT-NET	1
8	SMARTWEB-NET	1
9	SAA	1
10	RU-TIMEWEB2-20171212-53	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Canada	3
4	Ukraine	2
5	Netherlands	2
6	Iceland	2
7	Germany	2
8	Belize	2
9	South Africa	1
10	Russian Federation	1

Suspected Bot List [2018-01-20]

detection period: 2018-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-19]

detection period: 2018-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 28
number of botnet IPs notified to network operators: 26
number of spam blocked: 29211
recipient count of spam blocked: 703809

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	SC-FLOKINET-LTD-20160826	2
3	HO-2	2
4	CHINANET-ZJ	2
5	hostio	1
6	UNICOM-CN	1
7	SMARTWEB-NET	1
8	SAA	1
9	RU-TIMEWEB2-20171212-53	1
10	OPRIA	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Netherlands	3
4	Iceland	2
5	Germany	2
6	Canada	2
7	South Africa	1
8	Ukraine	1
9	Russian Federation	1
10	Romania	1

Suspected Bot List [2018-01-19]

detection period: 2018-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-18]

detection period: 2018-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 25
number of botnet IPs notified to network operators: 25
number of spam blocked: 30947
recipient count of spam blocked: 733994

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	SC-FLOKINET-LTD-20160826	2
3	HO-2	2
4	CHINANET-ZJ	2
5	hostio	1
6	UNICOM-CN	1
7	SMARTWEB-NET	1
8	OPRIA	1
9	NO-UPC-20050707	1
10	MX-HSCV17-LACNIC	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Netherlands	2
4	Iceland	2
5	Germany	2
6	Canada	2
7	Ukraine	1
8	Romania	1
9	Norway	1
10	Mexico	1

Suspected Bot List [2018-01-18]

detection period: 2018-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 0

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-01-17]

detection period: 2018-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 28
number of botnet IPs notified to network operators: 23
number of spam blocked: 34772
recipient count of spam blocked: 783378

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	SC-FLOKINET-LTD-20160826	2
3	HO-2	2
4	CHINANET-ZJ	2
5	hostio	1
6	UNICOM-CN	1
7	SMARTWEB-NET	1
8	RO-ARTELECOM-20070815	1
9	OPRIA	1
10	NO-UPC-20050707	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Romania	2
4	Netherlands	2
5	Iceland	2
6	Germany	2
7	Canada	2
8	Ukraine	1
9	Norway	1
10	Mexico	1

Suspected Bot List [2018-01-17]

detection period: 2018-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-16]

detection period: 2018-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 32
number of botnet IPs notified to network operators: 26
number of spam blocked: 28950
recipient count of spam blocked: 826305

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	CR-RACO-LACNIC	3
3	SC-FLOKINET-LTD-20160826	2
4	HO-2	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	SMARTWEB-NET	1
9	SAA	1
10	RO-ARTELECOM-20070815	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Romania	3
4	Costa Rica	3
5	Netherlands	2
6	Iceland	2
7	Germany	2
8	Canada	2
9	South Africa	1
10	Ukraine	1

Suspected Bot List [2018-01-16]

detection period: 2018-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-15]

detection period: 2018-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 33
number of botnet IPs notified to network operators: 28
number of spam blocked: 35584
recipient count of spam blocked: 1066650

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	CR-RACO-LACNIC	3
3	SC-FLOKINET-LTD-20160826	2
4	HO-2	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	STUFF-FIBRE-NZ	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Romania	3
4	Costa Rica	3
5	Netherlands	2
6	Iceland	2
7	Germany	2
8	Canada	2
9	New Zealand	1
10	Norway	1

Suspected Bot List [2018-01-15]

detection period: 2018-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-14]

detection period: 2018-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 34
number of botnet IPs notified to network operators: 26
number of spam blocked: 37943
recipient count of spam blocked: 1137420

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	CR-RACO-LACNIC	3
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	HO-2	2
6	CHINANET-ZJ	2
7	hostio	1
8	UNICOM-CN	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Netherlands	4
3	China	4
4	Romania	3
5	Costa Rica	3
6	South Korea	2
7	Iceland	2
8	Germany	2
9	Canada	2
10	South Africa	1

Suspected Bot List [2018-01-14]

detection period: 2018-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
KR	222.110.3.1	South Korea
NL	185.106.122.188	Netherlands
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics for December 2017

detection period: 2017-12-01 00:00 - 2017-12-31 23:59 UTC
total number of suspected botnet IPs: 2897
number of blocked spams: 1389839
recipient count of blocked spams: 32784780

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	1457
2	Viet Nam	333
3	United States	232
4	Brazil	193
5	India	91
6	Russian Federation	54
7	Czech Republic	49
8	Iran	36
9	Taiwan	26
10	Thailand	23
11	Argentina	22
12	Indonesia	20
13	Spain	20
14	Slovakia	19
15	Italy	19
16	Germany	17
17	Ukraine	14
18	Poland	14
19	Pakistan	13
20	Turkey	12
21	Romania	12
22	Hungary	12
23	South Korea	10
24	Mexico	9
25	Colombia	9

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	563713
2	United States	233893
3	Brazil	127587
4	Czech Republic	118579
5	Hong Kong	69320
6	Canada	44891
7	Netherlands	38061
8	Germany	35560
9	Israel	25521
10	Ukraine	21333
11	Costa Rica	14912
12	South Korea	11918
13	Iceland	11431
14	Poland	11366
15	Russian Federation	11284
16	Belize	10891
17	Norway	8225
18	Kyrgyzstan	6595
19	Romania	5832
20	UNKNOWN	5279
21	United Kingdom	4991
22	South Africa	3227
23	Seychelles	1151
24	Mexico	1077
25	Chile	1032

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-01-13]

detection period: 2018-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 31
number of botnet IPs notified to network operators: 24
number of spam blocked: 27591
recipient count of spam blocked: 826715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	SC-FLOKINET-LTD-20160826	2
3	KORNET-KR	2
4	HO-2	2
5	CR-RACO-LACNIC	2
6	CHINANET-ZJ	2
7	hostio	1
8	UNICOM-CN	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	China	4
3	Romania	3
4	Netherlands	3
5	South Korea	2
6	Iceland	2
7	Germany	2
8	Costa Rica	2
9	Canada	2
10	South Africa	1

Suspected Bot List [2018-01-13]

detection period: 2018-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 7

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
NL	185.106.122.188	Netherlands
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-12]

detection period: 2018-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 45
number of botnet IPs notified to network operators: 39
number of spam blocked: 26668
recipient count of spam blocked: 720870

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ENCRYPTED-TRANSIT-IPV4	4
2	DE-ISP4P-20060126	3
3	UNIFIEDLAYER-NETWORK-13	2
4	SC-FLOKINET-LTD-20160826	2
5	HO-2	2
6	DE-ISP4P-20041207	2
7	CR-RACO-LACNIC	2
8	CHINANET-ZJ	2
9	hostio	1
10	WOOSHWIRELESSNZ	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	10
2	Germany	8
3	China	5
4	Romania	3
5	Netherlands	3
6	Iceland	2
7	Costa Rica	2
8	Canada	2
9	South Africa	1
10	Viet Nam	1

Suspected Bot List [2018-01-12]

detection period: 2018-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-11]

detection period: 2018-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 183
number of botnet IPs notified to network operators: 177
number of spam blocked: 33177
recipient count of spam blocked: 826443

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	55
2	UNICOM-HB	29
3	CHINANET-JS	15
4	UNICOM-JS	9
5	CC-17	6
6	CMNET	5
7	ENCRYPTED-TRANSIT-IPV4	4
8	DE-ISP4P-20060126	4
9	CHINANET-GD	4
10	DE-ISP4P-20041207	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	130
2	United States	19
3	Germany	9
4	Netherlands	4
5	Romania	2
6	South Korea	2
7	Iceland	2
8	Costa Rica	2
9	Canada	2
10	New Zealand	1

Suspected Bot List [2018-01-11]

detection period: 2018-01-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-10]

detection period: 2018-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 189
number of botnet IPs notified to network operators: 181
number of spam blocked: 32232
recipient count of spam blocked: 840549

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	39
2	UNICOM-HB	29
3	CHINANET-JS	19
4	UNICOM-JS	12
5	DE-ISP4P-20060126	10
6	LSN-DLLSTX-7	6
7	CC-17	6
8	CMNET	5
9	UNIFIEDLAYER-NETWORK-14	4
10	ENCRYPTED-TRANSIT-IPV4	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	125
2	United States	25
3	Germany	12
4	Netherlands	3
5	Hong Kong	3
6	Romania	2
7	Mexico	2
8	Iceland	2
9	Costa Rica	2
10	Canada	2

Suspected Bot List [2018-01-10]

detection period: 2018-01-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
PL	195.22.126.39	Poland
US	12.196.122.74	United States
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-09]

detection period: 2018-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 176
number of botnet IPs notified to network operators: 170
number of spam blocked: 21795
recipient count of spam blocked: 516941

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	37
2	UNICOM-HB	30
3	UNICOM-JS	15
4	CHINANET-JS	15
5	DE-ISP4P-20060126	9
6	UNIFIEDLAYER-NETWORK-14	8
7	CMNET	8
8	CHINANET-ZJ-HZ	6
9	ENCRYPTED-TRANSIT-IPV4	4
10	CC-17	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	122
2	United States	22
3	Germany	10
4	Romania	2
5	Netherlands	2
6	Hong Kong	2
7	Costa Rica	2
8	South Africa	1
9	Russian Federation	1
10	Poland	1

Suspected Bot List [2018-01-09]

detection period: 2018-01-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-08]

detection period: 2018-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 199
number of botnet IPs notified to network operators: 194
number of spam blocked: 18309
recipient count of spam blocked: 430341

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	62
2	UNICOM-HB	35
3	CHINANET-JS	15
4	UNICOM-JS	14
5	DE-ISP4P-20060126	11
6	CMNET	8
7	UNIFIEDLAYER-NETWORK-14	4
8	ENCRYPTED-TRANSIT-IPV4	4
9	CHINANET-ZJ	4
10	CHINANET-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	150
2	United States	14
3	Germany	12
4	Netherlands	2
5	South Korea	2
6	Iceland	2
7	Hong Kong	2
8	Costa Rica	2
9	Turkey	1
10	Russian Federation	1

Suspected Bot List [2018-01-08]

detection period: 2018-01-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-07]

detection period: 2018-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 107
number of botnet IPs notified to network operators: 101
number of spam blocked: 22213
recipient count of spam blocked: 500369

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-HB	27
2	UNICOM-HB	12
3	DE-ISP4P-20060126	11
4	CMNET	6
5	ENCRYPTED-TRANSIT-IPV4	4
6	CHINANET-ZJ-HZ	4
7	CHINANET-ZJ	4
8	CHINANET-ZJ-ZX	3
9	SC-FLOKINET-LTD-20160826	2
10	HO-2	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	64
2	Germany	13
3	United States	10
4	Romania	2
5	Netherlands	2
6	Iceland	2
7	Hong Kong	2
8	Costa Rica	2
9	Canada	2
10	Russian Federation	1

Suspected Bot List [2018-01-07]

detection period: 2018-01-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-06]

detection period: 2018-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 57
number of botnet IPs notified to network operators: 52
number of spam blocked: 31476
recipient count of spam blocked: 1399414

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DE-ISP4P-20060126	9
2	UNIFIEDLAYER-NETWORK-14	5
3	ENCRYPTED-TRANSIT-IPV4	4
4	PSYCHZ-NETWORKS	3
5	CHINANET-ZJ	3
6	SC-FLOKINET-LTD-20160826	2
7	HO-2	2
8	CR-RACO-LACNIC	2
9	CHINANET-HB	2
10	hostio	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	16
2	Germany	12
3	China	9
4	Romania	2
5	Netherlands	2
6	Iceland	2
7	Costa Rica	2
8	Canada	2
9	New Zealand	1
10	Norway	1

Suspected Bot List [2018-01-06]

detection period: 2018-01-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-05]

detection period: 2018-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 38
number of botnet IPs notified to network operators: 32
number of spam blocked: 53079
recipient count of spam blocked: 1638255

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	KORNET-KR	3
4	SC-FLOKINET-LTD-20160826	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	ULVT-NET	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	South Korea	3
5	Romania	2
6	Netherlands	2
7	Iceland	2
8	Germany	2
9	South Africa	1
10	Russian Federation	1

Suspected Bot List [2018-01-05]

detection period: 2018-01-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-04]

detection period: 2018-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 39
number of botnet IPs notified to network operators: 33
number of spam blocked: 71474
recipient count of spam blocked: 2193253

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	KORNET-KR	3
4	SC-FLOKINET-LTD-20160826	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	ULVT-NET	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	South Korea	3
5	Norway	2
6	Netherlands	2
7	Iceland	2
8	Germany	2
9	Canada	2
10	South Africa	1

Suspected Bot List [2018-01-04]

detection period: 2018-01-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-03]

detection period: 2018-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 37
number of botnet IPs notified to network operators: 31
number of spam blocked: 80734
recipient count of spam blocked: 2419368

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-CN	1
8	ULVT-NET	1
9	SMARTWEB-NET	1
10	SMARTONE-MO	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	Norway	2
5	Netherlands	2
6	South Korea	2
7	Iceland	2
8	Germany	2
9	South Africa	1
10	Russian Federation	1

Suspected Bot List [2018-01-03]

detection period: 2018-01-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2018-01-02]

detection period: 2018-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 38
number of botnet IPs notified to network operators: 33
number of spam blocked: 65516
recipient count of spam blocked: 1981328

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-SX	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	SMARTWEB-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	7
2	Costa Rica	5
3	China	5
4	Romania	2
5	Netherlands	2
6	South Korea	2
7	Iceland	2
8	Germany	2
9	Canada	2
10	Russian Federation	1

Suspected Bot List [2018-01-02]

detection period: 2018-01-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting:

Botnet Statistics [2018-01-01]

detection period: 2018-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 39
number of botnet IPs notified to network operators: 33
number of spam blocked: 55223
recipient count of spam blocked: 1667084

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	KORNET-KR	2
5	CHINANET-ZJ	2
6	hostio	1
7	UNICOM-SX	1
8	UNICOM-CN	1
9	ULVT-NET	1
10	SMARTWEB-NET	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	6
2	China	6
3	Costa Rica	5
4	Germany	3
5	Romania	2
6	Netherlands	2
7	South Korea	2
8	Iceland	2
9	Canada	2
10	South Africa	1

Suspected Bot List [2018-01-01]

detection period: 2018-01-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States
ZA	196.46.23.122	South Africa

List from greylisting:

Botnet Statistics [2017-12-31]

detection period: 2017-12-31 00:00-23:59 UTC
total number of suspected botnet IPs: 31
number of botnet IPs notified to network operators: 27
number of spam blocked: 51406
recipient count of spam blocked: 1539963

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CR-RACO-LACNIC	5
2	ENCRYPTED-TRANSIT-IPV4	4
3	SC-FLOKINET-LTD-20160826	2
4	CHINANET-ZJ	2
5	hostio	1
6	UNICOM-CN	1
7	SMARTWEB-NET	1
8	RO-ARTELECOM-20070815	1
9	NO-UPC-20050707	1
10	NETVIGATOR	1

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	5
2	Costa Rica	5
3	China	4
4	Germany	3
5	Netherlands	2
6	Iceland	2
7	Romania	1
8	Norway	1
9	South Korea	1
10	Kyrgyzstan	1

Suspected Bot List [2017-12-31]

detection period: 2017-12-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 4

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
US	23.129.64.101	United States
US	23.129.64.102	United States
US	23.129.64.103	United States
US	23.129.64.104	United States

List from greylisting: