Botnet Statistics [2018-05-30]

detection period: 2018-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 645
number of botnet IPs notified to network operators: 592
number of spam blocked: 17335
recipient count of spam blocked: 326530

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	18
3	CMNET	12
4	CHINANET-JS	12
5	CHINANET-GD	11
6	broadNnet-KR	8
7	HINET-NET	7
8	CO-ACSA-LACNIC	7
9	Baidu	7
10	GO-DADDY-COM-LLC	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	163
2	United States	56
3	France	50
4	South Korea	35
5	Brazil	34
6	India	29
7	Russian Federation	26
8	Viet Nam	19
9	Italy	15
10	Indonesia	15

Suspected Bot List [2018-05-30]

detection period: 2018-05-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-29]

detection period: 2018-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 559
number of botnet IPs notified to network operators: 518
number of spam blocked: 25195
recipient count of spam blocked: 442946

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	19
2	TencentCloud	16
3	CHINANET-JS	13
4	CO-ACSA-LACNIC	8
5	broadNnet-KR	7
6	CMNET	7
7	VNPT-VNNIC-VN	6
8	FR-OVH	6
9	DOPI1	6
10	CHINANET-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	120
2	United States	48
3	France	48
4	South Korea	38
5	Russian Federation	25
6	Brazil	23
7	India	21
8	United Kingdom	17
9	Viet Nam	16
10	Germany	16

Suspected Bot List [2018-05-29]

detection period: 2018-05-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-28]

detection period: 2018-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 204
number of botnet IPs notified to network operators: 187
number of spam blocked: 8433
recipient count of spam blocked: 171123

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-JS	7
2	TencentCloud	5
3	VNPT-VNNIC-VN	4
4	CMNET	4
5	VIETEL-VN	3
6	KORNET-KR	3
7	KIDC-KR	3
8	CHINANET-ZJ	3
9	CHINANET-SH	3
10	informtech-nforce	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	49
2	United States	29
3	France	19
4	Russian Federation	11
5	Brazil	10
6	Viet Nam	9
7	South Korea	7
8	Italy	5
9	Malaysia	4
10	India	4

Suspected Bot List [2018-05-28]

detection period: 2018-05-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Suspected Bots' IP List for April 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-04-01]
Suspected Bots IP [2018-04-02]
Suspected Bots IP [2018-04-03]
Suspected Bots IP [2018-04-04]
Suspected Bots IP [2018-04-05]
Suspected Bots IP [2018-04-06]
Suspected Bots IP [2018-04-07]
Suspected Bots IP [2018-04-08]
Suspected Bots IP [2018-04-09]
Suspected Bots IP [2018-04-10]
Suspected Bots IP [2018-04-11]
Suspected Bots IP [2018-04-12]
Suspected Bots IP [2018-04-13]
Suspected Bots IP [2018-04-14]
Suspected Bots IP [2018-04-15]
Suspected Bots IP [2018-04-16]
Suspected Bots IP [2018-04-17]
Suspected Bots IP [2018-04-18]
Suspected Bots IP [2018-04-19]
Suspected Bots IP [2018-04-20]
Suspected Bots IP [2018-04-21]
Suspected Bots IP [2018-04-22]
Suspected Bots IP [2018-04-23]
Suspected Bots IP [2018-04-24]
Suspected Bots IP [2018-04-25]
Suspected Bots IP [2018-04-26]
Suspected Bots IP [2018-04-27]
Suspected Bots IP [2018-04-28]
Suspected Bots IP [2018-04-29]
Suspected Bots IP [2018-04-30]

Botnet Statistics [2018-05-27]

detection period: 2018-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 141
number of botnet IPs notified to network operators: 135
number of spam blocked: 21092
recipient count of spam blocked: 631966

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	8
2	CMNET	6
3	VNPT-VNNIC-VN	5
4	CHINANET-JS	5
5	CO-ACSA-LACNIC	4
6	KORNET-KR	3
7	EC-ANSA-LACNIC	3
8	CHINANET-ZJ	3
9	Baidu	3
10	broadNnet-KR	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	46
2	United States	15
3	South Korea	8
4	Viet Nam	6
5	Italy	5
6	Colombia	5
7	Brazil	5
8	Germany	4
9	Malaysia	3
10	India	3

Suspected Bot List [2018-05-27]

detection period: 2018-05-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-26]

detection period: 2018-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 180
number of botnet IPs notified to network operators: 168
number of spam blocked: 30891
recipient count of spam blocked: 796491

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	CHINANET-JS	8
3	CHINANET-ZJ	4
4	broadNnet-KR	3
5	KORNET-KR	3
6	CHINANET-YN	3
7	CHINANET-JX	3
8	VNPT-VNNIC-VN	2
9	UNICOM-LN	2
10	UNICOM-CN	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	63
2	United States	18
3	Italy	12
4	France	9
5	South Korea	8
6	Thailand	7
7	Russian Federation	7
8	India	6
9	Brazil	6
10	Colombia	4

Suspected Bot List [2018-05-26]

detection period: 2018-05-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 12

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-25]

detection period: 2018-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 370
number of botnet IPs notified to network operators: 352
number of spam blocked: 35237
recipient count of spam blocked: 824124

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	11
3	CHINANET-JS	10
4	VNPT-VNNIC-VN	7
5	TENCENT-CN	6
6	broadNnet-KR	5
7	ZZGIANT	4
8	FR-OVH	4
9	DOPI1	4
10	CO-ACSA-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	86
2	United States	43
3	France	36
4	Russian Federation	20
5	South Korea	19
6	Brazil	19
7	India	18
8	Italy	15
9	Viet Nam	11
10	United Kingdom	9

Suspected Bot List [2018-05-25]

detection period: 2018-05-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-24]

detection period: 2018-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 628
number of botnet IPs notified to network operators: 581
number of spam blocked: 42718
recipient count of spam blocked: 1145066

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	13
3	CHINANET-JS	12
4	broadNnet-KR	10
5	GO-DADDY-COM-LLC	9
6	CO-ACSA-LACNIC	9
7	CMNET	9
8	OVH	6
9	AT-88-Z	6
10	VNPT-VNNIC-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	130
2	United States	74
3	France	56
4	South Korea	37
5	India	35
6	Brazil	28
7	Russian Federation	26
8	Germany	20
9	Viet Nam	16
10	United Kingdom	15

Suspected Bot List [2018-05-24]

detection period: 2018-05-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-23]

detection period: 2018-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 579
number of botnet IPs notified to network operators: 538
number of spam blocked: 50573
recipient count of spam blocked: 1310585

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	KORNET-KR	14
3	CO-ACSA-LACNIC	11
4	CMNET	11
5	CHINANET-GD	10
6	CHINANET-JS	9
7	HINET-NET	6
8	GO-DADDY-COM-LLC	6
9	broadNnet-KR	5
10	VIETEL-VN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	133
2	United States	67
3	France	45
4	South Korea	33
5	Brazil	25
6	India	21
7	Germany	20
8	Colombia	20
9	Russian Federation	17
10	Italy	17

Suspected Bot List [2018-05-23]

detection period: 2018-05-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 42

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-22]

detection period: 2018-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 399
number of botnet IPs notified to network operators: 363
number of spam blocked: 39593
recipient count of spam blocked: 1014544

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	KORNET-KR	11
3	CHINANET-JS	8
4	GOOGLE-CLOUD	5
5	CHINANET-GD	5
6	broadNnet-KR	4
7	THAINET-TH	4
8	CO-ACSA-LACNIC	4
9	Baidu	4
10	AT-88-Z	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	78
2	United States	56
3	France	24
4	South Korea	20
5	Russian Federation	18
6	India	16
7	Germany	15
8	Brazil	15
9	Canada	14
10	Thailand	11

Suspected Bot List [2018-05-22]

detection period: 2018-05-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-21]

detection period: 2018-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 321
number of botnet IPs notified to network operators: 305
number of spam blocked: 24940
recipient count of spam blocked: 664158

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	10
2	TencentCloud	9
3	CHINANET-JX	6
4	CHINANET-JS	6
5	broadNnet-KR	4
6	THAINET-TH	4
7	GOOGLE-CLOUD	4
8	FR-OVH	4
9	AT-88-Z	4
10	hcmccable-net	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	56
2	United States	55
3	France	28
4	South Korea	18
5	India	17
6	Russian Federation	15
7	Germany	14
8	Brazil	12
9	Viet Nam	8
10	Italy	8

Suspected Bot List [2018-05-21]

detection period: 2018-05-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-20]

detection period: 2018-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 200
number of botnet IPs notified to network operators: 192
number of spam blocked: 24381
recipient count of spam blocked: 761293

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	7
3	CHINANET-JX	7
4	VNPT-VNNIC-VN	5
5	TENCENT-CN	4
6	CHINANET-JS	4
7	CMNET	3
8	CHINANET-ZJ	3
9	CHINANET-SH	3
10	CHINANET-GD	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	70
2	United States	24
3	Brazil	11
4	South Korea	10
5	France	10
6	Russian Federation	9
7	Italy	9
8	Viet Nam	6
9	India	4
10	United Kingdom	3

Suspected Bot List [2018-05-20]

detection period: 2018-05-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 8

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-19]

detection period: 2018-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 458
number of botnet IPs notified to network operators: 423
number of spam blocked: 25387
recipient count of spam blocked: 760381

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	17
2	KORNET-KR	14
3	TENCENT-CN	8
4	VNPT-VNNIC-VN	7
5	CMNET	7
6	CHINANET-JS	7
7	CHINANET-GD	6
8	broadNnet-KR	5
9	AT-88-Z	5
10	MSFT	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	112
2	United States	54
3	France	29
4	South Korea	28
5	India	21
6	Brazil	18
7	Russian Federation	17
8	Italy	14
9	Viet Nam	13
10	Indonesia	13

Suspected Bot List [2018-05-19]

detection period: 2018-05-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-18]

detection period: 2018-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 288
number of botnet IPs notified to network operators: 271
number of spam blocked: 26242
recipient count of spam blocked: 637784

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	KORNET-KR	8
3	VNPT-VNNIC-VN	5
4	MSFT	5
5	CHINANET-JX	5
6	CHINANET-JS	5
7	VE-CSVE-LACNIC	4
8	UNKNOWN	4
9	DOPI1	4
10	BORANET-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	69
2	United States	36
3	France	26
4	South Korea	15
5	India	12
6	Viet Nam	10
7	Russian Federation	9
8	Brazil	9
9	Italy	7
10	United Kingdom	7

Suspected Bot List [2018-05-18]

detection period: 2018-05-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 17

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-17]

detection period: 2018-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 455
number of botnet IPs notified to network operators: 420
number of spam blocked: 30412
recipient count of spam blocked: 752656

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	KORNET-KR	10
3	MSFT	8
4	VNPT-VNNIC-VN	7
5	CHINANET-ZJ	6
6	broadNnet-KR	5
7	CHINANET-JS	5
8	CHINANET-GD	5
9	UNICOM-AH	4
10	IUNET-BNET80	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	88
2	United States	69
3	France	36
4	South Korea	24
5	India	19
6	Brazil	17
7	Russian Federation	16
8	Italy	16
9	Viet Nam	15
10	Indonesia	10

Suspected Bot List [2018-05-17]

detection period: 2018-05-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-16]

detection period: 2018-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 432
number of botnet IPs notified to network operators: 402
number of spam blocked: 29709
recipient count of spam blocked: 735337

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	10
2	CHINANET-JS	10
3	KORNET-KR	7
4	MSFT	6
5	CHINANET-GD	5
6	AT-88-Z	5
7	TRIPLETNET-TH	4
8	TELKOMNET	4
9	FR-OVH-20120116	4
10	CMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	86
2	United States	72
3	France	34
4	Brazil	20
5	India	17
6	Thailand	14
7	Italy	14
8	Russian Federation	13
9	South Korea	12
10	Germany	11

Suspected Bot List [2018-05-16]

detection period: 2018-05-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-15]

detection period: 2018-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 585
number of botnet IPs notified to network operators: 546
number of spam blocked: 28228
recipient count of spam blocked: 617421

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	13
3	VNPT-VNNIC-VN	8
4	OVH	6
5	GOOGLE-CLOUD	6
6	CHINANET-GD	6
7	MSFT	5
8	KRNIC-KR	5
9	HINET-NET	5
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	United States	79
3	France	60
4	South Korea	28
5	Germany	23
6	Brazil	22
7	Russian Federation	20
8	Italy	20
9	India	19
10	Thailand	18

Suspected Bot List [2018-05-15]

detection period: 2018-05-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 39

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CZ	185.82.212.95	Czech Republic
PY	181.40.78.162	Paraguay
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-14]

detection period: 2018-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 625
number of botnet IPs notified to network operators: 590
number of spam blocked: 18521
recipient count of spam blocked: 538317

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	OVH	10
2	CHINANET-JS	9
3	MSFT	8
4	GOOGLE-CLOUD	8
5	CHINANET-GD	8
6	KORNET-KR	7
7	HINET-NET	7
8	GO-DADDY-COM-LLC	7
9	TencentCloud	6
10	FR-OVH-20120116	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	106
2	United States	85
3	France	65
4	Germany	34
5	Brazil	32
6	Russian Federation	30
7	South Korea	25
8	India	22
9	Viet Nam	17
10	Italy	17

Suspected Bot List [2018-05-14]

detection period: 2018-05-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-13]

detection period: 2018-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 344
number of botnet IPs notified to network operators: 320
number of spam blocked: 17609
recipient count of spam blocked: 527690

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CHINANET-GD	7
2	CHINANET-JS	6
3	VNPT-VNNIC-VN	5
4	TencentCloud	5
5	GOOGLE-CLOUD	5
6	CHINANET-ZJ	5
7	broadNnet-KR	4
8	EU-DIGITALOCEAN-20090605	4
9	OVH	3
10	KORNET-KR	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	69
2	United States	39
3	France	30
4	Russian Federation	22
5	Brazil	19
6	Germany	16
7	Viet Nam	11
8	South Korea	10
9	India	10
10	United Kingdom	10

Suspected Bot List [2018-05-13]

detection period: 2018-05-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics for April 2018

detection period: 2018-04-01 00:00 - 2018-04-30 23:59 UTC
total number of suspected botnet IPs: 2995
number of blocked spams: 1098649
recipient count of blocked spams: 28440105

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	479
2	United States	439
3	France	219
4	Germany	155
5	South Korea	144
6	Russian Federation	134
7	Viet Nam	116
8	Brazil	116
9	India	102
10	United Kingdom	84
11	Canada	67
12	Italy	57
13	Taiwan	53
14	Colombia	50
15	Netherlands	48
16	Indonesia	44
17	Ukraine	36
18	Spain	35
19	Thailand	30
20	Poland	29
21	Mexico	29
22	Egypt	26
23	Ecuador	25
24	Singapore	24
25	Japan	24

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	706089
2	Czech Republic	68934
3	United States	68395
4	Hong Kong	61707
5	Venezuela	60462
6	Japan	35439
7	Netherlands	27995
8	Tunisia	27809
9	Germany	14925
10	Thailand	10306
11	Poland	7023
12	Ireland	4215
13	France	1649
14	ZZ	1228
15	South Korea	847
16	India	312
17	Colombia	286
18	United Kingdom	256
19	Viet Nam	224
20	Indonesia	109
21	Kuwait	82
22	Saudi Arabia	56
23	Ethiopia	42
24	Taiwan	34
25	Bangladesh	25

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-05-12]

detection period: 2018-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 428
number of botnet IPs notified to network operators: 409
number of spam blocked: 18459
recipient count of spam blocked: 580087

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	11
2	TencentCloud	8
3	CHINANET-JS	7
4	broadNnet-KR	5
5	VNPT-VNNIC-VN	5
6	GO-DADDY-COM-LLC	5
7	CHINANET-GD	5
8	TENCENT-CN	4
9	HINET-NET	4
10	CABLE-1	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	74
2	United States	59
3	France	32
4	South Korea	26
5	Russian Federation	22
6	India	19
7	Indonesia	18
8	Viet Nam	16
9	Brazil	15
10	Italy	14

Suspected Bot List [2018-05-12]

detection period: 2018-05-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 19

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-05-11]

detection period: 2018-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 405
number of botnet IPs notified to network operators: 383
number of spam blocked: 22741
recipient count of spam blocked: 585677

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	12
2	TencentCloud	8
3	CHINANET-JS	7
4	KORNET-KR	6
5	broadNnet-KR	5
6	TELKOMNET	5
7	GO-DADDY-COM-LLC	5
8	DIGITALOCEAN-AP	4
9	TENCENT-CN	3
10	OVH	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	64
2	United States	47
3	France	38
4	Viet Nam	23
5	Russian Federation	22
6	South Korea	20
7	Brazil	17
8	India	16
9	Indonesia	13
10	Germany	13

Suspected Bot List [2018-05-11]

detection period: 2018-05-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-10]

detection period: 2018-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 550
number of botnet IPs notified to network operators: 515
number of spam blocked: 28979
recipient count of spam blocked: 630448

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	23
2	broadNnet-KR	8
3	CHINANET-JS	7
4	VNPT-VNNIC-VN	6
5	GO-DADDY-COM-LLC	6
6	KORNET-KR	5
7	HINET-NET	5
8	CHINANET-GD	5
9	CABLE-1	5
10	OVH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	91
2	United States	66
3	France	41
4	Russian Federation	36
5	Brazil	28
6	South Korea	26
7	India	25
8	Canada	16
9	Viet Nam	15
10	Italy	15

Suspected Bot List [2018-05-10]

detection period: 2018-05-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-09]

detection period: 2018-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 585
number of botnet IPs notified to network operators: 555
number of spam blocked: 26090
recipient count of spam blocked: 606931

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	15
2	KORNET-KR	13
3	CO-ACSA-LACNIC	12
4	broadNnet-KR	10
5	GO-DADDY-COM-LLC	10
6	CHINANET-JS	7
7	VNPT-VNNIC-VN	6
8	HINET-NET	5
9	FR-OVH-20150522	5
10	FR-OVH-20060920	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	United States	83
2	China	71
3	France	52
4	South Korea	34
5	Germany	34
6	Russian Federation	29
7	India	24
8	Brazil	22
9	Viet Nam	19
10	Colombia	15

Suspected Bot List [2018-05-09]

detection period: 2018-05-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 30

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-08]

detection period: 2018-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 395
number of botnet IPs notified to network operators: 373
number of spam blocked: 20588
recipient count of spam blocked: 536945

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	17
2	KORNET-KR	13
3	CHINANET-JS	7
4	TELKOMNET	6
5	HINET-NET	6
6	CHINANET-GD	6
7	broadNnet-KR	5
8	TENCENT-CN	4
9	micronet	3
10	hcmccable-net	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	81
2	United States	38
3	South Korea	25
4	France	24
5	Brazil	22
6	India	20
7	Indonesia	19
8	Viet Nam	14
9	Germany	13
10	Russian Federation	12

Suspected Bot List [2018-05-08]

detection period: 2018-05-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-07]

detection period: 2018-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 303
number of botnet IPs notified to network operators: 283
number of spam blocked: 22397
recipient count of spam blocked: 555549

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	KORNET-KR	7
3	CHINANET-JS	7
4	VNPT-VNNIC-VN	5
5	broadNnet-KR	4
6	TATACOMM-IN	4
7	OPC1	4
8	GO-DADDY-COM-LLC	4
9	EU-DIGITALOCEAN-20090605	4
10	TENCENT-CN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	60
2	United States	41
3	France	24
4	South Korea	16
5	Viet Nam	15
6	India	11
7	Brazil	11
8	Russian Federation	10
9	Italy	10
10	Indonesia	9

Suspected Bot List [2018-05-07]

detection period: 2018-05-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-06]

detection period: 2018-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 408
number of botnet IPs notified to network operators: 386
number of spam blocked: 21793
recipient count of spam blocked: 681696

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	11
2	GO-DADDY-COM-LLC	10
3	TencentCloud	8
4	OVH	7
5	FR-OVH-20120320	7
6	broadNnet-KR	6
7	CHINANET-GD	5
8	VNPT-VNNIC-VN	4
9	IUNET4	4
10	EU-DIGITALOCEAN-20090605	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	France	58
2	United States	54
3	China	54
4	South Korea	22
5	Russian Federation	18
6	Germany	18
7	Viet Nam	15
8	India	13
9	Indonesia	12
10	Brazil	10

Suspected Bot List [2018-05-06]

detection period: 2018-05-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-05]

detection period: 2018-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 347
number of botnet IPs notified to network operators: 325
number of spam blocked: 19170
recipient count of spam blocked: 585178

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	12
2	GO-DADDY-COM-LLC	10
3	KORNET-KR	8
4	CHINANET-JS	6
5	broadNnet-KR	4
6	hcmccable-net	3
7	VNPT-VNNIC-VN	3
8	UNICOM-SD	3
9	OVH	3
10	HINET-NET	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	64
2	United States	50
3	France	35
4	Russian Federation	18
5	South Korea	16
6	Viet Nam	15
7	India	13
8	Germany	8
9	Canada	8
10	Brazil	8

Suspected Bot List [2018-05-05]

detection period: 2018-05-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-04]

detection period: 2018-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 271
number of botnet IPs notified to network operators: 243
number of spam blocked: 22538
recipient count of spam blocked: 639247

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GO-DADDY-COM-LLC	7
2	KORNET-KR	5
3	VNPT-VNNIC-VN	4
4	TencentCloud	4
5	CHINANET-JS	4
6	CHINANET-GD	4
7	ZZGIANT	3
8	ETC-VN	3
9	CHINANET-HE	3
10	broadNnet-KR	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	54
2	United States	42
3	Russian Federation	19
4	Viet Nam	14
5	France	14
6	Germany	11
7	India	10
8	South Korea	9
9	Brazil	8
10	Japan	7

Suspected Bot List [2018-05-04]

detection period: 2018-05-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-03]

detection period: 2018-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 210
number of botnet IPs notified to network operators: 195
number of spam blocked: 19809
recipient count of spam blocked: 462642

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	7
2	VNPT-VNNIC-VN	6
3	CMNET	5
4	CHINANET-JS	4
5	CABLE-1	4
6	TencentCloud	3
7	EU-DIGITALOCEAN-20090605	3
8	EC-ANSA-LACNIC	3
9	CHINANET-ZJ	3
10	UNICOM-SD	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	49
2	United States	30
3	France	19
4	Viet Nam	12
5	South Korea	11
6	Russian Federation	10
7	India	6
8	Germany	5
9	Netherlands	4
10	United Kingdom	4

Suspected Bot List [2018-05-03]

detection period: 2018-05-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-02]

detection period: 2018-05-02 00:00-23:59 UTC
total number of suspected botnet IPs: 288
number of botnet IPs notified to network operators: 270
number of spam blocked: 6730
recipient count of spam blocked: 154485

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	KORNET-KR	9
3	CHINANET-GD	9
4	CMNET	6
5	VNPT-VNNIC-VN	5
6	VIETEL-VN	4
7	CHINANET-JS	4
8	003.420.926/0002-05	4
9	TELKOMNET	3
10	DOPI1	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	91
2	United States	24
3	France	20
4	Brazil	17
5	Viet Nam	15
6	Germany	13
7	South Korea	12
8	United Kingdom	9
9	Indonesia	7
10	Russian Federation	6

Suspected Bot List [2018-05-02]

detection period: 2018-05-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-05-01]

detection period: 2018-05-01 00:00-23:59 UTC
total number of suspected botnet IPs: 387
number of botnet IPs notified to network operators: 365
number of spam blocked: 14464
recipient count of spam blocked: 433398

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	11
2	KORNET-KR	9
3	broadNnet-KR	6
4	CHINANET-GD	6
5	OVH	5
6	GOOGLE-CLOUD	5
7	FR-OVH	5
8	CHINANET-SH	5
9	TELKOMNET	4
10	HINET-NET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	96
2	United States	35
3	France	35
4	South Korea	24
5	India	22
6	Germany	20
7	Brazil	16
8	Russian Federation	12
9	Italy	10
10	Viet Nam	9

Suspected Bot List [2018-05-01]

detection period: 2018-05-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
VE	190.202.116.101	Venezuela

List from greylisting:

Botnet Statistics [2018-04-30]

detection period: 2018-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 333
number of botnet IPs notified to network operators: 304
number of spam blocked: 20728
recipient count of spam blocked: 381720

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	10
2	TencentCloud	9
3	GO-DADDY-COM-LLC	6
4	ZZGIANT	5
5	KORNET-KR	5
6	CO-ACSA-LACNIC	5
7	CHINANET-ZJ	5
8	CHINANET-GD	5
9	CHINANET-SH	4
10	Bofinet-Wifi-FTTx	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	77
2	United States	38
3	France	24
4	Russian Federation	15
5	Brazil	13
6	Germany	12
7	Canada	11
8	South Korea	10
9	India	9
10	Taiwan	8

Suspected Bot List [2018-04-30]

detection period: 2018-04-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ET	196.188.92.80	Ethiopia
VE	190.202.116.101	Venezuela

List from greylisting: