Botnet Statistics [2018-08-30]

detection period: 2018-08-30 00:00-23:59 UTC
total number of suspected botnet IPs: 599
number of botnet IPs notified to network operators: 548
number of spam blocked: 2136
recipient count of spam blocked: 62964

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	26
2	KORNET-KR	15
3	CMNET	15
4	CO-ACSA-LACNIC	14
5	TENCENT-CN	10
6	GO-DADDY-COM-LLC	9
7	BSNLNET	7
8	HINET-NET	6
9	CHINANET-SH	6
10	CHINANET-GD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	181
2	United States	74
3	France	45
4	South Korea	24
5	Colombia	24
6	Italy	22
7	India	19
8	Brazil	18
9	Viet Nam	15
10	Indonesia	12

Suspected Bot List [2018-08-30]

detection period: 2018-08-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-29]

detection period: 2018-08-29 00:00-23:59 UTC
total number of suspected botnet IPs: 491
number of botnet IPs notified to network operators: 449
number of spam blocked: 3614
recipient count of spam blocked: 108394

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	17
2	KORNET-KR	16
3	CO-ACSA-LACNIC	9
4	TENCENT-CN	8
5	CMNET	8
6	CHINANET-GD	8
7	VNPT-VNNIC-VN	7
8	HO-2	5
9	HINET-NET	5
10	GOOGLE-CLOUD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	125
2	United States	49
3	France	44
4	South Korea	34
5	Viet Nam	22
6	Brazil	20
7	India	19
8	Colombia	16
9	Russian Federation	14
10	Italy	14

Suspected Bot List [2018-08-29]

detection period: 2018-08-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 43

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-28]

detection period: 2018-08-28 00:00-23:59 UTC
total number of suspected botnet IPs: 401
number of botnet IPs notified to network operators: 357
number of spam blocked: 4059
recipient count of spam blocked: 121770

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	KORNET-KR	18
3	CMNET	7
4	CHINANET-GD	7
5	TENCENT-CN	6
6	FR-OVH-20010302	5
7	Baidu	5
8	UNKNOWN	4
9	TELKOMNET	4
10	OVH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	92
2	France	40
3	United States	32
4	South Korea	27
5	India	21
6	Canada	15
7	Indonesia	14
8	Brazil	14
9	Italy	13
10	Viet Nam	11

Suspected Bot List [2018-08-28]

detection period: 2018-08-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 47

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-27]

detection period: 2018-08-27 00:00-23:59 UTC
total number of suspected botnet IPs: 292
number of botnet IPs notified to network operators: 272
number of spam blocked: 3555
recipient count of spam blocked: 106650

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	10
3	CHINANET-GD	9
4	VNPT-VNNIC-VN	7
5	OVH	5
6	FR-OVH	5
7	CMNET	5
8	Baidu	5
9	UNICOM-LN	4
10	TENCENT-CN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	89
2	France	31
3	United States	22
4	South Korea	18
5	India	13
6	Viet Nam	11
7	Brazil	11
8	United Kingdom	9
9	Canada	9
10	Russian Federation	6

Suspected Bot List [2018-08-27]

detection period: 2018-08-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 20

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
DE	89.197.1.54	Germany

List from greylisting:

Botnet Statistics [2018-08-26]

detection period: 2018-08-26 00:00-23:59 UTC
total number of suspected botnet IPs: 206
number of botnet IPs notified to network operators: 188
number of spam blocked: 5798
recipient count of spam blocked: 116837

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	CHINANET-GD	10
3	CMNET	8
4	KORNET-KR	6
5	Baidu	5
6	UNKNOWN	4
7	TENCENT-CN	3
8	CHINANET-SC	3
9	CABLE-1	3
10	VNPT-VNNIC-VN	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	83
2	United States	20
3	South Korea	10
4	France	9
5	India	7
6	Brazil	6
7	Russian Federation	5
8	United Kingdom	5
9	Viet Nam	4
10	Australia	4

Suspected Bot List [2018-08-26]

detection period: 2018-08-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-25]

detection period: 2018-08-25 00:00-23:59 UTC
total number of suspected botnet IPs: 251
number of botnet IPs notified to network operators: 230
number of spam blocked: 3451
recipient count of spam blocked: 103530

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	VNPT-VNNIC-VN	9
3	KORNET-KR	6
4	CMNET	6
5	CHINANET-GD	6
6	TENCENT-CN	5
7	Baidu	4
8	UNICOM-JS	3
9	UNICOM-CN	3
10	CHINANET-ZJ	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	95
2	United States	25
3	Viet Nam	11
4	France	11
5	South Korea	10
6	Russian Federation	8
7	India	8
8	Brazil	5
9	Ukraine	4
10	Taiwan	4

Suspected Bot List [2018-08-25]

detection period: 2018-08-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 21

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics for July 2018

detection period: 2018-07-01 00:00 - 2018-07-31 23:59 UTC
total number of suspected botnet IPs: 4480
number of blocked spams: 717055
recipient count of blocked spams: 19316862

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	915
2	United States	607
3	France	303
4	Brazil	225
5	South Korea	186
6	Russian Federation	172
7	Viet Nam	155
8	India	135
9	Italy	124
10	Germany	112
11	Canada	92
12	United Kingdom	90
13	Indonesia	83
14	Netherlands	79
15	Ecuador	79
16	Egypt	70
17	Thailand	62
18	Colombia	62
19	Taiwan	56
20	Poland	46
21	Spain	46
22	Mexico	34
23	Ukraine	32
24	Singapore	32
25	Chile	32

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	579591
2	Italy	81571
3	United States	30271
4	Venezuela	14385
5	Tunisia	6009
6	South Korea	1729
7	ZZ	1268
8	Colombia	986
9	South Africa	500
10	India	383
11	Saudi Arabia	203
12	Netherlands	85
13	United Kingdom	25
14	France	13
15	Spain	10
16	Russian Federation	4
17	Brazil	4
18	Taiwan	3
19	Singapore	2
20	Sweden	2
21	Indonesia	2
22	Poland	1
23	Nigeria	1
24	Iran	1
25	Ecuador	1

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-08-24]

detection period: 2018-08-24 00:00-23:59 UTC
total number of suspected botnet IPs: 392
number of botnet IPs notified to network operators: 369
number of spam blocked: 10385
recipient count of spam blocked: 284730

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	9
3	Baidu	7
4	HO-2	6
5	CMNET	6
6	CHINANET-GD	6
7	broadNnet-KR	5
8	TENCENT-CN	5
9	HINET-NET	5
10	VNPT-VNNIC-VN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	105
2	United States	41
3	France	31
4	South Korea	20
5	Brazil	18
6	Viet Nam	12
7	Italy	12
8	India	12
9	Canada	12
10	Russian Federation	8

Suspected Bot List [2018-08-24]

detection period: 2018-08-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 24

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-23]

detection period: 2018-08-23 00:00-23:59 UTC
total number of suspected botnet IPs: 408
number of botnet IPs notified to network operators: 378
number of spam blocked: 6527
recipient count of spam blocked: 241865

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	15
2	Baidu	11
3	KORNET-KR	8
4	CMNET	7
5	AT-88-Z	7
6	VNPT-VNNIC-VN	6
7	MSFT	5
8	GO-DADDY-COM-LLC	5
9	CHINANET-JS	5
10	CHINANET-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	United States	58
3	France	32
4	Brazil	22
5	South Korea	17
6	Viet Nam	15
7	India	14
8	Italy	11
9	Indonesia	11
10	Canada	11

Suspected Bot List [2018-08-23]

detection period: 2018-08-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ES	88.26.216.95	Spain

List from greylisting:

Botnet Statistics [2018-08-22]

detection period: 2018-08-22 00:00-23:59 UTC
total number of suspected botnet IPs: 294
number of botnet IPs notified to network operators: 260
number of spam blocked: 3732
recipient count of spam blocked: 130127

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	9
2	TencentCloud	6
3	MTN-Nigeria	6
4	CMNET	6
5	CHINANET-GD	6
6	OVH	4
7	GOOGLE-CLOUD	4
8	BSNLNET	4
9	VPS_Customers_KV_Solutions	3
10	UNKNOWN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	67
2	United States	39
3	France	22
4	Russian Federation	12
5	South Korea	12
6	Netherlands	10
7	Italy	10
8	Viet Nam	9
9	India	9
10	Brazil	8

Suspected Bot List [2018-08-22]

detection period: 2018-08-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-21]

detection period: 2018-08-21 00:00-23:59 UTC
total number of suspected botnet IPs: 215
number of botnet IPs notified to network operators: 193
number of spam blocked: 18240
recipient count of spam blocked: 546794

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	6
2	CHINANET-GD	6
3	VNPT-VNNIC-VN	5
4	KORNET-KR	5
5	002.558.134/0001-58	4
6	MSFT	3
7	BHARTI-IN	3
8	Wotone	2
9	WITRIBE	2
10	UNICOM-LN	2

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	45
2	United States	22
3	Brazil	13
4	France	12
5	India	11
6	South Korea	8
7	Viet Nam	6
8	Russian Federation	6
9	United Kingdom	6
10	Germany	6

Suspected Bot List [2018-08-21]

detection period: 2018-08-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 22

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-20]

detection period: 2018-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 282
number of botnet IPs notified to network operators: 250
number of spam blocked: 27608
recipient count of spam blocked: 852587

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	CHINANET-GD	9
3	TENCENT-CN	8
4	KORNET-KR	7
5	CMNET	6
6	VNPT-VNNIC-VN	4
7	LLU-POOL-KLN	4
8	IUNET4	4
9	LLU-POOL-LSF	3
10	HO-2	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	97
2	France	20
3	United States	15
4	Netherlands	13
5	Brazil	13
6	South Korea	10
7	Canada	9
8	Viet Nam	8
9	Indonesia	7
10	India	6

Suspected Bot List [2018-08-20]

detection period: 2018-08-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.216.26.151	France

List from greylisting:

Botnet Statistics [2018-08-19]

detection period: 2018-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 406
number of botnet IPs notified to network operators: 363
number of spam blocked: 24129
recipient count of spam blocked: 739011

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	32
2	KORNET-KR	12
3	TENCENT-CN	10
4	GO-DADDY-COM-LLC	7
5	CHINANET-GD	7
6	UCLOUD-NET	6
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	6
8	CMNET	6
9	HINET-NET	5
10	Baidu	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	126
2	United States	46
3	France	40
4	South Korea	22
5	Brazil	18
6	India	15
7	Viet Nam	11
8	Netherlands	9
9	Indonesia	9
10	Germany	9

Suspected Bot List [2018-08-19]

detection period: 2018-08-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.216.26.151	France

List from greylisting:

Botnet Statistics [2018-08-18]

detection period: 2018-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 454
number of botnet IPs notified to network operators: 408
number of spam blocked: 25346
recipient count of spam blocked: 766366

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	24
2	KORNET-KR	17
3	CMNET	10
4	Baidu	10
5	VNPT-VNNIC-VN	8
6	TENCENT-CN	7
7	CHINANET-GD	7
8	GO-DADDY-COM-LLC	6
9	HO-2	5
10	broadNnet-KR	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	128
2	France	45
3	United States	42
4	South Korea	26
5	India	16
6	Indonesia	16
7	Brazil	16
8	Viet Nam	15
9	Russian Federation	11
10	Italy	11

Suspected Bot List [2018-08-18]

detection period: 2018-08-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 46

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-17]

detection period: 2018-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 318
number of botnet IPs notified to network operators: 285
number of spam blocked: 16674
recipient count of spam blocked: 499600

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	21
2	KORNET-KR	12
3	TENCENT-CN	5
4	Baidu	5
5	SINNET	4
6	IUNET4	4
7	CO-ETBE-LACNIC	4
8	CMNET	4
9	CHINANET-SH	4
10	VNPT-VNNIC-VN	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	96
2	United States	33
3	France	31
4	South Korea	19
5	India	19
6	Indonesia	10
7	Italy	9
8	United Kingdom	8
9	Viet Nam	7
10	Colombia	7

Suspected Bot List [2018-08-17]

detection period: 2018-08-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
FR	185.216.26.151	France

List from greylisting:

Botnet Statistics [2018-08-16]

detection period: 2018-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 290
number of botnet IPs notified to network operators: 272
number of spam blocked: 16650
recipient count of spam blocked: 544633

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	19
2	KORNET-KR	6
3	Baidu	6
4	CMNET	5
5	VNPT-VNNIC-VN	4
6	UCLOUD-NET	4
7	CHINANET-JS	4
8	CHINANET-GD	4
9	TENCENT-CN	3
10	FR-OVH-20060920	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	95
2	United States	25
3	France	21
4	Russian Federation	10
5	Italy	10
6	Germany	10
7	Brazil	10
8	South Korea	9
9	Netherlands	7
10	India	7

Suspected Bot List [2018-08-16]

detection period: 2018-08-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
DE	89.197.1.54	Germany

List from greylisting:

Botnet Statistics [2018-08-15]

detection period: 2018-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 347
number of botnet IPs notified to network operators: 315
number of spam blocked: 17673
recipient count of spam blocked: 530952

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	15
2	KORNET-KR	8
3	TENCENT-CN	7
4	GOOGLE-CLOUD	6
5	CHINANET-JS	6
6	VNPT-VNNIC-VN	5
7	LLU-POOL-KLN	5
8	CMNET	5
9	UCLOUD-NET	4
10	TELKOMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	83
2	United States	45
3	France	27
4	India	19
5	South Korea	17
6	Netherlands	14
7	Italy	12
8	Brazil	12
9	Russian Federation	11
10	Viet Nam	10

Suspected Bot List [2018-08-15]

detection period: 2018-08-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 32

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-14]

detection period: 2018-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 449
number of botnet IPs notified to network operators: 415
number of spam blocked: 13971
recipient count of spam blocked: 420349

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	13
3	CMNET	8
4	VNPT-VNNIC-VN	6
5	TENCENT-CN	5
6	HINET-NET	5
7	GOOGLE-CLOUD	5
8	Baidu	5
9	broadNnet-KR	4
10	ONLINE_NET_DEDICATED_SERVERS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	104
2	United States	63
3	France	48
4	South Korea	26
5	India	22
6	Brazil	18
7	Italy	14
8	Viet Nam	13
9	Russian Federation	13
10	Indonesia	13

Suspected Bot List [2018-08-14]

detection period: 2018-08-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-13]

detection period: 2018-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 369
number of botnet IPs notified to network operators: 335
number of spam blocked: 12529
recipient count of spam blocked: 396901

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	18
2	KORNET-KR	10
3	TENCENT-CN	8
4	FR-OVH-20060920	6
5	ONLINE_NET_DEDICATED_SERVERS	5
6	CHINANET-GD	5
7	HINET-NET	4
8	GOOGLE-CLOUD	4
9	GO-DADDY-COM-LLC	4
10	CMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	88
2	United States	47
3	France	39
4	Italy	16
5	South Korea	14
6	Russian Federation	13
7	Canada	13
8	India	11
9	Indonesia	10
10	Thailand	9

Suspected Bot List [2018-08-13]

detection period: 2018-08-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-12]

detection period: 2018-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 375
number of botnet IPs notified to network operators: 337
number of spam blocked: 13439
recipient count of spam blocked: 436493

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	12
2	TencentCloud	10
3	TENCENT-CN	7
4	CHINANET-GD	6
5	broadNnet-KR	5
6	VNPT-VNNIC-VN	4
7	TELKOMNET	4
8	HINET-NET	4
9	EC-ANSA-LACNIC	4
10	CO-EPME1-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	79
2	United States	40
3	France	34
4	South Korea	25
5	Italy	18
6	Brazil	15
7	Indonesia	13
8	Russian Federation	12
9	Colombia	11
10	India	9

Suspected Bot List [2018-08-12]

detection period: 2018-08-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 38

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-11]

detection period: 2018-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 401
number of botnet IPs notified to network operators: 366
number of spam blocked: 16816
recipient count of spam blocked: 602308

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	17
2	KORNET-KR	13
3	broadNnet-KR	5
4	CHINANET-SH	5
5	CHINANET-SC	5
6	UNICOM-JS	4
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	4
8	FR-OVH-20150522	4
9	FR-OVH	4
10	CO-ACSA-LACNIC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	96
2	France	50
3	United States	38
4	South Korea	27
5	Italy	17
6	Russian Federation	13
7	Brazil	13
8	Viet Nam	9
9	India	9
10	Indonesia	9

Suspected Bot List [2018-08-11]

detection period: 2018-08-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-10]

detection period: 2018-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 390
number of botnet IPs notified to network operators: 358
number of spam blocked: 11315
recipient count of spam blocked: 339044

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	13
2	KORNET-KR	11
3	CHINANET-GD	7
4	VNPT-VNNIC-VN	5
5	FR-OVH	5
6	TENCENT-CN	4
7	HINET-NET	4
8	GO-DADDY-COM-LLC	4
9	FR-OVH-20060920	4
10	CHINANET-JS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	82
2	France	43
3	United States	37
4	South Korea	20
5	Brazil	16
6	Italy	15
7	India	15
8	Indonesia	14
9	Viet Nam	12
10	Netherlands	12

Suspected Bot List [2018-08-10]

detection period: 2018-08-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 33

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-09]

detection period: 2018-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 459
number of botnet IPs notified to network operators: 424
number of spam blocked: 15648
recipient count of spam blocked: 468724

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	21
2	KORNET-KR	16
3	CHINANET-JS	9
4	CMNET	7
5	Baidu	7
6	VNPT-VNNIC-VN	6
7	broadNnet-KR	5
8	CHINANET-SH	5
9	BSNLNET	5
10	TELKOMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	129
2	United States	39
3	France	39
4	India	28
5	South Korea	27
6	Italy	21
7	Brazil	20
8	Viet Nam	18
9	Indonesia	14
10	Russian Federation	13

Suspected Bot List [2018-08-09]

detection period: 2018-08-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 35

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CA	167.114.161.24	Canada

List from greylisting:

Botnet Statistics [2018-08-08]

detection period: 2018-08-08 00:00-23:59 UTC
total number of suspected botnet IPs: 353
number of botnet IPs notified to network operators: 322
number of spam blocked: 18650
recipient count of spam blocked: 558862

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	16
2	KORNET-KR	14
3	VNPT-VNNIC-VN	7
4	CHINANET-JS	6
5	TENCENT-CN	5
6	UNICOM-JS	4
7	MX-USCV4-LACNIC	4
8	GO-DADDY-COM-LLC	4
9	FR-OVH-20060920	4
10	CHINANET-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	United States	41
3	France	28
4	South Korea	21
5	India	16
6	Viet Nam	15
7	Russian Federation	13
8	Brazil	10
9	Indonesia	8
10	Italy	7

Suspected Bot List [2018-08-08]

detection period: 2018-08-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-07]

detection period: 2018-08-07 00:00-23:59 UTC
total number of suspected botnet IPs: 444
number of botnet IPs notified to network operators: 401
number of spam blocked: 13380
recipient count of spam blocked: 400907

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	21
2	KORNET-KR	15
3	GO-DADDY-COM-LLC	8
4	TENCENT-CN	7
5	CHINANET-GD	7
6	CMNET	6
7	CHINANET-SH	6
8	CHINANET-JS	6
9	broadNnet-KR	5
10	HINET-NET	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	107
2	United States	60
3	France	40
4	South Korea	27
5	Brazil	16
6	Indonesia	14
7	Viet Nam	13
8	India	13
9	United Kingdom	13
10	Russian Federation	11

Suspected Bot List [2018-08-07]

detection period: 2018-08-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-06]

detection period: 2018-08-06 00:00-23:59 UTC
total number of suspected botnet IPs: 411
number of botnet IPs notified to network operators: 367
number of spam blocked: 18051
recipient count of spam blocked: 539094

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	15
2	KORNET-KR	15
3	CMNET	7
4	DO-13	6
5	CHINANET-GD	6
6	HINET-NET	5
7	EC-ANSA-LACNIC	5
8	TENCENT-CN	4
9	SELECTEL-NET	4
10	HO-2	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	77
2	United States	46
3	France	40
4	South Korea	33
5	Brazil	21
6	Russian Federation	18
7	India	17
8	Indonesia	13
9	Italy	10
10	Viet Nam	9

Suspected Bot List [2018-08-06]

detection period: 2018-08-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 44

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-05]

detection period: 2018-08-05 00:00-23:59 UTC
total number of suspected botnet IPs: 313
number of botnet IPs notified to network operators: 282
number of spam blocked: 27948
recipient count of spam blocked: 837415

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	14
2	KORNET-KR	11
3	CMNET	9
4	HINET-NET	6
5	CHINANET-SH	5
6	broadNnet-KR	4
7	THAINET-TH	4
8	FR-OVH-20120320	4
9	DO-13	4
10	CHINANET-JS	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	74
2	United States	38
3	South Korea	23
4	France	20
5	Brazil	14
6	India	13
7	Italy	12
8	Russian Federation	10
9	Germany	10
10	Thailand	8

Suspected Bot List [2018-08-05]

detection period: 2018-08-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ZA	197.169.27.128	South Africa

List from greylisting:

Botnet Statistics [2018-08-04]

detection period: 2018-08-04 00:00-23:59 UTC
total number of suspected botnet IPs: 469
number of botnet IPs notified to network operators: 420
number of spam blocked: 24213
recipient count of spam blocked: 725665

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	20
2	KORNET-KR	19
3	CMNET	8
4	TENCENT-CN	7
5	OVH	7
6	CHINANET-JS	6
7	VNPT-VNNIC-VN	5
8	UNKNOWN	5
9	UNICOM-CN	5
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	119
2	United States	51
3	France	39
4	South Korea	30
5	India	21
6	Italy	17
7	Russian Federation	15
8	Netherlands	15
9	Viet Nam	13
10	Indonesia	11

Suspected Bot List [2018-08-04]

detection period: 2018-08-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
CN	115.231.16.138	China
CN	115.231.16.175	China

List from greylisting:

Botnet Statistics [2018-08-03]

detection period: 2018-08-03 00:00-23:59 UTC
total number of suspected botnet IPs: 383
number of botnet IPs notified to network operators: 346
number of spam blocked: 23588
recipient count of spam blocked: 678469

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	22
2	KORNET-KR	10
3	CHINANET-GD	8
4	CHINANET-SH	5
5	broadNnet-KR	4
6	VNPT-VNNIC-VN	4
7	TENCENT-CN	4
8	CHINANET-JS	4
9	CABLE-1	4
10	BHARTI-IN	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	108
2	United States	38
3	France	28
4	South Korea	21
5	India	19
6	Brazil	18
7	Russian Federation	12
8	Viet Nam	9
9	United Kingdom	9
10	Germany	9

Suspected Bot List [2018-08-03]

detection period: 2018-08-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-02]

detection period: 2018-08-02 00:00-23:59 UTC
total number of suspected botnet IPs: 436
number of botnet IPs notified to network operators: 396
number of spam blocked: 28867
recipient count of spam blocked: 640134

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	31
2	KORNET-KR	15
3	VNPT-VNNIC-VN	7
4	Baidu	7
5	HINET-NET	5
6	CHINANET-JX	5
7	000.065.376/0002-65	5
8	TELKOMNET	4
9	IUNET4	4
10	GO-DADDY-COM-LLC	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	99
2	France	40
3	United States	39
4	Brazil	26
5	South Korea	23
6	Indonesia	17
7	Russian Federation	16
8	Viet Nam	15
9	Italy	14
10	India	12

Suspected Bot List [2018-08-02]

detection period: 2018-08-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-01]

detection period: 2018-08-01 00:00-23:59 UTC
total number of suspected botnet IPs: 401
number of botnet IPs notified to network operators: 360
number of spam blocked: 25254
recipient count of spam blocked: 501405

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	24
2	KORNET-KR	12
3	Baidu	11
4	TENCENT-CN	9
5	HINET-NET	5
6	CABLE-1	5
7	VNPT-VNNIC-VN	4
8	UCLOUD-NET	4
9	GO-DADDY-COM-LLC	4
10	CMNET	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	112
2	United States	46
3	France	35
4	South Korea	22
5	India	19
6	Brazil	15
7	Russian Federation	12
8	United Kingdom	11
9	Canada	10
10	Italy	9

Suspected Bot List [2018-08-01]

detection period: 2018-08-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 41

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
ZA	105.4.1.157	South Africa

List from greylisting:

Suspected Bots' IP List for July 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-07-01]
Suspected Bots IP [2018-07-02]
Suspected Bots IP [2018-07-03]
Suspected Bots IP [2018-07-04]
Suspected Bots IP [2018-07-05]
Suspected Bots IP [2018-07-06]
Suspected Bots IP [2018-07-07]
Suspected Bots IP [2018-07-08]
Suspected Bots IP [2018-07-09]
Suspected Bots IP [2018-07-10]
Suspected Bots IP [2018-07-11]
Suspected Bots IP [2018-07-12]
Suspected Bots IP [2018-07-13]
Suspected Bots IP [2018-07-14]
Suspected Bots IP [2018-07-15]
Suspected Bots IP [2018-07-16]
Suspected Bots IP [2018-07-17]
Suspected Bots IP [2018-07-18]
Suspected Bots IP [2018-07-19]
Suspected Bots IP [2018-07-20]
Suspected Bots IP [2018-07-21]
Suspected Bots IP [2018-07-22]
Suspected Bots IP [2018-07-23]
Suspected Bots IP [2018-07-24]
Suspected Bots IP [2018-07-25]
Suspected Bots IP [2018-07-26]
Suspected Bots IP [2018-07-27]
Suspected Bots IP [2018-07-28]
Suspected Bots IP [2018-07-29]
Suspected Bots IP [2018-07-30]
Suspected Bots IP [2018-07-31]

Suspected Bots' IP List for June 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-06-01]
Suspected Bots IP [2018-06-02]
Suspected Bots IP [2018-06-03]
Suspected Bots IP [2018-06-04]
Suspected Bots IP [2018-06-05]
Suspected Bots IP [2018-06-06]
Suspected Bots IP [2018-06-07]
Suspected Bots IP [2018-06-08]
Suspected Bots IP [2018-06-09]
Suspected Bots IP [2018-06-10]
Suspected Bots IP [2018-06-11]
Suspected Bots IP [2018-06-12]
Suspected Bots IP [2018-06-13]
Suspected Bots IP [2018-06-14]
Suspected Bots IP [2018-06-15]
Suspected Bots IP [2018-06-16]
Suspected Bots IP [2018-06-17]
Suspected Bots IP [2018-06-18]
Suspected Bots IP [2018-06-19]
Suspected Bots IP [2018-06-20]
Suspected Bots IP [2018-06-21]
Suspected Bots IP [2018-06-22]
Suspected Bots IP [2018-06-23]
Suspected Bots IP [2018-06-24]
Suspected Bots IP [2018-06-25]
Suspected Bots IP [2018-06-26]
Suspected Bots IP [2018-06-27]
Suspected Bots IP [2018-06-28]
Suspected Bots IP [2018-06-29]
Suspected Bots IP [2018-06-30]

Botnet Statistics [2018-07-31]

detection period: 2018-07-31 00:00-23:59 UTC
total number of suspected botnet IPs: 445
number of botnet IPs notified to network operators: 410
number of spam blocked: 11888
recipient count of spam blocked: 240408

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	27
2	KORNET-KR	16
3	Baidu	9
4	HO-2	6
5	HINET-NET	6
6	CHINANET-JS	6
7	broadNnet-KR	4
8	LINTASARTA-NET	4
9	GO-DADDY-COM-LLC	4
10	DOPI1	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	101
2	United States	54
3	France	37
4	South Korea	29
5	Italy	19
6	India	19
7	Canada	16
8	Brazil	14
9	Indonesia	13
10	Netherlands	10

Suspected Bot List [2018-07-31]

detection period: 2018-07-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting: