Botnet Statistics [2018-09-29]

detection period: 2018-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 2337
number of botnet IPs notified to network operators: 2160
number of spam blocked: 4508
recipient count of spam blocked: 135215

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	63
2	CMNET	52
3	TENCENT-CN	35
4	CHINANET-GD	33
5	CHINANET-JS	32
6	HINET-NET	29
7	VNPT-VNNIC-VN	27
8	Baidu	27
9	UNKNOWN	24
10	TMO9	23

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	665
2	United States	256
3	Russian Federation	130
4	Brazil	88
5	France	73
6	South Korea	72
7	Indonesia	60
8	Viet Nam	58
9	India	52
10	Italy	51

Suspected Bot List [2018-09-29]

detection period: 2018-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 181

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-28]

detection period: 2018-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 2043
number of botnet IPs notified to network operators: 1835
number of spam blocked: 4813
recipient count of spam blocked: 149200

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	61
2	UNKNOWN	42
3	HINET-NET	38
4	CMNET	38
5	LogicWeb-Inc	36
6	VNPT-VNNIC-VN	35
7	CHINANET-GD	34
8	Baidu	30
9	CHINANET-JS	29
10	KORNET-KR	27

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	544
2	United States	223
3	Russian Federation	102
4	Brazil	94
5	India	69
6	Viet Nam	66
7	Taiwan	58
8	Indonesia	52
9	France	48
10	South Korea	47

Suspected Bot List [2018-09-28]

detection period: 2018-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 211

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-27]

detection period: 2018-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 2173
number of botnet IPs notified to network operators: 1979
number of spam blocked: 4216
recipient count of spam blocked: 126422

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	68
2	CHINANET-GD	41
3	CMNET	37
4	HINET-NET	35
5	TENCENT-CN	34
6	CHINANET-JS	31
7	Baidu	30
8	UNKNOWN	28
9	VNPT-VNNIC-VN	27
10	CHINANET-SH	25

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	633
2	United States	237
3	Russian Federation	119
4	Brazil	89
5	Viet Nam	76
6	India	66
7	Indonesia	61
8	France	59
9	Taiwan	49
10	Italy	49

Suspected Bot List [2018-09-27]

detection period: 2018-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 199

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-26]

detection period: 2018-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 1892
number of botnet IPs notified to network operators: 1736
number of spam blocked: 4649
recipient count of spam blocked: 139470

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	53
2	CMNET	38
3	CHINANET-GD	38
4	HINET-NET	31
5	VNPT-VNNIC-VN	29
6	LogicWeb-Inc	26
7	Baidu	26
8	CHINANET-JS	25
9	ALISOFT	25
10	UNKNOWN	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	507
2	United States	214
3	Russian Federation	122
4	Brazil	78
5	Viet Nam	62
6	France	61
7	India	57
8	Indonesia	56
9	Taiwan	49
10	South Africa	38

Suspected Bot List [2018-09-26]

detection period: 2018-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 157

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-25]

detection period: 2018-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 2006
number of botnet IPs notified to network operators: 1822
number of spam blocked: 8548
recipient count of spam blocked: 256417

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	57
2	LogicWeb-Inc	44
3	TENCENT-CN	41
4	CHINANET-JS	37
5	VNPT-VNNIC-VN	36
6	HINET-NET	36
7	CHINANET-GD	32
8	TELKOMNET	27
9	Baidu	27
10	CMNET	26

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	555
2	United States	217
3	Russian Federation	105
4	Brazil	91
5	Viet Nam	86
6	Indonesia	77
7	India	63
8	South Africa	55
9	Taiwan	51
10	Italy	49

Suspected Bot List [2018-09-25]

detection period: 2018-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 184

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-24]

detection period: 2018-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 1775
number of botnet IPs notified to network operators: 1622
number of spam blocked: 8972
recipient count of spam blocked: 269160

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	47
2	CHINANET-GD	38
3	HINET-NET	36
4	CMNET	30
5	TELKOMNET	27
6	CHINANET-JS	27
7	VNPT-VNNIC-VN	26
8	TMO9	26
9	TENCENT-CN	26
10	002.558.157/0001-62	20

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	484
2	United States	220
3	Russian Federation	108
4	Brazil	73
5	Indonesia	63
6	India	62
7	Viet Nam	60
8	Taiwan	55
9	France	45
10	South Korea	38

Suspected Bot List [2018-09-24]

detection period: 2018-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 154

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-23]

detection period: 2018-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 1374
number of botnet IPs notified to network operators: 1273
number of spam blocked: 5041
recipient count of spam blocked: 151230

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	47
2	HINET-NET	34
3	CHINANET-GD	29
4	CHINANET-JS	28
5	Baidu	25
6	CMNET	22
7	KORNET-KR	18
8	TELKOMNET	17
9	Amsterdam_Residential_Television_and_Internet_Network	17
10	VNPT-VNNIC-VN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	377
2	United States	156
3	Russian Federation	88
4	Brazil	47
5	Netherlands	45
6	Indonesia	41
7	Taiwan	39
8	Viet Nam	37
9	India	37
10	South Korea	35

Suspected Bot List [2018-09-23]

detection period: 2018-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Suspected Bots' IP List for August 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-08-01]
Suspected Bots IP [2018-08-02]
Suspected Bots IP [2018-08-03]
Suspected Bots IP [2018-08-04]
Suspected Bots IP [2018-08-05]
Suspected Bots IP [2018-08-06]
Suspected Bots IP [2018-08-07]
Suspected Bots IP [2018-08-08]
Suspected Bots IP [2018-08-09]
Suspected Bots IP [2018-08-10]
Suspected Bots IP [2018-08-11]
Suspected Bots IP [2018-08-12]
Suspected Bots IP [2018-08-13]
Suspected Bots IP [2018-08-14]
Suspected Bots IP [2018-08-15]
Suspected Bots IP [2018-08-16]
Suspected Bots IP [2018-08-17]
Suspected Bots IP [2018-08-18]
Suspected Bots IP [2018-08-19]
Suspected Bots IP [2018-08-20]
Suspected Bots IP [2018-08-21]
Suspected Bots IP [2018-08-22]
Suspected Bots IP [2018-08-23]
Suspected Bots IP [2018-08-24]
Suspected Bots IP [2018-08-25]
Suspected Bots IP [2018-08-26]
Suspected Bots IP [2018-08-27]
Suspected Bots IP [2018-08-28]
Suspected Bots IP [2018-08-29]
Suspected Bots IP [2018-08-30]
Suspected Bots IP [2018-08-31]

Botnet Statistics for August 2018

detection period: 2018-08-01 00:00 - 2018-08-31 23:59 UTC
total number of suspected botnet IPs: 4197
number of blocked spams: 446936
recipient count of blocked spams: 13175920

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	992
2	United States	473
3	France	277
4	Brazil	198
5	Viet Nam	181
6	South Korea	160
7	Russian Federation	149
8	India	139
9	Germany	103
10	Italy	100
11	Netherlands	84
12	Colombia	84
13	Canada	83
14	Indonesia	81
15	United Kingdom	73
16	Egypt	58
17	Ecuador	57
18	Thailand	56
19	Taiwan	41
20	Argentina	39
21	Ukraine	34
22	Mexico	34
23	Poland	31
24	Spain	31
25	Japan	28

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	China	289739
2	South Korea	63054
3	Colombia	38089
4	Russian Federation	20854
5	Italy	17552
6	United States	6343
7	Netherlands	5991
8	Slovenia	2434
9	France	1408
10	Nigeria	903
11	India	253
12	Brazil	138
13	ZZ	80
14	Germany	67
15	South Africa	6
16	Canada	4
17	Poland	3
18	United Kingdom	3
19	Viet Nam	2
20	Taiwan	2
21	Pakistan	2
22	Bangladesh	2
23	Saudi Arabia	1
24	Romania	1
25	Iran	1

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2018-09-22]

detection period: 2018-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 1599
number of botnet IPs notified to network operators: 1501
number of spam blocked: 5504
recipient count of spam blocked: 165062

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	56
2	CHINANET-GD	35
3	CHINANET-JS	29
4	HINET-NET	28
5	VNPT-VNNIC-VN	26
6	TELKOMNET	20
7	CMNET	18
8	Baidu	17
9	CHINANET-SC	14
10	AMAZON-2011L	14

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	426
2	United States	197
3	Russian Federation	106
4	Viet Nam	73
5	India	71
6	Brazil	60
7	Indonesia	55
8	Taiwan	44
9	Netherlands	30
10	France	27

Suspected Bot List [2018-09-22]

detection period: 2018-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 98

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-21]

detection period: 2018-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 2008
number of botnet IPs notified to network operators: 1859
number of spam blocked: 5606
recipient count of spam blocked: 168180

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	61
2	CHINANET-GD	54
3	VNPT-VNNIC-VN	44
4	HINET-NET	40
5	CMNET	30
6	CO-BROADBAND-3	29
7	CHINANET-JS	29
8	TELKOMNET	22
9	Baidu	22
10	UNICOM-SD	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	533
2	United States	243
3	Russian Federation	101
4	Viet Nam	97
5	Brazil	86
6	Republic Of Georgia	74
7	Indonesia	71
8	India	62
9	Taiwan	54
10	South Korea	44

Suspected Bot List [2018-09-21]

detection period: 2018-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 149

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-20]

detection period: 2018-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 2013
number of botnet IPs notified to network operators: 1866
number of spam blocked: 5380
recipient count of spam blocked: 161348

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	62
2	CHINANET-GD	45
3	VNPT-VNNIC-VN	38
4	HINET-NET	36
5	TELKOMNET	32
6	CHINANET-JS	32
7	CMNET	24
8	VE-CSVE-LACNIC	22
9	UNICOM-BJ	22
10	TMO9	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	547
2	United States	236
3	Russian Federation	118
4	Viet Nam	87
5	Indonesia	85
6	India	80
7	Brazil	74
8	France	54
9	Taiwan	49
10	South Korea	47

Suspected Bot List [2018-09-20]

detection period: 2018-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 149

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-19]

detection period: 2018-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 1792
number of botnet IPs notified to network operators: 1662
number of spam blocked: 8002
recipient count of spam blocked: 282620

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	49
2	VNPT-VNNIC-VN	46
3	CHINANET-GD	35
4	HINET-NET	33
5	TELKOMNET	30
6	TMO9	29
7	Baidu	26
8	DIGITALOCEAN-8	23
9	CHINANET-JS	20
10	VE-CSVE-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	419
2	United States	217
3	Russian Federation	127
4	Viet Nam	87
5	Indonesia	83
6	Brazil	77
7	India	65
8	Taiwan	43
9	France	42
10	Netherlands	35

Suspected Bot List [2018-09-19]

detection period: 2018-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 130

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-18]

detection period: 2018-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 1671
number of botnet IPs notified to network operators: 1548
number of spam blocked: 8288
recipient count of spam blocked: 248611

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VNNIC-VN	55
2	TencentCloud	40
3	HINET-NET	38
4	CHINANET-JS	29
5	DIGITALOCEAN-8	25
6	VE-CSVE-LACNIC	24
7	002.558.157/0001-62	24
8	TELKOMNET	23
9	Baidu	23
10	CHINANET-GD	22

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	380
2	United States	182
3	Russian Federation	113
4	Viet Nam	96
5	Brazil	84
6	Taiwan	64
7	India	64
8	Indonesia	49
9	Turkey	39
10	Netherlands	38

Suspected Bot List [2018-09-18]

detection period: 2018-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 123

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-17]

detection period: 2018-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 1717
number of botnet IPs notified to network operators: 1604
number of spam blocked: 5620
recipient count of spam blocked: 168573

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	54
2	HINET-NET	43
3	VNPT-VNNIC-VN	33
4	TELKOMNET	30
5	DIGITALOCEAN-8	28
6	CHINANET-GD	26
7	002.558.157/0001-62	25
8	Baidu	24
9	CHINANET-JS	22
10	CMNET	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	406
2	United States	213
3	Russian Federation	127
4	Brazil	92
5	Viet Nam	73
6	Indonesia	66
7	Taiwan	58
8	India	52
9	Netherlands	40
10	Poland	32

Suspected Bot List [2018-09-17]

detection period: 2018-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 113

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-16]

detection period: 2018-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 1798
number of botnet IPs notified to network operators: 1672
number of spam blocked: 5703
recipient count of spam blocked: 171090

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	63
2	HINET-NET	42
3	CHINANET-GD	32
4	CHINANET-JS	30
5	VNPT-VNNIC-VN	29
6	CMNET	26
7	TELKOMNET	24
8	002.558.157/0001-62	21
9	Amsterdam_Residential_Television_and_Internet_Network	19
10	VE-CSVE-LACNIC	17

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	423
2	United States	218
3	Russian Federation	130
4	Brazil	80
5	Taiwan	71
6	Viet Nam	67
7	Indonesia	60
8	India	54
9	Netherlands	51
10	France	48

Suspected Bot List [2018-09-16]

detection period: 2018-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 126

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-15]

detection period: 2018-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 1896
number of botnet IPs notified to network operators: 1746
number of spam blocked: 4976
recipient count of spam blocked: 149280

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	61
2	UNKNOWN	46
3	DIGITALOCEAN-8	43
4	VNPT-VNNIC-VN	37
5	CHINANET-JS	37
6	CHINANET-GD	29
7	CMNET	28
8	KORNET-KR	23
9	HINET-NET	23
10	TELKOMNET	21

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	498
2	United States	235
3	Russian Federation	111
4	Brazil	83
5	Viet Nam	77
6	India	66
7	Indonesia	66
8	Netherlands	58
9	France	56
10	South Korea	39

Suspected Bot List [2018-09-15]

detection period: 2018-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 150

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-14]

detection period: 2018-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 1497
number of botnet IPs notified to network operators: 1415
number of spam blocked: 4770
recipient count of spam blocked: 143100

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	47
2	VNPT-VNNIC-VN	39
3	CMNET	31
4	TELKOMNET	26
5	HINET-NET	24
6	CHINANET-JS	24
7	CHINANET-GD	22
8	Baidu	21
9	TENCENT-CN	20
10	KORNET-KR	19

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	388
2	United States	178
3	Russian Federation	92
4	Viet Nam	78
5	Brazil	62
6	India	57
7	Indonesia	56
8	Taiwan	39
9	South Korea	38
10	Netherlands	37

Suspected Bot List [2018-09-14]

detection period: 2018-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 82

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-13]

detection period: 2018-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1436
number of botnet IPs notified to network operators: 1347
number of spam blocked: 9887
recipient count of spam blocked: 207810
(Detection from TCP port scans was added today.)
The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	49
2	VNPT-VNNIC-VN	48
3	KORNET-KR	25
4	HINET-NET	25
5	TELKOMNET	23
6	CHINANET-GD	23
7	DIGITALOCEAN-8	19
8	CMNET	18
9	Baidu	18
10	UNKNOWN	16

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	357
2	United States	175
3	Russian Federation	89
4	Viet Nam	83
5	Brazil	69
6	Indonesia	56
7	India	47
8	South Korea	37
9	Taiwan	34
10	Netherlands	32

Suspected Bot List [2018-09-13]

detection period: 2018-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 89

(List from TCP port scans added)

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
AR	201.231.84.39	Argentina

List from greylisting:

Botnet Statistics [2018-09-12]

detection period: 2018-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 473
number of botnet IPs notified to network operators: 444
number of spam blocked: 4421
recipient count of spam blocked: 132559

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	26
2	TENCENT-CN	16
3	KORNET-KR	15
4	CMNET	12
5	CHINANET-GD	12
6	HINET-NET	7
7	Baidu	6
8	UNICOM-BJ	5
9	CHINANET-JS	5
10	CHINANET-HN	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	177
2	United States	39
3	France	29
4	South Korea	22
5	Brazil	16
6	India	13
7	Italy	12
8	Germany	10
9	Indonesia	9
10	United Kingdom	9

Suspected Bot List [2018-09-12]

detection period: 2018-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 29

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-11]

detection period: 2018-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 244
number of botnet IPs notified to network operators: 226
number of spam blocked: 9351
recipient count of spam blocked: 280501

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	10
2	TencentCloud	9
3	CMNET	9
4	VNPT-VNNIC-VN	7
5	CHINANET-GD	6
6	UNKNOWN	5
7	TENCENT-CN	5
8	CHINANET-SC	5
9	CO-ACSA-LACNIC	4
10	CHINANET-SH	4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	87
2	France	17
3	United States	14
4	South Korea	13
5	Viet Nam	11
6	Italy	7
7	Colombia	7
8	Brazil	7
9	United Kingdom	6
10	Ukraine	5

Suspected Bot List [2018-09-11]

detection period: 2018-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 18

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-10]

detection period: 2018-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 221
number of botnet IPs notified to network operators: 206
number of spam blocked: 9671
recipient count of spam blocked: 295729

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	CMNET	11
2	TencentCloud	10
3	KORNET-KR	7
4	CHINANET-GD	6
5	Baidu	6
6	TENCENT-CN	5
7	VNPT-VNNIC-VN	4
8	UNKNOWN	4
9	033.000.118/0001-79	4
10	VPS_Customers_KV_Solutions	3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	84
2	United States	20
3	Brazil	17
4	South Korea	11
5	India	9
6	France	9
7	Viet Nam	7
8	Netherlands	7
9	Germany	6
10	United Kingdom	5

Suspected Bot List [2018-09-10]

detection period: 2018-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 15

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-09]

detection period: 2018-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 553
number of botnet IPs notified to network operators: 521
number of spam blocked: 10104
recipient count of spam blocked: 303120

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	26
2	KORNET-KR	15
3	CMNET	14
4	CHINANET-GD	12
5	TENCENT-CN	11
6	CO-ACSA-LACNIC	10
7	Baidu	10
8	VNPT-VNNIC-VN	7
9	HINET-NET	6
10	FR-OVH-20010302	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	163
2	United States	52
3	France	46
4	Brazil	24
5	South Korea	22
6	Russian Federation	21
7	Colombia	17
8	Italy	16
9	India	16
10	Indonesia	15

Suspected Bot List [2018-09-09]

detection period: 2018-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 34

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
NG	129.205.114.10	Nigeria

List from greylisting:

Botnet Statistics [2018-09-08]

detection period: 2018-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 691
number of botnet IPs notified to network operators: 644
number of spam blocked: 4808
recipient count of spam blocked: 144240

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	21
2	CMNET	18
3	CHINANET-GD	17
4	TencentCloud	16
5	TENCENT-CN	15
6	CO-ACSA-LACNIC	11
7	HINET-NET	10
8	Baidu	10
9	CHINANET-SC	8
10	GOOGLE-CLOUD	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	189
2	United States	67
3	France	61
4	South Korea	38
5	Brazil	26
6	India	23
7	Italy	22
8	Germany	20
9	Colombia	20
10	Russian Federation	19

Suspected Bot List [2018-09-08]

detection period: 2018-09-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 50

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country
NG	129.205.114.10	Nigeria

List from greylisting:

Botnet Statistics [2018-09-07]

detection period: 2018-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 653
number of botnet IPs notified to network operators: 594
number of spam blocked: 4769
recipient count of spam blocked: 143041

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	19
2	KORNET-KR	16
3	TENCENT-CN	13
4	CMNET	13
5	Baidu	10
6	CHINANET-SH	9
7	CHINANET-JS	9
8	CHINANET-GD	9
9	FR-OVH-20150522	8
10	UNICOM-BJ	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	188
2	United States	73
3	France	48
4	South Korea	29
5	India	29
6	Brazil	25
7	Italy	16
8	Colombia	16
9	Canada	15
10	Indonesia	14

Suspected Bot List [2018-09-07]

detection period: 2018-09-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 64

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-06]

detection period: 2018-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 675
number of botnet IPs notified to network operators: 618
number of spam blocked: 4897
recipient count of spam blocked: 146910

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	27
2	CMNET	17
3	TENCENT-CN	13
4	KORNET-KR	12
5	CHINANET-GD	11
6	CHINANET-JS	10
7	Baidu	10
8	GO-DADDY-COM-LLC	8
9	CO-ACSA-LACNIC	8
10	CHINANET-SC	8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	217
2	United States	76
3	France	48
4	South Korea	28
5	India	27
6	Russian Federation	21
7	Brazil	21
8	Indonesia	18
9	Viet Nam	17
10	Thailand	14

Suspected Bot List [2018-09-06]

detection period: 2018-09-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 61

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-05]

detection period: 2018-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 617
number of botnet IPs notified to network operators: 566
number of spam blocked: 5057
recipient count of spam blocked: 151652

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	23
2	CHINANET-GD	15
3	KORNET-KR	14
4	TENCENT-CN	11
5	broadNnet-KR	8
6	CO-ACSA-LACNIC	8
7	CHINANET-JS	8
8	CABLE-1	7
9	UNKNOWN	6
10	HINET-NET	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	166
2	United States	72
3	France	51
4	South Korea	31
5	India	28
6	Russian Federation	21
7	Italy	16
8	Viet Nam	14
9	United Kingdom	14
10	Germany	14

Suspected Bot List [2018-09-05]

detection period: 2018-09-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 55

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-04]

detection period: 2018-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 679
number of botnet IPs notified to network operators: 626
number of spam blocked: 4331
recipient count of spam blocked: 129930

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	26
2	KORNET-KR	19
3	TENCENT-CN	13
4	CHINANET-GD	11
5	CMNET	10
6	CHINANET-SH	10
7	CO-ACSA-LACNIC	9
8	CHINANET-JS	8
9	Baidu	8
10	IUNET4	7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	197
2	United States	83
3	France	59
4	South Korea	34
5	India	27
6	Brazil	25
7	Russian Federation	20
8	Indonesia	20
9	Colombia	16
10	Canada	15

Suspected Bot List [2018-09-04]

detection period: 2018-09-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 53

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-03]

detection period: 2018-09-03 00:00-23:59 UTC
total number of suspected botnet IPs: 586
number of botnet IPs notified to network operators: 537
number of spam blocked: 5302
recipient count of spam blocked: 159002

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	24
2	KORNET-KR	19
3	CMNET	16
4	Baidu	11
5	CO-ACSA-LACNIC	9
6	CABLE-1	9
7	CHINANET-SH	7
8	TENCENT-CN	6
9	OVH	6
10	CHINANET-JS	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	164
2	France	56
3	United States	52
4	Brazil	33
5	South Korea	32
6	India	21
7	Indonesia	19
8	Russian Federation	17
9	Colombia	15
10	Canada	14

Suspected Bot List [2018-09-03]

detection period: 2018-09-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 51

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-02]

detection period: 2018-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 544
number of botnet IPs notified to network operators: 488
number of spam blocked: 4957
recipient count of spam blocked: 153642

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	23
2	KORNET-KR	20
3	TENCENT-CN	7
4	Baidu	7
5	broadNnet-KR	6
6	FR-OVH-20010302	6
7	CMNET	6
8	HO-2	5
9	FR-OVH	5
10	CHINANET-GD	5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	116
2	France	57
3	United States	53
4	South Korea	39
5	India	24
6	Brazil	20
7	Russian Federation	16
8	Viet Nam	15
9	Indonesia	14
10	Italy	13

Suspected Bot List [2018-09-02]

detection period: 2018-09-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 58

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-09-01]

detection period: 2018-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 548
number of botnet IPs notified to network operators: 499
number of spam blocked: 17378
recipient count of spam blocked: 690398

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	18
2	TencentCloud	16
3	CMNET	12
4	Baidu	11
5	broadNnet-KR	9
6	TENCENT-CN	9
7	CHINANET-JS	8
8	BSNLNET	7
9	GO-DADDY-COM-LLC	6
10	CHINANET-GD	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	160
2	United States	51
3	South Korea	41
4	France	39
5	India	23
6	Indonesia	18
7	Brazil	17
8	Russian Federation	14
9	Italy	13
10	United Kingdom	13

Suspected Bot List [2018-09-01]

detection period: 2018-09-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 52

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

Botnet Statistics [2018-08-31]

detection period: 2018-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 605
number of botnet IPs notified to network operators: 551
number of spam blocked: 7583
recipient count of spam blocked: 289684

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	24
2	KORNET-KR	20
3	CMNET	13
4	CO-ACSA-LACNIC	11
5	CHINANET-GD	11
6	TENCENT-CN	9
7	Baidu	8
8	GO-DADDY-COM-LLC	7
9	CHINANET-SH	7
10	broadNnet-KR	6

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1	China	171
2	United States	68
3	France	52
4	South Korea	37
5	Colombia	23
6	Brazil	23
7	India	19
8	Viet Nam	18
9	Russian Federation	15
10	Indonesia	13

Suspected Bot List [2018-08-31]

detection period: 2018-08-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 54

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting: