Custom Search

Sunday, March 31, 2019

Botnet Statistics [2019-03-30]

detection period: 2019-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 11519
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10690
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud341
2TENCENT-CN278
3UNKNOWN258
4Baidu209
5DO-13202
6VNPT-VN156
7TELKOMNET145
8VNPT-VNNIC-VN130
9HINET-NET127
10CHINANET-GD97

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2247
2United States1578
3France692
4Russian Federation641
5Viet Nam578
6Brazil577
7India522
8Indonesia380
9South Korea221
10Netherlands206

Suspected Bot List [2019-03-30]

detection period: 2019-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 830

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, March 30, 2019

Botnet Statistics [2019-03-29]

detection period: 2019-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 12580
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11675
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud351
2TENCENT-CN298
3UNKNOWN275
4Baidu224
5VNPT-VN223
6DO-13216
7TELKOMNET203
8VNPT-VNNIC-VN166
9HINET-NET120
10KORNET-KR104

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2212
2United States1772
3Viet Nam732
4France717
5Russian Federation700
6Brazil644
7India559
8Indonesia520
9South Korea280
10Thailand230

Suspected Bot List [2019-03-29]

detection period: 2019-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 907

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, March 29, 2019

Botnet Statistics [2019-03-28]

detection period: 2019-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 13489
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12506
number of spam blocked: 1
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud390
2UNKNOWN307
3TENCENT-CN302
4Baidu248
5VNPT-VN233
6DO-13229
7TELKOMNET202
8VNPT-VNNIC-VN188
9HINET-NET149
10CHINANET-GD113

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2398
2United States1851
3Viet Nam827
4Russian Federation769
5France736
6Brazil697
7India565
8Indonesia519
9South Korea280
10Italy242

Suspected Bot List [2019-03-28]

detection period: 2019-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 985

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, March 28, 2019

Botnet Statistics [2019-03-27]

detection period: 2019-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 13417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12466
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud408
2TENCENT-CN309
3UNKNOWN306
4Baidu254
5DO-13226
6TELKOMNET215
7VNPT-VN194
8VNPT-VNNIC-VN163
9HINET-NET125
10CHINANET-GD116

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2577
2United States1840
3France748
4Viet Nam735
5Russian Federation681
6Brazil651
7Indonesia555
8India543
9South Korea281
10Thailand249

Suspected Bot List [2019-03-27]

detection period: 2019-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 953

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, March 27, 2019

Botnet Statistics [2019-03-26]

detection period: 2019-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 13767
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12693
number of spam blocked: 15
recipient count of spam blocked: 15

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN379
2TencentCloud298
3TELKOMNET282
4VNPT-VN265
5TENCENT-CN236
6VNPT-VNNIC-VN217
7Baidu196
8DO-13173
9HINET-NET154
10CHINANET-GD126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2048
2United States1613
3Viet Nam972
4Russian Federation817
5Brazil714
6Indonesia665
7France662
8India614
9Germany375
10South Korea279

Suspected Bot List [2019-03-26]

detection period: 2019-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1074

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
US144.202.153.215United States

List from greylisting:

Tuesday, March 26, 2019

Botnet Statistics [2019-03-25]

detection period: 2019-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 14348
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13236
number of spam blocked: 4
recipient count of spam blocked: 4

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN417
2TencentCloud390
3TENCENT-CN310
4TELKOMNET288
5VNPT-VN285
6Baidu261
7VNPT-VNNIC-VN224
8DO-13170
9HINET-NET163
10KORNET-KR117

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2371
2United States1791
3Viet Nam990
4Russian Federation838
5Brazil804
6France690
7India687
8Indonesia675
9Thailand286
10South Korea281

Suspected Bot List [2019-03-25]

detection period: 2019-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1112

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, March 25, 2019

Botnet Statistics [2019-03-24]

detection period: 2019-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 12360
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11471
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud379
2UNKNOWN326
3TENCENT-CN294
4Baidu250
5DO-13191
6VNPT-VN145
7TELKOMNET145
8HINET-NET140
9KORNET-KR124
10CHINANET-GD118

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2492
2United States1633
3France733
4Russian Federation655
5Brazil612
6Viet Nam546
7India436
8Indonesia387
9South Korea310
10Taiwan237

Suspected Bot List [2019-03-24]

detection period: 2019-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 891

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, March 24, 2019

Botnet Statistics [2019-03-23]

detection period: 2019-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 12494
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11629
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud362
2TENCENT-CN300
3UNKNOWN292
4Baidu238
5VNPT-VN203
6TELKOMNET193
7DO-13193
8VNPT-VNNIC-VN167
9HINET-NET140
10CHINANET-GD119

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2390
2United States1603
3Viet Nam742
4France700
5Russian Federation665
6Brazil586
7India570
8Indonesia466
9South Korea277
10Italy235

Suspected Bot List [2019-03-23]

detection period: 2019-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 865

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, March 23, 2019

Botnet Statistics [2019-03-22]

detection period: 2019-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 13826
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12808
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud376
2UNKNOWN337
3TENCENT-CN294
4VNPT-VN288
5TELKOMNET252
6Baidu247
7VNPT-VNNIC-VN233
8DO-13199
9HINET-NET159
10KORNET-KR123

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2518
2United States1713
3Viet Nam980
4Russian Federation721
5France708
6India693
7Brazil685
8Indonesia623
9South Korea291
10Thailand263

Suspected Bot List [2019-03-22]

detection period: 2019-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1019

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, March 22, 2019

Botnet Statistics [2019-03-21]

detection period: 2019-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 14721
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13671
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud392
2VNPT-VN327
3UNKNOWN326
4TELKOMNET318
5TENCENT-CN300
6VNPT-VNNIC-VN294
7Baidu251
8DO-13208
9HINET-NET160
10CHINANET-GD131

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2545
2United States1803
3Viet Nam1175
4Russian Federation806
5Brazil796
6Indonesia728
7France712
8India580
9Thailand332
10South Korea300

Suspected Bot List [2019-03-21]

detection period: 2019-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1051

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, March 21, 2019

Botnet Statistics [2019-03-20]

detection period: 2019-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 13293
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12373
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud384
2UNKNOWN318
3TENCENT-CN300
4Baidu259
5DO-13219
6TELKOMNET201
7VNPT-VN197
8VNPT-VNNIC-VN171
9HINET-NET129
10KORNET-KR124

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2541
2United States1796
3France733
4Viet Nam724
5Russian Federation646
6Brazil634
7India604
8Indonesia516
9South Korea316
10Italy280

Suspected Bot List [2019-03-20]

detection period: 2019-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 922

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, March 20, 2019

Botnet Statistics [2019-03-19]

detection period: 2019-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 13799
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12820
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud379
2UNKNOWN311
3TENCENT-CN294
4Baidu243
5TELKOMNET231
6VNPT-VN227
7DO-13218
8VNPT-VNNIC-VN178
9CHINANET-GD128
10KORNET-KR126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2589
2United States1812
3Viet Nam847
4France751
5Brazil639
6India624
7Russian Federation614
8Indonesia584
9South Korea301
10Italy299

Suspected Bot List [2019-03-19]

detection period: 2019-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 980

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, March 19, 2019

Botnet Statistics [2019-03-18]

detection period: 2019-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 13548
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12578
number of spam blocked: 5
recipient count of spam blocked: 17

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud383
2UNKNOWN327
3TENCENT-CN288
4Baidu249
5DO-13225
6TELKOMNET219
7VNPT-VN216
8VNPT-VNNIC-VN165
9KORNET-KR136
10HINET-NET126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2555
2United States1891
3Viet Nam756
4France738
5Brazil670
6Russian Federation621
7India575
8Indonesia575
9South Korea319
10Italy267

Suspected Bot List [2019-03-18]

detection period: 2019-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 973

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, March 18, 2019

Botnet Statistics [2019-03-17]

detection period: 2019-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 13895
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12891
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud386
2UNKNOWN330
3TENCENT-CN299
4Baidu240
5DO-13225
6TELKOMNET201
7VNPT-VN195
8VNPT-VNNIC-VN162
9HINET-NET158
10KORNET-KR141

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2582
2United States1844
3Brazil750
4France745
5Russian Federation731
6Viet Nam719
7India547
8Indonesia541
9South Korea323
10Italy268

Suspected Bot List [2019-03-17]

detection period: 2019-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1007

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, March 17, 2019

Botnet Statistics [2019-03-16]

detection period: 2019-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 14499
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13472
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud362
2UNKNOWN319
3TENCENT-CN286
4VNPT-VN284
5TELKOMNET259
6Baidu223
7DO-13214
8VNPT-VNNIC-VN187
9HINET-NET142
10KORNET-KR127

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2486
2United States1831
3Viet Nam925
4Russian Federation814
5Brazil808
6India755
7France711
8Indonesia609
9South Korea322
10Thailand261

Suspected Bot List [2019-03-16]

detection period: 2019-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1028

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, March 16, 2019

Botnet Statistics [2019-03-15]

detection period: 2019-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 15381
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14294
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud367
2UNKNOWN342
3VNPT-VN329
4TENCENT-CN290
5VNPT-VNNIC-VN275
6TELKOMNET269
7DO-13228
8Baidu226
9HINET-NET184
10KORNET-KR136

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2587
2United States1914
3Viet Nam1139
4Brazil826
5Russian Federation824
6France745
7India731
8Indonesia708
9South Korea339
10Thailand322

Suspected Bot List [2019-03-15]

detection period: 2019-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1090

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, March 15, 2019

Botnet Statistics [2019-03-14]

detection period: 2019-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 14511
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13472
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud366
2UNKNOWN333
3TENCENT-CN282
4TELKOMNET268
5VNPT-VN231
6DO-13229
7VNPT-VNNIC-VN223
8Baidu207
9HINET-NET163
10KORNET-KR133

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2534
2United States1853
3Viet Nam905
4Brazil804
5France755
6Russian Federation708
7India681
8Indonesia669
9South Korea320
10Thailand308

Suspected Bot List [2019-03-14]

detection period: 2019-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1039

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, March 14, 2019

Botnet Statistics [2019-03-13]

detection period: 2019-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 15151
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14068
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud376
2UNKNOWN342
3VNPT-VN292
4TENCENT-CN282
5TELKOMNET255
6VNPT-VNNIC-VN253
7DO-13226
8Baidu214
9HINET-NET188
10KORNET-KR129

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2516
2United States1950
3Viet Nam1062
4Russian Federation820
5Brazil814
6France746
7India700
8Indonesia682
9South Korea317
10Thailand309

Suspected Bot List [2019-03-13]

detection period: 2019-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1353

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, March 13, 2019

Botnet Statistics [2019-03-12]

detection period: 2019-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 13826
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12844
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud368
2UNKNOWN332
3TENCENT-CN284
4DO-13221
5TELKOMNET211
6Baidu210
7VNPT-VN206
8VNPT-VNNIC-VN174
9HINET-NET150
10KORNET-KR129

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2501
2United States1916
3Viet Nam800
4France752
5Brazil681
6Russian Federation638
7India623
8Indonesia542
9South Korea322
10Taiwan266

Suspected Bot List [2019-03-12]

detection period: 2019-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1236

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, March 12, 2019

Botnet Statistics [2019-03-11]

detection period: 2019-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 13661
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12759
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud369
2UNKNOWN297
3TENCENT-CN270
4DO-13225
5VNPT-VN206
6Baidu205
7TELKOMNET203
8HINET-NET180
9VNPT-VNNIC-VN179
10CHINANET-GD136

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2493
2United States1986
3Viet Nam760
4France755
5Brazil637
6Russian Federation595
7India580
8Indonesia520
9South Korea314
10Taiwan303

Suspected Bot List [2019-03-11]

detection period: 2019-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1159

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, March 11, 2019

Botnet Statistics [2019-03-10]

detection period: 2019-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 12693
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11815
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud355
2UNKNOWN296
3TENCENT-CN252
4HINET-NET211
5Baidu198
6VNPT-VN192
7DO-13170
8TELKOMNET160
9KORNET-KR130
10VNPT-VNNIC-VN119

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2333
2United States1776
3Brazil696
4France686
5Viet Nam651
6Russian Federation622
7India472
8Indonesia388
9Taiwan345
10South Korea316

Suspected Bot List [2019-03-10]

detection period: 2019-03-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1077

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, March 10, 2019

Botnet Statistics [2019-03-09]

detection period: 2019-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 12160
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11313
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud314
2UNKNOWN272
3HINET-NET243
4TENCENT-CN215
5VNPT-VN198
6Baidu179
7TELKOMNET167
8DO-13164
9VNPT-VNNIC-VN141
10AT-88-Z122

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2134
2United States1645
3Viet Nam705
4France659
5Brazil627
6Russian Federation575
7India514
8Indonesia408
9Taiwan382
10South Korea294

Suspected Bot List [2019-03-09]

detection period: 2019-03-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1052

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, March 9, 2019

Botnet Statistics [2019-03-08]

detection period: 2019-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 14523
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13476
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VN341
2TencentCloud341
3UNKNOWN315
4TELKOMNET306
5VNPT-VNNIC-VN247
6HINET-NET229
7TENCENT-CN228
8Baidu187
9DO-13164
10VIETEL-VNNIC-VN128

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2247
2United States1729
3Viet Nam1169
4Brazil851
5Russian Federation741
6Indonesia728
7India724
8France674
9Taiwan367
10Thailand328

Suspected Bot List [2019-03-08]

detection period: 2019-03-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1237

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, March 8, 2019

Botnet Statistics [2019-03-07]

detection period: 2019-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 13236
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12332
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud328
2UNKNOWN286
3VNPT-VN240
4TENCENT-CN237
5VNPT-VNNIC-VN204
6DO-13203
7Baidu178
8HINET-NET150
9TELKOMNET149
10AT-88-Z130

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2231
2United States1947
3Viet Nam825
4Brazil749
5France676
6Russian Federation628
7India595
8Indonesia405
9South Korea326
10Thailand261

Suspected Bot List [2019-03-07]

detection period: 2019-03-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1100

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, March 7, 2019

Botnet Statistics [2019-03-06]

detection period: 2019-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 14394
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13351
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN306
2TencentCloud302
3TELKOMNET301
4VNPT-VN297
5VNPT-VNNIC-VN248
6TENCENT-CN221
7DO-13182
8HINET-NET170
9Baidu159
10AT-88-Z132

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2059
2United States1880
3Viet Nam1060
4Brazil810
5Russian Federation764
6India725
7Indonesia714
8France699
9Thailand317
10South Korea313

Suspected Bot List [2019-03-06]

detection period: 2019-03-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1207

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, March 6, 2019

Botnet Statistics [2019-03-05]

detection period: 2019-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 14075
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13115
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TELKOMNET316
2VNPT-VN315
3TencentCloud315
4UNKNOWN287
5VNPT-VNNIC-VN240
6TENCENT-CN240
7DO-13190
8HINET-NET168
9Baidu163
10KORNET-KR114

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2103
2United States1816
3Viet Nam1101
4Indonesia752
5Russian Federation742
6France711
7Brazil702
8India653
9South Korea310
10Thailand298

Suspected Bot List [2019-03-05]

detection period: 2019-03-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1144

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, March 5, 2019

Suspected Bots' IP List for February 2019

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2019-02-01]
Suspected Bots IP [2019-02-02]
Suspected Bots IP [2019-02-03]
Suspected Bots IP [2019-02-04]
Suspected Bots IP [2019-02-05]
Suspected Bots IP [2019-02-06]
Suspected Bots IP [2019-02-07]
Suspected Bots IP [2019-02-08]
Suspected Bots IP [2019-02-09]
Suspected Bots IP [2019-02-10]
Suspected Bots IP [2019-02-11]
Suspected Bots IP [2019-02-12]
Suspected Bots IP [2019-02-13]
Suspected Bots IP [2019-02-14]
Suspected Bots IP [2019-02-15]
Suspected Bots IP [2019-02-16]
Suspected Bots IP [2019-02-17]
Suspected Bots IP [2019-02-18]
Suspected Bots IP [2019-02-19]
Suspected Bots IP [2019-02-20]
Suspected Bots IP [2019-02-21]
Suspected Bots IP [2019-02-22]
Suspected Bots IP [2019-02-23]
Suspected Bots IP [2019-02-24]
Suspected Bots IP [2019-02-25]
Suspected Bots IP [2019-02-26]
Suspected Bots IP [2019-02-27]
Suspected Bots IP [2019-02-28]

Suspected Bots' IP List for January 2019

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2019-01-01]
Suspected Bots IP [2019-01-02]
Suspected Bots IP [2019-01-03]
Suspected Bots IP [2019-01-04]
Suspected Bots IP [2019-01-05]
Suspected Bots IP [2019-01-06]
Suspected Bots IP [2019-01-07]
Suspected Bots IP [2019-01-08]
Suspected Bots IP [2019-01-09]
Suspected Bots IP [2019-01-10]
Suspected Bots IP [2019-01-11]
Suspected Bots IP [2019-01-12]
Suspected Bots IP [2019-01-13]
Suspected Bots IP [2019-01-14]
Suspected Bots IP [2019-01-15]
Suspected Bots IP [2019-01-16]
Suspected Bots IP [2019-01-17]
Suspected Bots IP [2019-01-18]
Suspected Bots IP [2019-01-19]
Suspected Bots IP [2019-01-20]
Suspected Bots IP [2019-01-21]
Suspected Bots IP [2019-01-22]
Suspected Bots IP [2019-01-23]
Suspected Bots IP [2019-01-24]
Suspected Bots IP [2019-01-25]
Suspected Bots IP [2019-01-26]
Suspected Bots IP [2019-01-27]
Suspected Bots IP [2019-01-28]
Suspected Bots IP [2019-01-29]
Suspected Bots IP [2019-01-30]
Suspected Bots IP [2019-01-31]

Suspected Bots' IP List for December 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-12-01]
Suspected Bots IP [2018-12-02]
Suspected Bots IP [2018-12-03]
Suspected Bots IP [2018-12-04]
Suspected Bots IP [2018-12-05]
Suspected Bots IP [2018-12-06]
Suspected Bots IP [2018-12-07]
Suspected Bots IP [2018-12-08]
Suspected Bots IP [2018-12-09]
Suspected Bots IP [2018-12-10]
Suspected Bots IP [2018-12-11]
Suspected Bots IP [2018-12-12]
Suspected Bots IP [2018-12-13]
Suspected Bots IP [2018-12-14]
Suspected Bots IP [2018-12-15]
Suspected Bots IP [2018-12-16]
Suspected Bots IP [2018-12-17]
Suspected Bots IP [2018-12-18]
Suspected Bots IP [2018-12-19]
Suspected Bots IP [2018-12-20]
Suspected Bots IP [2018-12-21]
Suspected Bots IP [2018-12-22]
Suspected Bots IP [2018-12-23]
Suspected Bots IP [2018-12-24]
Suspected Bots IP [2018-12-25]
Suspected Bots IP [2018-12-26]
Suspected Bots IP [2018-12-27]
Suspected Bots IP [2018-12-28]
Suspected Bots IP [2018-12-29]
Suspected Bots IP [2018-12-30]
Suspected Bots IP [2018-12-31]

Suspected Bots' IP List for November 2018

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2018-11-01]
Suspected Bots IP [2018-11-02]
Suspected Bots IP [2018-11-03]
Suspected Bots IP [2018-11-04]
Suspected Bots IP [2018-11-05]
Suspected Bots IP [2018-11-06]
Suspected Bots IP [2018-11-07]
Suspected Bots IP [2018-11-08]
Suspected Bots IP [2018-11-09]
Suspected Bots IP [2018-11-10]
Suspected Bots IP [2018-11-11]
Suspected Bots IP [2018-11-12]
Suspected Bots IP [2018-11-13]
Suspected Bots IP [2018-11-14]
Suspected Bots IP [2018-11-15]
Suspected Bots IP [2018-11-16]
Suspected Bots IP [2018-11-17]
Suspected Bots IP [2018-11-18]
Suspected Bots IP [2018-11-19]
Suspected Bots IP [2018-11-20]
Suspected Bots IP [2018-11-21]
Suspected Bots IP [2018-11-22]
Suspected Bots IP [2018-11-23]
Suspected Bots IP [2018-11-24]
Suspected Bots IP [2018-11-25]
Suspected Bots IP [2018-11-26]
Suspected Bots IP [2018-11-27]
Suspected Bots IP [2018-11-28]
Suspected Bots IP [2018-11-29]
Suspected Bots IP [2018-11-30]

Botnet Statistics [2019-03-04]

detection period: 2019-03-04 00:00-23:59 UTC
total number of suspected botnet IPs: 13092
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12166
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud316
2UNKNOWN303
3TELKOMNET257
4VNPT-VN253
5TENCENT-CN242
6VNPT-VNNIC-VN198
7DO-13192
8Baidu172
9HINET-NET146
10KORNET-KR114

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2171
2United States1765
3Viet Nam864
4France751
5Brazil625
6Indonesia598
7Russian Federation593
8India535
9South Korea313
10Thailand309

Suspected Bot List [2019-03-04]

detection period: 2019-03-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1130

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, March 4, 2019

Botnet Statistics [2019-03-03]

detection period: 2019-03-03 00:00-23:59 UTC
total number of suspected botnet IPs: 10725
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9953
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud289
2UNKNOWN255
3TENCENT-CN210
4DO-13157
5Baidu147
6DIGITALOCEAN-8139
7TELKOMNET120
8VNPT-VNNIC-VN114
9KORNET-KR114
10VNPT-VN110

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1945
2United States1531
3France663
4Brazil558
5Russian Federation519
6Viet Nam453
7India378
8Indonesia324
9South Korea292
10Italy195

Suspected Bot List [2019-03-03]

detection period: 2019-03-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 946

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, March 3, 2019

Botnet Statistics [2019-03-02]

detection period: 2019-03-02 00:00-23:59 UTC
total number of suspected botnet IPs: 12083
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11215
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud280
2UNKNOWN254
3TELKOMNET228
4VNPT-VNNIC-VN224
5VNPT-VN219
6TENCENT-CN185
7HINET-NET152
8DO-13141
9DIGITALOCEAN-8139
10Baidu138

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1853
2United States1506
3Viet Nam817
4Russian Federation667
5India618
6Brazil615
7France595
8Indonesia549
9Thailand262
10South Korea260

Suspected Bot List [2019-03-02]

detection period: 2019-03-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1028

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, March 2, 2019

Botnet Statistics [2019-03-01]

detection period: 2019-03-01 00:00-23:59 UTC
total number of suspected botnet IPs: 11180
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10401
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud281
2UNKNOWN240
3TENCENT-CN202
4VNPT-VN187
5TELKOMNET184
6DO-13141
7Baidu140
8VNPT-VNNIC-VN135
9HINET-NET124
10AT-88-Z114

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1851
2United States1588
3France661
4Viet Nam595
5Brazil579
6Russian Federation541
7India528
8Indonesia461
9South Korea268
10Thailand217