Custom Search

Tuesday, April 30, 2019

Botnet Statistics [2019-04-29]

detection period: 2019-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 7848
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 7404
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1HINET-NET162
2VNPT-VN148
3TELKOMNET145
4TencentCloud115
502.558.157/0001-62103
6DO-1393
7TENCENT-CN90
8CHINANET-GD75
9VE-CSVE-LACNIC69
10Baidu64

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1051
2United States1017
3Russian Federation508
4India409
5Brazil388
6Indonesia377
7Viet Nam311
8France297
9Taiwan200
10Turkey164

Suspected Bot List [2019-04-29]

detection period: 2019-04-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 444

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, April 29, 2019

Botnet Statistics [2019-04-28]

detection period: 2019-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 9390
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 8832
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1DO-13199
2TencentCloud189
3Baidu181
4HINET-NET152
5VNPT-VN126
6TENCENT-CN124
7OVH122
802.558.157/0001-62102
9NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK94
10CHINANET-GD91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1554
2United States1485
3France563
4Russian Federation501
5Brazil387
6India311
7Viet Nam297
8Indonesia267
9South Korea203
10Hong Kong189

Suspected Bot List [2019-04-28]

detection period: 2019-04-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 558

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, April 28, 2019

Botnet Statistics [2019-04-27]

detection period: 2019-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 10273
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9716
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1DO-13214
2Baidu192
3VNPT-VN189
4TencentCloud189
5HINET-NET154
6TENCENT-CN143
7OVH130
802.558.157/0001-62113
9CHINANET-GD103
10VIETTEL-VN100

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1674
2United States1560
3France601
4Russian Federation500
5Brazil458
6Viet Nam425
7India423
8Indonesia311
9Singapore204
10South Korea200

Suspected Bot List [2019-04-27]

detection period: 2019-04-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 557

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, April 27, 2019

Botnet Statistics [2019-04-26]

detection period: 2019-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 11034
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10449
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VN278
2DO-13223
3Baidu208
4TencentCloud202
5TENCENT-CN149
6TELKOMNET149
7HINET-NET138
8VIETTEL-VN137
9OVH135
1002.558.157/0001-62132

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1745
2United States1618
3France608
4Viet Nam598
5Russian Federation580
6India484
7Brazil478
8Indonesia418
9Singapore206
10South Korea205

Suspected Bot List [2019-04-26]

detection period: 2019-04-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 585

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
CN103.20.33.185China
IT185.133.94.160Italy
UA91.214.179.10Ukraine

List from greylisting:

Friday, April 26, 2019

Botnet Statistics [2019-04-25]

detection period: 2019-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 11199
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10578
number of spam blocked: 5
recipient count of spam blocked: 5

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud255
2VNPT-VN248
3DO-13209
4TENCENT-CN204
5Baidu197
6HINET-NET181
7TELKOMNET157
8VIETTEL-VN142
9OVH134
1002.558.157/0001-62126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1837
2United States1562
3France625
4Russian Federation585
5Viet Nam578
6India489
7Brazil456
8Indonesia428
9Taiwan211
10Singapore207

Suspected Bot List [2019-04-25]

detection period: 2019-04-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 621

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, April 25, 2019

Botnet Statistics [2019-04-24]

detection period: 2019-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 10818
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10238
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud329
2TENCENT-CN258
3VNPT-VN255
4DO-13238
5Baidu199
6HINET-NET156
7OVH141
8VIETTEL-VN131
9TELKOMNET127
10NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK118

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2098
2United States1581
3France599
4Viet Nam530
5Russian Federation513
6India459
7Brazil406
8Indonesia379
9Singapore205
10Thailand203

Suspected Bot List [2019-04-24]

detection period: 2019-04-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 581

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, April 24, 2019

Botnet Statistics [2019-04-23]

detection period: 2019-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 10637
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10008
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud278
2TENCENT-CN238
3VNPT-VN236
4DO-13221
5Baidu162
6HINET-NET153
7TELKOMNET133
8OVH128
9VIETTEL-VN122
10NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK119

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1866
2United States1551
3France560
4Russian Federation544
5Viet Nam505
6India429
7Brazil425
8Indonesia387
9Thailand188
10Singapore186

Suspected Bot List [2019-04-23]

detection period: 2019-04-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 629

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, April 23, 2019

Botnet Statistics [2019-04-22]

detection period: 2019-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 11511
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10847
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud349
2TENCENT-CN278
3VNPT-VN271
4DO-13248
5Baidu217
6HINET-NET151
7OVH148
8TELKOMNET144
9NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK138
10VIETTEL-VN127

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2121
2United States1698
3France649
4Viet Nam565
5Russian Federation484
6India437
7Brazil426
8Indonesia409
9Singapore236
10South Korea233

Suspected Bot List [2019-04-22]

detection period: 2019-04-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 664

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, April 22, 2019

Botnet Statistics [2019-04-21]

detection period: 2019-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 10308
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9743
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud355
2TENCENT-CN295
3Baidu230
4DO-13229
5VNPT-VN144
6OVH141
7NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK127
8HINET-NET124
902.558.157/0001-62102
10TELKOMNET97

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2065
2United States1625
3France578
4Russian Federation453
5Brazil393
6Viet Nam361
7India324
8Indonesia287
9Singapore234
10Hong Kong211

Suspected Bot List [2019-04-21]

detection period: 2019-04-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 565

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, April 21, 2019

Botnet Statistics [2019-04-20]

detection period: 2019-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 10629
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10097
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud370
2TENCENT-CN298
3Baidu224
4DO-13223
5OVH148
6VNPT-VN142
7NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK132
8HINET-NET115
9HO-2112
1002.558.157/0001-62106

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2178
2United States1612
3France597
4Russian Federation437
5Brazil401
6India374
7Viet Nam361
8Indonesia320
9Singapore228
10South Korea209

Suspected Bot List [2019-04-20]

detection period: 2019-04-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 532

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, April 20, 2019

Botnet Statistics [2019-04-19]

detection period: 2019-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 11583
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11007
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud371
2TENCENT-CN301
3VNPT-VN284
4Baidu240
5DO-13237
6HINET-NET183
7OVH146
8NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK139
9VIETTEL-VN129
10AT-88-Z112

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2210
2United States1798
3France640
4Viet Nam578
5Russian Federation570
6Brazil435
7India431
8Indonesia313
9Singapore231
10South Korea223

Suspected Bot List [2019-04-19]

detection period: 2019-04-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 576

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, April 19, 2019

Botnet Statistics [2019-04-18]

detection period: 2019-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 11957
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11317
number of spam blocked: 2
recipient count of spam blocked: 5

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN427
2TencentCloud368
3TENCENT-CN292
4Baidu233
5DO-13226
6VNPT-VN189
7HINET-NET163
8TELKOMNET149
9VNPT-VNNIC-VN112
10KORNET-KR108

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2348
2United States1789
3France659
4Russian Federation633
5Brazil629
6Viet Nam613
7India418
8Indonesia384
9South Korea275
10Netherlands241

Suspected Bot List [2019-04-18]

detection period: 2019-04-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 639

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, April 18, 2019

Botnet Statistics [2019-04-17]

detection period: 2019-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 11284
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10662
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN408
2TencentCloud366
3TENCENT-CN301
4Baidu252
5DO-13233
6VNPT-VNNIC-VN118
7KORNET-KR118
8VNPT-VN117
9HINET-NET109
10HO-2101

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2469
2United States1754
3France690
4Brazil496
5Viet Nam494
6Russian Federation486
7India397
8South Korea271
9Indonesia253
10Netherlands238

Suspected Bot List [2019-04-17]

detection period: 2019-04-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 622

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, April 17, 2019

Botnet Statistics [2019-04-16]

detection period: 2019-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 10952
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10366
number of spam blocked: 6
recipient count of spam blocked: 6

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud375
2UNKNOWN370
3TENCENT-CN289
4DO-13215
5Baidu214
6TELKOMNET155
7VNPT-VN121
8KORNET-KR108
9HINET-NET108
10VNPT-VNNIC-VN106

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2275
2United States1604
3France670
4Brazil525
5Russian Federation518
6Viet Nam503
7India407
8Indonesia371
9South Korea259
10Canada217

Suspected Bot List [2019-04-16]

detection period: 2019-04-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 586

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, April 16, 2019

Botnet Statistics [2019-04-15]

detection period: 2019-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 10656
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10091
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN390
2TencentCloud363
3TENCENT-CN299
4DO-13217
5Baidu215
6TELKOMNET140
7HO-2103
8VNPT-VN100
9KORNET-KR98
10HINET-NET89

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2189
2United States1595
3France645
4Brazil558
5Russian Federation512
6India426
7Indonesia370
8Viet Nam346
9South Korea244
10Canada213

Suspected Bot List [2019-04-15]

detection period: 2019-04-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 565

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, April 15, 2019

Botnet Statistics [2019-04-14]

detection period: 2019-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 10490
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9769
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud373
2UNKNOWN339
3TENCENT-CN299
4DO-13228
5Baidu217
6HO-2106
7KORNET-KR100
8HINET-NET100
9CHINANET-GD96
10TELKOMNET89

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2235
2United States1708
3France651
4Brazil513
5Russian Federation466
6India343
7Viet Nam293
8South Korea265
9Indonesia258
10Netherlands213

Suspected Bot List [2019-04-14]

detection period: 2019-04-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 721

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, April 13, 2019

Botnet Statistics [2019-04-12]

detection period: 2019-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 7853
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 7256
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN170
2TencentCloud140
3TELKOMNET126
4VNPT-VN122
5VNPT-VNNIC-VN117
6DO-1395
7HINET-NET84
8TENCENT-CN79
9Baidu78
10VE-CSVE-LACNIC75

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1United States1125
2China1123
3Russian Federation508
4Viet Nam498
5Brazil474
6India374
7France363
8Indonesia319
9South Korea176
10Mexico149

Suspected Bot List [2019-04-12]

detection period: 2019-04-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 597

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, April 12, 2019

Botnet Statistics [2019-04-11]

detection period: 2019-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 10378
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9625
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud333
2UNKNOWN248
3TENCENT-CN246
4Baidu175
5DO-13165
6VNPT-VN156
7TELKOMNET130
8VNPT-VNNIC-VN123
9HINET-NET105
10HO-285

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1936
2United States1551
3France628
4Russian Federation575
5Brazil539
6Viet Nam536
7India376
8Indonesia356
9South Korea220
10Netherlands186

Suspected Bot List [2019-04-11]

detection period: 2019-04-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 753

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, April 11, 2019

Botnet Statistics [2019-04-10]

detection period: 2019-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 10117
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9422
number of spam blocked: 5
recipient count of spam blocked: 5

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud356
2TENCENT-CN273
3UNKNOWN243
4Baidu191
5DO-13172
6TELKOMNET156
7VNPT-VNNIC-VN124
8VNPT-VN118
9HINET-NET98
10HO-281

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2043
2United States1515
3France602
4Russian Federation538
5Brazil529
6Viet Nam498
7India386
8Indonesia380
9South Korea211
10Thailand187

Suspected Bot List [2019-04-10]

detection period: 2019-04-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 695

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, April 10, 2019

Botnet Statistics [2019-04-09]

detection period: 2019-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 10378
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9648
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud355
2TENCENT-CN265
3UNKNOWN260
4Baidu204
5DO-13185
6TELKOMNET137
7VNPT-VN134
8VNPT-VNNIC-VN129
9HINET-NET105
10HO-294

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2124
2United States1516
3France580
4Russian Federation534
5Viet Nam522
6Brazil509
7India424
8Indonesia363
9South Korea226
10Netherlands199

Suspected Bot List [2019-04-09]

detection period: 2019-04-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 730

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, April 9, 2019

Botnet Statistics [2019-04-08]

detection period: 2019-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 10571
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9811
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud349
2UNKNOWN290
3TENCENT-CN269
4Baidu197
5DO-13189
6VNPT-VN159
7TELKOMNET157
8VNPT-VNNIC-VN118
9CHINANET-GD95
10KORNET-KR92

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2030
2United States1566
3France661
4Viet Nam573
5Brazil532
6Russian Federation493
7India420
8Indonesia390
9South Korea241
10Netherlands200

Suspected Bot List [2019-04-08]

detection period: 2019-04-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 760

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, April 8, 2019

Botnet Statistics [2019-04-07]

detection period: 2019-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 10007
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9297
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud344
2TENCENT-CN286
3UNKNOWN250
4Baidu186
5DO-13172
6HINET-NET102
7CHINANET-JS101
8TELKOMNET98
9AT-88-Z98
10HO-288

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2095
2United States1584
3France628
4Brazil536
5Russian Federation508
6Viet Nam329
7India292
8Indonesia264
9South Korea233
10Italy196

Suspected Bot List [2019-04-07]

detection period: 2019-04-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 711

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, April 7, 2019

Botnet Statistics [2019-04-06]

detection period: 2019-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 10525
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9747
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud374
2TENCENT-CN307
3UNKNOWN286
4Baidu227
5DO-13168
6TELKOMNET117
7VNPT-VN106
8KORNET-KR96
9HINET-NET95
10HO-293

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2131
2United States1581
3France611
4Brazil597
5Russian Federation521
6Viet Nam411
7India382
8Indonesia312
9South Korea244
10Canada200

Suspected Bot List [2019-04-06]

detection period: 2019-04-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 778

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, April 6, 2019

Botnet Statistics [2019-04-05]

detection period: 2019-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 11513
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10672
number of spam blocked: 6
recipient count of spam blocked: 6

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud390
2TENCENT-CN306
3UNKNOWN286
4Baidu216
5DO-13192
6TELKOMNET166
7VNPT-VN130
8VNPT-VNNIC-VN120
9KORNET-KR101
10HINET-NET99

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2206
2United States1715
3Brazil656
4Russian Federation610
5France605
6Viet Nam526
7India456
8Indonesia395
9South Korea254
10United Kingdom206

Suspected Bot List [2019-04-05]

detection period: 2019-04-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 841

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, April 5, 2019

Botnet Statistics [2019-04-04]

detection period: 2019-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 11642
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10830
number of spam blocked: 7
recipient count of spam blocked: 7

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud380
2TENCENT-CN322
3UNKNOWN270
4DO-13244
5Baidu219
6AT-88-Z149
7TELKOMNET130
8VNPT-VN120
9VNPT-VNNIC-VN107
10KORNET-KR106

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2201
2United States1921
3France664
4Russian Federation618
5Brazil615
6Viet Nam497
7India408
8Indonesia366
9South Korea238
10Netherlands228

Suspected Bot List [2019-04-04]

detection period: 2019-04-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 812

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, April 4, 2019

Botnet Statistics [2019-04-03]

detection period: 2019-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 10372
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9666
number of spam blocked: 10
recipient count of spam blocked: 10

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud320
2DO-13284
3TENCENT-CN278
4UNKNOWN248
5Baidu194
6AT-88-Z117
7VNPT-VN108
8DIGITALOCEAN-8104
9VNPT-VNNIC-VN93
10HO-293

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China1940
2United States1803
3France626
4Russian Federation552
5Brazil534
6Viet Nam421
7India373
8Indonesia277
9South Korea230
10Netherlands223

Suspected Bot List [2019-04-03]

detection period: 2019-04-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 708

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, April 3, 2019

Botnet Statistics [2019-04-02]

detection period: 2019-04-02 00:00-23:59 UTC
total number of suspected botnet IPs: 11433
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10623
number of spam blocked: 17
recipient count of spam blocked: 21

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud352
2DO-13301
3TENCENT-CN288
4UNKNOWN284
5Baidu224
6VNPT-VN141
7TELKOMNET134
8VNPT-VNNIC-VN118
9CHINANET-GD113
10DIGITALOCEAN-8106

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2196
2United States1908
3France639
4Russian Federation629
5Brazil594
6Viet Nam544
7India433
8Indonesia388
9South Korea265
10Netherlands224

Suspected Bot List [2019-04-02]

detection period: 2019-04-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 811

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
US207.98.187.162United States

List from greylisting:

Tuesday, April 2, 2019

Botnet Statistics [2019-04-01]

detection period: 2019-04-01 00:00-23:59 UTC
total number of suspected botnet IPs: 12072
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11252
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud354
2TENCENT-CN266
3UNKNOWN252
4Baidu215
5VNPT-VN207
6TELKOMNET202
7DO-13202
8VNPT-VNNIC-VN150
9HINET-NET126
10CHINANET-GD112

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2238
2United States1788
3Viet Nam735
4France681
5Russian Federation645
6Brazil615
7Indonesia507
8India496
9South Korea264
10Thailand244

Suspected Bot List [2019-04-01]

detection period: 2019-04-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 823

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, April 1, 2019

Botnet Statistics [2019-03-31]

detection period: 2019-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 11131
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10357
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud342
2TENCENT-CN273
3UNKNOWN249
4Baidu211
5DO-13197
6TELKOMNET145
7VNPT-VN125
8CHINANET-GD125
9HINET-NET113
10HO-294

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry/Region# of suspected botnet IPs
1China2331
2United States1593
3France666
4Russian Federation640
5Brazil577
6Viet Nam450
7India416
8Indonesia360
9South Korea234
10Canada199

Suspected Bot List [2019-03-31]

detection period: 2019-03-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 777

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting: