Botnet Statistics [2020-03-30]

detection period: 2020-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 33569
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 31906
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1136
2	VNPT-VN	1112
3	Baidu	849
4	VIETTEL-VN	783
5	HINET-NET	690
6	TENCENT-CN	655
7	DIGITALOCEAN-7	471
8	TELKOMNET	427
9	CHINANET-JS	390
10	DO-13	389

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9409
2	United States	3354
3	Viet Nam	2541
4	Russian Federation	1740
5	Indonesia	1202
6	India	1006
7	France	922
8	Taiwan	887
9	Thailand	729
10	South Korea	589

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5038	598336
2	7070	545873
3	1030	448060
4	1024	192886
5	2048	168116
6	4122	117525
7	1020	92653
8	4022	86461
9	7000	84811
10	445	84612

Suspected Bot List [2020-03-30]

detection period: 2020-03-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1663

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-29]

detection period: 2020-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 33573
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32112
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1146
2	Baidu	871
3	TENCENT-CN	676
4	VNPT-VN	659
5	HINET-NET	589
6	VIETTEL-VN	543
7	DIGITALOCEAN-7	475
8	CHINANET-JS	447
9	CHINANET-GD	392
10	KORNET	373

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	11639
2	United States	3307
3	Viet Nam	1669
4	Russian Federation	1644
5	India	972
6	France	964
7	Indonesia	850
8	Taiwan	796
9	South Korea	599
10	Thailand	532

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5038	1028373
2	4122	295823
3	7070	199519
4	1024	191536
5	2048	181660
6	4022	97688
7	4444	74736
8	7777	72250
9	8022	59033
10	22	56964

Suspected Bot List [2020-03-29]

detection period: 2020-03-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1461

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-28]

detection period: 2020-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 36009
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34493
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1120
2	Baidu	870
3	VNPT-VN	838
4	TENCENT-CN	669
5	VIETTEL-VN	627
6	HINET-NET	597
7	DIGITALOCEAN-7	477
8	CHINANET-JS	466
9	KORNET	396
10	DO-13	374

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	13092
2	United States	3400
3	Viet Nam	2039
4	Russian Federation	1646
5	Indonesia	1015
6	India	992
7	France	956
8	Taiwan	816
9	South Korea	648
10	Thailand	593

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5038	1381265
2	8100	1239916
3	1024	188372
4	2048	180105
5	4022	84844
6	4444	71598
7	7777	69895
8	8022	57774
9	23	52151
10	22	47502

Suspected Bot List [2020-03-28]

detection period: 2020-03-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1516

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-27]

detection period: 2020-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 39521
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 37942
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	1143
2	TencentCloud	1072
3	Baidu	848
4	VIETTEL-VN	778
5	HINET-NET	658
6	TENCENT-CN	630
7	CHINANET-HN	570
8	DIGITALOCEAN-7	474
9	CHINANET-JS	474
10	TELKOMNET	452

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	15085
2	United States	3376
3	Viet Nam	2601
4	Russian Federation	1957
5	Indonesia	1260
6	India	1007
7	France	939
8	Taiwan	861
9	Thailand	744
10	South Korea	641

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1881429
2	1024	198511
3	2048	180068
4	5038	132930
5	445	89984
6	4022	77582
7	4444	75192
8	7777	69861
9	23	58455
10	8022	57799

Suspected Bot List [2020-03-27]

detection period: 2020-03-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1579

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-26]

detection period: 2020-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 34081
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32386
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1096
2	VNPT-VN	1012
3	Baidu	884
4	VIETTEL-VN	782
5	HINET-NET	653
6	TENCENT-CN	650
7	DIGITALOCEAN-7	475
8	CHINANET-JS	430
9	TELKOMNET	417
10	CHINANET-GD	394

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9446
2	United States	3345
3	Viet Nam	2474
4	Russian Federation	1914
5	Indonesia	1222
6	India	999
7	France	964
8	Taiwan	833
9	Thailand	747
10	Egypt	717

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	828366
2	1024	183013
3	2048	176734
4	6004	103219
5	10000	87891
6	445	78580
7	4022	71601
8	4444	64852
9	7777	62785
10	993	57115

Suspected Bot List [2020-03-26]

detection period: 2020-03-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1695

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-25]

detection period: 2020-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 34514
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32710
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1122
2	VNPT-VN	1024
3	Baidu	906
4	VIETTEL-VN	787
5	TENCENT-CN	659
6	HINET-NET	656
7	DIGITALOCEAN-7	482
8	KORNET	414
9	CHINANET-JS	387
10	CHINANET-GD	368

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9421
2	United States	3545
3	Viet Nam	2472
4	Russian Federation	1891
5	India	1004
6	France	998
7	Indonesia	972
8	Taiwan	843
9	Thailand	741
10	Egypt	705

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1919556
2	1024	182807
3	2048	177875
4	6001	138201
5	445	111334
6	8881	98481
7	10000	80083
8	4022	77300
9	7777	73568
10	4444	63768

Suspected Bot List [2020-03-25]

detection period: 2020-03-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1804

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-24]

detection period: 2020-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 35362
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33692
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	1092
2	TencentCloud	1044
3	Baidu	821
4	VIETTEL-VN	820
5	HINET-NET	723
6	TENCENT-CN	612
7	DIGITALOCEAN-7	477
8	TELKOMNET	469
9	KORNET	423
10	CHINANET-JS	397

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	10541
2	United States	3060
3	Viet Nam	2534
4	Russian Federation	2010
5	Indonesia	1308
6	India	1195
7	Taiwan	948
8	France	924
9	Thailand	705
10	South Korea	650

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	2036406
2	1024	206678
3	2048	188925
4	7000	127331
5	8000	120339
6	4022	119588
7	7070	114980
8	5038	106051
9	445	102549
10	5000	90335

Suspected Bot List [2020-03-24]

detection period: 2020-03-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1670

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-23]

detection period: 2020-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 36989
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35349
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1078
2	VNPT-VN	1030
3	Baidu	853
4	VIETTEL-VN	744
5	HINET-NET	708
6	TENCENT-CN	630
7	TELKOMNET	515
8	CHINANET-JS	501
9	DIGITALOCEAN-7	474
10	KORNET	421

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	11910
2	United States	3224
3	Viet Nam	2466
4	Russian Federation	1970
5	Indonesia	1365
6	India	1276
7	France	961
8	Taiwan	908
9	Thailand	774
10	Egypt	663

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1993399
2	3306	212696
3	1024	200843
4	2048	185621
5	4022	89498
6	445	87998
7	7777	72137
8	8022	70934
9	4444	67012
10	22	57832

Suspected Bot List [2020-03-23]

detection period: 2020-03-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1640

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-22]

detection period: 2020-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 32092
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30549
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1117
2	Baidu	893
3	HINET-NET	723
4	TENCENT-CN	660
5	VIETTEL-VN	653
6	VNPT-VN	648
7	DIGITALOCEAN-7	485
8	CHINANET-JS	418
9	KORNET	360
10	CHINANET-GD	360

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9258
2	United States	3353
3	Viet Nam	1801
4	Russian Federation	1756
5	India	1005
6	France	935
7	Taiwan	911
8	Indonesia	828
9	Egypt	581
10	South Korea	574

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1984566
2	1024	203074
3	2048	172394
4	4022	86825
5	7777	71337
6	8022	69617
7	4444	65356
8	445	63528
9	5900	57895
10	22	57527

Suspected Bot List [2020-03-22]

detection period: 2020-03-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1543

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-21]

detection period: 2020-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 32559
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30876
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1018
2	VNPT-VN	841
3	Baidu	795
4	HINET-NET	760
5	VIETTEL-VN	708
6	TENCENT-CN	622
7	DIGITALOCEAN-7	487
8	TELKOMNET	417
9	CHINANET-JS	403
10	KORNET	400

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7972
2	United States	3356
3	Viet Nam	2124
4	Russian Federation	1833
5	India	1516
6	Indonesia	1109
7	Taiwan	986
8	France	954
9	South Korea	632
10	Egypt	628

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1946993
2	1024	193011
3	2048	175941
4	4022	82714
5	445	72993
6	8022	69980
7	7777	69222
8	4444	62844
9	22	59092
10	2322	49136

Suspected Bot List [2020-03-21]

detection period: 2020-03-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1683

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-20]

detection period: 2020-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 36072
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34312
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1157
2	VNPT-VN	1123
3	Baidu	933
4	VIETTEL-VN	826
5	HINET-NET	787
6	TENCENT-CN	681
7	TELKOMNET	539
8	DIGITALOCEAN-7	485
9	KORNET	460
10	CHINANET-JS	417

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8832
2	United States	3547
3	Viet Nam	2594
4	Russian Federation	2051
5	India	1710
6	Indonesia	1390
7	Taiwan	998
8	France	980
9	Thailand	833
10	South Korea	720

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8100	1875652
2	1024	194189
3	2048	174035
4	2322	94339
5	4022	86852
6	445	83875
7	7777	72848
8	8022	70648
9	4444	67973
10	5038	64926

Suspected Bot List [2020-03-20]

detection period: 2020-03-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1760

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-19]

detection period: 2020-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 36931
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34930
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1158
2	VNPT-VN	1022
3	Baidu	963
4	HINET-NET	823
5	VIETTEL-VN	784
6	TENCENT-CN	687
7	TELKOMNET	577
8	KORNET	499
9	DIGITALOCEAN-7	484
10	CHINANET-JS	411

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8983
2	United States	3455
3	Viet Nam	2497
4	Russian Federation	2126
5	India	1881
6	Indonesia	1505
7	Taiwan	1012
8	France	972
9	Thailand	771
10	South Korea	737

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6004	166016
2	2048	155947
3	1024	126507
4	445	109918
5	2322	97996
6	4022	88149
7	7777	88106
8	8022	73334
9	4444	71763
10	6003	60569

Suspected Bot List [2020-03-19]

detection period: 2020-03-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2001

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-18]

detection period: 2020-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 35272
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33383
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1154
2	VNPT-VN	1020
3	Baidu	952
4	VIETTEL-VN	802
5	HINET-NET	726
6	TENCENT-CN	700
7	KORNET	562
8	TELKOMNET	524
9	DIGITALOCEAN-7	487
10	DO-13	425

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8193
2	United States	3475
3	Viet Nam	2481
4	Russian Federation	1944
5	India	1766
6	Indonesia	1339
7	France	964
8	Taiwan	927
9	South Korea	814
10	Egypt	741

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1024	225539
2	2321	224176
3	2048	192652
4	445	85437
5	4444	80259
6	7777	78231
7	8022	73548
8	4022	72269
9	5900	55590
10	23	54415

Suspected Bot List [2020-03-18]

detection period: 2020-03-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1889

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-17]

detection period: 2020-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 38556
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36563
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1173
2	VNPT-VN	1085
3	Baidu	1004
4	HINET-NET	852
5	VIETTEL-VN	828
6	TENCENT-CN	704
7	TELKOMNET	613
8	KORNET	553
9	DIGITALOCEAN-7	497
10	DO-13	417

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9798
2	United States	3572
3	Viet Nam	2605
4	Russian Federation	2043
5	India	1880
6	Indonesia	1560
7	Taiwan	1080
8	France	1020
9	South Korea	840
10	Thailand	809

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	12337	905457
2	12849	388726
3	13619	313359
4	13368	253351
5	13113	250363
6	14643	243215
7	12593	238011
8	1024	228344
9	13106	218693
10	13873	209640

Suspected Bot List [2020-03-17]

detection period: 2020-03-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1993

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-16]

detection period: 2020-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 38554
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36646
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1161
2	VNPT-VN	1046
3	Baidu	1022
4	VIETTEL-VN	782
5	HINET-NET	740
6	TENCENT-CN	702
7	TELKOMNET	559
8	DIGITALOCEAN-7	495
9	KORNET	471
10	CHINANET-JS	471

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	11043
2	United States	3512
3	Viet Nam	2482
4	Russian Federation	1926
5	India	1787
6	Indonesia	1442
7	France	996
8	Taiwan	938
9	South Korea	744
10	Thailand	742

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	12337	1531898
2	12849	654647
3	13619	530984
4	13368	427944
5	13113	423340
6	14643	408368
7	12593	399665
8	13106	370010
9	13873	352756
10	12857	337333

Suspected Bot List [2020-03-16]

detection period: 2020-03-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1908

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-15]

detection period: 2020-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 33825
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32094
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1217
2	Baidu	1040
3	TENCENT-CN	719
4	HINET-NET	693
5	VNPT-VN	607
6	VIETTEL-VN	606
7	DIGITALOCEAN-7	493
8	KORNET	490
9	DO-13	405
10	CHINANET-GD	399

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8847
2	United States	3635
3	Russian Federation	1731
4	Viet Nam	1699
5	India	1190
6	France	1066
7	Indonesia	1005
8	Taiwan	952
9	South Korea	788
10	Thailand	591

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	12337	356076
2	12849	150753
3	13619	121927
4	2048	109619
5	13368	99003
6	13113	98239
7	14643	95419
8	12593	93264
9	13106	86102
10	13873	81651

Suspected Bot List [2020-03-15]

detection period: 2020-03-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1731

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-14]

detection period: 2020-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 34491
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32844
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1047
2	Baidu	888
3	VNPT-VN	760
4	VIETTEL-VN	722
5	HINET-NET	674
6	TENCENT-CN	635
7	KORNET	520
8	DIGITALOCEAN-7	489
9	CHINANET-JS	467
10	DO-13	370

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	10438
2	United States	3370
3	Viet Nam	2019
4	Russian Federation	1617
5	India	1439
6	Indonesia	1036
7	France	933
8	Taiwan	920
9	South Korea	793
10	Thailand	575

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	81907
2	7777	78890
3	4444	68945
4	22	55383
5	4022	55367
6	3389	48686
7	23	39002
8	8520	37163
9	13389	28064
10	5900	28059

Suspected Bot List [2020-03-14]

detection period: 2020-03-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1647

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-13]

detection period: 2020-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 35961
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34186
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1070
2	VNPT-VN	926
3	Baidu	898
4	HINET-NET	715
5	VIETTEL-VN	709
6	TENCENT-CN	667
7	DIGITALOCEAN-6	527
8	KORNET	503
9	TELKOMNET	494
10	DIGITALOCEAN-7	493

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9709
2	United States	3656
3	Viet Nam	2235
4	Russian Federation	1754
5	India	1731
6	Indonesia	1435
7	France	963
8	Taiwan	949
9	South Korea	785
10	Thailand	776

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8520	1167697
2	445	128418
3	7777	119743
4	2580	73355
5	4444	65844
6	3389	55756
7	22	49418
8	8000	47081
9	5000	46839
10	4022	44091

Suspected Bot List [2020-03-13]

detection period: 2020-03-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1775

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-12]

detection period: 2020-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 35029
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33210
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	1180
2	TencentCloud	1083
3	VIETTEL-VN	918
4	Baidu	894
5	HINET-NET	722
6	TENCENT-CN	651
7	DIGITALOCEAN-6	616
8	TELKOMNET	603
9	KORNET	465
10	CHINANET-JS	419

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8169
2	United States	3300
3	Viet Nam	2722
4	India	1889
5	Russian Federation	1784
6	Indonesia	1617
7	Thailand	975
8	Taiwan	959
9	France	954
10	South Korea	716

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8520	1355021
2	2580	751743
3	5038	149192
4	445	124214
5	7070	124156
6	7000	111201
7	7777	79739
8	39022	71414
9	4444	63689
10	22	54476

Suspected Bot List [2020-03-12]

detection period: 2020-03-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1819

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-11]

detection period: 2020-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 38417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36454
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	1240
2	TencentCloud	1077
3	VIETTEL-VN	930
4	Baidu	873
5	HINET-NET	745
6	TELKOMNET	680
7	TENCENT-CN	656
8	DIGITALOCEAN-6	622
9	KORNET	516
10	DO-13	442

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	10130
2	United States	3405
3	Viet Nam	2847
4	India	1902
5	Russian Federation	1899
6	Indonesia	1799
7	Thailand	1052
8	France	1002
9	Taiwan	962
10	South Korea	772

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2580	320696
2	5038	194363
3	7070	192702
4	3333	148592
5	7000	130975
6	445	128512
7	8520	109730
8	7777	82524
9	39022	74241
10	4444	64945

Suspected Bot List [2020-03-11]

detection period: 2020-03-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1963

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-10]

detection period: 2020-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 35942
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34060
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	1087
2	TencentCloud	1077
3	Baidu	863
4	VIETTEL-VN	858
5	HINET-NET	759
6	TENCENT-CN	676
7	DIGITALOCEAN-6	620
8	TELKOMNET	609
9	KORNET	500
10	CHINANET-JS	414

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8830
2	United States	3334
3	Viet Nam	2633
4	Russian Federation	1813
5	Indonesia	1698
6	India	1409
7	France	990
8	Taiwan	984
9	Thailand	921
10	South Korea	746

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8520	590740
2	2323	193573
3	445	105674
4	7777	83280
5	3333	77649
6	39022	74439
7	4444	66316
8	3389	64789
9	22	54642
10	5900	42333

Suspected Bot List [2020-03-10]

detection period: 2020-03-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1882

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-09]

detection period: 2020-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 33225
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 31301
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	990
2	VNPT-VN	966
3	VIETTEL-VN	810
4	Baidu	768
5	HINET-NET	724
6	DIGITALOCEAN-6	697
7	TENCENT-CN	637
8	TELKOMNET	519
9	KORNET	519
10	CHINANET-JS	377

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7899
2	United States	3197
3	Viet Nam	2376
4	Russian Federation	1667
5	India	1493
6	Indonesia	1406
7	Taiwan	967
8	France	941
9	Thailand	787
10	South Korea	764

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5038	231838
2	7070	229045
3	2019	132085
4	7000	118162
5	8000	108647
6	445	90043
7	7777	80862
8	5000	78694
9	39022	72755
10	3389	69858

Suspected Bot List [2020-03-09]

detection period: 2020-03-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1924

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-03-08]

detection period: 2020-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 31379
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29831
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	984
2	Baidu	778
3	DIGITALOCEAN-6	722
4	HINET-NET	711
5	TENCENT-CN	637
6	VNPT-VN	623
7	VIETTEL-VN	606
8	KORNET	484
9	CHINANET-JS	387
10	ALISOFT	351

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8128
2	United States	3343
3	Viet Nam	1696
4	Russian Federation	1641
5	India	1159
6	Taiwan	981
7	Indonesia	974
8	France	951
9	South Korea	755
10	Thailand	625

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	4096	1390985
2	404	503511
3	2019	334760
4	7777	83125
5	39022	74418
6	4444	65885
7	445	53828
8	22	53268
9	3389	51911
10	23	46338