Botnet Statistics [2020-08-30]

detection period: 2020-08-30 00:00-23:59 UTC
total number of suspected botnet IPs: 26718
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25267
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1294
2	Baidu	688
3	DIGITALOCEAN-192-241-128-0	653
4	TENCENT-CN	605
5	VNPT-VN	557
6	ALISOFT	521
7	HINET-NET	386
8	CHINANET-JS	385
9	CHINANET-GD	336
10	VIETTEL-VN	335

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7448
2	United States	3240
3	Russian Federation	1355
4	Viet Nam	1285
5	Brazil	1110
6	India	1059
7	France	893
8	Indonesia	657
9	Egypt	503
10	Taiwan	498

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	507045
2	322	56679
3	1433	52330
4	522	49833
5	722	47580
6	1222	46700
7	1122	46485
8	22	46172
9	222	46101
10	922	45641

Suspected Bot List [2020-08-30]

detection period: 2020-08-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1451

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-29]

detection period: 2020-08-29 00:00-23:59 UTC
total number of suspected botnet IPs: 26105
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24709
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1202
2	VNPT-VN	743
3	DIGITALOCEAN-192-241-128-0	668
4	Baidu	650
5	TENCENT-CN	548
6	ALISOFT	447
7	CHINANET-JS	412
8	VIETTEL-VN	401
9	HINET-NET	342
10	VE-CSVE-LACNIC	284

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6692
2	United States	3141
3	Viet Nam	1546
4	India	1334
5	Russian Federation	1278
6	Brazil	1121
7	France	858
8	Indonesia	708
9	Netherlands	478
10	Taiwan	464

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	635129
2	8044	286907
3	3227	85925
4	3228	85142
5	1122	63849
6	1000	56655
7	622	56210
8	822	54821
9	422	54079
10	1822	53205

Suspected Bot List [2020-08-29]

detection period: 2020-08-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1396

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-28]

detection period: 2020-08-28 00:00-23:59 UTC
total number of suspected botnet IPs: 28297
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26722
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1227
2	VNPT-VN	995
3	DIGITALOCEAN-192-241-128-0	669
4	Baidu	666
5	TENCENT-CN	567
6	ALISOFT	480
7	VIETTEL-VN	472
8	CHINANET-JS	438
9	HINET-NET	338
10	CHINANET-GD	337

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7207
2	United States	3200
3	Viet Nam	2006
4	India	1600
5	Russian Federation	1406
6	Brazil	1265
7	Indonesia	908
8	France	864
9	Thailand	582
10	Taiwan	452

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	550364
2	5038	192592
3	5908	106883
4	3225	88297
5	622	71850
6	122	66697
7	222	61335
8	2022	60599
9	822	57576
10	522	56078

Suspected Bot List [2020-08-28]

detection period: 2020-08-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1575

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-27]

detection period: 2020-08-27 00:00-23:59 UTC
total number of suspected botnet IPs: 28653
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27155
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1258
2	VNPT-VN	970
3	Baidu	676
4	DIGITALOCEAN-192-241-128-0	646
5	TENCENT-CN	590
6	VIETTEL-VN	559
7	ALISOFT	477
8	CHINANET-JS	437
9	CHINANET-GD	348
10	HINET-NET	326

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7337
2	United States	3154
3	Viet Nam	2055
4	India	1784
5	Russian Federation	1474
6	Brazil	1196
7	Indonesia	918
8	France	842
9	Thailand	613
10	Taiwan	454

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	623435
2	1224	113442
3	1228	110952
4	1229	108309
5	1226	104498
6	1227	101828
7	1225	100350
8	3221	93571
9	522	64560
10	1433	63703

Suspected Bot List [2020-08-27]

detection period: 2020-08-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1498

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-26]

detection period: 2020-08-26 00:00-23:59 UTC
total number of suspected botnet IPs: 29035
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27463
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1289
2	VNPT-VN	1077
3	Baidu	682
4	DIGITALOCEAN-192-241-128-0	677
5	TENCENT-CN	597
6	ALISOFT	503
7	VIETTEL-VN	491
8	CHINANET-JS	415
9	HINET-NET	380
10	CHINANET-GD	332

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7369
2	United States	3275
3	Viet Nam	2116
4	India	1781
5	Russian Federation	1376
6	Brazil	1357
7	Indonesia	908
8	France	862
9	Thailand	594
10	Taiwan	515

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	307910
2	2317	89356
3	2320	89259
4	2319	88369
5	2318	85362
6	1022	72187
7	322	71925
8	1122	68650
9	422	67106
10	822	66655

Suspected Bot List [2020-08-26]

detection period: 2020-08-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1572

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-25]

detection period: 2020-08-25 00:00-23:59 UTC
total number of suspected botnet IPs: 28907
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27371
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1303
2	VNPT-VN	956
3	Baidu	690
4	DIGITALOCEAN-192-241-128-0	665
5	TENCENT-CN	613
6	ALISOFT	486
7	VIETTEL-VN	453
8	CHINANET-JS	381
9	HINET-NET	374
10	VE-CSVE-LACNIC	335

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7102
2	United States	3240
3	Viet Nam	1932
4	India	1635
5	Russian Federation	1496
6	Brazil	1309
7	Indonesia	946
8	France	895
9	Thailand	633
10	Taiwan	501

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	179346
2	2351	93827
3	2353	88973
4	2313	88381
5	2352	87646
6	2315	86672
7	2349	86634
8	2350	85618
9	2347	84383
10	2314	82123

Suspected Bot List [2020-08-25]

detection period: 2020-08-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1536

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-24]

detection period: 2020-08-24 00:00-23:59 UTC
total number of suspected botnet IPs: 29501
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27864
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1373
2	VNPT-VN	1060
3	Baidu	737
4	DIGITALOCEAN-192-241-128-0	664
5	TENCENT-CN	631
6	ALISOFT	467
7	VIETTEL-VN	460
8	CHINANET-JS	433
9	HINET-NET	345
10	VE-CSVE-LACNIC	325

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7656
2	United States	3362
3	Viet Nam	2028
4	India	1567
5	Russian Federation	1455
6	Brazil	1259
7	Indonesia	991
8	France	914
9	Thailand	603
10	South Korea	469

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	275368
2	1221	94471
3	2345	78185
4	2308	51373
5	22	47927
6	1433	41426
7	3223	32015
8	23	25643
9	2346	21536
10	5900	21174

Suspected Bot List [2020-08-24]

detection period: 2020-08-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1637

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-23]

detection period: 2020-08-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24341
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23071
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1253
2	DIGITALOCEAN-192-241-128-0	827
3	Baidu	667
4	VNPT-VN	596
5	TENCENT-CN	563
6	ALISOFT	417
7	VIETTEL-VN	317
8	CHINANET-JS	299
9	HINET-NET	295
10	VE-CSVE-LACNIC	283

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6355
2	United States	3331
3	Viet Nam	1339
4	Russian Federation	1225
5	Brazil	994
6	India	933
7	France	832
8	Indonesia	601
9	South Korea	462
10	Taiwan	402

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2093	341850
2	445	190224
3	2367	94363
4	2369	93848
5	2393	92650
6	2362	91924
7	2365	91845
8	2363	91829
9	2364	91417
10	2361	91246

Suspected Bot List [2020-08-23]

detection period: 2020-08-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1270

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-22]

detection period: 2020-08-22 00:00-23:59 UTC
total number of suspected botnet IPs: 25840
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24411
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1214
2	VNPT-VN	823
3	Baidu	667
4	TENCENT-CN	564
5	DIGITALOCEAN-192-241-128-0	525
6	ALISOFT	443
7	VIETTEL-VN	387
8	HINET-NET	360
9	CHINANET-JS	329
10	KORNET	326

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6563
2	United States	3187
3	Viet Nam	1650
4	Russian Federation	1242
5	India	1195
6	Brazil	1052
7	France	853
8	Indonesia	729
9	South Korea	510
10	Taiwan	488

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2093	631343
2	7938	258168
3	445	209164
4	3030	100745
5	2358	96458
6	2387	93649
7	2354	92575
8	2357	90893
9	2384	90641
10	2385	89920

Suspected Bot List [2020-08-22]

detection period: 2020-08-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1429

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-21]

detection period: 2020-08-21 00:00-23:59 UTC
total number of suspected botnet IPs: 27673
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26179
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1215
2	VNPT-VN	1133
3	Baidu	677
4	TENCENT-CN	581
5	DIGITALOCEAN-192-241-128-0	511
6	VIETTEL-VN	497
7	ALISOFT	449
8	HINET-NET	355
9	CHINANET-JS	315
10	CMNET	305

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6786
2	United States	3335
3	Viet Nam	2149
4	India	1528
5	Russian Federation	1385
6	Brazil	1214
7	France	854
8	Indonesia	787
9	Thailand	563
10	South Korea	488

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1303	269107
2	300	248830
3	101	240101
4	303	232604
5	445	227999
6	1331	223845
7	1301	210144
8	1313	208367
9	202	206813
10	200	201840

Suspected Bot List [2020-08-21]

detection period: 2020-08-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1494

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-20]

detection period: 2020-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 27729
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26205
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1191
2	VNPT-VN	1039
3	Baidu	695
4	TENCENT-CN	580
5	VIETTEL-VN	539
6	ALISOFT	444
7	HINET-NET	361
8	CHINANET-JS	347
9	VE-CSVE-LACNIC	331
10	CHINANET-GD	300

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7049
2	United States	3030
3	Viet Nam	2103
4	India	1642
5	Russian Federation	1467
6	Brazil	1239
7	France	846
8	Indonesia	668
9	Thailand	557
10	Taiwan	485

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1300	278022
2	445	277691
3	1331	277060
4	300	262623
5	1010	261894
6	101	253775
7	191	244713
8	1301	237208
9	131	236917
10	200	235315

Suspected Bot List [2020-08-20]

detection period: 2020-08-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1524

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-19]

detection period: 2020-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 28362
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26784
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1225
2	VNPT-VN	1033
3	Baidu	690
4	TENCENT-CN	585
5	VIETTEL-VN	514
6	ALISOFT	484
7	CHINANET-JS	362
8	HINET-NET	348
9	VE-CSVE-LACNIC	340
10	TELKOMNET	322

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7235
2	United States	2894
3	Viet Nam	2119
4	India	1538
5	Russian Federation	1454
6	Brazil	1280
7	Indonesia	995
8	France	862
9	Thailand	630
10	South Korea	463

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1010	383157
2	101	347158
3	191	321144
4	445	319526
5	1313	317992
6	300	307090
7	1301	288867
8	303	288391
9	1909	288074
10	200	287120

Suspected Bot List [2020-08-19]

detection period: 2020-08-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1578

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-18]

detection period: 2020-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 28497
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26920
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1254
2	VNPT-VN	1014
3	Baidu	693
4	TENCENT-CN	591
5	ALISOFT	487
6	VIETTEL-VN	471
7	HINET-NET	374
8	VE-CSVE-LACNIC	353
9	TELKOMNET	351
10	CMNET	308

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7012
2	United States	2840
3	Viet Nam	2062
4	India	1790
5	Russian Federation	1505
6	Brazil	1270
7	Indonesia	1031
8	France	853
9	Thailand	622
10	Taiwan	495

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	442971
2	191	205655
3	303	194049
4	1301	174605
5	1010	174265
6	300	169627
7	1331	166019
8	200	164461
9	131	154362
10	2002	153846

Suspected Bot List [2020-08-18]

detection period: 2020-08-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1577

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-17]

detection period: 2020-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 28588
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26984
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1230
2	VNPT-VN	1032
3	Baidu	696
4	TENCENT-CN	597
5	VIETTEL-VN	527
6	ALISOFT	471
7	HINET-NET	390
8	CHINANET-JS	387
9	VE-CSVE-LACNIC	377
10	CHINANET-GD	319

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7321
2	United States	2794
3	Viet Nam	2130
4	India	1771
5	Russian Federation	1479
6	Brazil	1241
7	France	865
8	Indonesia	743
9	Thailand	636
10	Taiwan	516

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	287371
2	1000	96921
3	1433	69035
4	258	63451
5	44444	61260
6	3389	55286
7	23	44778
8	22	40988
9	5000	33777
10	225	27417

Suspected Bot List [2020-08-17]

detection period: 2020-08-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1604

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-16]

detection period: 2020-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 26110
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24682
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1337
2	Baidu	770
3	TENCENT-CN	635
4	VNPT-VN	539
5	ALISOFT	452
6	CHINANET-JS	406
7	VIETTEL-VN	345
8	HINET-NET	340
9	VE-CSVE-LACNIC	326
10	CHINANET-GD	319

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7682
2	United States	2794
3	Russian Federation	1340
4	Viet Nam	1236
5	India	1084
6	Brazil	1029
7	France	878
8	Indonesia	676
9	South Korea	451
10	Taiwan	447

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	200299
2	44444	60655
3	3389	50983
4	22	50839
5	1433	49852
6	23	42036
7	444	25834
8	9002	23815
9	224	22764
10	5900	19524

Suspected Bot List [2020-08-16]

detection period: 2020-08-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1428

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-15]

detection period: 2020-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 23352
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22053
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	738
2	Baidu	672
3	VNPT-VN	665
4	HINET-NET	393
5	ALISOFT	390
6	VIETTEL-VN	380
7	CHINANET-JS	361
8	VE-CSVE-LACNIC	331
9	TENCENT-CN	326
10	CMNET	274

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6008
2	United States	2245
3	Viet Nam	1475
4	Russian Federation	1294
5	India	1097
6	Brazil	1001
7	France	749
8	Indonesia	740
9	Taiwan	508
10	South Korea	427

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	280628
2	9002	59842
3	22	49932
4	23	46806
5	1433	38138
6	3389	34201
7	3823	31340
8	773	26304
9	614	26257
10	223	26252

Suspected Bot List [2020-08-15]

detection period: 2020-08-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1299

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-14]

detection period: 2020-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 25375
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24086
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	980
2	TencentCloud	736
3	Baidu	673
4	VIETTEL-VN	544
5	HINET-NET	402
6	CHINANET-JS	385
7	ALISOFT	383
8	VE-CSVE-LACNIC	342
9	TENCENT-CN	330
10	TELKOMNET	310

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	5947
2	United States	2364
3	Viet Nam	2064
4	India	1664
5	Russian Federation	1419
6	Brazil	1164
7	Indonesia	927
8	France	750
9	Thailand	603
10	Taiwan	508

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	275142
2	23	78429
3	1404	57349
4	22	49155
5	1400	47430
6	1433	47114
7	2049	45308
8	2050	43009
9	2044	42358
10	141	38290

Suspected Bot List [2020-08-14]

detection period: 2020-08-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1289

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-13]

detection period: 2020-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 26700
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25180
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1137
2	VNPT-VN	861
3	Baidu	688
4	TENCENT-CN	573
5	VIETTEL-VN	524
6	HINET-NET	435
7	ALISOFT	383
8	CHINANET-JS	358
9	VE-CSVE-LACNIC	357
10	TELKOMNET	304

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6777
2	United States	2254
3	Viet Nam	1992
4	India	1658
5	Russian Federation	1417
6	Brazil	1163
7	Indonesia	926
8	France	749
9	Thailand	587
10	Taiwan	551

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	325341
2	6006	148070
3	46573	61242
4	23	57284
5	22	47971
6	2048	42496
7	1433	40590
8	2050	37108
9	1414	37053
10	2045	33750

Suspected Bot List [2020-08-13]

detection period: 2020-08-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1520

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-12]

detection period: 2020-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 26620
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25128
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1218
2	VNPT-VN	847
3	Baidu	699
4	TENCENT-CN	615
5	VIETTEL-VN	532
6	HINET-NET	389
7	ALISOFT	386
8	VE-CSVE-LACNIC	365
9	CHINANET-JS	364
10	TELKOMNET	311

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7059
2	United States	2306
3	Viet Nam	1938
4	India	1496
5	Russian Federation	1423
6	Brazil	1190
7	Indonesia	927
8	France	777
9	Taiwan	527
10	South Korea	461

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	307101
2	1441	116047
3	6009	115186
4	1440	110907
5	204	107014
6	1401	104447
7	1404	94943
8	2043	93314
9	141	92667
10	2057	91167

Suspected Bot List [2020-08-12]

detection period: 2020-08-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1492

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-11]

detection period: 2020-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26840
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25398
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1200
2	VNPT-VN	830
3	Baidu	700
4	TENCENT-CN	616
5	VIETTEL-VN	515
6	HINET-NET	421
7	ALISOFT	394
8	CHINANET-JS	373
9	VE-CSVE-LACNIC	366
10	CHINANET-GD	317

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7007
2	United States	2390
3	Viet Nam	1971
4	India	1414
5	Russian Federation	1370
6	Brazil	1216
7	Indonesia	901
8	France	776
9	Thailand	557
10	Taiwan	554

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	364542
2	1000	273538
3	1414	227043
4	204	223798
5	1400	216058
6	1404	215056
7	141	213894
8	2043	210811
9	2044	202717
10	1440	181771

Suspected Bot List [2020-08-11]

detection period: 2020-08-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1442

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-10]

detection period: 2020-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 26803
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25363
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1214
2	VNPT-VN	941
3	Baidu	703
4	TENCENT-CN	616
5	VIETTEL-VN	508
6	ALISOFT	440
7	HINET-NET	424
8	VE-CSVE-LACNIC	360
9	CHINANET-JS	355
10	TELKOMNET	295

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6821
2	United States	2526
3	Viet Nam	2058
4	India	1434
5	Russian Federation	1282
6	Brazil	1172
7	Indonesia	966
8	France	807
9	Thailand	579
10	Taiwan	540

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	365960
2	6005	99295
3	1433	54691
4	2041	52941
5	22	46826
6	3818	46410
7	1011	44080
8	674	43527
9	4253	42976
10	5226	42287

Suspected Bot List [2020-08-10]

detection period: 2020-08-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1440

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-09]

detection period: 2020-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 25254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23886
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1252
2	Baidu	714
3	TENCENT-CN	620
4	VNPT-VN	564
5	ALISOFT	413
6	HINET-NET	408
7	CHINANET-JS	366
8	VIETTEL-VN	340
9	CHINANET-GD	302
10	VE-CSVE-LACNIC	301

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7276
2	United States	2621
3	Viet Nam	1432
4	Russian Federation	1222
5	Brazil	978
6	India	959
7	France	800
8	Indonesia	705
9	Taiwan	537
10	South Korea	499

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6004	187454
2	445	135133
3	1404	120167
4	1400	117079
5	1401	96904
6	2057	96044
7	1440	92273
8	1441	90255
9	204	87684
10	2052	84996

Suspected Bot List [2020-08-09]

detection period: 2020-08-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1368

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-08-08]

detection period: 2020-08-08 00:00-23:59 UTC
total number of suspected botnet IPs: 25643
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24259
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1261
2	Baidu	721
3	VNPT-VN	665
4	TENCENT-CN	622
5	ALISOFT	454
6	VIETTEL-VN	411
7	HINET-NET	410
8	MSFT	391
9	VE-CSVE-LACNIC	348
10	CHINANET-JS	330

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6750
2	United States	2917
3	Viet Nam	1619
4	India	1321
5	Russian Federation	1207
6	Brazil	1075
7	France	824
8	Indonesia	739
9	Taiwan	534
10	South Korea	492

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	141	815534
2	1414	764129
3	204	753436
4	1441	748978
5	1440	745758
6	1400	710896
7	1401	680789
8	1404	660444
9	2042	641474
10	2047	633683