Daily Botnet Statistics

Friday, August 2, 2019

Suspected Bot List [2019-08-01]

detection period: 2019-08-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 768

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
CA	24.64.120.206	Canada
TN	41.226.32.165	Tunisia

List from TCP port scans:

Botnet Statistics [2019-07-31]

detection period: 2019-07-31 00:00-23:59 UTC
total number of suspected botnet IPs: 15274
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14547
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	534
2	TencentCloud	443
3	DO-13	402
4	HINET-NET	396
5	Baidu	389
6	KORNET	303
7	VNPT-VN	202
8	AT-88-Z	179
9	CHINANET-JS	175
10	OVH	166

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3448
2	United States	2631
3	France	814
4	India	572
5	South Korea	477
6	Brazil	474
7	Viet Nam	470
8	Taiwan	434
9	Russian Federation	422
10	Indonesia	379

Suspected Bot List [2019-07-31]

detection period: 2019-07-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 727