Botnet Statistics [2020-12-01]

detection period: 2020-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 35715
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33098
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1514
2	VIETTEL-VN	763
3	TENCENT-CN	721
4	VNPT-VN	719
5	HINET-NET	647
6	DIGITALOCEAN-192-241-128-0	623
7	Baidu	531
8	VE-CSVE-LACNIC	481
9	TELKOMNET	419
10	ALISOFT	415

Rank	Country/Region	# of suspected botnet IPs
1	China	7793
2	United States	4293
3	India	2371
4	Russian Federation	2210
5	Viet Nam	2133
6	Brazil	1650
7	Indonesia	1346
8	Taiwan	840
9	Thailand	823
10	France	784

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	488158
2	1433	355878
3	220	91218
4	223	47955
5	23	42867
6	22	36367
7	50	16417
8	222	15782
9	221	14228
10	3389	12782

Botnet Statistics [2020-11-30]

detection period: 2020-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 36858
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34132
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1571
2	VIETTEL-VN	821
3	VNPT-VN	769
4	TENCENT-CN	737
5	HINET-NET	661
6	DIGITALOCEAN-192-241-128-0	604
7	Baidu	537
8	TELKOMNET	486
9	ALISOFT	464
10	VE-CSVE-LACNIC	439

Rank	Country/Region	# of suspected botnet IPs
1	China	8110
2	United States	4010
3	India	2344
4	Russian Federation	2333
5	Viet Nam	2243
6	Brazil	1934
7	Indonesia	1419
8	Thailand	860
9	Taiwan	846
10	France	813

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	798371
2	1433	102892
3	220	81267
4	223	62121
5	23	41170
6	22	34772
7	1236	17533
8	3389	13751
9	1237	12454
10	36	12246

Suspected Bot List [2020-11-30]

detection period: 2020-11-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2726

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans: