Custom Search

Thursday, January 31, 2019

Botnet Statistics [2019-01-30]

detection period: 2019-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 10964
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10150
number of spam blocked: 6
recipient count of spam blocked: 6

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN453
2TELKOMNET266
3UNKNOWN207
4TencentCloud187
5HINET-NET167
6VE-CSVE-LACNIC139
7CMNET126
8TENCENT-CN110
9VIETEL-VNNIC-VN94
10MX-USCV4-LACNIC86

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1783
2United States1211
3Viet Nam858
4Russian Federation709
5Indonesia639
6India592
7Brazil552
8France488
9Thailand271
10Taiwan240

Suspected Bot List [2019-01-30]

detection period: 2019-01-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 815

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, January 30, 2019

Botnet Statistics [2019-01-29]

detection period: 2019-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 11244
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10381
number of spam blocked: 4
recipient count of spam blocked: 4

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN518
2TELKOMNET308
3UNKNOWN211
4HINET-NET191
5TencentCloud159
6VE-CSVE-LACNIC136
7CMNET119
8VIETEL-VNNIC-VN106
9TENCENT-CN106
10MX-USCV4-LACNIC100

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1771
2United States1107
3Viet Nam966
4Russian Federation737
5Indonesia675
6India590
7Brazil582
8France457
9Taiwan263
10Thailand237

Suspected Bot List [2019-01-29]

detection period: 2019-01-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 863

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, January 29, 2019

Botnet Statistics [2019-01-28]

detection period: 2019-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 12360
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11492
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN637
2TELKOMNET333
3HINET-NET215
4UNKNOWN212
5TencentCloud196
6VE-CSVE-LACNIC153
7VIETEL-VNNIC-VN131
8TENCENT-CN112
9CMNET105
10CHINANET-GD102

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1800
2United States1210
3Viet Nam1190
4Russian Federation831
5Indonesia764
6Brazil695
7India672
8France501
9Taiwan318
10Thailand273

Suspected Bot List [2019-01-28]

detection period: 2019-01-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 874

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
NG41.203.78.50Nigeria

List from greylisting:

Monday, January 28, 2019

Botnet Statistics [2019-01-27]

detection period: 2019-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 10469
number of botnet IPs notified to network operators: 9775
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN361
2TencentCloud200
3HINET-NET192
4UNKNOWN189
5TELKOMNET180
6TENCENT-CN119
7CMNET112
8VE-CSVE-LACNIC102
9CHINANET-GD99
10KORNET-KR91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1831
2United States1124
3Viet Nam724
4Russian Federation718
5Brazil552
6France493
7Indonesia466
8India450
9Taiwan264
10Thailand204

Suspected Bot List [2019-01-27]

detection period: 2019-01-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 697

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, January 27, 2019

Botnet Statistics [2019-01-26]

detection period: 2019-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 9128
number of botnet IPs notified to network operators: 8521
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN303
2TELKOMNET179
3TencentCloud164
4HINET-NET157
5UNKNOWN149
6CMNET108
7TENCENT-CN104
8VE-CSVE-LACNIC95
9CHINANET-GD85
10KORNET-KR82

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1684
2United States1108
3Viet Nam603
4Russian Federation535
5Brazil480
6France451
7Indonesia423
8India363
9Taiwan219
10South Korea180

Suspected Bot List [2019-01-26]

detection period: 2019-01-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 610

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, January 26, 2019

Botnet Statistics [2019-01-25]

detection period: 2019-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 11484
number of botnet IPs notified to network operators: 10692
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN614
2TELKOMNET302
3HINET-NET202
4UNKNOWN195
5VE-CSVE-LACNIC169
6TencentCloud169
7AT-88-Z119
8002.558.157/0001-62111
9VIETEL-VNNIC-VN110
10CHINANET-GD103

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1789
2United States1156
3Viet Nam1085
4Russian Federation770
5Brazil711
6Indonesia663
7India635
8France424
9Thailand275
10Taiwan270

Suspected Bot List [2019-01-25]

detection period: 2019-01-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 796

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, January 25, 2019

Botnet Statistics [2019-01-24]

detection period: 2019-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 11209
number of botnet IPs notified to network operators: 10372
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN623
2TELKOMNET313
3UNKNOWN197
4HINET-NET192
5TencentCloud146
6VE-CSVE-LACNIC138
7VIETEL-VNNIC-VN116
8CMNET109
9CHINANET-JS104
10TENCENT-CN103

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1661
2Viet Nam1087
3United States1043
4Russian Federation772
5Indonesia684
6Brazil671
7India603
8France411
9Taiwan268
10Thailand238

Suspected Bot List [2019-01-24]

detection period: 2019-01-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 843

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, January 24, 2019

Botnet Statistics [2019-01-23]

detection period: 2019-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 9618
number of botnet IPs notified to network operators: 8936
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN394
2TELKOMNET233
3TencentCloud182
4UNKNOWN169
5HINET-NET134
6CMNET120
7VE-CSVE-LACNIC107
8TENCENT-CN101
9CHINANET-GD87
10CHINANET-JS84

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1700
2United States948
3Viet Nam743
4Russian Federation566
5Brazil539
6Indonesia526
7India467
8France445
9Thailand213
10Taiwan208

Suspected Bot List [2019-01-23]

detection period: 2019-01-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 688

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, January 23, 2019

Botnet Statistics [2019-01-22]

detection period: 2019-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 10509
number of botnet IPs notified to network operators: 9744
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN558
2TELKOMNET270
3HINET-NET192
4UNKNOWN172
5VE-CSVE-LACNIC150
6TencentCloud150
7CHINANET-GD108
8CMNET97
9VIETEL-VNNIC-VN90
10MX-USCV4-LACNIC89

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1705
2Viet Nam1003
3United States904
4Russian Federation705
5Indonesia610
6Brazil609
7India551
8France355
9Taiwan270
10Thailand250

Suspected Bot List [2019-01-22]

detection period: 2019-01-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 774

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, January 22, 2019

Botnet Statistics [2019-01-21]

detection period: 2019-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 11531
number of botnet IPs notified to network operators: 10689
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN641
2TELKOMNET345
3HINET-NET232
4UNKNOWN187
5TencentCloud157
6VE-CSVE-LACNIC138
7VIETEL-VNNIC-VN106
8CHINANET-GD102
9002.558.157/0001-6297
10CMNET90

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1701
2Viet Nam1130
3United States1079
4Russian Federation786
5Indonesia740
6Brazil675
7India602
8France397
9Taiwan324
10Thailand260

Suspected Bot List [2019-01-21]

detection period: 2019-01-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 857

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, January 21, 2019

Botnet Statistics [2019-01-20]

detection period: 2019-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 10137
number of botnet IPs notified to network operators: 9454
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN384
2TELKOMNET198
3HINET-NET187
4TencentCloud163
5UNKNOWN161
6VE-CSVE-LACNIC149
7TENCENT-CN99
8CMNET97
9CHINANET-JS94
10Baidu83

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1640
2United States1063
3Russian Federation757
4Viet Nam732
5Brazil580
6India443
7Indonesia441
8France399
9Taiwan264
10Thailand206

Suspected Bot List [2019-01-20]

detection period: 2019-01-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 702

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, January 20, 2019

Botnet Statistics for December 2018

detection period: 2018-12-01 00:00 - 2018-12-31 23:59 UTC
total number of suspected botnet IPs: 61203
number of blocked spams: 91355
recipient count of blocked spams: 2731899

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China10995
2United States8293
3Brazil3812
4Russian Federation3424
5Viet Nam3259
6India2436
7Indonesia2184
8Taiwan1657
9South Korea1539
10Iran1520
11France1438
12Hong Kong1095
13Mexico1028
14Thailand1011
15Turkey963
16Germany925
17Italy910
18Ukraine858
19United Kingdom800
20Canada690
21Netherlands641
22Venezuela572
23Egypt540
24Colombia530
25Argentina449

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China73990
2Colombia9224
3Hong Kong7785
4India50
5United States37
6Poland21
7Viet Nam19
8Brazil16
9Argentina13
10Germany11
11Indonesia10
12Russian Federation9
13Kazakhstan7
14Taiwan6
15Turkey6
16Portugal6
17Pakistan6
18United Kingdom6
19Ukraine5
20Sri Lanka5
21Bangladesh5
22ZZ4
23Romania4
24South Korea4
25Italy4

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics for November 2018

detection period: 2018-11-01 00:00 - 2018-11-30 23:59 UTC
total number of suspected botnet IPs: 43610
number of blocked spams: 36866
recipient count of blocked spams: 663574

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China6266
2United States4757
3Viet Nam3449
4Brazil2855
5Russian Federation2761
6Indonesia2204
7India1958
8Taiwan1387
9Venezuela932
10Thailand869
11Mexico865
12France831
13Turkey791
14South Korea785
15Ukraine709
16Iran674
17Italy666
18United Kingdom564
19Germany559
20Hong Kong542
21Pakistan501
22Netherlands487
23Colombia421
24Egypt412
25Canada360

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

RankCountry# of blocked spams
1China18456
2Spain17593
3Colombia662
4India36
5United States34
6ZZ8
7Brazil8
8Taiwan6
9Portugal5
10Viet Nam4
11Nigeria4
12Australia4
13Trinidad/Tobago3
14Indonesia3
15Germany3
16Ukraine2
17Saudi Arabia2
18Russian Federation2
19Poland2
20Sri Lanka2
21South Korea2
22Italy2
23Hungary2
24Croatia2
25Hong Kong2

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Botnet Statistics [2019-01-19]

detection period: 2019-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 9571
number of botnet IPs notified to network operators: 8920
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN365
2TELKOMNET211
3TencentCloud181
4HINET-NET177
5UNKNOWN161
6VE-CSVE-LACNIC121
7TENCENT-CN103
8DIGITALOCEAN-9100
9CMNET98
10CHINANET-JS90

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1727
2United States1042
3Viet Nam669
4Russian Federation628
5India535
6Brazil491
7Indonesia431
8France391
9Taiwan248
10Thailand178

Suspected Bot List [2019-01-19]

detection period: 2019-01-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 654

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, January 19, 2019

Botnet Statistics [2019-01-18]

detection period: 2019-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 10434
number of botnet IPs notified to network operators: 9693
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN565
2TELKOMNET270
3HINET-NET190
4TencentCloud152
5UNKNOWN147
6VE-CSVE-LACNIC129
7CMNET118
8VIETEL-VNNIC-VN95
9TENCENT-CN95
10CHINANET-JS91

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1637
2United States1059
3Viet Nam998
4Russian Federation702
5India622
6Indonesia614
7Brazil566
8France360
9Taiwan262
10Thailand233

Suspected Bot List [2019-01-18]

detection period: 2019-01-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 745

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, January 18, 2019

Botnet Statistics [2019-01-17]

detection period: 2019-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 10177
number of botnet IPs notified to network operators: 9516
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN467
2TELKOMNET242
3HINET-NET178
4TencentCloud173
5CMNET166
6UNKNOWN148
7DIGITALOCEAN-9148
8VE-CSVE-LACNIC127
9CHINANET-GD103
10TENCENT-CN97

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1714
2United States1196
3Viet Nam887
4Russian Federation626
5Indonesia567
6India551
7Brazil488
8France394
9Taiwan247
10Thailand225

Suspected Bot List [2019-01-17]

detection period: 2019-01-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 665

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, January 17, 2019

Botnet Statistics [2019-01-16]

detection period: 2019-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 11784
number of botnet IPs notified to network operators: 10930
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN686
2TELKOMNET298
3HINET-NET204
4VE-CSVE-LACNIC195
5UNKNOWN179
6TencentCloud145
7VIETEL-VNNIC-VN116
8MX-USCV4-LACNIC107
9CMNET105
10TENCENT-CN98

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1701
2Viet Nam1241
3United States1076
4Russian Federation861
5Indonesia719
6Brazil677
7India599
8France374
9Taiwan293
10Thailand286

Suspected Bot List [2019-01-16]

detection period: 2019-01-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 860

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, January 16, 2019

Botnet Statistics [2019-01-15]

detection period: 2019-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 11407
number of botnet IPs notified to network operators: 10565
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN621
2TELKOMNET327
3HINET-NET219
4UNKNOWN177
5VE-CSVE-LACNIC176
6TencentCloud133
7VIETEL-VNNIC-VN114
8CMNET106
9MX-USCV4-LACNIC99
10CHINANET-GD99

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1681
2Viet Nam1087
3United States1050
4Russian Federation815
5Indonesia703
6Brazil656
7India533
8France364
9Taiwan309
10Thailand272

Suspected Bot List [2019-01-15]

detection period: 2019-01-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 850

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, January 15, 2019

Botnet Statistics [2019-01-14]

detection period: 2019-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 11735
number of botnet IPs notified to network operators: 10888
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN692
2TELKOMNET322
3HINET-NET210
4UNKNOWN172
5VE-CSVE-LACNIC151
6TencentCloud128
7CHINANET-GD112
8MX-USCV4-LACNIC102
9VIETEL-VNNIC-VN96
10CMNET96

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1755
2Viet Nam1208
3United States1132
4Russian Federation805
5Indonesia713
6Brazil704
7India549
8France334
9Thailand299
10Taiwan294

Suspected Bot List [2019-01-14]

detection period: 2019-01-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 857

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
NG197.211.61.153Nigeria

List from greylisting:

Monday, January 14, 2019

Botnet Statistics [2019-01-13]

detection period: 2019-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 8811
number of botnet IPs notified to network operators: 8226
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN285
2TencentCloud154
3TELKOMNET153
4HINET-NET149
5UNKNOWN119
6CHINANET-JS111
7VE-CSVE-LACNIC106
8CHINANET-GD94
9TENCENT-CN83
10CMNET83

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1657
2United States956
3Russian Federation600
4Viet Nam530
5Brazil418
6Indonesia368
7France360
8India340
9Taiwan207
10Thailand165

Suspected Bot List [2019-01-13]

detection period: 2019-01-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 594

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, January 13, 2019

Botnet Statistics [2019-01-12]

detection period: 2019-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 10264
number of botnet IPs notified to network operators: 9599
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN523
2TELKOMNET237
3HINET-NET226
4VE-CSVE-LACNIC132
5TencentCloud131
6CMNET102
7CHINANET-GD101
8UNKNOWN95
9CHINANET-JS93
10MX-USCV4-LACNIC92

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1482
2Viet Nam950
3United States924
4Russian Federation777
5India592
6Brazil573
7Indonesia560
8France328
9Taiwan324
10Thailand217

Suspected Bot List [2019-01-12]

detection period: 2019-01-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 666

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, January 12, 2019

Botnet Statistics [2019-01-11]

detection period: 2019-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 10867
number of botnet IPs notified to network operators: 9946
number of spam blocked: 1
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN629
2TELKOMNET310
3HINET-NET227
4UNKNOWN191
5VE-CSVE-LACNIC176
6TencentCloud120
7AT-88-Z117
8CHINANET-GD107
9VIETEL-VNNIC-VN98
10CHINANET-JS92

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1465
2Viet Nam1117
3United States1039
4Russian Federation752
5Indonesia686
6Brazil615
7India596
8France321
9Taiwan314
10Thailand284

Suspected Bot List [2019-01-11]

detection period: 2019-01-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 923

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, January 11, 2019

Botnet Statistics [2019-01-10]

detection period: 2019-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 10096
number of botnet IPs notified to network operators: 9198
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN556
2TELKOMNET301
3HINET-NET176
4VE-CSVE-LACNIC144
5CMNET120
6VIETEL-VNNIC-VN110
7CHINANET-GD105
8TencentCloud103
9CHINANET-JS101
10VIETEL-VN88

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1534
2Viet Nam1015
3United States981
4Indonesia668
5India624
6Russian Federation623
7Brazil532
8France293
9Taiwan268
10Thailand259

Suspected Bot List [2019-01-10]

detection period: 2019-01-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 898

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, January 10, 2019

Botnet Statistics [2019-01-09]

detection period: 2019-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 9349
number of botnet IPs notified to network operators: 8705
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN466
2TELKOMNET256
3HINET-NET163
4VE-CSVE-LACNIC120
5TencentCloud106
6VIETEL-VNNIC-VN96
7CMNET96
8CHINANET-JS88
9UNKNOWN86
10CHINANET-GD85

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1426
2United States926
3Viet Nam875
4Russian Federation610
5India557
6Indonesia548
7Brazil448
8France363
9Taiwan225
10Thailand214

Suspected Bot List [2019-01-09]

detection period: 2019-01-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 644

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, January 9, 2019

Botnet Statistics [2019-01-08]

detection period: 2019-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 8896
number of botnet IPs notified to network operators: 8242
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN399
2TELKOMNET194
3HINET-NET138
4VE-CSVE-LACNIC124
5TencentCloud117
6CHINANET-GD91
7VIETEL-VNNIC-VN87
8CMNET84
9MX-USCV4-LACNIC80
10CHINANET-JS78

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1493
2United States924
3Viet Nam763
4Russian Federation506
5Indonesia443
6Brazil443
7India417
8France351
9Taiwan204
10Thailand194

Suspected Bot List [2019-01-08]

detection period: 2019-01-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 654

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, January 8, 2019

Botnet Statistics [2019-01-07]

detection period: 2019-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 11383
number of botnet IPs notified to network operators: 10558
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN745
2TELKOMNET360
3HINET-NET213
4VE-CSVE-LACNIC178
5VIETEL-VNNIC-VN141
6VIETEL-VN117
7TencentCloud113
8MX-USCV4-LACNIC112
9CMNET92
10CHINANET-GD90

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1528
2Viet Nam1368
3United States969
4Indonesia763
5Russian Federation742
6Brazil651
7India645
8France353
9Taiwan322
10Thailand288

Suspected Bot List [2019-01-07]

detection period: 2019-01-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 826

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, January 7, 2019

Botnet Statistics [2019-01-06]

detection period: 2019-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 6579
number of botnet IPs notified to network operators: 6122
number of spam blocked: 10694
recipient count of spam blocked: 10694

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN189
2HINET-NET141
3TELKOMNET100
4VE-CSVE-LACNIC90
5CHINANET-JS79
6CMNET74
7CHINANET-GD74
8MX-USCV4-LACNIC69
9TencentCloud65
10002.558.157/0001-6262

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1172
2United States738
3Russian Federation472
4Viet Nam405
5Brazil364
6India252
7Indonesia226
8France214
9Taiwan210
10Mexico123

Suspected Bot List [2019-01-06]

detection period: 2019-01-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 457

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, January 6, 2019

Botnet Statistics [2019-01-05]

detection period: 2019-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 5274
number of botnet IPs notified to network operators: 4895
number of spam blocked: 22930
recipient count of spam blocked: 22930

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN208
2HINET-NET103
3TELKOMNET83
4CHINANET-JS83
5CMNET77
6CHINANET-GD72
7MX-USCV4-LACNIC65
8002.558.157/0001-6253
9VE-CSVE-LACNIC49
10VIETEL-VNNIC-VN47

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1054
2United States465
3Viet Nam425
4Russian Federation308
5Brazil268
6India267
7Indonesia187
8Taiwan154
9France154
10Mexico124

Suspected Bot List [2019-01-05]

detection period: 2019-01-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 379

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, January 5, 2019

Botnet Statistics [2019-01-04]

detection period: 2019-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 7244
number of botnet IPs notified to network operators: 6754
number of spam blocked: 30838
recipient count of spam blocked: 30838

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN406
2TELKOMNET185
3HINET-NET135
4VE-CSVE-LACNIC104
5CMNET90
6CHINANET-GD89
7VIETEL-VNNIC-VN81
8CHINANET-JS81
9TencentCloud65
10VIETEL-VN63

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1279
2Viet Nam788
3United States581
4Russian Federation461
5India448
6Indonesia420
7Brazil371
8Taiwan195
9France173
10Thailand161

Suspected Bot List [2019-01-04]

detection period: 2019-01-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 490

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, January 4, 2019

Botnet Statistics [2019-01-03]

detection period: 2019-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 10653
number of botnet IPs notified to network operators: 9945
number of spam blocked: 18167
recipient count of spam blocked: 18167

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN532
2TELKOMNET271
3TencentCloud173
4HINET-NET138
5VIETEL-VN116
6VIETEL-VNNIC-VN115
7VE-CSVE-LACNIC114
8UNKNOWN109
9CHINANET-GD107
10CMNET105

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1758
2United States1210
3Viet Nam1004
4India582
5Indonesia577
6Russian Federation560
7Brazil547
8France439
9Thailand237
10Taiwan220

Suspected Bot List [2019-01-03]

detection period: 2019-01-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 708

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, January 3, 2019

Botnet Statistics [2019-01-02]

detection period: 2019-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 10684
number of botnet IPs notified to network operators: 9972
number of spam blocked: 1814
recipient count of spam blocked: 1814

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN525
2TELKOMNET242
3HINET-NET197
4TencentCloud189
5UNKNOWN135
6CMNET113
7VE-CSVE-LACNIC104
8VIETEL-VNNIC-VN101
9CHINANET-GD100
10TENCENT-CN95

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1785
2United States1241
3Viet Nam975
4Indonesia570
5India546
6Russian Federation544
7Brazil499
8France485
9Taiwan286
10South Korea207

Suspected Bot List [2019-01-02]

detection period: 2019-01-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 712

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, January 2, 2019

Botnet Statistics [2019-01-01]

detection period: 2019-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 6930
number of botnet IPs notified to network operators: 6476
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud125
2VNPT-VNNIC-VN120
3HINET-NET117
4CHINANET-GD94
5CMNET92
6TENCENT-CN80
7TELKOMNET80
8CHINANET-JS75
9Baidu69
10KORNET-KR56

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1486
2United States945
3France326
4Russian Federation316
5India302
6Viet Nam284
7Brazil274
8Indonesia206
9Taiwan169
10South Korea145

Suspected Bot List [2019-01-01]

detection period: 2019-01-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 454

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, January 1, 2019

Botnet Statistics [2018-12-31]

detection period: 2018-12-31 00:00-23:59 UTC
total number of suspected botnet IPs: 7838
number of botnet IPs notified to network operators: 7257
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN251
2TELKOMNET171
3HINET-NET142
4TencentCloud114
5UNKNOWN106
6CMNET82
7VE-CSVE-LACNIC81
8CHINANET-GD72
9CHINANET-JS68
10002.558.157/0001-6268

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1306
2United States949
3Viet Nam488
4Russian Federation470
5India442
6Indonesia404
7Brazil370
8France298
9Taiwan212
10South Korea158

Suspected Bot List [2018-12-31]

detection period: 2018-12-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 581

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting: