Custom Search

Thursday, February 28, 2019

Botnet Statistics [2019-02-27]

detection period: 2019-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 11564
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10786
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud290
2UNKNOWN262
3TENCENT-CN197
4TELKOMNET195
5VNPT-VN164
6VNPT-VNNIC-VN158
7DO-13144
8Baidu142
9HINET-NET115
10KORNET-KR114

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1939
2United States1609
3France705
4Viet Nam605
5Brazil590
6Russian Federation532
7India503
8Indonesia479
9South Korea286
10Italy228

Suspected Botnet List [2019-02-27]

detection period: 2019-02-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 915

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, February 27, 2019

Botnet Statistics [2019-02-26]

detection period: 2019-02-26 00:00-23:59 UTC
total number of suspected botnet IPs: 11351
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10595
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud278
2UNKNOWN247
3TENCENT-CN201
4TELKOMNET189
5VNPT-VN179
6VNPT-VNNIC-VN140
7HINET-NET133
8Baidu129
9DO-13126
10KORNET-KR115

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1904
2United States1530
3France660
4Viet Nam638
5Brazil589
6Russian Federation575
7India517
8Indonesia439
9South Korea300
10Thailand236

Suspected Bot List [2019-02-26]

detection period: 2019-02-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 867

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, February 26, 2019

Botnet Statistics [2019-02-25]

detection period: 2019-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 11748
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10928
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud288
2UNKNOWN268
3TENCENT-CN219
4TELKOMNET190
5VNPT-VN164
6DO-13149
7Baidu136
8HINET-NET133
9VNPT-VNNIC-VN120
10DIGITALOCEAN-9116

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1938
2United States1647
3France715
4Brazil616
5Russian Federation592
6Viet Nam589
7India480
8Indonesia477
9South Korea291
10Taiwan221

Suspected Bot List [2019-02-25]

detection period: 2019-02-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 959

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, February 25, 2019

Botnet Statistics [2019-02-24]

detection period: 2019-02-24 00:00-23:59 UTC
total number of suspected botnet IPs: 11726
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10938
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud319
2UNKNOWN275
3TENCENT-CN234
4Baidu159
5DO-13149
6HINET-NET142
7TELKOMNET131
8KORNET-KR114
9CHINANET-GD113
10VNPT-VNNIC-VN110

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2098
2United States1655
3France717
4Russian Federation671
5Brazil595
6Viet Nam470
7India453
8Indonesia354
9South Korea304
10Taiwan226

Suspected Bot List [2019-02-24]

detection period: 2019-02-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 976

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, February 24, 2019

Botnet Statistics [2019-02-23]

detection period: 2019-02-23 00:00-23:59 UTC
total number of suspected botnet IPs: 11998
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11046
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN417
2TencentCloud327
3TENCENT-CN216
4VNPT-VN171
5TELKOMNET162
6Baidu161
7DO-13137
8HINET-NET131
9VNPT-VNNIC-VN124
10AT-88-Z121

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2045
2United States1783
3France718
4Brazil619
5Russian Federation601
6Viet Nam582
7India508
8Indonesia415
9South Korea296
10Thailand233

Suspected Bot List [2019-02-23]

detection period: 2019-02-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1108

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, February 23, 2019

Botnet Statistics [2019-02-22]

detection period: 2019-02-22 00:00-23:59 UTC
total number of suspected botnet IPs: 11608
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10867
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud313
2UNKNOWN244
3TENCENT-CN211
4TELKOMNET178
5VNPT-VN176
6Baidu160
7VNPT-VNNIC-VN148
8HINET-NET146
9DO-13122
10KORNET-KR118

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2062
2United States1595
3France690
4Viet Nam636
5Brazil611
6Russian Federation557
7India512
8Indonesia446
9South Korea294
10Taiwan242

Suspected Bot List [2019-02-22]

detection period: 2019-02-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 894

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, February 22, 2019

Botnet Statistics [2019-02-21]

detection period: 2019-02-21 00:00-23:59 UTC
total number of suspected botnet IPs: 12637
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11764
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud311
2UNKNOWN278
3VNPT-VN243
4TENCENT-CN222
5TELKOMNET208
6VNPT-VNNIC-VN192
7HINET-NET173
8Baidu146
9DO-13143
10CHINANET-GD115

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2100
2United States1651
3Viet Nam811
4France713
5Russian Federation658
6Brazil645
7India616
8Indonesia544
9South Korea289
10Thailand286

Suspected Bot List [2019-02-21]

detection period: 2019-02-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1132

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, February 21, 2019

Botnet Statistics [2019-02-20]

detection period: 2019-02-20 00:00-23:59 UTC
total number of suspected botnet IPs: 12879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11854
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN427
2TencentCloud324
3TELKOMNET229
4TENCENT-CN223
5VNPT-VN213
6VNPT-VNNIC-VN205
7HINET-NET181
8Baidu154
9DO-13140
10VE-CSVE-LACNIC129

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2174
2United States1706
3Viet Nam781
4France701
5Brazil670
6Russian Federation619
7India612
8Indonesia563
9South Korea287
10Thailand286

Suspected Bot List [2019-02-20]

detection period: 2019-02-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1274

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, February 20, 2019

Botnet Statistics [2019-02-19]

detection period: 2019-02-19 00:00-23:59 UTC
total number of suspected botnet IPs: 12320
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11435
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud317
2UNKNOWN298
3TELKOMNET217
4TENCENT-CN208
5VNPT-VN206
6VNPT-VNNIC-VN169
7Baidu157
8HINET-NET156
9DO-13144
10CHINANET-GD122

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2178
2United States1613
3France727
4Viet Nam724
5Brazil655
6Russian Federation609
7India531
8Indonesia517
9South Korea291
10Taiwan252

Suspected Bot List [2019-02-19]

detection period: 2019-02-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, February 19, 2019

Botnet Statistics [2019-02-18]

detection period: 2019-02-18 00:00-23:59 UTC
total number of suspected botnet IPs: 13184
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12260
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud302
2UNKNOWN294
3TELKOMNET254
4VNPT-VN246
5VNPT-VNNIC-VN214
6TENCENT-CN201
7HINET-NET193
8Baidu158
9DO-13140
10CHINANET-GD118

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2132
2United States1748
3Viet Nam906
4France681
5Brazil661
6Russian Federation639
7Indonesia608
8India586
9South Korea314
10Taiwan311

Suspected Bot List [2019-02-18]

detection period: 2019-02-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1194

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, February 18, 2019

Botnet Statistics [2019-02-17]

detection period: 2019-02-17 00:00-23:59 UTC
total number of suspected botnet IPs: 12669
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11766
number of spam blocked: 37
recipient count of spam blocked: 1754

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud288
2UNKNOWN279
3HINET-NET228
4TENCENT-CN200
5VNPT-VN198
6TELKOMNET157
7Baidu151
8DO-13140
9VNPT-VNNIC-VN135
10KORNET-KR126

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2092
2United States1714
3Russian Federation746
4Viet Nam699
5France684
6Brazil642
7India448
8Indonesia404
9Taiwan354
10South Korea328

Suspected Bot List [2019-02-17]

detection period: 2019-02-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1101

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, February 17, 2019

Botnet Statistics [2019-02-16]

detection period: 2019-02-16 00:00-23:59 UTC
total number of suspected botnet IPs: 11575
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10741
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud298
2UNKNOWN267
3TELKOMNET197
4TENCENT-CN186
5VNPT-VN176
6HINET-NET162
7Baidu155
8DO-13126
9VNPT-VNNIC-VN123
10CHINANET-GD119

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2113
2United States1534
3Viet Nam647
4Brazil633
5France607
6Russian Federation591
7India537
8Indonesia452
9South Korea267
10Taiwan255

Suspected Bot List [2019-02-16]

detection period: 2019-02-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1013

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, February 16, 2019

Botnet Statistics [2019-02-15]

detection period: 2019-02-15 00:00-23:59 UTC
total number of suspected botnet IPs: 11955
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11085
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud290
2UNKNOWN266
3TELKOMNET237
4VNPT-VN204
5TENCENT-CN186
6VNPT-VNNIC-VN173
7Baidu153
8HINET-NET148
9DO-13129
10CHINANET-GD110

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2105
2United States1479
3Viet Nam718
4Brazil658
5Russian Federation649
6France616
7India571
8Indonesia566
9South Korea272
10Thailand264

Suspected Bot List [2019-02-15]

detection period: 2019-02-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1027

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, February 15, 2019

Botnet Statistics [2019-02-14]

detection period: 2019-02-14 00:00-23:59 UTC
total number of suspected botnet IPs: 11771
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10808
number of spam blocked: 4
recipient count of spam blocked: 169

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN416
2TencentCloud281
3TELKOMNET210
4TENCENT-CN196
5VNPT-VN164
6Baidu158
7VNPT-VNNIC-VN157
8DO-13148
9HINET-NET127
10AT-88-Z121

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2228
2United States1555
3France651
4Brazil624
5Viet Nam621
6Russian Federation615
7India541
8Indonesia517
9South Korea295
10Thailand241

Suspected Bot List [2019-02-14]

detection period: 2019-02-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1169

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
VN103.99.1.171Viet Nam

List from greylisting:

Thursday, February 14, 2019

Botnet Statistics [2019-02-13]

detection period: 2019-02-13 00:00-23:59 UTC
total number of suspected botnet IPs: 14787
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13580
number of spam blocked: 4
recipient count of spam blocked: 169

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1UNKNOWN482
2TELKOMNET347
3TencentCloud296
4VNPT-VNNIC-VN271
5VNPT-VN256
6HINET-NET223
7TENCENT-CN194
8Baidu163
9DO-13144
10CHINANET-GD144

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2593
2United States1695
3Viet Nam1005
4Russian Federation847
5Brazil838
6Indonesia789
7India727
8France667
9Thailand345
10Taiwan333

Suspected Bot List [2019-02-13]

detection period: 2019-02-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1412

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, February 13, 2019

Botnet Statistics [2019-02-12]

detection period: 2019-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 14682
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13669
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TELKOMNET336
2UNKNOWN300
3TencentCloud294
4VNPT-VN287
5VNPT-VNNIC-VN243
6HINET-NET202
7TENCENT-CN201
8AT-88-Z176
9VE-CSVE-LACNIC169
10Baidu162

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2605
2United States1624
3Viet Nam942
4Brazil820
5Indonesia795
6Russian Federation793
7India735
8France684
9Thailand356
10Taiwan307

Suspected Bot List [2019-02-12]

detection period: 2019-02-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1234

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, February 12, 2019

Botnet Statistics [2019-02-11]

detection period: 2019-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 13183
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12287
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud301
2UNKNOWN291
3TELKOMNET250
4AT-88-Z223
5TENCENT-CN204
6VNPT-VN201
7VNPT-VNNIC-VN179
8Baidu153
9HINET-NET147
10DO-13142

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2489
2United States1784
3Brazil691
4Viet Nam675
5France673
6Russian Federation638
7India588
8Indonesia584
9South Korea321
10Thailand292

Suspected Bot List [2019-02-11]

detection period: 2019-02-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1118

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, February 11, 2019

Botnet Statistics [2019-02-10]

detection period: 2019-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 11715
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10929
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud297
2UNKNOWN257
3TENCENT-CN200
4AT-88-Z183
5HINET-NET161
6Baidu149
7TELKOMNET146
8DO-13132
9CHINANET-JS118
10KORNET-KR111

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2386
2United States1585
3Russian Federation659
4France651
5Brazil634
6India409
7Indonesia396
8Viet Nam360
9South Korea283
10Taiwan256

Suspected Bot List [2019-02-10]

detection period: 2019-02-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1020

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, February 10, 2019

Botnet Statistics [2019-02-09]

detection period: 2019-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 11692
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 10877
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud295
2UNKNOWN253
3AT-88-Z224
4TENCENT-CN203
5Baidu146
6TELKOMNET143
7CHINANET-JS131
8DO-13128
9HINET-NET126
10VNPT-VNNIC-VN117

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2395
2United States1623
3France655
4Russian Federation607
5Brazil602
6India517
7Indonesia402
8Viet Nam313
9South Korea299
10United Kingdom222

Suspected Bot List [2019-02-09]

detection period: 2019-02-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 889

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, February 9, 2019

Botnet Statistics [2019-02-08]

detection period: 2019-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 12914
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12026
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud312
2AT-88-Z287
3UNKNOWN262
4TELKOMNET238
5TENCENT-CN216
6Baidu159
7HINET-NET128
8CMNET126
9DO-13124
10CHINANET-JS121

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2627
2United States1831
3Brazil738
4Russian Federation689
5France642
6India598
7Indonesia580
8Viet Nam296
9Thailand293
10South Korea285

Suspected Bot List [2019-02-08]

detection period: 2019-02-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 894

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, February 8, 2019

Botnet Statistics [2019-02-07]

detection period: 2019-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 13814
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12790
number of spam blocked: 1
recipient count of spam blocked: 1

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud328
2UNKNOWN302
3AT-88-Z287
4TELKOMNET257
5TENCENT-CN207
6Baidu169
7HINET-NET149
8KORNET-KR135
9CHINANET-JS135
10CMNET132

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2626
2United States1917
3Russian Federation773
4Brazil766
5India670
6Indonesia661
7France644
8South Korea390
9Viet Nam318
10Thailand291

Suspected Bot List [2019-02-07]

detection period: 2019-02-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1046

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Thursday, February 7, 2019

Botnet Statistics [2019-02-06]

detection period: 2019-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 12663
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11739
number of spam blocked: 3
recipient count of spam blocked: 3

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud325
2UNKNOWN290
3AT-88-Z254
4TENCENT-CN206
5TELKOMNET197
6Baidu165
7CHINANET-JS146
8KORNET-KR137
9HINET-NET137
10CHINANET-GD132

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2623
2United States1847
3Brazil680
4France663
5Russian Federation653
6India589
7Indonesia528
8South Korea372
9Viet Nam239
10Thailand239

Suspected Bot List [2019-02-06]

detection period: 2019-02-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 939

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Wednesday, February 6, 2019

Botnet Statistics [2019-02-05]

detection period: 2019-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 12337
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11473
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud333
2UNKNOWN277
3TENCENT-CN212
4AT-88-Z210
5Baidu172
6TELKOMNET139
7KORNET-KR133
8CHINANET-JS131
9HINET-NET130
10VNPT-VNNIC-VN120

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China2592
2United States1827
3France674
4Russian Federation669
5Brazil629
6India612
7Indonesia372
8South Korea295
9Viet Nam249
10Thailand238

Suspected Bot List [2019-02-05]

detection period: 2019-02-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 971

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Tuesday, February 5, 2019

Botnet Statistics [2019-02-04]

detection period: 2019-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 9917
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9241
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TELKOMNET227
2TencentCloud212
3UNKNOWN203
4TENCENT-CN142
5VNPT-VNNIC-VN134
6Baidu121
7VE-CSVE-LACNIC116
8HINET-NET108
9KORNET-KR100
10CMNET100

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1882
2United States1228
3Russian Federation639
4India526
5France523
6Brazil523
7Indonesia501
8Viet Nam278
9South Korea245
10Thailand219

Suspected Bot List [2019-02-04]

detection period: 2019-02-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 694

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Monday, February 4, 2019

Botnet Statistics [2019-02-03]

detection period: 2019-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 8286
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 7658
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud198
2UNKNOWN194
3VNPT-VNNIC-VN141
4TENCENT-CN136
5DIGITALOCEAN-9124
6HINET-NET112
7TELKOMNET100
8CHINANET-JS92
9Baidu91
10CMNET88

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1764
2United States1155
3France494
4Russian Federation493
5Brazil361
6India323
7Viet Nam271
8Indonesia249
9South Korea199
10Canada163

Suspected Bot List [2019-02-03]

detection period: 2019-02-03 00:00-23:59 UTC
number of suspected bots' IPs listed here: 634

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Sunday, February 3, 2019

Botnet Statistics [2019-02-02]

detection period: 2019-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 8625
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 7985
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1TencentCloud191
2UNKNOWN169
3VNPT-VNNIC-VN149
4TELKOMNET146
5DIGITALOCEAN-9130
6TENCENT-CN122
7HINET-NET111
8VE-CSVE-LACNIC100
9CHINANET-JS94
10CMNET93

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1727
2United States1134
3Russian Federation493
4France468
5India460
6Brazil398
7Indonesia334
8Viet Nam302
9South Korea198
10Taiwan170

Suspected Bot List [2019-02-02]

detection period: 2019-02-02 00:00-23:59 UTC
number of suspected bots' IPs listed here: 641

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Saturday, February 2, 2019

Botnet Statistics [2019-02-01]

detection period: 2019-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 9491
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 8817
number of spam blocked: 2
recipient count of spam blocked: 2

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN232
2TELKOMNET212
3TencentCloud197
4UNKNOWN170
5HINET-NET131
6DIGITALOCEAN-9129
7TENCENT-CN123
8CHINANET-JS104
9VE-CSVE-LACNIC102
10KORNET-KR101

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1745
2United States1230
3Russian Federation570
4India474
5Brazil473
6Indonesia468
7France456
8Viet Nam435
9South Korea213
10Thailand204

Suspected Bot List [2019-02-01]

detection period: 2019-02-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 675

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Friday, February 1, 2019

Botnet Statistics [2019-01-31]

detection period: 2019-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 10766
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 9988
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VNNIC-VN478
2TELKOMNET286
3TencentCloud210
4UNKNOWN187
5HINET-NET159
6TENCENT-CN135
7VE-CSVE-LACNIC133
8CMNET109
9DIGITALOCEAN-9103
10VIETEL-VNNIC-VN98

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China1789
2United States1170
3Viet Nam869
4Russian Federation685
5Indonesia646
6India623
7Brazil534
8France485
9Thailand239
10Taiwan232

Suspected Bot List [2019-01-31]

detection period: 2019-01-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 778

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting: