Botnet Statistics [2019-08-30]

detection period: 2019-08-30 00:00-23:59 UTC
total number of suspected botnet IPs: 14830
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14036
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	461
2	Baidu	456
3	TENCENT-CN	306
4	KORNET	305
5	DIGITALOCEAN-15	299
6	TencentCloud	274
7	HINET-NET	257
8	VNPT-VN	197
9	OVH	187
10	CHINANET-GD	148

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3055
2	United States	2472
3	France	765
4	Russian Federation	552
5	India	549
6	Brazil	520
7	Viet Nam	519
8	South Korea	501
9	Indonesia	369
10	Singapore	324

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	24035
2	23	22075
3	22	19376
4	3389	13546
5	3390	11393
6	3391	10879
7	694	5406
8	2126	5052
9	664	5014
10	1811	5008

Suspected Bot List [2019-08-30]

detection period: 2019-08-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 794

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
MA	160.177.205.105	Morocco

List from TCP port scans:

Botnet Statistics [2019-08-29]

detection period: 2019-08-29 00:00-23:59 UTC
total number of suspected botnet IPs: 15091
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14474
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	462
2	DO-13	461
3	KORNET	323
4	TENCENT-CN	322
5	HINET-NET	297
6	TencentCloud	279
7	VNPT-VN	243
8	OVH	179
9	MSFT	163
10	02.558.157/0001-62	163

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3061
2	United States	2512
3	France	794
4	Brazil	586
5	Viet Nam	580
6	Russian Federation	576
7	India	544
8	South Korea	521
9	Indonesia	407
10	Taiwan	345

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	30378
2	23	20424
3	22	17834
4	3389	11877
5	3390	11351
6	3391	8942
7	5038	7386
8	1415	5272
9	425	5251
10	8080	5108

Suspected Bot List [2019-08-29]

detection period: 2019-08-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 617

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
GH	197.251.253.241	Ghana

List from TCP port scans:

Botnet Statistics [2019-08-28]

detection period: 2019-08-28 00:00-23:59 UTC
total number of suspected botnet IPs: 14646
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13909
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	464
2	DO-13	458
3	TENCENT-CN	335
4	KORNET	313
5	TencentCloud	302
6	HINET-NET	279
7	VNPT-VN	199
8	OVH	180
9	CHINANET-GD	171
10	MSFT	164

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3207
2	United States	2382
3	France	802
4	India	542
5	South Korea	503
6	Russian Federation	495
7	Brazil	494
8	Viet Nam	483
9	Indonesia	401
10	Taiwan	312

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	25331
2	22	18519
3	23	17648
4	3390	11542
5	3389	11473
6	5038	9181
7	3391	9019
8	1433	5861
9	2200	5407
10	8080	5376

Suspected Bot List [2019-08-28]

detection period: 2019-08-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 737

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	2.139.215.255	Spain
KR	210.102.196.180	South Korea
KR	211.232.253.63	South Korea

List from TCP port scans:

Botnet Statistics [2019-08-27]

detection period: 2019-08-27 00:00-23:59 UTC
total number of suspected botnet IPs: 15406
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14786
number of spam blocked: 0
recipient count of spam blocked: 0

Today I add a new chart for the top 10 most scanned TCP ports.

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	474
2	DO-13	444
3	TENCENT-CN	336
4	HINET-NET	325
5	TencentCloud	313
6	KORNET	304
7	VNPT-VN	247
8	OVH	173
9	CHINANET-GD	173
10	MSFT	165

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3241
2	United States	2415
3	France	795
4	India	623
5	Brazil	600
6	Russian Federation	597
7	Viet Nam	584
8	South Korea	493
9	Indonesia	442
10	Taiwan	373

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	25	46741
2	110	46317
3	445	23659
4	23	21843
5	3389	15241
6	3390	14770
7	5038	13861
8	22	13016
9	3391	12456
10	1433	8225

Suspected Bot List [2019-08-27]

detection period: 2019-08-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 620

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	88.16.239.65	Spain

List from TCP port scans:

Botnet Statistics [2019-08-26]

detection period: 2019-08-26 00:00-23:59 UTC
total number of suspected botnet IPs: 15886
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15219
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	Baidu	471
2	DO-13	454
3	TENCENT-CN	369
4	TencentCloud	340
5	HINET-NET	317
6	KORNET	310
7	VNPT-VN	247
8	OVH	181
9	MSFT	180
10	CHINANET-GD	167

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3383
2	United States	2544
3	France	823
4	Brazil	625
5	India	612
6	Russian Federation	592
7	Viet Nam	559
8	South Korea	515
9	Indonesia	462
10	Taiwan	374

Suspected Bot List [2019-08-26]

detection period: 2019-08-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 667

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
IN	27.116.17.13	India

List from TCP port scans:

Botnet Statistics [2019-08-25]

detection period: 2019-08-25 00:00-23:59 UTC
total number of suspected botnet IPs: 15727
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15123
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	589
2	TencentCloud	520
3	DO-13	463
4	Baidu	462
5	KORNET	316
6	HINET-NET	309
7	MSFT	190
8	OVH	188
9	02.558.157/0001-62	162
10	VNPT-VN	151

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3657
2	United States	2695
3	France	844
4	Brazil	618
5	Russian Federation	595
6	South Korea	527
7	India	468
8	Viet Nam	415
9	Taiwan	360
10	Indonesia	348

Suspected Bot List [2019-08-25]

detection period: 2019-08-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 604

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
DZ	197.204.42.37	Algeria
PL	91.90.190.130	Poland
US	18.27.197.252	United States

List from TCP port scans:

Botnet Statistics [2019-08-24]

detection period: 2019-08-24 00:00-23:59 UTC
total number of suspected botnet IPs: 16251
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15614
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	619
2	TencentCloud	528
3	Baidu	471
4	DO-13	460
5	HINET-NET	380
6	KORNET	322
7	OVH	186
8	MSFT	183
9	VNPT-VN	180
10	AT-88-Z	175

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3771
2	United States	2704
3	France	839
4	Brazil	617
5	Russian Federation	613
6	India	521
7	South Korea	518
8	Viet Nam	453
9	Taiwan	436
10	Indonesia	396

Suspected Bot List [2019-08-24]

detection period: 2019-08-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 637

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
ES	80.36.63.56	Spain
GB	144.178.130.169	United Kingdom

List from TCP port scans:

Botnet Statistics [2019-08-23]

detection period: 2019-08-23 00:00-23:59 UTC
total number of suspected botnet IPs: 16261
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15405
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	635
2	TencentCloud	536
3	Baidu	471
4	DO-13	453
5	KORNET	342
6	HINET-NET	296
7	VNPT-VN	199
8	MSFT	194
9	OVH	189
10	AT-88-Z	181

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3877
2	United States	2749
3	France	807
4	India	612
5	Russian Federation	587
6	South Korea	553
7	Brazil	514
8	Viet Nam	451
9	Indonesia	408
10	Taiwan	344

Suspected Bot List [2019-08-23]

detection period: 2019-08-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 856

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
NL	185.244.25.120	Netherlands
TZ	41.86.166.189	Tanzania

List from TCP port scans:

Botnet Statistics [2019-08-22]

detection period: 2019-08-22 00:00-23:59 UTC
total number of suspected botnet IPs: 16298
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15502
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	635
2	TencentCloud	552
3	Baidu	483
4	DO-13	455
5	KORNET	323
6	CHINANET-JS	311
7	HINET-NET	283
8	VNPT-VN	202
9	OVH	199
10	MSFT	196

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	4033
2	United States	2638
3	France	829
4	India	568
5	Russian Federation	558
6	Brazil	552
7	South Korea	501
8	Viet Nam	451
9	Indonesia	423
10	Taiwan	330

Suspected Bot List [2019-08-22]

detection period: 2019-08-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 796

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KR	210.223.246.113	South Korea

List from TCP port scans:

Botnet Statistics [2019-08-21]

detection period: 2019-08-21 00:00-23:59 UTC
total number of suspected botnet IPs: 15752
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14996
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	632
2	TencentCloud	556
3	DO-13	505
4	Baidu	489
5	KORNET	318
6	HINET-NET	255
7	VNPT-VN	198
8	OVH	190
9	MSFT	187
10	CHINANET-GD	159

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3900
2	United States	2661
3	France	851
4	India	549
5	Brazil	515
6	South Korea	512
7	Russian Federation	488
8	Viet Nam	430
9	Indonesia	408
10	Singapore	324

Suspected Bot List [2019-08-21]

detection period: 2019-08-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 756

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KE	41.204.161.161	Kenya
SE	46.29.248.238	Sweden
US	18.85.192.253	United States

List from TCP port scans:

Botnet Statistics [2019-08-20]

detection period: 2019-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 16664
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15895
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	622
2	TencentCloud	543
3	DO-13	536
4	Baidu	494
5	KORNET	329
6	HINET-NET	254
7	MSFT	198
8	VNPT-VN	196
9	OVH	187
10	CHINANET-JS	168

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3978
2	United States	2756
3	France	861
4	Brazil	681
5	India	604
6	Russian Federation	550
7	South Korea	532
8	Viet Nam	448
9	Indonesia	439
10	Singapore	356

Suspected Bot List [2019-08-20]

detection period: 2019-08-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 769

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
BG	45.67.14.180	Bulgaria
KE	41.204.161.161	Kenya
US	45.55.42.17	United States
US	45.119.209.91	United States
ZA	102.132.255.241	South Africa

List from TCP port scans:

Botnet Statistics [2019-08-19]

detection period: 2019-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 17425
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16579
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	647
2	TencentCloud	542
3	DO-13	528
4	Baidu	500
5	KORNET	334
6	HINET-NET	259
7	VNPT-VN	196
8	MSFT	191
9	OVH	188
10	CHINANET-GD	180

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	4064
2	United States	2838
3	France	878
4	India	668
5	Brazil	614
6	Russian Federation	560
7	South Korea	552
8	Viet Nam	491
9	Indonesia	474
10	Singapore	354

Suspected Bot List [2019-08-19]

detection period: 2019-08-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 846

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
BR	177.200.8.88	Brazil

List from TCP port scans:

Botnet Statistics [2019-08-18]

detection period: 2019-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 16322
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15565
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	637
2	TencentCloud	545
3	DO-13	505
4	Baidu	484
5	KORNET	336
6	HINET-NET	276
7	MSFT	189
8	OVH	187
9	CHINANET-GD	186
10	CMNET	162

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3951
2	United States	2770
3	France	879
4	Brazil	563
5	South Korea	548
6	Russian Federation	539
7	India	536
8	Indonesia	378
9	Germany	371
10	Singapore	365

Suspected Bot List [2019-08-18]

detection period: 2019-08-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 757

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
BR	187.102.146.102	Brazil
MA	197.247.50.131	Morocco

List from TCP port scans:

Botnet Statistics [2019-08-17]

detection period: 2019-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 16200
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15586
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	630
2	TencentCloud	518
3	DO-13	501
4	Baidu	475
5	KORNET	338
6	HINET-NET	212
7	OVH	191
8	CHINANET-GD	182
9	MSFT	169
10	CMNET	161

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3784
2	United States	2644
3	France	886
4	Brazil	635
5	India	620
6	South Korea	541
7	Russian Federation	509
8	Viet Nam	403
9	Singapore	346
10	Indonesia	346

Suspected Bot List [2019-08-17]

detection period: 2019-08-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 614

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-08-16]

detection period: 2019-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 16259
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15628
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	609
2	TencentCloud	479
3	Baidu	456
4	DO-13	444
5	KORNET	332
6	HINET-NET	305
7	VNPT-VN	210
8	CHINANET-JS	207
9	OVH	185
10	CHINANET-GD	172

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3733
2	United States	2554
3	France	862
4	Brazil	641
5	India	627
6	Russian Federation	551
7	South Korea	546
8	Viet Nam	480
9	Indonesia	426
10	Taiwan	371

Suspected Bot List [2019-08-16]

detection period: 2019-08-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 632

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
JP	133.130.117.173	Japan
US	159.65.159.1	United States

List from TCP port scans:

Botnet Statistics [2019-08-15]

detection period: 2019-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 16615
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15753
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	630
2	TencentCloud	493
3	DO-13	460
4	Baidu	457
5	KORNET	326
6	HINET-NET	278
7	VNPT-VN	218
8	OVH	185
9	CHINANET-JS	169
10	CHINANET-GD	165

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3825
2	United States	2734
3	France	895
4	Brazil	591
5	South Korea	541
6	Russian Federation	511
7	Viet Nam	504
8	India	501
9	Indonesia	442
10	Singapore	335

Suspected Bot List [2019-08-15]

detection period: 2019-08-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 862

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-08-14]

detection period: 2019-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 17295
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16410
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	616
2	TencentCloud	468
3	DO-13	467
4	Baidu	461
5	KORNET	325
6	HINET-NET	264
7	VNPT-VN	229
8	OVH	184
9	CHINANET-GD	176
10	GLOBAL-FRAG-NETWORKS	174

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3904
2	United States	2764
3	France	904
4	India	651
5	Brazil	651
6	Viet Nam	553
7	South Korea	546
8	Russian Federation	524
9	Indonesia	444
10	Germany	350

Suspected Bot List [2019-08-14]

detection period: 2019-08-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 885

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
DZ	193.194.92.149	Algeria
EG	156.208.190.108	Egypt

List from TCP port scans:

Botnet Statistics [2019-08-13]

detection period: 2019-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 16680
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15817
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	571
2	TencentCloud	445
3	Baidu	432
4	DO-13	430
5	KORNET	337
6	HINET-NET	239
7	GLOBAL-FRAG-NETWORKS	228
8	VNPT-VN	194
9	OVH	179
10	CHINANET-GD	176

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3629
2	United States	2888
3	France	862
4	India	599
5	South Korea	548
6	Brazil	547
7	Russian Federation	480
8	Viet Nam	471
9	Indonesia	436
10	Germany	399

Suspected Bot List [2019-08-13]

detection period: 2019-08-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 863

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
GB	128.243.74.45	United Kingdom
MU	197.227.105.143	Mauritius
SE	46.29.248.238	Sweden

List from TCP port scans:

Botnet Statistics [2019-08-12]

detection period: 2019-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 18029
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17085
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	575
2	DO-13	459
3	TencentCloud	454
4	Baidu	450
5	KORNET	352
6	HINET-NET	313
7	GLOBAL-FRAG-NETWORKS	240
8	VNPT-VN	213
9	OVH	186
10	MSFT	171

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	4029
2	United States	2936
3	France	921
4	India	632
5	Brazil	626
6	South Korea	587
7	Russian Federation	541
8	Indonesia	480
9	Viet Nam	479
10	Singapore	388

Suspected Bot List [2019-08-12]

detection period: 2019-08-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 944

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
US	18.85.192.253	United States

List from TCP port scans:

Botnet Statistics [2019-08-11]

detection period: 2019-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 13758
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13031
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	364
2	Baidu	356
3	KORNET	308
4	TENCENT-CN	270
5	GLOBAL-FRAG-NETWORKS	250
6	HINET-NET	210
7	TencentCloud	203
8	AT-88-Z	162
9	CHINANET-JS	149
10	OVH	148

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3059
2	United States	2311
3	France	681
4	South Korea	510
5	Brazil	459
6	India	450
7	Russian Federation	415
8	Viet Nam	343
9	Singapore	284
10	Taiwan	250

Suspected Bot List [2019-08-11]

detection period: 2019-08-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 727

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
BR	187.102.146.102	Brazil
SE	46.29.248.238	Sweden
SN	154.124.68.66	Senegal
US	18.85.192.253	United States

List from TCP port scans:

Botnet Statistics [2019-08-10]

detection period: 2019-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 13880
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13163
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	360
2	Baidu	350
3	KORNET	297
4	TENCENT-CN	270
5	HINET-NET	214
6	GLOBAL-FRAG-NETWORKS	213
7	TencentCloud	208
8	AT-88-Z	198
9	VNPT-VN	165
10	CHINANET-JS	159

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2965
2	United States	2447
3	France	674
4	India	592
5	South Korea	499
6	Brazil	479
7	Russian Federation	430
8	Viet Nam	406
9	Indonesia	298
10	Singapore	281

Suspected Bot List [2019-08-10]

detection period: 2019-08-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 717

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-08-09]

detection period: 2019-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 14313
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13554
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	352
2	Baidu	352
3	KORNET	299
4	TENCENT-CN	273
5	VNPT-VN	259
6	HINET-NET	246
7	AT-88-Z	216
8	TencentCloud	199
9	GLOBAL-FRAG-NETWORKS	171
10	CHINANET-JS	147

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2970
2	United States	2436
3	France	664
4	India	562
5	Viet Nam	537
6	South Korea	481
7	Brazil	472
8	Russian Federation	436
9	Indonesia	354
10	Taiwan	285

Suspected Bot List [2019-08-09]

detection period: 2019-08-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 759

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-08-08]

detection period: 2019-08-08 00:00-23:59 UTC
total number of suspected botnet IPs: 14448
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13716
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	365
2	Baidu	354
3	KORNET	294
4	TENCENT-CN	270
5	GLOBAL-FRAG-NETWORKS	250
6	VNPT-VN	228
7	HINET-NET	212
8	TencentCloud	196
9	OVH	152
10	AT-88-Z	146

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2978
2	United States	2373
3	France	698
4	India	566
5	Viet Nam	510
6	South Korea	477
7	Brazil	470
8	Russian Federation	436
9	Indonesia	378
10	Singapore	276

Suspected Bot List [2019-08-08]

detection period: 2019-08-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 732

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KR	211.118.42.251	South Korea

List from TCP port scans:

Botnet Statistics [2019-08-07]

detection period: 2019-08-07 00:00-23:59 UTC
total number of suspected botnet IPs: 14672
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13917
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	380
2	Baidu	363
3	HINET-NET	355
4	KORNET	280
5	TENCENT-CN	268
6	AT-88-Z	223
7	VNPT-VN	213
8	TencentCloud	198
9	OVH	157
10	GLOBAL-FRAG-NETWORKS	154

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2961
2	United States	2554
3	France	712
4	India	575
5	Viet Nam	503
6	Brazil	500
7	South Korea	463
8	Russian Federation	451
9	Taiwan	400
10	Indonesia	379

Suspected Bot List [2019-08-07]

detection period: 2019-08-07 00:00-23:59 UTC
number of suspected bots' IPs listed here: 755

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KR	211.118.42.251	South Korea

List from TCP port scans:

Botnet Statistics [2019-08-06]

detection period: 2019-08-06 00:00-23:59 UTC
total number of suspected botnet IPs: 14610
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13823
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	387
2	Baidu	366
3	TENCENT-CN	302
4	KORNET	299
5	HINET-NET	275
6	TencentCloud	231
7	VNPT-VN	228
8	GLOBAL-FRAG-NETWORKS	172
9	CHINANET-JS	168
10	MSFT	156

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2897
2	United States	2598
3	France	732
4	India	611
5	Viet Nam	502
6	Brazil	495
7	Russian Federation	485
8	South Korea	484
9	Indonesia	384
10	Taiwan	315

Suspected Bot List [2019-08-06]

detection period: 2019-08-06 00:00-23:59 UTC
number of suspected bots' IPs listed here: 787

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
US	18.21.176.208	United States

List from TCP port scans:

Botnet Statistics [2019-08-05]

detection period: 2019-08-05 00:00-23:59 UTC
total number of suspected botnet IPs: 13785
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12996
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DO-13	387
2	Baidu	380
3	TENCENT-CN	323
4	HINET-NET	281
5	KORNET	275
6	TencentCloud	248
7	VNPT-VN	198
8	OVH	155
9	MSFT	153
10	CHINANET-GD	135

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2832
2	United States	2429
3	France	751
4	India	565
5	Viet Nam	476
6	South Korea	445
7	Brazil	425
8	Russian Federation	377
9	Indonesia	361
10	Singapore	317

Suspected Bot List [2019-08-05]

detection period: 2019-08-05 00:00-23:59 UTC
number of suspected bots' IPs listed here: 789

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2019-08-04]

detection period: 2019-08-04 00:00-23:59 UTC
total number of suspected botnet IPs: 13380
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 12693
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	479
2	DO-13	387
3	TencentCloud	383
4	Baidu	383
5	HINET-NET	292
6	KORNET	282
7	GLOBAL-FRAG-NETWORKS	224
8	OVH	150
9	MSFT	143
10	AT-88-Z	134

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3053
2	United States	2516
3	France	758
4	South Korea	459
5	India	430
6	Brazil	404
7	Russian Federation	377
8	Taiwan	326
9	Singapore	308
10	Viet Nam	278

Suspected Bot List [2019-08-04]

detection period: 2019-08-04 00:00-23:59 UTC
number of suspected bots' IPs listed here: 687

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
KR	203.252.68.87	South Korea

List from TCP port scans:

Botnet Statistics [2019-08-03]

detection period: 2019-08-03 00:00-23:59 UTC
total number of suspected botnet IPs: 14220
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 13480
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TENCENT-CN	513
2	TencentCloud	415
3	DO-13	398
4	Baidu	388
5	HINET-NET	339
6	KORNET	294
7	GLOBAL-FRAG-NETWORKS	196
8	OVH	158
9	AT-88-Z	151
10	CHINANET-GD	150

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3237
2	United States	2524
3	France	751
4	India	519
5	South Korea	459
6	Brazil	426
7	Viet Nam	397
8	Russian Federation	383
9	Taiwan	376
10	Singapore	315