Botnet Statistics [2020-07-30]

detection period: 2020-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 29083
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27629
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1241
2	VNPT-VN	984
3	Baidu	743
4	HINET-NET	738
5	TENCENT-CN	637
6	VIETTEL-VN	521
7	CHINANET-JS	485
8	TELKOMNET	333
9	CHINANET-GD	326
10	ALISOFT	324

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7672
2	United States	2819
3	Viet Nam	2164
4	India	1580
5	Russian Federation	1425
6	Brazil	1321
7	Indonesia	1014
8	Taiwan	922
9	France	851
10	Thailand	588

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	453983
2	2120	56035
3	1001	52816
4	22	49514
5	822	47919
6	666	46424
7	23	42070
8	1433	37000
9	2222	34940
10	1002	29806

Suspected Bot List [2020-07-30]

detection period: 2020-07-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1454

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-29]

detection period: 2020-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 29160
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27573
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1284
2	VNPT-VN	939
3	Baidu	736
4	HINET-NET	697
5	TENCENT-CN	642
6	VIETTEL-VN	539
7	CHINANET-JS	388
8	VE-CSVE-LACNIC	346
9	ALISOFT	340
10	TELKOMNET	330

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7289
2	United States	2867
3	Viet Nam	2163
4	India	1558
5	Russian Federation	1452
6	Brazil	1314
7	Indonesia	1012
8	Taiwan	870
9	France	862
10	Thailand	587

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	628168
2	1000	192577
3	3330	87343
4	2120	63657
5	6009	59513
6	3339	53102
7	22	52904
8	922	43507
9	33	42264
10	666	36905

Suspected Bot List [2020-07-29]

detection period: 2020-07-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1587

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-28]

detection period: 2020-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 30358
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28627
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1303
2	VNPT-VN	1031
3	HINET-NET	780
4	Baidu	757
5	TENCENT-CN	668
6	VIETTEL-VN	553
7	VE-CSVE-LACNIC	433
8	CHINANET-JS	404
9	ALISOFT	399
10	TELKOMNET	337

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7632
2	United States	3120
3	Viet Nam	2243
4	India	1515
5	Russian Federation	1429
6	Brazil	1338
7	Indonesia	1060
8	Taiwan	974
9	France	878
10	South Korea	500

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	449883
2	227	107777
3	3334	90337
4	444	86853
5	3337	83551
6	3336	83134
7	228	82166
8	3335	79352
9	3338	79284
10	191	62300

Suspected Bot List [2020-07-28]

detection period: 2020-07-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1731

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-27]

detection period: 2020-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 31436
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29692
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1345
2	VNPT-VN	1046
3	Baidu	797
4	HINET-NET	720
5	TENCENT-CN	683
6	VIETTEL-VN	549
7	VE-CSVE-LACNIC	461
8	ALISOFT	436
9	CHINANET-JS	427
10	CMNET	365

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8042
2	United States	3198
3	Viet Nam	2260
4	Russian Federation	1550
5	India	1522
6	Brazil	1441
7	Indonesia	1034
8	France	914
9	Taiwan	910
10	Venezuela	557

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	364938
2	901	120844
3	201	119944
4	161	117041
5	181	114640
6	301	112909
7	141	110241
8	501	110236
9	555	108812
10	601	108156

Suspected Bot List [2020-07-27]

detection period: 2020-07-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1744

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-26]

detection period: 2020-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 26898
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25548
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1193
2	Baidu	697
3	HINET-NET	694
4	TENCENT-CN	609
5	VNPT-VN	587
6	CHINANET-JS	406
7	ALISOFT	379
8	VIETTEL-VN	370
9	VE-CSVE-LACNIC	367
10	CMNET	314

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8165
2	United States	2890
3	Viet Nam	1437
4	Russian Federation	1248
5	Brazil	1061
6	India	939
7	Taiwan	887
8	France	825
9	Indonesia	627
10	South Korea	457

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	140895
2	801	111246
3	111	95220
4	101	85295
5	777	84611
6	29	73843
7	888	52646
8	22	52635
9	6005	43916
10	23	42120

Suspected Bot List [2020-07-26]

detection period: 2020-07-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1350

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-25]

detection period: 2020-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 29774
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28338
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1182
2	VNPT-VN	814
3	HINET-NET	748
4	Baidu	698
5	TENCENT-CN	615
6	VIETTEL-VN	460
7	CHINANET-JS	457
8	VE-CSVE-LACNIC	391
9	ALISOFT	360
10	CMNET	316

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9553
2	United States	3026
3	Viet Nam	1821
4	Russian Federation	1234
5	India	1232
6	Brazil	1145
7	Taiwan	952
8	Indonesia	867
9	France	815
10	Venezuela	469

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	299650
2	701	111285
3	28	83308
4	22	52105
5	3311	45302
6	23	36862
7	3389	33958
8	10	29675
9	1433	29608
10	101	28614

Suspected Bot List [2020-07-25]

detection period: 2020-07-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1436

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-24]

detection period: 2020-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 31562
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29990
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1199
2	VNPT-VN	1011
3	HINET-NET	746
4	Baidu	704
5	TENCENT-CN	621
6	MSFT	596
7	VIETTEL-VN	563
8	CHINANET-JS	442
9	VE-CSVE-LACNIC	347
10	CHINANET-GD	338

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9338
2	United States	3586
3	Viet Nam	2169
4	Russian Federation	1412
5	India	1394
6	Brazil	1329
7	Indonesia	989
8	Taiwan	956
9	France	834
10	Thailand	557

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	278186
2	202	88781
3	101	60310
4	22	53037
5	1433	41063
6	27	37621
7	23	34031
8	3389	33399
9	8900	24416
10	8600	23604

Suspected Bot List [2020-07-24]

detection period: 2020-07-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1572

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-23]

detection period: 2020-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 28687
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27191
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1220
2	VNPT-VN	956
3	HINET-NET	768
4	Baidu	707
5	TENCENT-CN	627
6	VIETTEL-VN	485
7	CHINANET-JS	420
8	VE-CSVE-LACNIC	365
9	CHINANET-GD	315
10	TELKOMNET	292

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7770
2	United States	3005
3	Viet Nam	1972
4	India	1337
5	Brazil	1291
6	Russian Federation	1285
7	Taiwan	971
8	Indonesia	858
9	France	837
10	Thailand	490

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	216251
2	404	119398
3	1080	118667
4	808	118420
5	303	118278
6	1090	115508
7	1017	114458
8	1030	113160
9	1016	113053
10	1018	112431

Suspected Bot List [2020-07-23]

detection period: 2020-07-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1496

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-22]

detection period: 2020-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 29804
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28356
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1225
2	VNPT-VN	957
3	HINET-NET	753
4	Baidu	726
5	MSFT	705
6	TENCENT-CN	643
7	VIETTEL-VN	497
8	CHINANET-JS	418
9	VE-CSVE-LACNIC	393
10	CMNET	341

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8279
2	United States	3628
3	Viet Nam	1986
4	India	1282
5	Brazil	1257
6	Russian Federation	1252
7	Taiwan	967
8	Indonesia	896
9	France	825
10	Thailand	476

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	449826
2	1060	117078
3	1050	116865
4	1014	113310
5	1011	110897
6	1013	106261
7	1015	60981
8	1433	56647
9	22	51663
10	23	44051

Suspected Bot List [2020-07-22]

detection period: 2020-07-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1448

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-21]

detection period: 2020-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 29320
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27838
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1262
2	VNPT-VN	878
3	MSFT	733
4	Baidu	731
5	HINET-NET	716
6	TENCENT-CN	657
7	VIETTEL-VN	523
8	CHINANET-JS	399
9	ALISOFT	357
10	VE-CSVE-LACNIC	356

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7706
2	United States	3791
3	Viet Nam	1877
4	India	1284
5	Russian Federation	1248
6	Brazil	1234
7	Taiwan	912
8	Indonesia	909
9	France	892
10	Thailand	511

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	259926
2	7023	78488
3	1433	69831
4	23	55196
5	22	46231
6	26	46163
7	25	36792
8	2224	32718
9	3389	30033
10	1	21237

Suspected Bot List [2020-07-21]

detection period: 2020-07-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1482

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-20]

detection period: 2020-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 29848
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28369
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1285
2	VNPT-VN	845
3	Baidu	748
4	MSFT	733
5	HINET-NET	706
6	TENCENT-CN	683
7	VIETTEL-VN	449
8	DIGITALOCEAN-192-241-128-0	386
9	CHINANET-JS	385
10	ALISOFT	377

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7913
2	United States	3943
3	Viet Nam	1738
4	India	1323
5	Brazil	1288
6	Russian Federation	1266
7	Indonesia	958
8	France	885
9	Taiwan	880
10	Thailand	510

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	219412
2	1222	95862
3	25	76555
4	1433	57951
5	22	47807
6	21	38279
7	3389	37124
8	5901	36203
9	23	35454
10	2299	16578

Suspected Bot List [2020-07-20]

detection period: 2020-07-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1479

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-19]

detection period: 2020-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 27565
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26185
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1371
2	HINET-NET	889
3	Baidu	825
4	TENCENT-CN	711
5	VNPT-VN	476
6	ALISOFT	463
7	DIGITALOCEAN-192-241-128-0	447
8	CHINANET-JS	381
9	CHINANET-GD	331
10	VIETTEL-VN	308

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7842
2	United States	3505
3	Russian Federation	1205
4	Brazil	1166
5	Viet Nam	1153
6	Taiwan	1109
7	France	911
8	India	880
9	Indonesia	698
10	South Korea	509

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	344461
2	2060	166254
3	2070	89957
4	3020	88379
5	3040	85877
6	3050	85348
7	2050	83515
8	2080	81959
9	22	48722
10	5901	45038

Suspected Bot List [2020-07-19]

detection period: 2020-07-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1380

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-18]

detection period: 2020-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 27019
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25705
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1172
2	HINET-NET	796
3	Baidu	714
4	VNPT-VN	713
5	TENCENT-CN	540
6	DIGITALOCEAN-192-241-128-0	514
7	ALISOFT	485
8	VIETTEL-VN	421
9	CHINANET-JS	334
10	CHINANET-GD	322

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7077
2	United States	3539
3	Viet Nam	1555
4	India	1216
5	Russian Federation	1181
6	Brazil	1157
7	Taiwan	995
8	France	836
9	Indonesia	747
10	South Korea	493

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	325803
2	2036	187740
3	2039	157402
4	2038	150380
5	2035	148954
6	2040	138586
7	2037	132507
8	7035	124755
9	2029	124716
10	7032	124701

Suspected Bot List [2020-07-18]

detection period: 2020-07-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1314

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-17]

detection period: 2020-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 28692
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27242
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1173
2	VNPT-VN	974
3	HINET-NET	880
4	Baidu	728
5	TENCENT-CN	536
6	VIETTEL-VN	505
7	DIGITALOCEAN-192-241-128-0	504
8	ALISOFT	458
9	CHINANET-JS	363
10	CHINANET-GD	351

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7270
2	United States	3421
3	Viet Nam	1987
4	Russian Federation	1367
5	India	1353
6	Brazil	1342
7	Taiwan	1077
8	Indonesia	933
9	France	840
10	Thailand	555

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	233145
2	1433	60817
3	22	52225
4	5901	48035
5	23	39811
6	3389	33471
7	9902	19379
8	9506	19242
9	224	13097
10	2212	11926

Suspected Bot List [2020-07-17]

detection period: 2020-07-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1450

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-16]

detection period: 2020-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 29464
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27977
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1173
2	VNPT-VN	954
3	HINET-NET	950
4	Baidu	743
5	TENCENT-CN	557
6	VIETTEL-VN	527
7	DIGITALOCEAN-192-241-128-0	514
8	ALISOFT	377
9	MSFT	375
10	CHINANET-JS	350

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7153
2	United States	3704
3	Viet Nam	1963
4	India	1444
5	Russian Federation	1344
6	Brazil	1311
7	Taiwan	1151
8	Indonesia	955
9	France	858
10	Thailand	566

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	280966
2	23	55006
3	5901	48221
4	1433	48212
5	22	46774
6	3389	43832
7	22031	36271
8	4711	24660
9	5400	23189
10	5300	22963

Suspected Bot List [2020-07-16]

detection period: 2020-07-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1487

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-15]

detection period: 2020-07-15 00:00-23:59 UTC
total number of suspected botnet IPs: 29536
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27886
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1208
2	HINET-NET	909
3	VNPT-VN	896
4	Baidu	754
5	TENCENT-CN	578
6	VIETTEL-VN	564
7	DIGITALOCEAN-192-241-128-0	518
8	ALISOFT	387
9	VE-CSVE-LACNIC	327
10	CMNET	302

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7166
2	United States	3622
3	Viet Nam	1943
4	India	1422
5	Russian Federation	1417
6	Brazil	1298
7	Taiwan	1132
8	Indonesia	902
9	France	843
10	Thailand	564

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	344839
2	23	100425
3	3911	88696
4	3389	65160
5	1433	53524
6	22031	48485
7	22	38796
8	3000	35263
9	5901	27555
10	4800	26349

Suspected Bot List [2020-07-15]

detection period: 2020-07-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1650

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-14]

detection period: 2020-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 29298
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27855
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1201
2	HINET-NET	998
3	VNPT-VN	953
4	Baidu	783
5	TENCENT-CN	582
6	VIETTEL-VN	526
7	DIGITALOCEAN-192-241-128-0	507
8	ALISOFT	425
9	VE-CSVE-LACNIC	405
10	CHINANET-JS	346

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7302
2	United States	3381
3	Viet Nam	1996
4	Brazil	1455
5	Russian Federation	1375
6	India	1315
7	Taiwan	1177
8	France	880
9	Indonesia	877
10	Thailand	607

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	331063
2	2082	86871
3	3389	70867
4	1433	53930
5	22	44163
6	2102	42475
7	9902	42031
8	3000	35604
9	2083	29845
10	23	23559

Suspected Bot List [2020-07-14]

detection period: 2020-07-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1443

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-13]

detection period: 2020-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 29797
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28200
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1249
2	VNPT-VN	1072
3	HINET-NET	864
4	Baidu	784
5	TENCENT-CN	603
6	VIETTEL-VN	558
7	DIGITALOCEAN-192-241-128-0	513
8	ALISOFT	413
9	CHINANET-JS	358
10	CMNET	324

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7465
2	United States	3420
3	Viet Nam	2156
4	Brazil	1449
5	India	1379
6	Russian Federation	1361
7	Taiwan	1051
8	France	919
9	Indonesia	888
10	Thailand	617

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	279232
2	1200	94075
3	22030	83231
4	2101	68586
5	1114	62469
6	3389	60180
7	1811	59682
8	1911	58673
9	2811	51532
10	1433	49532

Suspected Bot List [2020-07-13]

detection period: 2020-07-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1597

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-12]

detection period: 2020-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 28542
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27102
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1349
2	HINET-NET	955
3	Baidu	891
4	TENCENT-CN	701
5	VNPT-VN	523
6	DIGITALOCEAN-192-241-128-0	520
7	ALISOFT	455
8	VIETTEL-VN	397
9	CHINANET-JS	371
10	CMNET	327

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7913
2	United States	3678
3	Viet Nam	1312
4	Brazil	1291
5	Russian Federation	1182
6	Taiwan	1167
7	India	922
8	France	888
9	Indonesia	666
10	South Korea	523

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	127181
2	1111	116082
3	1112	109645
4	1500	108430
5	1113	105750
6	2109	95059
7	3511	91307
8	2105	90512
9	2503	90271
10	2104	90261

Suspected Bot List [2020-07-12]

detection period: 2020-07-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1440

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-11]

detection period: 2020-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 27452
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26203
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1219
2	HINET-NET	941
3	Baidu	841
4	VNPT-VN	659
5	TENCENT-CN	628
6	DIGITALOCEAN-192-241-128-0	518
7	VIETTEL-VN	441
8	ALISOFT	385
9	CHINANET-JS	362
10	CHINANET-GD	330

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7401
2	United States	3530
3	Viet Nam	1531
4	Brazil	1240
5	Russian Federation	1162
6	Taiwan	1153
7	India	1067
8	France	815
9	Indonesia	704
10	Thailand	482

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	211756
2	1108	115643
3	1109	114226
4	1106	113423
5	1300	111825
6	1107	109586
7	1400	101505
8	2400	91630
9	2700	90021
10	2800	89983

Suspected Bot List [2020-07-11]

detection period: 2020-07-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1249

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-10]

detection period: 2020-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 30356
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28936
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1271
2	VNPT-VN	953
3	HINET-NET	917
4	Baidu	843
5	TENCENT-CN	657
6	CHINANET-AH	562
7	DIGITALOCEAN-192-241-128-0	514
8	VIETTEL-VN	492
9	ALISOFT	446
10	CHINANET-JS	379

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8299
2	United States	3676
3	Viet Nam	1927
4	Brazil	1505
5	Russian Federation	1365
6	India	1330
7	Taiwan	1119
8	Indonesia	859
9	France	841
10	Thailand	584

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	176609
2	1433	49144
3	22	47910
4	23	30518
5	3389	27383
6	2056	24449
7	2062	19618
8	2060	19602
9	2058	18457
10	2052	18450

Suspected Bot List [2020-07-10]

detection period: 2020-07-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1420

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-09]

detection period: 2020-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 30725
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29361
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1351
2	VNPT-VN	989
3	HINET-NET	968
4	Baidu	857
5	DIGITALOCEAN-192-241-128-0	705
6	TENCENT-CN	694
7	VIETTEL-VN	529
8	ALISOFT	463
9	CHINANET-JS	404
10	VE-CSVE-LACNIC	345

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8178
2	United States	3822
3	Viet Nam	2046
4	Brazil	1527
5	Russian Federation	1367
6	India	1341
7	Taiwan	1189
8	Indonesia	930
9	France	858
10	Thailand	620

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	181735
2	1433	82780
3	22	47466
4	3389	32689
5	23	28151
6	6000	27961
7	555	26816
8	122	17724
9	9898	16857
10	2047	14407

Suspected Bot List [2020-07-09]

detection period: 2020-07-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1364

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-07-08]

detection period: 2020-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 30669
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29127
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1352
2	VNPT-VN	1004
3	HINET-NET	955
4	Baidu	865
5	TENCENT-CN	703
6	VIETTEL-VN	535
7	DIGITALOCEAN-192-241-128-0	534
8	ALISOFT	445
9	CHINANET-JS	383
10	CHINANET-GD	354

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8040
2	United States	3608
3	Viet Nam	2064
4	Brazil	1490
5	India	1353
6	Russian Federation	1348
7	Taiwan	1178
8	Indonesia	933
9	France	859
10	Thailand	667

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	314081
2	1433	49957
3	555	48426
4	22	47265
5	1001	35510
6	122	32702
7	23	28736
8	3389	27562
9	1422	27047
10	2046	22901