Botnet Statistics [2020-09-29]

detection period: 2020-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 30737
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28974
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1311
2	VNPT-VN	1148
3	Baidu	672
4	TENCENT-CN	618
5	VIETTEL-VN	579
6	DIGITALOCEAN-192-241-128-0	553
7	UNICOM-HA	552
8	HINET-NET	547
9	UNICOM-SD	513
10	ALISOFT	410

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7996
2	United States	3340
3	Viet Nam	2235
4	India	2217
5	Russian Federation	1314
6	Brazil	1272
7	Indonesia	1012
8	France	825
9	Taiwan	693
10	Thailand	643

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	440643
2	687	74688
3	213	74566
4	1390	74334
5	991	74310
6	23	50728
7	2342	49350
8	333	46622
9	22	42943
10	523	40006

Suspected Bot List [2020-09-29]

detection period: 2020-09-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1763

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-28]

detection period: 2020-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 31998
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30287
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1375
2	VNPT-VN	1049
3	Baidu	690
4	TENCENT-CN	643
5	VIETTEL-VN	567
6	DIGITALOCEAN-192-241-128-0	540
7	UNICOM-SD	537
8	HINET-NET	515
9	UNICOM-HA	504
10	ALISOFT	471

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8385
2	United States	3735
3	India	2351
4	Viet Nam	2179
5	Russian Federation	1358
6	Brazil	1300
7	Indonesia	1009
8	France	849
9	Taiwan	672
10	Thailand	650

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	582915
2	687	87629
3	213	87278
4	1390	87041
5	991	86540
6	1012	77224
7	23	52719
8	2342	52129
9	1433	48487
10	422	48482

Suspected Bot List [2020-09-28]

detection period: 2020-09-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1711

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-27]

detection period: 2020-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 28979
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27427
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1430
2	Baidu	708
3	TENCENT-CN	678
4	UNICOM-HA	567
5	HINET-NET	561
6	UNICOM-SD	552
7	DIGITALOCEAN-192-241-128-0	549
8	VNPT-VN	525
9	ALISOFT	466
10	CMNET	359

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8648
2	United States	3783
3	India	1545
4	Russian Federation	1253
5	Viet Nam	1225
6	Brazil	1050
7	France	883
8	Taiwan	730
9	Indonesia	681
10	South Korea	441

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	278603
2	687	89721
3	991	88731
4	1390	88436
5	213	80608
6	1433	64081
7	23	59847
8	2342	59227
9	2022	56836
10	33	51319

Suspected Bot List [2020-09-27]

detection period: 2020-09-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1552

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-26]

detection period: 2020-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 27608
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26175
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1230
2	VNPT-VN	709
3	Baidu	635
4	TENCENT-CN	585
5	DIGITALOCEAN-192-241-128-0	562
6	HINET-NET	558
7	UNICOM-HA	531
8	UNICOM-SD	520
9	ALISOFT	429
10	VIETTEL-VN	359

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7541
2	United States	3449
3	India	2003
4	Viet Nam	1496
5	Russian Federation	1105
6	Brazil	1015
7	France	798
8	Indonesia	752
9	Taiwan	708
10	South Korea	396

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	431919
2	8338	190016
3	3022	90757
4	687	67961
5	1390	67087
6	991	65733
7	2342	65211
8	213	57118
9	23	52376
10	1433	44912

Suspected Bot List [2020-09-26]

detection period: 2020-09-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1433

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-25]

detection period: 2020-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 30057
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28480
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1277
2	VNPT-VN	987
3	Baidu	641
4	TENCENT-CN	607
5	UNICOM-HA	588
6	DIGITALOCEAN-192-241-128-0	585
7	HINET-NET	567
8	UNICOM-SD	550
9	VIETTEL-VN	504
10	ALISOFT	447

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7954
2	United States	3540
3	India	2349
4	Viet Nam	2007
5	Brazil	1244
6	Russian Federation	1233
7	Indonesia	903
8	France	829
9	Taiwan	756
10	Thailand	542

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	560174
2	32	100856
3	1433	95868
4	3022	93980
5	687	90343
6	1390	87614
7	991	86689
8	2342	86252
9	213	71945
10	23	66534

Suspected Bot List [2020-09-25]

detection period: 2020-09-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1577

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-24]

detection period: 2020-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 31255
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29571
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1295
2	VNPT-VN	1070
3	Baidu	653
4	HINET-NET	624
5	TENCENT-CN	616
6	DIGITALOCEAN-192-241-128-0	608
7	UNICOM-HA	549
8	UNICOM-SD	540
9	VIETTEL-VN	516
10	ALISOFT	501

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8086
2	United States	3613
3	India	2436
4	Viet Nam	2071
5	Russian Federation	1350
6	Brazil	1214
7	Indonesia	954
8	France	865
9	Taiwan	776
10	Thailand	568

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	31	935333
2	445	309693
3	687	116815
4	1390	113024
5	2342	112805
6	991	111850
7	213	94833
8	1433	91780
9	23	64404
10	2022	63973

Suspected Bot List [2020-09-24]

detection period: 2020-09-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1684

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-23]

detection period: 2020-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 31278
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29632
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1289
2	VNPT-VN	1099
3	Baidu	652
4	TENCENT-CN	636
5	DIGITALOCEAN-192-241-128-0	616
6	HINET-NET	529
7	UNICOM-SD	520
8	UNICOM-HA	519
9	VIETTEL-VN	509
10	ALISOFT	475

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8071
2	United States	3675
3	India	2485
4	Viet Nam	2111
5	Russian Federation	1275
6	Brazil	1211
7	Indonesia	972
8	France	887
9	Taiwan	687
10	Thailand	591

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	525727
2	31	292649
3	687	115543
4	1390	112183
5	2342	110782
6	991	109426
7	213	91142
8	2022	63356
9	2229	62347
10	523	61079

Suspected Bot List [2020-09-23]

detection period: 2020-09-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1646

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-22]

detection period: 2020-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 34080
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32388
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1437
2	VNPT-VN	1030
3	Baidu	675
4	TENCENT-CN	649
5	DIGITALOCEAN-192-241-128-0	617
6	UNICOM-HA	576
7	HATHWAY-NET	558
8	UNICOM-SD	556
9	ALISOFT	491
10	HINET-NET	487

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8835
2	United States	4453
3	India	2948
4	Viet Nam	2013
5	Russian Federation	1383
6	Brazil	1280
7	Indonesia	946
8	France	907
9	Taiwan	617
10	Netherlands	584

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	493405
2	2224	69601
3	23	57512
4	9322	53393
5	1433	53146
6	22	52279
7	9422	49905
8	333	47515
9	8122	44160
10	9822	43610

Suspected Bot List [2020-09-22]

detection period: 2020-09-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1692

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-21]

detection period: 2020-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 34640
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32895
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1489
2	VNPT-VN	1098
3	HATHWAY-NET	874
4	Baidu	707
5	TENCENT-CN	691
6	DIGITALOCEAN-192-241-128-0	633
7	UNICOM-HA	554
8	VIETTEL-VN	528
9	UNICOM-SD	527
10	ALISOFT	512

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9042
2	United States	4383
3	India	3330
4	Viet Nam	2135
5	Russian Federation	1341
6	Brazil	1326
7	Indonesia	952
8	France	923
9	Thailand	631
10	Taiwan	620

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	423831
2	2224	71133
3	23	64742
4	22	53507
5	9322	49649
6	8722	49643
7	9522	48854
8	1433	48266
9	333	47796
10	8222	47779

Suspected Bot List [2020-09-21]

detection period: 2020-09-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1745

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-20]

detection period: 2020-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 29319
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27965
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1300
2	TencentCloud	1296
3	Baidu	645
4	DIGITALOCEAN-192-241-128-0	628
5	VNPT-VN	588
6	UNICOM-HA	587
7	TENCENT-CN	586
8	UNICOM-SD	546
9	HINET-NET	539
10	HATHWAY-AP	490

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8023
2	United States	3925
3	India	3109
4	Viet Nam	1320
5	Russian Federation	1168
6	Brazil	960
7	France	788
8	Taiwan	699
9	Indonesia	620
10	Colombia	426

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	191814
2	1433	80769
3	23	73933
4	2226	71507
5	322	70906
6	2227	70490
7	8522	68412
8	2228	61770
9	9522	53535
10	8322	53371

Suspected Bot List [2020-09-20]

detection period: 2020-09-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1354

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-19]

detection period: 2020-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 30743
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29301
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1568
2	TencentCloud	1306
3	VNPT-VN	783
4	HATHWAY-AP	659
5	Baidu	640
6	DIGITALOCEAN-192-241-128-0	625
7	TENCENT-CN	576
8	HINET-NET	498
9	ALISOFT	462
10	VIETTEL-VN	400

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7566
2	India	4131
3	United States	3907
4	Viet Nam	1631
5	Russian Federation	1187
6	Brazil	1074
7	France	830
8	Indonesia	731
9	Taiwan	644
10	Colombia	474

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	187393
2	1433	100114
3	23	75308
4	22	48771
5	9422	44050
6	6022	39395
7	9522	37405
8	622	35787
9	9022	34564
10	8222	32661

Suspected Bot List [2020-09-19]

detection period: 2020-09-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1442

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-18]

detection period: 2020-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 30366
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28793
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1707
2	TencentCloud	1269
3	VNPT-VN	922
4	DIGITALOCEAN-192-241-128-0	636
5	Baidu	629
6	HATHWAY-AP	584
7	TENCENT-CN	570
8	HINET-NET	524
9	VIETTEL-VN	446
10	ALISOFT	422

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6827
2	India	4243
3	United States	3380
4	Viet Nam	1820
5	Russian Federation	1323
6	Brazil	1249
7	Indonesia	836
8	France	802
9	Taiwan	684
10	Colombia	510

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	474367
2	1433	110541
3	6022	79493
4	8022	60601
5	23	59874
6	22	47998
7	3389	35393
8	3022	26708
9	7822	25308
10	822	22937

Suspected Bot List [2020-09-18]

detection period: 2020-09-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1573

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-17]

detection period: 2020-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 30816
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29241
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1670
2	TencentCloud	1232
3	VNPT-VN	1072
4	HATHWAY-AP	643
5	DIGITALOCEAN-192-241-128-0	635
6	Baidu	632
7	TENCENT-CN	563
8	HINET-NET	559
9	VIETTEL-VN	509
10	ALISOFT	409

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6789
2	India	4159
3	United States	3386
4	Viet Nam	2099
5	Russian Federation	1310
6	Brazil	1139
7	Indonesia	909
8	France	798
9	Taiwan	712
10	Thailand	540

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	358150
2	6022	91852
3	8022	71740
4	1433	59275
5	23	58220
6	3022	51139
7	22	43200
8	2230	37095
9	7822	36987
10	622	29156

Suspected Bot List [2020-09-17]

detection period: 2020-09-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1575

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-16]

detection period: 2020-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 32020
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30472
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1699
2	TencentCloud	1257
3	VNPT-VN	1080
4	DIGITALOCEAN-192-241-128-0	862
5	HATHWAY-AP	674
6	Baidu	639
7	TENCENT-CN	578
8	VIETTEL-VN	522
9	HINET-NET	502
10	ALISOFT	432

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7073
2	India	4423
3	United States	3676
4	Viet Nam	2125
5	Russian Federation	1307
6	Brazil	1249
7	Indonesia	923
8	France	813
9	Taiwan	643
10	Thailand	612

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2375	502840
2	445	469298
3	6022	85274
4	8022	77949
5	422	74489
6	3022	63530
7	622	63485
8	23	62396
9	1433	58086
10	322	57534

Suspected Bot List [2020-09-16]

detection period: 2020-09-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1548

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-15]

detection period: 2020-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 32414
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30673
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1696
2	TencentCloud	1281
3	VNPT-VN	1059
4	HATHWAY-AP	659
5	Baidu	651
6	TENCENT-CN	609
7	DIGITALOCEAN-192-241-128-0	600
8	VIETTEL-VN	565
9	HINET-NET	487
10	ALISOFT	428

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7343
2	India	4564
3	United States	3339
4	Viet Nam	2103
5	Russian Federation	1302
6	Brazil	1234
7	Indonesia	989
8	France	844
9	Thailand	650
10	Taiwan	629

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2375	499575
2	445	221136
3	6022	101280
4	8022	98347
5	3022	62517
6	23	61095
7	1433	52045
8	22	42667
9	322	41425
10	7822	36751

Suspected Bot List [2020-09-15]

detection period: 2020-09-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1741

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-14]

detection period: 2020-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 33553
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 31823
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1763
2	TencentCloud	1347
3	VNPT-VN	1142
4	Baidu	686
5	HATHWAY-AP	683
6	TENCENT-CN	621
7	DIGITALOCEAN-192-241-128-0	610
8	VIETTEL-VN	578
9	HINET-NET	504
10	ALISOFT	472

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7745
2	India	4631
3	United States	3484
4	Viet Nam	2246
5	Russian Federation	1292
6	Brazil	1212
7	Indonesia	937
8	France	851
9	Taiwan	671
10	Thailand	629

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	570576
2	1433	133046
3	23	60830
4	3322	58903
5	3022	56157
6	2922	55378
7	6022	53046
8	3822	51679
9	2822	49896
10	8022	49800

Suspected Bot List [2020-09-14]

detection period: 2020-09-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1730

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-13]

detection period: 2020-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 28681
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27396
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1732
2	TencentCloud	1101
3	HATHWAY-AP	706
4	VNPT-VN	630
5	Baidu	614
6	DIGITALOCEAN-192-241-128-0	604
7	HINET-NET	528
8	TENCENT-CN	504
9	ALISOFT	430
10	VIETTEL-VN	358

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6683
2	India	3910
3	United States	3113
4	Viet Nam	1361
5	Russian Federation	1150
6	Brazil	1047
7	France	795
8	Taiwan	757
9	Hong Kong	649
10	Indonesia	628

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1433	128766
2	445	121712
3	3622	102418
4	3922	94841
5	2822	92286
6	3122	87992
7	3322	85306
8	3822	81461
9	3022	80395
10	3722	74248

Suspected Bot List [2020-09-13]

detection period: 2020-09-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1285

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-12]

detection period: 2020-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 28553
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27172
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1722
2	TencentCloud	1118
3	VNPT-VN	725
4	HATHWAY-AP	675
5	DIGITALOCEAN-192-241-128-0	615
6	Baidu	607
7	TENCENT-CN	522
8	HINET-NET	508
9	VIETTEL-VN	438
10	ALISOFT	425

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6422
2	India	4207
3	United States	3013
4	Viet Nam	1595
5	Russian Federation	1190
6	Brazil	1037
7	France	768
8	Indonesia	704
9	Taiwan	696
10	South Korea	519

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	300485
2	2822	108829
3	3722	91958
4	3022	90181
5	3322	87319
6	2922	86301
7	3922	83918
8	3122	82507
9	3622	71782
10	3822	70376

Suspected Bot List [2020-09-12]

detection period: 2020-09-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1381

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-11]

detection period: 2020-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 28995
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27505
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HATHWAY-NET	1429
2	TencentCloud	1114
3	VNPT-VN	1026
4	DIGITALOCEAN-192-241-128-0	617
5	Baidu	605
6	HATHWAY-AP	582
7	VIETTEL-VN	505
8	TENCENT-CN	503
9	HINET-NET	492
10	ALISOFT	456

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6277
2	India	3961
3	United States	3087
4	Viet Nam	2008
5	Russian Federation	1313
6	Brazil	1142
7	Indonesia	861
8	France	780
9	Taiwan	638
10	Thailand	585

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	210786
2	110	124332
3	2822	104248
4	3022	101365
5	3122	100951
6	2922	97470
7	3922	96300
8	3822	96287
9	3322	96194
10	3722	91803

Suspected Bot List [2020-09-11]

detection period: 2020-09-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1490

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-10]

detection period: 2020-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 28349
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26859
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1149
2	VNPT-VN	993
3	DIGITALOCEAN-192-241-128-0	613
4	Baidu	605
5	HINET-NET	539
6	TENCENT-CN	519
7	VIETTEL-VN	478
8	HATHWAY-NET	464
9	ALISOFT	453
10	CHINANET-JS	331

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6428
2	United States	3364
3	India	2425
4	Viet Nam	1984
5	Russian Federation	1333
6	Brazil	1260
7	Indonesia	868
8	France	786
9	Taiwan	702
10	Thailand	569

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	358904
2	8020	140361
3	3222	108024
4	3522	106725
5	2822	106272
6	3322	97894
7	2922	97573
8	3422	88027
9	3722	86925
10	3022	85995

Suspected Bot List [2020-09-10]

detection period: 2020-09-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1490

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-09]

detection period: 2020-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 27065
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25568
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1183
2	VNPT-VN	918
3	DIGITALOCEAN-192-241-128-0	630
4	Baidu	611
5	TENCENT-CN	523
6	ALISOFT	486
7	VIETTEL-VN	470
8	HINET-NET	353
9	CHINANET-JS	351
10	CMNET	289

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6618
2	United States	3301
3	Viet Nam	1861
4	India	1646
5	Russian Federation	1295
6	Brazil	1219
7	Indonesia	901
8	France	826
9	Thailand	545
10	Taiwan	467

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	637193
2	3022	140379
3	2822	139696
4	3122	120684
5	3322	114330
6	3422	113042
7	3722	112750
8	3822	108857
9	3222	105504
10	2922	97735

Suspected Bot List [2020-09-09]

detection period: 2020-09-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1497

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-08]

detection period: 2020-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 27564
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26075
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1197
2	VNPT-VN	1021
3	DIGITALOCEAN-192-241-128-0	628
4	Baidu	617
5	TENCENT-CN	531
6	VIETTEL-VN	517
7	ALISOFT	483
8	HINET-NET	401
9	CHINANET-JS	359
10	CMNET	312

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6660
2	United States	3208
3	Viet Nam	2043
4	India	1735
5	Russian Federation	1352
6	Brazil	1162
7	Indonesia	901
8	France	811
9	Thailand	553
10	Taiwan	541

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	713742
2	2822	121499
3	3722	115339
4	3022	108462
5	3422	98837
6	2922	88802
7	3322	88542
8	1433	86814
9	3922	84556
10	3122	79970

Suspected Bot List [2020-09-08]

detection period: 2020-09-08 00:00-23:59 UTC
number of suspected bots' IPs listed here: 1489

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-09-07]

detection period: 2020-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 28682
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27087
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1247
2	VNPT-VN	932
3	Baidu	639
4	DIGITALOCEAN-192-241-128-0	622
5	TENCENT-CN	563
6	ALISOFT	546
7	VIETTEL-VN	498
8	HINET-NET	467
9	CHINANET-JS	385
10	KORNET	362

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7075
2	United States	3496
3	Viet Nam	1928
4	India	1576
5	Russian Federation	1395
6	Brazil	1085
7	Indonesia	922
8	France	846
9	Taiwan	648
10	South Korea	584

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	797351
2	2822	118195
3	1433	91727
4	3222	83660
5	3422	80058
6	3022	79249
7	3522	76680
8	3722	73290
9	22	70684
10	3122	69841