Botnet Statistics [2020-10-30]

detection period: 2020-10-30 00:00-23:59 UTC
total number of suspected botnet IPs: 35223
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33002
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1380
2	VNPT-VN	937
3	VIETTEL-VN	761
4	Baidu	664
5	TENCENT-CN	627
6	DIGITALOCEAN-192-241-128-0	617
7	HINET-NET	513
8	VE-CSVE-LACNIC	477
9	ALISOFT	474
10	UNICOM-HA	434

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8163
2	United States	4320
3	Viet Nam	2508
4	Russian Federation	2328
5	India	2246
6	Brazil	1596
7	Indonesia	1055
8	France	902
9	Thailand	824
10	Taiwan	656

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	265646
2	600	186182
3	1111	185655
4	1200	167537
5	700	163431
6	100	158835
7	1800	153977
8	1000	150445
9	800	148471
10	1100	143601

Suspected Bot List [2020-10-30]

detection period: 2020-10-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2221

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-29]

detection period: 2020-10-29 00:00-23:59 UTC
total number of suspected botnet IPs: 35454
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33104
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1393
2	VIETTEL-VN	801
3	VNPT-VN	785
4	Baidu	675
5	TENCENT-CN	639
6	DIGITALOCEAN-192-241-128-0	624
7	HINET-NET	517
8	UNICOM-HA	456
9	ALISOFT	456
10	VE-CSVE-LACNIC	407

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8194
2	United States	4254
3	Viet Nam	2434
4	India	2396
5	Russian Federation	2267
6	Brazil	1701
7	Indonesia	928
8	Thailand	838
9	France	816
10	Taiwan	679

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	911	1502311
2	1111	437014
3	445	375506
4	1433	76213
5	22	49568
6	23	42630
7	3389	30014
8	700	29160
9	587	19752
10	1110	17045

Suspected Bot List [2020-10-29]

detection period: 2020-10-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2350

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-28]

detection period: 2020-10-28 00:00-23:59 UTC
total number of suspected botnet IPs: 36234
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33870
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1444
2	VIETTEL-VN	746
3	VNPT-VN	742
4	Baidu	682
5	TENCENT-CN	661
6	DIGITALOCEAN-192-241-128-0	625
7	HINET-NET	561
8	ALISOFT	465
9	UNICOM-HA	453
10	VE-CSVE-LACNIC	441

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8426
2	United States	3789
3	India	2540
4	Russian Federation	2302
5	Viet Nam	2289
6	Brazil	1731
7	Indonesia	1107
8	France	910
9	Thailand	869
10	Taiwan	722

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	565629
2	1111	491465
3	22	53896
4	23	46768
5	1433	40712
6	587	29785
7	3389	24213
8	900	23348
9	1200	23285
10	200	21974

Suspected Bot List [2020-10-28]

detection period: 2020-10-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2364

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-27]

detection period: 2020-10-27 00:00-23:59 UTC
total number of suspected botnet IPs: 37431
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34990
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1482
2	VNPT-VN	978
3	VIETTEL-VN	801
4	Baidu	694
5	TENCENT-CN	685
6	HINET-NET	567
7	DIGITALOCEAN-192-241-128-0	506
8	ALISOFT	500
9	UNICOM-HA	465
10	TELKOMNET	449

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8780
2	United States	3659
3	India	2582
4	Viet Nam	2536
5	Russian Federation	2449
6	Brazil	1824
7	Indonesia	1354
8	France	968
9	Thailand	915
10	Taiwan	738

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	470758
2	1433	123832
3	900	90293
4	600	86396
5	1000	83917
6	200	83405
7	800	81642
8	1100	81104
9	100	80579
10	400	79769

Suspected Bot List [2020-10-27]

detection period: 2020-10-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2441

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-26]

detection period: 2020-10-26 00:00-23:59 UTC
total number of suspected botnet IPs: 37354
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34812
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1498
2	VNPT-VN	929
3	VIETTEL-VN	871
4	TENCENT-CN	706
5	Baidu	676
6	HINET-NET	658
7	ALISOFT	512
8	TELKOMNET	469
9	UNICOM-HA	456
10	VE-CSVE-LACNIC	433

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8825
2	United States	3655
3	Viet Nam	2601
4	Russian Federation	2371
5	India	2334
6	Brazil	1803
7	Indonesia	1317
8	France	916
9	Thailand	897
10	Taiwan	812

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	423011
2	500	246870
3	1100	246488
4	200	245100
5	300	244653
6	900	238833
7	1400	238739
8	400	237735
9	800	232591
10	1300	230440

Suspected Bot List [2020-10-26]

detection period: 2020-10-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2542

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-25]

detection period: 2020-10-25 00:00-23:59 UTC
total number of suspected botnet IPs: 33887
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 31664
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1589
2	Baidu	781
3	TENCENT-CN	740
4	HINET-NET	561
5	VNPT-VN	556
6	VIETTEL-VN	510
7	ALISOFT	506
8	UNICOM-HA	461
9	CMNET	458
10	DIGITALOCEAN-192-241-128-0	400

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9152
2	United States	3979
3	Russian Federation	2117
4	Viet Nam	1693
5	India	1593
6	Brazil	1499
7	France	898
8	Indonesia	882
9	Taiwan	709
10	Mauritius	583

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	223389
2	600	179095
3	200	171514
4	1500	149637
5	1300	145067
6	500	145066
7	1100	144389
8	300	139827
9	1000	139157
10	100	135340

Suspected Bot List [2020-10-25]

detection period: 2020-10-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2223

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-24]

detection period: 2020-10-24 00:00-23:59 UTC
total number of suspected botnet IPs: 32126
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30074
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1426
2	Baidu	735
3	TENCENT-CN	681
4	VNPT-VN	646
5	VIETTEL-VN	571
6	HINET-NET	488
7	ALISOFT	477
8	UNICOM-HA	436
9	CMNET	433
10	DIGITALOCEAN-192-241-128-0	389

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8513
2	United States	3517
3	India	1918
4	Russian Federation	1865
5	Viet Nam	1851
6	Brazil	1427
7	Indonesia	946
8	France	819
9	Taiwan	613
10	Thailand	544

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	200	457723
2	1000	456511
3	500	451612
4	1100	447941
5	800	445502
6	300	442636
7	900	441709
8	600	432472
9	1400	430937
10	1200	429672

Suspected Bot List [2020-10-24]

detection period: 2020-10-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2052

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-23]

detection period: 2020-10-23 00:00-23:59 UTC
total number of suspected botnet IPs: 34338
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32224
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1443
2	VNPT-VN	874
3	Baidu	732
4	VIETTEL-VN	714
5	TENCENT-CN	685
6	HINET-NET	495
7	ALISOFT	489
8	UNICOM-HA	476
9	TELKOMNET	449
10	UNICOM-SD	412

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8877
2	United States	3545
3	Viet Nam	2343
4	India	2233
5	Russian Federation	2175
6	Brazil	1623
7	Indonesia	1200
8	France	859
9	Taiwan	642
10	Turkey	551

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	474145
2	1200	248066
3	200	237740
4	500	234609
5	800	225751
6	100	223614
7	700	223304
8	400	222937
9	1100	218279
10	1400	216803

Suspected Bot List [2020-10-23]

detection period: 2020-10-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2114

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-22]

detection period: 2020-10-22 00:00-23:59 UTC
total number of suspected botnet IPs: 35626
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33352
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1471
2	VNPT-VN	862
3	VIETTEL-VN	750
4	Baidu	735
5	TENCENT-CN	676
6	HINET-NET	487
7	UNICOM-SD	482
8	ALISOFT	472
9	UNICOM-HA	465
10	TELKOMNET	431

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8913
2	United States	3868
3	India	2334
4	Viet Nam	2290
5	Russian Federation	1967
6	Brazil	1612
7	Indonesia	1187
8	France	862
9	Thailand	778
10	Taiwan	640

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	460473
2	1221	207401
3	1433	66686
4	22	54620
5	23	50608
6	3389	23452
7	587	19728
8	122	18819
9	6001	16912
10	322	12709

Suspected Bot List [2020-10-22]

detection period: 2020-10-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2274

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-21]

detection period: 2020-10-21 00:00-23:59 UTC
total number of suspected botnet IPs: 37393
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35060
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1448
2	VNPT-VN	981
3	VIETTEL-VN	846
4	Baidu	741
5	TENCENT-CN	671
6	TELKOMNET	526
7	HINET-NET	526
8	UNICOM-SD	499
9	ALISOFT	471
10	UNICOM-HA	446

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8886
2	United States	4110
3	Viet Nam	2611
4	India	2456
5	Russian Federation	2263
6	Brazil	1676
7	Indonesia	1354
8	Thailand	898
9	France	851
10	Taiwan	688

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	421983
2	1221	213216
3	1433	74024
4	22	53741
5	23	48712
6	333	47290
7	6001	28097
8	26	20290
9	587	19359
10	3389	17461

Suspected Bot List [2020-10-21]

detection period: 2020-10-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2333

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-20]

detection period: 2020-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 37976
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35506
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1432
2	VNPT-VN	901
3	DIGITALOCEAN-165-232-32-0	781
4	VIETTEL-VN	774
5	Baidu	723
6	TENCENT-CN	669
7	HINET-NET	518
8	UNICOM-SD	514
9	TELKOMNET	491
10	ALISOFT	470

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8861
2	United States	4496
3	Viet Nam	2478
4	India	2455
5	Russian Federation	2050
6	Brazil	1806
7	Indonesia	1385
8	Thailand	946
9	France	849
10	Taiwan	677

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	724762
2	1221	213358
3	1433	148463
4	22	56723
5	23	49715
6	333	46141
7	1234	27264
8	3389	22537
9	587	20973
10	122	18545

Suspected Bot List [2020-10-20]

detection period: 2020-10-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2470

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-19]

detection period: 2020-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 37644
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35221
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1449
2	VNPT-VN	978
3	VIETTEL-VN	786
4	Baidu	715
5	TENCENT-CN	671
6	DIGITALOCEAN-165-232-32-0	583
7	UNICOM-SD	520
8	HINET-NET	504
9	UNICOM-HA	493
10	TELKOMNET	468

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9069
2	United States	4164
3	Viet Nam	2548
4	India	2499
5	Russian Federation	2037
6	Brazil	1805
7	Indonesia	1326
8	Thailand	965
9	France	840
10	Taiwan	663

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	481635
2	1221	213952
3	1433	89791
4	22	60164
5	23	50860
6	322	46959
7	422	45603
8	333	45379
9	3322	32596
10	5904	23900

Suspected Bot List [2020-10-19]

detection period: 2020-10-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2423

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-18]

detection period: 2020-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 32833
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30666
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1441
2	Baidu	730
3	TENCENT-CN	671
4	VNPT-VN	529
5	VIETTEL-VN	526
6	UNICOM-HA	498
7	UNICOM-SD	485
8	HINET-NET	478
9	ALISOFT	472
10	CHINANET-GD	398

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8863
2	United States	3477
3	Russian Federation	1898
4	Viet Nam	1701
5	India	1680
6	Brazil	1551
7	Indonesia	896
8	France	884
9	Taiwan	627
10	Mauritius	553

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1221	213610
2	445	200569
3	1433	108569
4	22	61529
5	23	49180
6	333	45386
7	822	37803
8	3322	28847
9	422	27679
10	3389	17385

Suspected Bot List [2020-10-18]

detection period: 2020-10-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2167

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-17]

detection period: 2020-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 32568
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30405
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1210
2	VNPT-VN	682
3	Baidu	626
4	TENCENT-CN	561
5	VIETTEL-VN	556
6	HINET-NET	491
7	UNICOM-HA	472
8	UNICOM-SD	463
9	ALISOFT	445
10	DIGITALOCEAN-192-241-128-0	413

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7915
2	United States	3627
3	India	2233
4	Viet Nam	1961
5	Russian Federation	1868
6	Brazil	1583
7	Indonesia	990
8	France	757
9	Taiwan	680
10	Thailand	619

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	523053
2	1221	89632
3	23	62744
4	22	55364
5	333	43721
6	1433	34765
7	222	29297
8	3389	21974
9	1124	16757
10	3322	12677

Suspected Bot List [2020-10-17]

detection period: 2020-10-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2163

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-16]

detection period: 2020-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 35040
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32789
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1206
2	VNPT-VN	936
3	VIETTEL-VN	725
4	Baidu	623
5	TENCENT-CN	580
6	HINET-NET	529
7	UNICOM-SD	526
8	UNICOM-HA	485
9	ALISOFT	468
10	DIGITALOCEAN-192-241-128-0	416

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8164
2	United States	3377
3	India	2515
4	Viet Nam	2419
5	Russian Federation	1994
6	Brazil	1787
7	Indonesia	1161
8	Thailand	869
9	France	793
10	Taiwan	725

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	671332
2	12	242950
3	123	197281
4	23	73587
5	1433	58436
6	22	56714
7	333	45006
8	3389	23403
9	1022	16281
10	666	8873

Suspected Bot List [2020-10-16]

detection period: 2020-10-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2251

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-15]

detection period: 2020-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 34504
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32213
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1262
2	VNPT-VN	926
3	VIETTEL-VN	735
4	Baidu	635
5	TENCENT-CN	585
6	HINET-NET	510
7	UNICOM-HA	485
8	UNICOM-SD	467
9	VE-CSVE-LACNIC	444
10	TELKOMNET	444

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7784
2	United States	3469
3	Viet Nam	2450
4	India	2367
5	Russian Federation	1976
6	Brazil	1640
7	Indonesia	1296
8	Thailand	862
9	France	807
10	Taiwan	690

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	12	507337
2	445	296272
3	123	200891
4	22	52558
5	1433	48613
6	23	45118
7	333	43759
8	3389	23382
9	1022	19925
10	1234	7587

Suspected Bot List [2020-10-15]

detection period: 2020-10-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2291

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-14]

detection period: 2020-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 34461
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32092
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1262
2	VNPT-VN	933
3	VIETTEL-VN	743
4	Baidu	630
5	TENCENT-CN	596
6	HINET-NET	523
7	UNICOM-HA	486
8	UNICOM-SD	477
9	DIGITALOCEAN-192-241-128-0	409
10	TELKOMNET	399

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8099
2	United States	3269
3	Viet Nam	2473
4	India	2340
5	Russian Federation	1967
6	Brazil	1604
7	Indonesia	1271
8	France	812
9	Thailand	804
10	Taiwan	681

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	12	519330
2	445	478385
3	143	219965
4	123	207097
5	22	56368
6	333	52402
7	3389	38923
8	1433	37561
9	23	35972
10	44	12232

Suspected Bot List [2020-10-14]

detection period: 2020-10-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2369

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-13]

detection period: 2020-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 34691
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32307
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1293
2	VNPT-VN	925
3	VIETTEL-VN	778
4	Baidu	638
5	TENCENT-CN	606
6	UNICOM-SD	494
7	HINET-NET	491
8	UNICOM-HA	489
9	TELKOMNET	440
10	ALISOFT	427

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8249
2	United States	3387
3	Viet Nam	2508
4	India	2444
5	Russian Federation	1959
6	Brazil	1607
7	Indonesia	1218
8	France	829
9	Taiwan	639
10	Mexico	588

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	458355
2	143	281624
3	123	205820
4	12	150360
5	1433	82456
6	22	59344
7	333	50604
8	3389	39022
9	23	37393
10	1322	13287

Suspected Bot List [2020-10-13]

detection period: 2020-10-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2384

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-12]

detection period: 2020-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 35617
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33253
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1349
2	VNPT-VN	911
3	VIETTEL-VN	736
4	Baidu	652
5	TENCENT-CN	636
6	HINET-NET	532
7	UNICOM-SD	511
8	UNICOM-HA	497
9	ALISOFT	451
10	TELKOMNET	437

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8595
2	United States	3627
3	India	2514
4	Viet Nam	2424
5	Russian Federation	1988
6	Brazil	1305
7	Indonesia	1266
8	France	900
9	Thailand	828
10	Taiwan	699

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	458228
2	143	283208
3	123	198224
4	22	57816
5	333	53407
6	23	48548
7	1433	45225
8	3389	33296
9	43	27798
10	222	15159

Suspected Bot List [2020-10-12]

detection period: 2020-10-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2364

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-11]

detection period: 2020-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 31841
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29717
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1443
2	Baidu	708
3	TENCENT-CN	664
4	VNPT-VN	550
5	UNICOM-HA	515
6	UNICOM-SD	508
7	ALISOFT	463
8	VIETTEL-VN	460
9	HINET-NET	457
10	DIGITALOCEAN-192-241-128-0	412

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8775
2	United States	3376
3	India	1720
4	Russian Federation	1683
5	Viet Nam	1529
6	Brazil	1353
7	Indonesia	856
8	France	846
9	Taiwan	609
10	Mauritius	554

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	143	285157
2	445	203397
3	123	190305
4	1234	160969
5	1433	134333
6	22	57596
7	333	50249
8	23	49870
9	1230	30059
10	1020	23397

Suspected Bot List [2020-10-11]

detection period: 2020-10-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2124

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-10]

detection period: 2020-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 32054
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29974
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1318
2	VIETTEL-VN	784
3	Baidu	657
4	VNPT-VN	645
5	TENCENT-CN	618
6	HINET-NET	532
7	UNICOM-SD	505
8	UNICOM-HA	493
9	ALISOFT	481
10	DIGITALOCEAN-192-241-128-0	417

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8315
2	United States	3150
3	India	2301
4	Viet Nam	2091
5	Russian Federation	1694
6	Brazil	1384
7	Indonesia	930
8	France	815
9	Taiwan	691
10	Thailand	535

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	352760
2	143	285905
3	123	191520
4	1234	159275
5	1433	74700
6	22	56383
7	23	50924
8	20	47803
9	333	44878
10	666	25956

Suspected Bot List [2020-10-10]

detection period: 2020-10-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2080

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-09]

detection period: 2020-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 35115
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32905
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1345
2	VIETTEL-VN	995
3	VNPT-VN	870
4	Baidu	680
5	TENCENT-CN	636
6	HINET-NET	612
7	UNICOM-SD	527
8	UNICOM-HA	523
9	ALISOFT	454
10	VE-CSVE-LACNIC	422

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8563
2	United States	3219
3	Viet Nam	2628
4	India	2628
5	Russian Federation	1967
6	Brazil	1631
7	Indonesia	1168
8	France	826
9	Thailand	800
10	Taiwan	786

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	517748
2	1234	160485
3	143	148926
4	123	101211
5	1433	84024
6	22	62864
7	23	46243
8	333	45148
9	41	28121
10	666	25931

Suspected Bot List [2020-10-09]

detection period: 2020-10-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2210

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country

List from TCP port scans:

Botnet Statistics [2020-10-08]

detection period: 2020-10-08 00:00-23:59 UTC
total number of suspected botnet IPs: 49126
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 46922
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VIETTEL-VN	14373
2	TencentCloud	1342
3	VNPT-VN	1007
4	HINET-NET	690
5	Baidu	689
6	TENCENT-CN	643
7	UNICOM-HA	494
8	UNICOM-SD	476
9	ALISOFT	451
10	TELKOMNET	446

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	Viet Nam	16119
2	China	8416
3	United States	3240
4	India	2727
5	Russian Federation	1949
6	Brazil	1700
7	Indonesia	1263
8	Taiwan	884
9	France	860
10	Thailand	804

The top 10 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	774203
2	1234	160349
3	23	73273
4	1433	65752
5	22	57925
6	333	44944
7	25	33566
8	3389	26450
9	40	15668
10	2020	15654