Daily Botnet Statistics

Sunday, June 2, 2019

Suspected Bot List [2019-06-01]

detection period: 2019-06-01 00:00-23:59 UTC
number of suspected bots' IPs listed here: 604

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country code	IP address	Country

List from greylisting:

country code	IP address	Country

List from SSH probes:

country code	IP address	Country
CA	51.79.130.164	Canada

List from TCP port scans:

Botnet Statistics [2019-05-31]

detection period: 2019-05-31 00:00-23:59 UTC
total number of suspected botnet IPs: 11860
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11178
number of spam blocked: 4
recipient count of spam blocked: 4

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	409
2	TENCENT-CN	302
3	HINET-NET	262
4	Baidu	244
5	DO-13	239
6	VNPT-VN	213
7	KORNET	177
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	155
9	OVH	147
10	AT-88-Z	147

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	2212
2	United States	1934
3	France	658
4	India	514
5	Brazil	476
6	Viet Nam	458
7	Russian Federation	387
8	Indonesia	339
9	South Korea	335
10	Taiwan	304

Suspected Bot List [2019-05-31]

detection period: 2019-05-31 00:00-23:59 UTC
number of suspected bots' IPs listed here: 682