detection period: 2024-11-13 00:00-23:59 UTC
total number of suspected botnet IPs: 20607
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19163
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | GOOGLE-CLOUD | 1050 |
| 2 | PAN-22 | 972 |
| 3 | MSFT | 920 |
| 4 | AL-3 | 730 |
| 5 | HINET-NET | 650 |
| 6 | UK-MICROSOFT-20000324 | 638 |
| 7 | ASEPL-SG | 511 |
| 8 | ALISOFT | 491 |
| 9 | BSNLNET | 434 |
| 10 | CMNET | 353 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6492 |
| 2 | China | 3888 |
| 3 | United Kingdom | 1171 |
| 4 | India | 1081 |
| 5 | Taiwan | 786 |
| 6 | Singapore | 631 |
| 7 | South Korea | 516 |
| 8 | Russian Federation | 500 |
| 9 | Hong Kong | 455 |
| 10 | Brazil | 433 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 27302 | 320735 |
| 2 | 7622 | 184329 |
| 3 | 22694 | 166224 |
| 4 | 22284 | 156820 |
| 5 | 22067 | 154684 |
| 6 | 23682 | 150543 |
| 7 | 22329 | 133698 |
| 8 | 39522 | 121363 |
| 9 | 6000 | 120703 |
| 10 | 24622 | 119842 |
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment