detection period: 2024-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 20330
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18912
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | GOOGLE-CLOUD | 1048 |
| 2 | PAN-22 | 967 |
| 3 | MSFT | 920 |
| 4 | AL-3 | 674 |
| 5 | UK-MICROSOFT-20000324 | 637 |
| 6 | HINET-NET | 603 |
| 7 | BSNLNET | 415 |
| 8 | ASEPL-SG | 395 |
| 9 | ALISOFT | 392 |
| 10 | HURRICANE-4 | 351 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6439 |
| 2 | China | 3969 |
| 3 | United Kingdom | 1200 |
| 4 | India | 1088 |
| 5 | Taiwan | 729 |
| 6 | South Korea | 535 |
| 7 | Hong Kong | 519 |
| 8 | Singapore | 518 |
| 9 | Russian Federation | 496 |
| 10 | Brazil | 370 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 27302 | 347884 |
| 2 | 23682 | 206054 |
| 3 | 22694 | 195294 |
| 4 | 7722 | 132468 |
| 5 | 29272 | 127832 |
| 6 | 2732 | 126897 |
| 7 | 21152 | 124557 |
| 8 | 49322 | 123170 |
| 9 | 24122 | 120981 |
| 10 | 6000 | 117067 |
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment