detection period: 2025-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 24200
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22730
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1427 |
| 2 | GOOGLE-CLOUD | 1046 |
| 3 | AL-3 | 1017 |
| 4 | PAN-22 | 965 |
| 5 | MSFT | 860 |
| 6 | BSNLNET | 734 |
| 7 | ASEPL-SG | 661 |
| 8 | UK-MICROSOFT-20000324 | 550 |
| 9 | ALISOFT | 499 |
| 10 | CENSY | 398 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7378 |
| 2 | China | 5282 |
| 3 | Taiwan | 1599 |
| 4 | India | 1466 |
| 5 | United Kingdom | 894 |
| 6 | Singapore | 874 |
| 7 | Indonesia | 480 |
| 8 | Hong Kong | 459 |
| 9 | Russian Federation | 457 |
| 10 | Brazil | 448 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 53100 |
| 2 | 1111 | 43595 |
| 3 | 19999 | 34709 |
| 4 | 23 | 27152 |
| 5 | 225 | 24019 |
| 6 | 22000 | 22725 |
| 7 | 5900 | 21748 |
| 8 | 3389 | 20361 |
| 9 | 221 | 19033 |
| 10 | 35622 | 18440 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1501 |
| 2 | GOOGLE-CLOUD | 1030 |
| 3 | PAN-22 | 964 |
| 4 | AL-3 | 930 |
| 5 | MSFT | 858 |
| 6 | BSNLNET | 758 |
| 7 | UK-MICROSOFT-20000324 | 566 |
| 8 | ASEPL-SG | 561 |
| 9 | ALISOFT | 421 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6936 |
| 2 | China | 5447 |
| 3 | Taiwan | 1698 |
| 4 | India | 1469 |
| 5 | United Kingdom | 900 |
| 6 | Singapore | 745 |
| 7 | Russian Federation | 506 |
| 8 | South Korea | 451 |
| 9 | Hong Kong | 438 |
| 10 | Brazil | 427 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 50875 |
| 2 | 1111 | 43052 |
| 3 | 19999 | 29514 |
| 4 | 5900 | 26213 |
| 5 | 22000 | 26071 |
| 6 | 23 | 18182 |
| 7 | 1020 | 15884 |
| 8 | 1019 | 15145 |
| 9 | 3389 | 15052 |
| 10 | 449 | 14565 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1613 |
| 2 | AL-3 | 1017 |
| 3 | GOOGLE-CLOUD | 1014 |
| 4 | PAN-22 | 946 |
| 5 | MSFT | 884 |
| 6 | BSNLNET | 748 |
| 7 | ASEPL-SG | 661 |
| 8 | UK-MICROSOFT-20000324 | 562 |
| 9 | ALISOFT | 473 |
| 10 | CENSY | 398 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7550 |
| 2 | China | 5671 |
| 3 | Taiwan | 1823 |
| 4 | India | 1522 |
| 5 | United Kingdom | 952 |
| 6 | Singapore | 865 |
| 7 | Russian Federation | 501 |
| 8 | South Korea | 474 |
| 9 | Hong Kong | 470 |
| 10 | Brazil | 434 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 46380 |
| 2 | 1111 | 39240 |
| 3 | 5900 | 36800 |
| 4 | 22000 | 25454 |
| 5 | 54345 | 20555 |
| 6 | 23 | 18760 |
| 7 | 445 | 17046 |
| 8 | 2222 | 16936 |
| 9 | 6001 | 14560 |
| 10 | 7000 | 13687 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1771 |
| 2 | GOOGLE-CLOUD | 1027 |
| 3 | PAN-22 | 963 |
| 4 | AL-3 | 893 |
| 5 | MSFT | 873 |
| 6 | BSNLNET | 739 |
| 7 | UK-MICROSOFT-20000324 | 565 |
| 8 | ASEPL-SG | 509 |
| 9 | CENSY | 400 |
| 10 | ALISOFT | 398 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7076 |
| 2 | China | 5404 |
| 3 | Taiwan | 2043 |
| 4 | India | 1468 |
| 5 | United Kingdom | 923 |
| 6 | Singapore | 707 |
| 7 | Russian Federation | 515 |
| 8 | Hong Kong | 504 |
| 9 | South Korea | 499 |
| 10 | Brazil | 473 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 48958 |
| 2 | 2255 | 37417 |
| 3 | 5900 | 27076 |
| 4 | 2222 | 24545 |
| 5 | 22000 | 24501 |
| 6 | 23 | 19967 |
| 7 | 1015 | 15959 |
| 8 | 445 | 15511 |
| 9 | 2221 | 15379 |
| 10 | 1016 | 15241 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1973 |
| 2 | GOOGLE-CLOUD | 1029 |
| 3 | PAN-22 | 965 |
| 4 | AL-3 | 863 |
| 5 | MSFT | 841 |
| 6 | BSNLNET | 721 |
| 7 | UK-MICROSOFT-20000324 | 558 |
| 8 | ASEPL-SG | 531 |
| 9 | CENSY | 400 |
| 10 | ALISOFT | 399 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7240 |
| 2 | China | 5278 |
| 3 | Taiwan | 2270 |
| 4 | India | 1259 |
| 5 | United Kingdom | 935 |
| 6 | Singapore | 741 |
| 7 | Hong Kong | 494 |
| 8 | South Korea | 484 |
| 9 | Russian Federation | 428 |
| 10 | Indonesia | 410 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2255 | 102676 |
| 2 | 22 | 46280 |
| 3 | 12345 | 40839 |
| 4 | 12074 | 35859 |
| 5 | 5900 | 27258 |
| 6 | 2244 | 23068 |
| 7 | 23 | 19367 |
| 8 | 1013 | 16011 |
| 9 | 3007 | 15998 |
| 10 | 10022 | 13618 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 2131 |
| 2 | GOOGLE-CLOUD | 1032 |
| 3 | PAN-22 | 965 |
| 4 | MSFT | 859 |
| 5 | AL-3 | 794 |
| 6 | BSNLNET | 748 |
| 7 | UK-MICROSOFT-20000324 | 563 |
| 8 | ASEPL-SG | 454 |
| 9 | CENSY | 399 |
| 10 | VOLCANO-ENGINE | 384 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6889 |
| 2 | China | 5430 |
| 3 | Taiwan | 2433 |
| 4 | India | 1449 |
| 5 | United Kingdom | 952 |
| 6 | Singapore | 671 |
| 7 | South Korea | 549 |
| 8 | Hong Kong | 492 |
| 9 | Russian Federation | 476 |
| 10 | Brazil | 474 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 6622 | 66972 |
| 2 | 22 | 46028 |
| 3 | 2244 | 35293 |
| 4 | 8888 | 28031 |
| 5 | 5900 | 26651 |
| 6 | 20455 | 22369 |
| 7 | 3006 | 19522 |
| 8 | 23 | 18847 |
| 9 | 445 | 18025 |
| 10 | 10022 | 16987 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 2166 |
| 2 | GOOGLE-CLOUD | 1032 |
| 3 | PAN-22 | 965 |
| 4 | MSFT | 845 |
| 5 | AL-3 | 761 |
| 6 | BSNLNET | 759 |
| 7 | UK-MICROSOFT-20000324 | 553 |
| 8 | ASEPL-SG | 451 |
| 9 | CENSY | 400 |
| 10 | VOLCANO-ENGINE | 384 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6748 |
| 2 | China | 4970 |
| 3 | Taiwan | 2478 |
| 4 | India | 1468 |
| 5 | United Kingdom | 956 |
| 6 | Singapore | 665 |
| 7 | Russian Federation | 572 |
| 8 | South Korea | 521 |
| 9 | Indonesia | 493 |
| 10 | Hong Kong | 482 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 6622 | 88720 |
| 2 | 8888 | 70226 |
| 3 | 22 | 47362 |
| 4 | 10475 | 38223 |
| 5 | 2255 | 32249 |
| 6 | 2299 | 32116 |
| 7 | 5900 | 26232 |
| 8 | 4022 | 24351 |
| 9 | 3005 | 20931 |
| 10 | 10022 | 20060 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 2045 |
| 2 | GOOGLE-CLOUD | 1051 |
| 3 | PAN-22 | 965 |
| 4 | MSFT | 823 |
| 5 | BSNLNET | 738 |
| 6 | UK-MICROSOFT-20000324 | 564 |
| 7 | AL-3 | 463 |
| 8 | CENSY | 396 |
| 9 | HURRICANE-4 | 347 |
| 10 | VOLCANO-ENGINE | 322 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6737 |
| 2 | China | 4525 |
| 3 | Taiwan | 2341 |
| 4 | India | 1406 |
| 5 | United Kingdom | 960 |
| 6 | Russian Federation | 575 |
| 7 | Indonesia | 536 |
| 8 | South Korea | 528 |
| 9 | Hong Kong | 461 |
| 10 | Brazil | 456 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 9122 | 134685 |
| 2 | 9922 | 98646 |
| 3 | 6622 | 88642 |
| 4 | 8888 | 63564 |
| 5 | 22 | 43616 |
| 6 | 5900 | 36595 |
| 7 | 2255 | 29842 |
| 8 | 1004 | 21130 |
| 9 | 23 | 19153 |
| 10 | 2024 | 18528 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1716 |
| 2 | GOOGLE-CLOUD | 1021 |
| 3 | PAN-22 | 964 |
| 4 | BSNLNET | 850 |
| 5 | MSFT | 845 |
| 6 | UK-MICROSOFT-20000324 | 561 |
| 7 | AL-3 | 513 |
| 8 | ThreexK_Tech_GmbH | 415 |
| 9 | CENSY | 397 |
| 10 | VOLCANO-ENGINE | 350 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7335 |
| 2 | China | 4630 |
| 3 | Taiwan | 1979 |
| 4 | India | 1558 |
| 5 | United Kingdom | 914 |
| 6 | Russian Federation | 496 |
| 7 | Singapore | 487 |
| 8 | Indonesia | 471 |
| 9 | South Korea | 465 |
| 10 | Hong Kong | 431 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 6622 | 90044 |
| 2 | 8888 | 65306 |
| 3 | 6709 | 64365 |
| 4 | 2024 | 58335 |
| 5 | 9922 | 56368 |
| 6 | 22 | 52182 |
| 7 | 2049 | 40650 |
| 8 | 3322 | 30240 |
| 9 | 5900 | 29399 |
| 10 | 2122 | 28722 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1318 |
| 2 | GOOGLE-CLOUD | 995 |
| 3 | PAN-22 | 944 |
| 4 | MSFT | 856 |
| 5 | BSNLNET | 760 |
| 6 | UK-MICROSOFT-20000324 | 557 |
| 7 | AL-3 | 492 |
| 8 | CENSY | 399 |
| 9 | VOLCANO-ENGINE | 360 |
| 10 | HURRICANE-4 | 351 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7045 |
| 2 | China | 5006 |
| 3 | Taiwan | 1568 |
| 4 | India | 1542 |
| 5 | United Kingdom | 930 |
| 6 | Russian Federation | 521 |
| 7 | South Korea | 487 |
| 8 | Singapore | 470 |
| 9 | Indonesia | 454 |
| 10 | Brazil | 438 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3322 | 64901 |
| 2 | 8888 | 61710 |
| 3 | 2024 | 57394 |
| 4 | 22 | 54389 |
| 5 | 5900 | 39837 |
| 6 | 2049 | 34258 |
| 7 | 7722 | 29127 |
| 8 | 8622 | 24529 |
| 9 | 6622 | 21792 |
| 10 | 2255 | 21090 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1332 |
| 2 | AL-3 | 1225 |
| 3 | GOOGLE-CLOUD | 1034 |
| 4 | PAN-22 | 964 |
| 5 | MSFT | 885 |
| 6 | ASEPL-SG | 792 |
| 7 | BSNLNET | 789 |
| 8 | UK-MICROSOFT-20000324 | 570 |
| 9 | ALISOFT | 523 |
| 10 | VOLCANO-ENGINE | 408 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7136 |
| 2 | China | 5477 |
| 3 | India | 1730 |
| 4 | Taiwan | 1608 |
| 5 | Singapore | 1039 |
| 6 | United Kingdom | 931 |
| 7 | Indonesia | 652 |
| 8 | Russian Federation | 543 |
| 9 | South Korea | 537 |
| 10 | Hong Kong | 472 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 7722 | 88053 |
| 2 | 22 | 67894 |
| 3 | 2024 | 58540 |
| 4 | 7777 | 58146 |
| 5 | 6705 | 55418 |
| 6 | 8888 | 53562 |
| 7 | 12222 | 48366 |
| 8 | 5900 | 30925 |
| 9 | 10222 | 22983 |
| 10 | 23 | 17876 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1763 |
| 2 | AL-3 | 1206 |
| 3 | GOOGLE-CLOUD | 1023 |
| 4 | PAN-22 | 964 |
| 5 | MSFT | 835 |
| 6 | ASEPL-SG | 784 |
| 7 | BSNLNET | 732 |
| 8 | ALISOFT | 662 |
| 9 | UK-MICROSOFT-20000324 | 557 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7156 |
| 2 | China | 5250 |
| 3 | Taiwan | 2010 |
| 4 | India | 1281 |
| 5 | Singapore | 980 |
| 6 | United Kingdom | 941 |
| 7 | South Korea | 508 |
| 8 | Russian Federation | 427 |
| 9 | Hong Kong | 425 |
| 10 | Indonesia | 373 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 8422 | 118315 |
| 2 | 22 | 91012 |
| 3 | 7722 | 90044 |
| 4 | 8888 | 63990 |
| 5 | 2024 | 58960 |
| 6 | 10222 | 34462 |
| 7 | 6000 | 33873 |
| 8 | 5900 | 31387 |
| 9 | 6008 | 21433 |
| 10 | 12121 | 20557 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1334 |
| 2 | HINET-NET | 1272 |
| 3 | GOOGLE-CLOUD | 1031 |
| 4 | PAN-22 | 965 |
| 5 | ASEPL-SG | 883 |
| 6 | MSFT | 858 |
| 7 | BSNLNET | 776 |
| 8 | ALISOFT | 616 |
| 9 | UK-MICROSOFT-20000324 | 560 |
| 10 | CENSY | 399 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6862 |
| 2 | China | 5278 |
| 3 | India | 1608 |
| 4 | Taiwan | 1451 |
| 5 | Singapore | 1067 |
| 6 | United Kingdom | 957 |
| 7 | South Korea | 549 |
| 8 | Russian Federation | 432 |
| 9 | Hong Kong | 403 |
| 10 | Indonesia | 376 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 89334 |
| 2 | 7722 | 89269 |
| 3 | 8888 | 63118 |
| 4 | 2024 | 58723 |
| 5 | 2800 | 50377 |
| 6 | 24 | 46193 |
| 7 | 26370 | 45276 |
| 8 | 10222 | 44223 |
| 9 | 9999 | 42214 |
| 10 | 5900 | 31300 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1445 |
| 2 | AL-3 | 1172 |
| 3 | GOOGLE-CLOUD | 1032 |
| 4 | PAN-22 | 965 |
| 5 | MSFT | 848 |
| 6 | BSNLNET | 781 |
| 7 | ASEPL-SG | 759 |
| 8 | ALISOFT | 642 |
| 9 | UK-MICROSOFT-20000324 | 561 |
| 10 | CENSY | 398 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 6899 |
| 2 | China | 5352 |
| 3 | India | 1760 |
| 4 | Taiwan | 1631 |
| 5 | United Kingdom | 973 |
| 6 | Singapore | 948 |
| 7 | South Korea | 593 |
| 8 | Russian Federation | 497 |
| 9 | Hong Kong | 451 |
| 10 | Indonesia | 433 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 7722 | 90902 |
| 2 | 22 | 85370 |
| 3 | 2025 | 78978 |
| 4 | 2024 | 58886 |
| 5 | 10222 | 46974 |
| 6 | 8090 | 45748 |
| 7 | 9999 | 42429 |
| 8 | 5900 | 34773 |
| 9 | 2221 | 33484 |
| 10 | 2223 | 33425 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1382 |
| 2 | AL-3 | 1382 |
| 3 | GOOGLE-CLOUD | 1049 |
| 4 | PAN-22 | 965 |
| 5 | ASEPL-SG | 960 |
| 6 | MSFT | 857 |
| 7 | BSNLNET | 730 |
| 8 | ALISOFT | 601 |
| 9 | UK-MICROSOFT-20000324 | 559 |
| 10 | KORNET-KR | 409 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8207 |
| 2 | China | 5289 |
| 3 | India | 1694 |
| 4 | Taiwan | 1557 |
| 5 | Singapore | 1173 |
| 6 | United Kingdom | 950 |
| 7 | South Korea | 708 |
| 8 | Russian Federation | 500 |
| 9 | Indonesia | 486 |
| 10 | Hong Kong | 483 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 7722 | 91876 |
| 2 | 2025 | 86793 |
| 3 | 22 | 72551 |
| 4 | 6000 | 70299 |
| 5 | 2024 | 59081 |
| 6 | 10222 | 52571 |
| 7 | 9999 | 42574 |
| 8 | 2221 | 37137 |
| 9 | 6003 | 26938 |
| 10 | 6001 | 25746 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1333 |
| 2 | AL-3 | 1176 |
| 3 | GOOGLE-CLOUD | 1026 |
| 4 | PAN-22 | 964 |
| 5 | MSFT | 852 |
| 6 | ASEPL-SG | 767 |
| 7 | BSNLNET | 705 |
| 8 | ALISOFT | 614 |
| 9 | UK-MICROSOFT-20000324 | 564 |
| 10 | KORNET-KR | 494 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7588 |
| 2 | China | 5293 |
| 3 | India | 1552 |
| 4 | Taiwan | 1536 |
| 5 | Singapore | 980 |
| 6 | United Kingdom | 965 |
| 7 | South Korea | 827 |
| 8 | Russian Federation | 518 |
| 9 | Indonesia | 487 |
| 10 | Hong Kong | 436 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 64011 |
| 2 | 4444 | 56667 |
| 3 | 23 | 45266 |
| 4 | 6001 | 32155 |
| 5 | 4122 | 30761 |
| 6 | 9922 | 27340 |
| 7 | 5900 | 23710 |
| 8 | 24 | 23251 |
| 9 | 6002 | 19606 |
| 10 | 2024 | 18313 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1352 |
| 2 | AL-3 | 1320 |
| 3 | GOOGLE-CLOUD | 1002 |
| 4 | PAN-22 | 950 |
| 5 | ASEPL-SG | 923 |
| 6 | MSFT | 864 |
| 7 | BSNLNET | 687 |
| 8 | ALISOFT | 601 |
| 9 | KORNET-KR | 598 |
| 10 | UK-MICROSOFT-20000324 | 564 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8113 |
| 2 | China | 5991 |
| 3 | Taiwan | 1553 |
| 4 | India | 1498 |
| 5 | Singapore | 1154 |
| 6 | United Kingdom | 969 |
| 7 | South Korea | 930 |
| 8 | Indonesia | 511 |
| 9 | Brazil | 495 |
| 10 | Russian Federation | 483 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 4444 | 163091 |
| 2 | 22 | 69712 |
| 3 | 23 | 55443 |
| 4 | 5900 | 41792 |
| 5 | 2698 | 41304 |
| 6 | 6000 | 33799 |
| 7 | 5122 | 29694 |
| 8 | 1022 | 27930 |
| 9 | 24 | 25323 |
| 10 | 3389 | 22845 |
Tuesday, January 14, 2025
Botnet Statistics [2025-01-13]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 26255
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24699
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250114 Botnet Detection Live Streaming 100+ zombies detected)
detection period: 2025-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 26255
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24699
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1223 |
| 2 | AL-3 | 1139 |
| 3 | GOOGLE-CLOUD | 1028 |
| 4 | PAN-22 | 964 |
| 5 | MSFT | 886 |
| 6 | ASEPL-SG | 731 |
| 7 | ALISOFT | 620 |
| 8 | KORNET-KR | 615 |
| 9 | UK-MICROSOFT-20000324 | 576 |
| 10 | BSNLNET | 538 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7596 |
| 2 | China | 5799 |
| 3 | Taiwan | 1425 |
| 4 | India | 1358 |
| 5 | United Kingdom | 955 |
| 6 | Singapore | 948 |
| 7 | South Korea | 945 |
| 8 | Brazil | 543 |
| 9 | Indonesia | 526 |
| 10 | Russian Federation | 507 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 61571 |
| 2 | 6000 | 34927 |
| 3 | 7122 | 31218 |
| 4 | 24 | 24368 |
| 5 | 1022 | 24072 |
| 6 | 3389 | 24009 |
| 7 | 23 | 22922 |
| 8 | 9922 | 22010 |
| 9 | 22222 | 20665 |
| 10 | 8022 | 18593 |
Monday, January 13, 2025
Botnet Statistics [2025-01-12]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 27434
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25903
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250113 Botnet Detection Live Streaming 100+ zombies detected)
detection period: 2025-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 27434
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25903
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1369 |
| 2 | HINET-NET | 1314 |
| 3 | GOOGLE-CLOUD | 1035 |
| 4 | PAN-22 | 965 |
| 5 | ASEPL-SG | 949 |
| 6 | MSFT | 875 |
| 7 | KORNET-KR | 714 |
| 8 | ALISOFT | 640 |
| 9 | BSNLNET | 597 |
| 10 | UK-MICROSOFT-20000324 | 566 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8295 |
| 2 | China | 5758 |
| 3 | Taiwan | 1544 |
| 4 | India | 1217 |
| 5 | Singapore | 1146 |
| 6 | South Korea | 1113 |
| 7 | United Kingdom | 991 |
| 8 | Brazil | 554 |
| 9 | Hong Kong | 515 |
| 10 | Russian Federation | 470 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 8122 | 113741 |
| 2 | 6956 | 68304 |
| 3 | 22 | 62434 |
| 4 | 46000 | 51070 |
| 5 | 22222 | 38938 |
| 6 | 6000 | 37580 |
| 7 | 22000 | 35630 |
| 8 | 4122 | 29328 |
| 9 | 3389 | 24903 |
| 10 | 23 | 23877 |
Sunday, January 12, 2025
Botnet Statistics [2025-01-11]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26471
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24844
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250112 Botnet Detection Live Streaming 100+ zombies detected)
detection period: 2025-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26471
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24844
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1115 |
| 2 | GOOGLE-CLOUD | 1033 |
| 3 | PAN-22 | 964 |
| 4 | MSFT | 880 |
| 5 | HINET-NET | 852 |
| 6 | KORNET-KR | 808 |
| 7 | ASEPL-SG | 707 |
| 8 | BSNLNET | 657 |
| 9 | ALISOFT | 641 |
| 10 | UK-MICROSOFT-20000324 | 567 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7511 |
| 2 | China | 5876 |
| 3 | India | 1388 |
| 4 | South Korea | 1201 |
| 5 | Taiwan | 1045 |
| 6 | United Kingdom | 953 |
| 7 | Singapore | 893 |
| 8 | Brazil | 565 |
| 9 | Hong Kong | 541 |
| 10 | Russian Federation | 510 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 8122 | 66471 |
| 2 | 8888 | 65601 |
| 3 | 22 | 62906 |
| 4 | 22000 | 51413 |
| 5 | 22222 | 48286 |
| 6 | 23 | 47403 |
| 7 | 1022 | 31354 |
| 8 | 63 | 30750 |
| 9 | 8022 | 27882 |
| 10 | 24570 | 26475 |
Saturday, January 11, 2025
Botnet Statistics [2025-01-10]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 29175
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27487
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250111 Botnet Detection Live Streaming 100+ zombies detected)
detection period: 2025-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 29175
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27487
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | HINET-NET | 1447 |
| 2 | AL-3 | 1407 |
| 3 | GOOGLE-CLOUD | 1036 |
| 4 | PAN-22 | 965 |
| 5 | ASEPL-SG | 947 |
| 6 | MSFT | 888 |
| 7 | KORNET-KR | 846 |
| 8 | BSNLNET | 741 |
| 9 | ALISOFT | 636 |
| 10 | UK-MICROSOFT-20000324 | 576 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7965 |
| 2 | China | 6194 |
| 3 | India | 1737 |
| 4 | Taiwan | 1678 |
| 5 | South Korea | 1233 |
| 6 | Singapore | 1159 |
| 7 | United Kingdom | 984 |
| 8 | Brazil | 639 |
| 9 | Russian Federation | 583 |
| 10 | Hong Kong | 545 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 9122 | 149498 |
| 2 | 8888 | 120027 |
| 3 | 4747 | 65013 |
| 4 | 22 | 63114 |
| 5 | 23 | 49247 |
| 6 | 26450 | 39752 |
| 7 | 1122 | 39611 |
| 8 | 8443 | 32269 |
| 9 | 5900 | 29820 |
| 10 | 22222 | 25764 |
Friday, January 10, 2025
Botnet Statistics [2025-01-09]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 29364
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27569
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250110 Botnet Detection Live Streaming 200+ zombies detected)
detection period: 2025-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 29364
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27569
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1181 |
| 2 | GOOGLE-CLOUD | 1050 |
| 3 | KORNET-KR | 1034 |
| 4 | PAN-22 | 964 |
| 5 | MSFT | 906 |
| 6 | BSNLNET | 884 |
| 7 | ASEPL-SG | 738 |
| 8 | HINET-NET | 690 |
| 9 | ALISOFT | 681 |
| 10 | UK-MICROSOFT-20000324 | 569 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7743 |
| 2 | China | 6216 |
| 3 | India | 2031 |
| 4 | South Korea | 1480 |
| 5 | United Kingdom | 1001 |
| 6 | Singapore | 943 |
| 7 | Taiwan | 842 |
| 8 | Brazil | 627 |
| 9 | Russian Federation | 625 |
| 10 | Indonesia | 574 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 8888 | 103318 |
| 2 | 6944 | 73219 |
| 3 | 22 | 67078 |
| 4 | 1122 | 64306 |
| 5 | 9281 | 57249 |
| 6 | 8443 | 56910 |
| 7 | 6676 | 51966 |
| 8 | 23 | 49156 |
| 9 | 9122 | 44978 |
| 10 | 12951 | 41322 |
Thursday, January 9, 2025
Botnet Statistics [2025-01-08]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 31385
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29553
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
20250109 Botnet Detection Live Streaming 200+ zombies detected)
detection period: 2025-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 31385
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29553
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1415 |
| 2 | KORNET-KR | 1298 |
| 3 | HINET-NET | 1242 |
| 4 | GOOGLE-CLOUD | 1030 |
| 5 | BSNLNET | 976 |
| 6 | PAN-22 | 965 |
| 7 | ASEPL-SG | 957 |
| 8 | MSFT | 920 |
| 9 | ALISOFT | 731 |
| 10 | UK-MICROSOFT-20000324 | 559 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7656 |
| 2 | China | 6809 |
| 3 | India | 2187 |
| 4 | South Korea | 1777 |
| 5 | Taiwan | 1446 |
| 6 | Singapore | 1169 |
| 7 | United Kingdom | 1050 |
| 8 | Brazil | 643 |
| 9 | Russian Federation | 598 |
| 10 | Indonesia | 598 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5555 | 206113 |
| 2 | 2222 | 79600 |
| 3 | 22 | 70698 |
| 4 | 1122 | 70007 |
| 5 | 8443 | 56606 |
| 6 | 6000 | 55951 |
| 7 | 18471 | 55369 |
| 8 | 9281 | 53930 |
| 9 | 23 | 51483 |
| 10 | 2056 | 40292 |
Wednesday, January 8, 2025
Botnet Statistics [2025-01-07]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 31943
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30052
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 31943
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30052
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | KORNET-KR | 1538 |
| 2 | HINET-NET | 1486 |
| 3 | AL-3 | 1026 |
| 4 | GOOGLE-CLOUD | 988 |
| 5 | BSNLNET | 988 |
| 6 | PAN-22 | 938 |
| 7 | MSFT | 895 |
| 8 | ALISOFT | 727 |
| 9 | ASEPL-SG | 618 |
| 10 | UK-MICROSOFT-20000324 | 577 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7877 |
| 2 | China | 6869 |
| 3 | India | 2138 |
| 4 | South Korea | 2065 |
| 5 | Taiwan | 1731 |
| 6 | United Kingdom | 1066 |
| 7 | Singapore | 870 |
| 8 | Brazil | 633 |
| 9 | Russian Federation | 619 |
| 10 | Indonesia | 595 |