detection period: 2026-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 20986
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19908
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1431 |
| 2 | AL-3 | 1333 |
| 3 | GOOGLE-CLOUD | 1012 |
| 4 | PAN-22 | 950 |
| 5 | VOLCANO-ENGINE | 468 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 410 |
| 8 | CENSY | 378 |
| 9 | ALISOFT | 351 |
| 10 | cloud | 327 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9678 |
| 2 | China | 4119 |
| 3 | Singapore | 738 |
| 4 | France | 548 |
| 5 | India | 466 |
| 6 | Netherlands | 457 |
| 7 | Hong Kong | 409 |
| 8 | South Korea | 322 |
| 9 | United Kingdom | 322 |
| 10 | Russian Federation | 299 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 298236 |
| 2 | 2243 | 86179 |
| 3 | 2762 | 81493 |
| 4 | 6673 | 69262 |
| 5 | 22 | 53580 |
| 6 | 7802 | 53435 |
| 7 | 6154 | 50799 |
| 8 | 3174 | 47654 |
| 9 | 3301 | 44356 |
| 10 | 4646 | 42780 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1449 |
| 2 | AL-3 | 1312 |
| 3 | GOOGLE-CLOUD | 996 |
| 4 | PAN-22 | 946 |
| 5 | VOLCANO-ENGINE | 474 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 400 |
| 8 | CENSY | 372 |
| 9 | ALISOFT | 337 |
| 10 | cloud | 318 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9302 |
| 2 | China | 4914 |
| 3 | Singapore | 757 |
| 4 | France | 550 |
| 5 | Netherlands | 445 |
| 6 | India | 441 |
| 7 | Hong Kong | 416 |
| 8 | Russian Federation | 352 |
| 9 | United Kingdom | 328 |
| 10 | South Korea | 323 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 345718 |
| 2 | 2243 | 95529 |
| 3 | 22 | 94850 |
| 4 | 2220 | 87804 |
| 5 | 12140 | 54685 |
| 6 | 8015 | 53111 |
| 7 | 3178 | 45829 |
| 8 | 3069 | 39976 |
| 9 | 2222 | 39922 |
| 10 | 888 | 39061 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1428 |
| 2 | AL-3 | 1328 |
| 3 | GOOGLE-CLOUD | 1004 |
| 4 | PAN-22 | 949 |
| 5 | VOLCANO-ENGINE | 469 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 415 |
| 8 | CENSY | 377 |
| 9 | ALISOFT | 323 |
| 10 | cloud | 306 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9587 |
| 2 | China | 5187 |
| 3 | Singapore | 799 |
| 4 | Netherlands | 575 |
| 5 | France | 553 |
| 6 | India | 446 |
| 7 | Hong Kong | 426 |
| 8 | South Korea | 336 |
| 9 | Russian Federation | 322 |
| 10 | Indonesia | 291 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 212173 |
| 2 | 2220 | 87018 |
| 3 | 2243 | 74710 |
| 4 | 22 | 63348 |
| 5 | 8000 | 52144 |
| 6 | 14000 | 49007 |
| 7 | 12005 | 45580 |
| 8 | 2222 | 34265 |
| 9 | 2224 | 30189 |
| 10 | 888 | 30136 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1374 |
| 2 | AL-3 | 1076 |
| 3 | GOOGLE-CLOUD | 998 |
| 4 | PAN-22 | 948 |
| 5 | VOLCANO-ENGINE | 462 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 421 |
| 8 | CENSY | 377 |
| 9 | ALISOFT | 329 |
| 10 | cloud | 288 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8720 |
| 2 | China | 3832 |
| 3 | Singapore | 816 |
| 4 | France | 549 |
| 5 | Netherlands | 489 |
| 6 | India | 447 |
| 7 | Hong Kong | 402 |
| 8 | Russian Federation | 319 |
| 9 | South Korea | 295 |
| 10 | Indonesia | 287 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 353667 |
| 2 | 7722 | 112252 |
| 3 | 2220 | 87723 |
| 4 | 22 | 75840 |
| 5 | 6710 | 43962 |
| 6 | 2221 | 40571 |
| 7 | 7160 | 35364 |
| 8 | 2201 | 31564 |
| 9 | 2224 | 25646 |
| 10 | 2223 | 25437 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1387 |
| 2 | AL-3 | 1007 |
| 3 | GOOGLE-CLOUD | 1006 |
| 4 | PAN-22 | 950 |
| 5 | VOLCANO-ENGINE | 460 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 403 |
| 8 | CENSY | 376 |
| 9 | DO-13 | 324 |
| 10 | ALISOFT | 323 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9268 |
| 2 | China | 3873 |
| 3 | Singapore | 773 |
| 4 | France | 533 |
| 5 | Netherlands | 418 |
| 6 | South Korea | 383 |
| 7 | Hong Kong | 370 |
| 8 | India | 369 |
| 9 | Russian Federation | 286 |
| 10 | Indonesia | 246 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 464534 |
| 2 | 22 | 105229 |
| 3 | 2220 | 94081 |
| 4 | 2201 | 42233 |
| 5 | 8000 | 34714 |
| 6 | 888 | 34295 |
| 7 | 54321 | 32149 |
| 8 | 2078 | 30480 |
| 9 | 8082 | 28812 |
| 10 | 2222 | 28478 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1385 |
| 2 | AL-3 | 1354 |
| 3 | GOOGLE-CLOUD | 1008 |
| 4 | PAN-22 | 949 |
| 5 | VOLCANO-ENGINE | 466 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 418 |
| 8 | CENSY | 373 |
| 9 | ALISOFT | 317 |
| 10 | CMNET | 301 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8601 |
| 2 | China | 4115 |
| 3 | Singapore | 759 |
| 4 | France | 531 |
| 5 | South Korea | 450 |
| 6 | India | 439 |
| 7 | Hong Kong | 416 |
| 8 | Netherlands | 326 |
| 9 | Russian Federation | 287 |
| 10 | Germany | 260 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 467384 |
| 2 | 2220 | 87167 |
| 3 | 22 | 68197 |
| 4 | 2242 | 59541 |
| 5 | 2201 | 45891 |
| 6 | 5902 | 32852 |
| 7 | 54321 | 30025 |
| 8 | 2222 | 27410 |
| 9 | 9119 | 25477 |
| 10 | 2223 | 24977 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1353 |
| 2 | AL-3 | 1348 |
| 3 | GOOGLE-CLOUD | 1012 |
| 4 | PAN-22 | 950 |
| 5 | VOLCANO-ENGINE | 474 |
| 6 | FR-ONYPHE-20191111 | 448 |
| 7 | ASEPL-SG | 422 |
| 8 | CENSY | 371 |
| 9 | ALISOFT | 331 |
| 10 | CMNET | 294 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8523 |
| 2 | China | 3976 |
| 3 | Singapore | 746 |
| 4 | France | 540 |
| 5 | South Korea | 456 |
| 6 | India | 451 |
| 7 | Hong Kong | 402 |
| 8 | Netherlands | 332 |
| 9 | Russian Federation | 329 |
| 10 | Indonesia | 295 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 394014 |
| 2 | 2220 | 84493 |
| 3 | 22 | 66329 |
| 4 | 2242 | 66157 |
| 5 | 2201 | 49511 |
| 6 | 6688 | 40487 |
| 7 | 54321 | 31929 |
| 8 | 5902 | 28780 |
| 9 | 8122 | 24493 |
| 10 | 8055 | 24462 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1343 |
| 2 | AL-3 | 1272 |
| 3 | GOOGLE-CLOUD | 1017 |
| 4 | PAN-22 | 950 |
| 5 | VOLCANO-ENGINE | 512 |
| 6 | FR-ONYPHE-20191111 | 416 |
| 7 | ASEPL-SG | 399 |
| 8 | CENSY | 373 |
| 9 | ALISOFT | 341 |
| 10 | CMNET | 276 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8907 |
| 2 | China | 3866 |
| 3 | Singapore | 709 |
| 4 | France | 519 |
| 5 | India | 435 |
| 6 | Netherlands | 421 |
| 7 | Hong Kong | 420 |
| 8 | Russian Federation | 339 |
| 9 | South Korea | 335 |
| 10 | Indonesia | 312 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 436033 |
| 2 | 4321 | 81266 |
| 3 | 2242 | 59566 |
| 4 | 22 | 58974 |
| 5 | 5630 | 54430 |
| 6 | 8520 | 53024 |
| 7 | 2201 | 50183 |
| 8 | 5555 | 39484 |
| 9 | 2225 | 33147 |
| 10 | 9999 | 32817 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1368 |
| 2 | AL-3 | 1223 |
| 3 | GOOGLE-CLOUD | 1007 |
| 4 | PAN-22 | 946 |
| 5 | VOLCANO-ENGINE | 509 |
| 6 | FR-ONYPHE-20191111 | 416 |
| 7 | ASEPL-SG | 410 |
| 8 | ALISOFT | 395 |
| 9 | CENSY | 378 |
| 10 | CMNET | 278 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8594 |
| 2 | China | 3986 |
| 3 | Singapore | 718 |
| 4 | France | 512 |
| 5 | India | 473 |
| 6 | Hong Kong | 411 |
| 7 | Netherlands | 385 |
| 8 | South Korea | 362 |
| 9 | Russian Federation | 334 |
| 10 | Indonesia | 314 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 523518 |
| 2 | 4321 | 132757 |
| 3 | 5555 | 101992 |
| 4 | 5630 | 98833 |
| 5 | 2242 | 73282 |
| 6 | 4160 | 73045 |
| 7 | 7654 | 72788 |
| 8 | 22 | 69435 |
| 9 | 2255 | 64631 |
| 10 | 8024 | 59068 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1417 |
| 2 | AL-3 | 1262 |
| 3 | GOOGLE-CLOUD | 1006 |
| 4 | PAN-22 | 950 |
| 5 | VOLCANO-ENGINE | 512 |
| 6 | FR-ONYPHE-20191111 | 416 |
| 7 | ASEPL-SG | 416 |
| 8 | CENSY | 371 |
| 9 | ALISOFT | 337 |
| 10 | CMNET | 278 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8863 |
| 2 | China | 3868 |
| 3 | Singapore | 728 |
| 4 | India | 500 |
| 5 | France | 500 |
| 6 | Hong Kong | 419 |
| 7 | Netherlands | 378 |
| 8 | Russian Federation | 363 |
| 9 | Indonesia | 348 |
| 10 | South Korea | 331 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 467798 |
| 2 | 4160 | 104056 |
| 3 | 5555 | 88359 |
| 4 | 2242 | 81005 |
| 5 | 7654 | 80991 |
| 6 | 2255 | 70652 |
| 7 | 2201 | 63428 |
| 8 | 2219 | 59252 |
| 9 | 9999 | 52248 |
| 10 | 22 | 45236 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1385 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | AL-3 | 999 |
| 4 | PAN-22 | 948 |
| 5 | VOLCANO-ENGINE | 548 |
| 6 | ASEPL-SG | 434 |
| 7 | FR-ONYPHE-20191111 | 416 |
| 8 | ALISOFT | 377 |
| 9 | CENSY | 374 |
| 10 | CMNET | 291 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7835 |
| 2 | China | 4145 |
| 3 | Singapore | 745 |
| 4 | France | 530 |
| 5 | India | 473 |
| 6 | Hong Kong | 419 |
| 7 | South Korea | 356 |
| 8 | Netherlands | 347 |
| 9 | Russian Federation | 345 |
| 10 | Indonesia | 338 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 400198 |
| 2 | 4160 | 91420 |
| 3 | 7654 | 69023 |
| 4 | 9999 | 60808 |
| 5 | 2242 | 60027 |
| 6 | 2219 | 58486 |
| 7 | 22 | 55565 |
| 8 | 2255 | 45358 |
| 9 | 8141 | 44515 |
| 10 | 2201 | 40446 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1421 |
| 2 | GOOGLE-CLOUD | 1007 |
| 3 | PAN-22 | 950 |
| 4 | AL-3 | 948 |
| 5 | VOLCANO-ENGINE | 470 |
| 6 | ASEPL-SG | 423 |
| 7 | FR-ONYPHE-20191111 | 416 |
| 8 | ALISOFT | 380 |
| 9 | CENSY | 377 |
| 10 | CMNET | 316 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8438 |
| 2 | China | 4315 |
| 3 | Singapore | 813 |
| 4 | France | 492 |
| 5 | India | 440 |
| 6 | Hong Kong | 407 |
| 7 | South Korea | 383 |
| 8 | Russian Federation | 338 |
| 9 | Netherlands | 319 |
| 10 | Indonesia | 244 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 463685 |
| 2 | 22 | 68871 |
| 3 | 2242 | 68145 |
| 4 | 6666 | 67381 |
| 5 | 9999 | 50722 |
| 6 | 6000 | 38353 |
| 7 | 2026 | 30386 |
| 8 | 6001 | 29335 |
| 9 | 2222 | 28310 |
| 10 | 5902 | 26415 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1453 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | PAN-22 | 950 |
| 4 | AL-3 | 906 |
| 5 | BYTEPLUS-SG | 811 |
| 6 | VOLCANO-ENGINE | 472 |
| 7 | ASEPL-SG | 429 |
| 8 | ALISOFT | 387 |
| 9 | CENSY | 378 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7786 |
| 2 | China | 4015 |
| 3 | Singapore | 1428 |
| 4 | India | 481 |
| 5 | France | 415 |
| 6 | Hong Kong | 407 |
| 7 | South Korea | 379 |
| 8 | Russian Federation | 351 |
| 9 | Netherlands | 295 |
| 10 | Brazil | 265 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 394726 |
| 2 | 6666 | 86334 |
| 3 | 8811 | 67494 |
| 4 | 3332 | 62051 |
| 5 | 1234 | 55386 |
| 6 | 6000 | 49485 |
| 7 | 22 | 48413 |
| 8 | 9999 | 46757 |
| 9 | 22001 | 36715 |
| 10 | 2022 | 33951 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1414 |
| 2 | GOOGLE-CLOUD | 1006 |
| 3 | PAN-22 | 950 |
| 4 | AL-3 | 911 |
| 5 | BYTEPLUS-SG | 854 |
| 6 | VOLCANO-ENGINE | 481 |
| 7 | ASEPL-SG | 438 |
| 8 | ALISOFT | 403 |
| 9 | CENSY | 381 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7889 |
| 2 | China | 4313 |
| 3 | Singapore | 1494 |
| 4 | India | 473 |
| 5 | Hong Kong | 429 |
| 6 | France | 416 |
| 7 | Russian Federation | 357 |
| 8 | South Korea | 351 |
| 9 | Indonesia | 304 |
| 10 | Netherlands | 275 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 380608 |
| 2 | 2271 | 112459 |
| 3 | 6666 | 88689 |
| 4 | 1234 | 54629 |
| 5 | 22001 | 38417 |
| 6 | 5902 | 32158 |
| 7 | 6000 | 31965 |
| 8 | 1022 | 29482 |
| 9 | 22 | 27113 |
| 10 | 2222 | 24221 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1428 |
| 2 | GOOGLE-CLOUD | 1006 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 849 |
| 5 | AL-3 | 796 |
| 6 | VOLCANO-ENGINE | 489 |
| 7 | ASEPL-SG | 435 |
| 8 | ALISOFT | 378 |
| 9 | CENSY | 373 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8272 |
| 2 | China | 4579 |
| 3 | Singapore | 1506 |
| 4 | India | 497 |
| 5 | France | 429 |
| 6 | Hong Kong | 423 |
| 7 | Russian Federation | 365 |
| 8 | South Korea | 356 |
| 9 | Netherlands | 341 |
| 10 | Brazil | 313 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 387974 |
| 2 | 3412 | 89909 |
| 3 | 2026 | 80846 |
| 4 | 2241 | 80316 |
| 5 | 9026 | 78153 |
| 6 | 4242 | 71007 |
| 7 | 6666 | 59417 |
| 8 | 2271 | 54139 |
| 9 | 1234 | 52756 |
| 10 | 8008 | 45686 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1324 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | PAN-22 | 948 |
| 4 | BYTEPLUS-SG | 846 |
| 5 | AL-3 | 819 |
| 6 | VOLCANO-ENGINE | 498 |
| 7 | ASEPL-SG | 429 |
| 8 | CENSY | 381 |
| 9 | ALISOFT | 372 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7690 |
| 2 | China | 4421 |
| 3 | Singapore | 1472 |
| 4 | India | 494 |
| 5 | Hong Kong | 435 |
| 6 | France | 429 |
| 7 | Russian Federation | 367 |
| 8 | South Korea | 343 |
| 9 | Netherlands | 342 |
| 10 | Indonesia | 313 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 237211 |
| 2 | 8008 | 115662 |
| 3 | 2241 | 103206 |
| 4 | 4808 | 77200 |
| 5 | 2026 | 58159 |
| 6 | 1234 | 45877 |
| 7 | 22 | 36542 |
| 8 | 9026 | 30734 |
| 9 | 5902 | 28964 |
| 10 | 2022 | 26746 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1350 |
| 2 | GOOGLE-CLOUD | 1002 |
| 3 | PAN-22 | 948 |
| 4 | BYTEPLUS-SG | 846 |
| 5 | AL-3 | 810 |
| 6 | VOLCANO-ENGINE | 488 |
| 7 | ASEPL-SG | 438 |
| 8 | ALISOFT | 412 |
| 9 | CENSY | 380 |
| 10 | FR-ONYPHE-20191111 | 374 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8633 |
| 2 | China | 4362 |
| 3 | Singapore | 1511 |
| 4 | India | 512 |
| 5 | France | 506 |
| 6 | Netherlands | 489 |
| 7 | Hong Kong | 446 |
| 8 | Russian Federation | 376 |
| 9 | South Korea | 354 |
| 10 | Indonesia | 310 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 184297 |
| 2 | 2241 | 91898 |
| 3 | 22 | 48187 |
| 4 | 22522 | 34001 |
| 5 | 7322 | 30507 |
| 6 | 5902 | 28246 |
| 7 | 3022 | 25896 |
| 8 | 4808 | 21354 |
| 9 | 2248 | 20535 |
| 10 | 2222 | 20215 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1373 |
| 2 | GOOGLE-CLOUD | 1000 |
| 3 | PAN-22 | 944 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 825 |
| 6 | VOLCANO-ENGINE | 483 |
| 7 | ASEPL-SG | 440 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 396 |
| 10 | CENSY | 376 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8466 |
| 2 | China | 4786 |
| 3 | Singapore | 1490 |
| 4 | Netherlands | 550 |
| 5 | France | 521 |
| 6 | India | 473 |
| 7 | Hong Kong | 455 |
| 8 | South Korea | 398 |
| 9 | Russian Federation | 397 |
| 10 | Indonesia | 346 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 175631 |
| 2 | 22 | 94877 |
| 3 | 1722 | 83755 |
| 4 | 4808 | 52562 |
| 5 | 4488 | 46370 |
| 6 | 2248 | 44817 |
| 7 | 12345 | 34091 |
| 8 | 1822 | 29388 |
| 9 | 5902 | 28441 |
| 10 | 13722 | 24939 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1376 |
| 2 | GOOGLE-CLOUD | 1003 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 847 |
| 5 | AL-3 | 799 |
| 6 | VOLCANO-ENGINE | 484 |
| 7 | ASEPL-SG | 449 |
| 8 | FR-ONYPHE-20191111 | 415 |
| 9 | ALISOFT | 399 |
| 10 | CENSY | 373 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8636 |
| 2 | China | 4547 |
| 3 | Singapore | 1496 |
| 4 | Netherlands | 535 |
| 5 | France | 514 |
| 6 | India | 470 |
| 7 | Hong Kong | 445 |
| 8 | Russian Federation | 375 |
| 9 | South Korea | 373 |
| 10 | Brazil | 324 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 151706 |
| 2 | 22 | 98078 |
| 3 | 1722 | 71567 |
| 4 | 8004 | 51775 |
| 5 | 6666 | 31815 |
| 6 | 5902 | 31177 |
| 7 | 234 | 25215 |
| 8 | 2222 | 21840 |
| 9 | 6122 | 21000 |
| 10 | 2248 | 19764 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1367 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 811 |
| 6 | VOLCANO-ENGINE | 495 |
| 7 | ALISOFT | 457 |
| 8 | ASEPL-SG | 449 |
| 9 | FR-ONYPHE-20191111 | 416 |
| 10 | CENSY | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7818 |
| 2 | China | 5078 |
| 3 | Singapore | 1485 |
| 4 | India | 546 |
| 5 | France | 521 |
| 6 | Netherlands | 468 |
| 7 | Hong Kong | 444 |
| 8 | Russian Federation | 376 |
| 9 | South Korea | 365 |
| 10 | Brazil | 330 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 178792 |
| 2 | 6666 | 73647 |
| 3 | 2240 | 69644 |
| 4 | 8004 | 65554 |
| 5 | 22 | 62860 |
| 6 | 1722 | 59311 |
| 7 | 234 | 56088 |
| 8 | 8865 | 51896 |
| 9 | 54138 | 36832 |
| 10 | 5902 | 32344 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1367 |
| 2 | GOOGLE-CLOUD | 1004 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 847 |
| 5 | AL-3 | 823 |
| 6 | VOLCANO-ENGINE | 500 |
| 7 | ASEPL-SG | 463 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 393 |
| 10 | CMNET | 389 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7927 |
| 2 | China | 5729 |
| 3 | Singapore | 1513 |
| 4 | India | 534 |
| 5 | France | 521 |
| 6 | Hong Kong | 461 |
| 7 | Russian Federation | 394 |
| 8 | Netherlands | 389 |
| 9 | Indonesia | 373 |
| 10 | South Korea | 372 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 173775 |
| 2 | 6666 | 83388 |
| 3 | 2240 | 70894 |
| 4 | 22 | 50793 |
| 5 | 9922 | 39819 |
| 6 | 9322 | 37976 |
| 7 | 5902 | 34127 |
| 8 | 2522 | 28934 |
| 9 | 9222 | 26669 |
| 10 | 8004 | 24733 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1385 |
| 2 | GOOGLE-CLOUD | 999 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 824 |
| 6 | VOLCANO-ENGINE | 494 |
| 7 | ASEPL-SG | 450 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 389 |
| 10 | CENSY | 375 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8662 |
| 2 | China | 5632 |
| 3 | Singapore | 1533 |
| 4 | India | 570 |
| 5 | France | 527 |
| 6 | Netherlands | 431 |
| 7 | Russian Federation | 428 |
| 8 | Hong Kong | 415 |
| 9 | South Korea | 390 |
| 10 | Indonesia | 383 |