detection period: 2026-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 18430
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16920
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1471 |
| 2 | AL-3 | 1298 |
| 3 | GOOGLE-CLOUD | 1055 |
| 4 | PAN-22 | 909 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 462 |
| 7 | CENSY | 362 |
| 8 | FR-ONYPHE-20221220 | 240 |
| 9 | FR-ONYPHE-20221109 | 240 |
| 10 | HURRICANE-4 | 224 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9385 |
| 2 | China | 2760 |
| 3 | Singapore | 650 |
| 4 | France | 571 |
| 5 | United Kingdom | 504 |
| 6 | Netherlands | 370 |
| 7 | South Korea | 276 |
| 8 | Hong Kong | 265 |
| 9 | Russian Federation | 210 |
| 10 | Brazil | 192 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 360442 |
| 2 | 6000 | 76765 |
| 3 | 4 | 70413 |
| 4 | 9 | 67998 |
| 5 | 3 | 65526 |
| 6 | 5 | 64553 |
| 7 | 8 | 62819 |
| 8 | 1 | 62432 |
| 9 | 10 | 57622 |
| 10 | 2 | 56744 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1376 |
| 2 | AL-3 | 1211 |
| 3 | GOOGLE-CLOUD | 1059 |
| 4 | PAN-22 | 911 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 436 |
| 7 | CENSY | 359 |
| 8 | INFRAWATCH | 341 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7857 |
| 2 | China | 2521 |
| 3 | United Kingdom | 733 |
| 4 | Singapore | 611 |
| 5 | France | 554 |
| 6 | Netherlands | 349 |
| 7 | Hong Kong | 306 |
| 8 | Germany | 199 |
| 9 | South Korea | 197 |
| 10 | India | 195 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 243886 |
| 2 | 9204 | 46773 |
| 3 | 6000 | 44808 |
| 4 | 9202 | 39478 |
| 5 | 9201 | 39025 |
| 6 | 522 | 37991 |
| 7 | 2020 | 36775 |
| 8 | 12222 | 33684 |
| 9 | 888 | 31816 |
| 10 | 9206 | 31334 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1416 |
| 2 | AL-3 | 1250 |
| 3 | GOOGLE-CLOUD | 1061 |
| 4 | PAN-22 | 909 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 401 |
| 7 | CENSY | 354 |
| 8 | FR-ONYPHE-20221220 | 240 |
| 9 | FR-ONYPHE-20221109 | 240 |
| 10 | CAVISAR-NET1 | 234 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8158 |
| 2 | China | 2350 |
| 3 | Singapore | 607 |
| 4 | France | 556 |
| 5 | United Kingdom | 537 |
| 6 | Netherlands | 311 |
| 7 | Hong Kong | 290 |
| 8 | Honduras | 242 |
| 9 | India | 196 |
| 10 | Russian Federation | 195 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 305589 |
| 2 | 5471 | 59823 |
| 3 | 9204 | 54607 |
| 4 | 4117 | 49692 |
| 5 | 9201 | 48410 |
| 6 | 9220 | 46102 |
| 7 | 1159 | 43612 |
| 8 | 3382 | 43206 |
| 9 | 9202 | 41814 |
| 10 | 9210 | 38867 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1419 |
| 2 | AL-3 | 1302 |
| 3 | GOOGLE-CLOUD | 1065 |
| 4 | PAN-22 | 909 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 450 |
| 7 | CENSY | 359 |
| 8 | INFRAWATCH | 283 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8985 |
| 2 | China | 2713 |
| 3 | United Kingdom | 743 |
| 4 | Singapore | 659 |
| 5 | France | 543 |
| 6 | Netherlands | 357 |
| 7 | Hong Kong | 351 |
| 8 | Russian Federation | 206 |
| 9 | India | 206 |
| 10 | South Korea | 189 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 380487 |
| 2 | 27 | 41954 |
| 3 | 2020 | 37004 |
| 4 | 9922 | 33922 |
| 5 | 12222 | 32461 |
| 6 | 9204 | 31341 |
| 7 | 2095 | 30063 |
| 8 | 444 | 28950 |
| 9 | 1463 | 28715 |
| 10 | 55555 | 28642 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1411 |
| 2 | AL-3 | 1263 |
| 3 | GOOGLE-CLOUD | 1051 |
| 4 | PAN-22 | 911 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 463 |
| 7 | CENSY | 366 |
| 8 | INFRAWATCH | 263 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8365 |
| 2 | China | 3388 |
| 3 | United Kingdom | 687 |
| 4 | Singapore | 679 |
| 5 | France | 542 |
| 6 | Netherlands | 368 |
| 7 | Hong Kong | 343 |
| 8 | South Korea | 253 |
| 9 | Russian Federation | 212 |
| 10 | India | 211 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 456806 |
| 2 | 27 | 58550 |
| 3 | 2095 | 52961 |
| 4 | 444 | 39862 |
| 5 | 2020 | 37179 |
| 6 | 1463 | 33493 |
| 7 | 12222 | 31096 |
| 8 | 7777 | 28660 |
| 9 | 8088 | 26310 |
| 10 | 4117 | 25105 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1384 |
| 2 | AL-3 | 1214 |
| 3 | GOOGLE-CLOUD | 1055 |
| 4 | PAN-22 | 915 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 443 |
| 7 | CENSY | 372 |
| 8 | FR-ONYPHE-20221220 | 240 |
| 9 | FR-ONYPHE-20221109 | 240 |
| 10 | CMNET | 227 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8922 |
| 2 | China | 3464 |
| 3 | Singapore | 667 |
| 4 | France | 563 |
| 5 | United Kingdom | 508 |
| 6 | Hong Kong | 361 |
| 7 | Netherlands | 323 |
| 8 | South Korea | 273 |
| 9 | Russian Federation | 233 |
| 10 | India | 223 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 471329 |
| 2 | 2095 | 56966 |
| 3 | 26 | 44508 |
| 4 | 444 | 39665 |
| 5 | 2020 | 36112 |
| 6 | 1463 | 32657 |
| 7 | 12222 | 30629 |
| 8 | 7777 | 27204 |
| 9 | 9011 | 25262 |
| 10 | 27 | 23665 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1489 |
| 2 | AL-3 | 1301 |
| 3 | GOOGLE-CLOUD | 1049 |
| 4 | PAN-22 | 924 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 422 |
| 7 | CENSY | 372 |
| 8 | FR-ONYPHE-20221220 | 240 |
| 9 | FR-ONYPHE-20221109 | 240 |
| 10 | CMNET | 230 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8648 |
| 2 | China | 2811 |
| 3 | Singapore | 637 |
| 4 | United Kingdom | 611 |
| 5 | France | 568 |
| 6 | Netherlands | 367 |
| 7 | Hong Kong | 345 |
| 8 | South Korea | 279 |
| 9 | India | 263 |
| 10 | Russian Federation | 258 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 402614 |
| 2 | 26 | 72812 |
| 3 | 2095 | 57855 |
| 4 | 444 | 40775 |
| 5 | 2020 | 35939 |
| 6 | 1463 | 31395 |
| 7 | 7777 | 23030 |
| 8 | 8088 | 21914 |
| 9 | 22 | 18720 |
| 10 | 4117 | 18165 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1393 |
| 2 | AL-3 | 1236 |
| 3 | GOOGLE-CLOUD | 1067 |
| 4 | PAN-22 | 923 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 454 |
| 7 | CENSY | 366 |
| 8 | FR-ONYPHE-20221220 | 240 |
| 9 | FR-ONYPHE-20221109 | 240 |
| 10 | CMNET | 229 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8700 |
| 2 | China | 2732 |
| 3 | Singapore | 672 |
| 4 | United Kingdom | 652 |
| 5 | France | 563 |
| 6 | Hong Kong | 328 |
| 7 | Netherlands | 303 |
| 8 | South Korea | 289 |
| 9 | India | 205 |
| 10 | Russian Federation | 198 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 388560 |
| 2 | 1463 | 74120 |
| 3 | 2095 | 63009 |
| 4 | 4034 | 44938 |
| 5 | 4117 | 43611 |
| 6 | 2020 | 42012 |
| 7 | 1824 | 37873 |
| 8 | 12022 | 34184 |
| 9 | 2482 | 33072 |
| 10 | 8088 | 30638 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1390 |
| 2 | AL-3 | 1243 |
| 3 | GOOGLE-CLOUD | 1068 |
| 4 | PAN-22 | 929 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 437 |
| 7 | CENSY | 372 |
| 8 | CMNET | 261 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7841 |
| 2 | China | 2800 |
| 3 | Singapore | 663 |
| 4 | United Kingdom | 612 |
| 5 | France | 562 |
| 6 | Hong Kong | 361 |
| 7 | Netherlands | 316 |
| 8 | South Korea | 258 |
| 9 | Russian Federation | 213 |
| 10 | India | 196 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 273818 |
| 2 | 1463 | 71695 |
| 3 | 2095 | 63567 |
| 4 | 2104 | 50030 |
| 5 | 4034 | 44142 |
| 6 | 2020 | 42273 |
| 7 | 4117 | 41734 |
| 8 | 12022 | 39384 |
| 9 | 1824 | 36866 |
| 10 | 2482 | 32817 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1400 |
| 2 | AL-3 | 1243 |
| 3 | GOOGLE-CLOUD | 1061 |
| 4 | PAN-22 | 921 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 402 |
| 7 | CENSY | 362 |
| 8 | CMNET | 245 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8017 |
| 2 | China | 2821 |
| 3 | United Kingdom | 701 |
| 4 | Singapore | 632 |
| 5 | France | 560 |
| 6 | Hong Kong | 349 |
| 7 | Netherlands | 296 |
| 8 | South Korea | 225 |
| 9 | India | 221 |
| 10 | Russian Federation | 220 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 234929 |
| 2 | 55555 | 124538 |
| 3 | 2095 | 104570 |
| 4 | 1463 | 68593 |
| 5 | 2104 | 48123 |
| 6 | 2020 | 41782 |
| 7 | 4034 | 41563 |
| 8 | 4117 | 39967 |
| 9 | 12022 | 39482 |
| 10 | 8088 | 38782 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1477 |
| 2 | AL-3 | 1262 |
| 3 | GOOGLE-CLOUD | 1047 |
| 4 | PAN-22 | 932 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 454 |
| 7 | INFRAWATCH | 448 |
| 8 | CENSY | 414 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8321 |
| 2 | China | 3336 |
| 3 | United Kingdom | 744 |
| 4 | Singapore | 633 |
| 5 | France | 574 |
| 6 | Netherlands | 374 |
| 7 | Hong Kong | 305 |
| 8 | Germany | 268 |
| 9 | Russian Federation | 249 |
| 10 | India | 213 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 188432 |
| 2 | 1463 | 67460 |
| 3 | 4117 | 63017 |
| 4 | 2095 | 59139 |
| 5 | 1024 | 50690 |
| 6 | 2104 | 48131 |
| 7 | 4025 | 44826 |
| 8 | 4034 | 41555 |
| 9 | 6701 | 41114 |
| 10 | 12022 | 39440 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1506 |
| 2 | AL-3 | 1304 |
| 3 | GOOGLE-CLOUD | 1059 |
| 4 | PAN-22 | 934 |
| 5 | CLOUDFLARENET | 785 |
| 6 | FR-ONYPHE-20191111 | 480 |
| 7 | ASEPL-SG | 458 |
| 8 | CENSY | 374 |
| 9 | INFRAWATCH | 316 |
| 10 | CMNET | 251 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9598 |
| 2 | China | 4571 |
| 3 | United Kingdom | 692 |
| 4 | Singapore | 667 |
| 5 | France | 550 |
| 6 | Hong Kong | 319 |
| 7 | Netherlands | 303 |
| 8 | Germany | 288 |
| 9 | Russian Federation | 215 |
| 10 | Indonesia | 209 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 163082 |
| 2 | 2095 | 84347 |
| 3 | 322 | 43478 |
| 4 | 12022 | 39591 |
| 5 | 6924 | 38338 |
| 6 | 6600 | 33664 |
| 7 | 23 | 32945 |
| 8 | 55555 | 27624 |
| 9 | 9339 | 26747 |
| 10 | 4117 | 25448 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1552 |
| 2 | AL-3 | 1274 |
| 3 | GOOGLE-CLOUD | 1070 |
| 4 | PAN-22 | 933 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 456 |
| 7 | CENSY | 374 |
| 8 | INFRAWATCH | 321 |
| 9 | FR-ONYPHE-20221220 | 240 |
| 10 | FR-ONYPHE-20221109 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8572 |
| 2 | China | 4060 |
| 3 | Singapore | 692 |
| 4 | United Kingdom | 687 |
| 5 | France | 636 |
| 6 | Germany | 449 |
| 7 | Netherlands | 325 |
| 8 | Hong Kong | 314 |
| 9 | South Korea | 261 |
| 10 | Indonesia | 223 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 63937 |
| 2 | 1023 | 52757 |
| 3 | 12022 | 39362 |
| 4 | 2095 | 32176 |
| 5 | 23 | 32082 |
| 6 | 7093 | 24697 |
| 7 | 8025 | 22927 |
| 8 | 8030 | 22832 |
| 9 | 7094 | 22468 |
| 10 | 8027 | 22466 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1530 |
| 2 | AL-3 | 1372 |
| 3 | GOOGLE-CLOUD | 1058 |
| 4 | PAN-22 | 940 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 462 |
| 7 | CENSY | 376 |
| 8 | DE-ALPHA | 327 |
| 9 | INFRAWATCH | 312 |
| 10 | ALISOFT | 255 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9093 |
| 2 | China | 3842 |
| 3 | Germany | 705 |
| 4 | United Kingdom | 673 |
| 5 | Singapore | 647 |
| 6 | France | 634 |
| 7 | Netherlands | 332 |
| 8 | Hong Kong | 258 |
| 9 | South Korea | 241 |
| 10 | Russian Federation | 228 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 93307 |
| 2 | 1023 | 85355 |
| 3 | 2095 | 55226 |
| 4 | 8020 | 37130 |
| 5 | 12022 | 35927 |
| 6 | 2425 | 33196 |
| 7 | 23 | 32089 |
| 8 | 7094 | 31214 |
| 9 | 8030 | 30084 |
| 10 | 888 | 28524 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1504 |
| 2 | AL-3 | 1359 |
| 3 | GOOGLE-CLOUD | 1058 |
| 4 | PAN-22 | 950 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 467 |
| 7 | CENSY | 376 |
| 8 | DE-ALPHA | 327 |
| 9 | INFRAWATCH | 311 |
| 10 | FR-ONYPHE-20221220 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7960 |
| 2 | China | 3843 |
| 3 | United Kingdom | 671 |
| 4 | Singapore | 626 |
| 5 | France | 575 |
| 6 | Germany | 574 |
| 7 | Netherlands | 336 |
| 8 | Hong Kong | 231 |
| 9 | South Korea | 216 |
| 10 | Russian Federation | 204 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 149339 |
| 2 | 2095 | 52657 |
| 3 | 1023 | 47935 |
| 4 | 8020 | 34769 |
| 5 | 7094 | 30565 |
| 6 | 8030 | 29622 |
| 7 | 888 | 29549 |
| 8 | 23 | 28863 |
| 9 | 8025 | 28577 |
| 10 | 22 | 28421 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1486 |
| 2 | AL-3 | 1339 |
| 3 | GOOGLE-CLOUD | 1064 |
| 4 | PAN-22 | 950 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 461 |
| 7 | CENSY | 376 |
| 8 | INFRAWATCH | 334 |
| 9 | DE-ALPHA | 311 |
| 10 | FR-ONYPHE-20221220 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8518 |
| 2 | China | 3944 |
| 3 | United Kingdom | 698 |
| 4 | Singapore | 622 |
| 5 | Germany | 572 |
| 6 | France | 567 |
| 7 | Netherlands | 337 |
| 8 | Hong Kong | 310 |
| 9 | South Korea | 278 |
| 10 | Russian Federation | 234 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 145830 |
| 2 | 55555 | 104578 |
| 3 | 2095 | 46038 |
| 4 | 2022 | 35511 |
| 5 | 8020 | 33233 |
| 6 | 888 | 31741 |
| 7 | 23 | 30707 |
| 8 | 7094 | 30136 |
| 9 | 22 | 28992 |
| 10 | 8088 | 28481 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1512 |
| 2 | AL-3 | 1333 |
| 3 | GOOGLE-CLOUD | 1067 |
| 4 | PAN-22 | 950 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 459 |
| 7 | INFRAWATCH | 388 |
| 8 | CENSY | 375 |
| 9 | DE-ALPHA | 328 |
| 10 | FR-ONYPHE-20221220 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9054 |
| 2 | China | 4072 |
| 3 | United Kingdom | 779 |
| 4 | Singapore | 633 |
| 5 | France | 574 |
| 6 | Germany | 566 |
| 7 | Netherlands | 334 |
| 8 | South Korea | 290 |
| 9 | Hong Kong | 287 |
| 10 | Russian Federation | 256 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 202712 |
| 2 | 55555 | 135917 |
| 3 | 2095 | 49484 |
| 4 | 8020 | 31453 |
| 5 | 8027 | 31287 |
| 6 | 888 | 31181 |
| 7 | 7100 | 30217 |
| 8 | 7094 | 29132 |
| 9 | 8025 | 29097 |
| 10 | 22 | 27852 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1518 |
| 2 | AL-3 | 1366 |
| 3 | GOOGLE-CLOUD | 1061 |
| 4 | PAN-22 | 928 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 452 |
| 7 | INFRAWATCH | 382 |
| 8 | CENSY | 374 |
| 9 | DE-ALPHA | 277 |
| 10 | FR-ONYPHE-20221220 | 240 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8420 |
| 2 | China | 3687 |
| 3 | United Kingdom | 659 |
| 4 | Singapore | 615 |
| 5 | Germany | 582 |
| 6 | France | 575 |
| 7 | Netherlands | 308 |
| 8 | South Korea | 265 |
| 9 | India | 244 |
| 10 | Hong Kong | 243 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 212837 |
| 2 | 55555 | 121801 |
| 3 | 8085 | 87966 |
| 4 | 2095 | 76973 |
| 5 | 2078 | 64104 |
| 6 | 8025 | 43140 |
| 7 | 9999 | 42795 |
| 8 | 2222 | 40318 |
| 9 | 8027 | 39122 |
| 10 | 7100 | 34895 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1519 |
| 2 | AL-3 | 1318 |
| 3 | GOOGLE-CLOUD | 1055 |
| 4 | PAN-22 | 879 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 449 |
| 7 | CENSY | 373 |
| 8 | INFRAWATCH | 344 |
| 9 | DE-ALPHA | 317 |
| 10 | DO-13 | 247 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8963 |
| 2 | China | 3795 |
| 3 | United Kingdom | 728 |
| 4 | Singapore | 588 |
| 5 | Germany | 580 |
| 6 | France | 565 |
| 7 | Netherlands | 313 |
| 8 | Hong Kong | 302 |
| 9 | South Korea | 292 |
| 10 | Russian Federation | 226 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 192649 |
| 2 | 2222 | 63397 |
| 3 | 9999 | 62246 |
| 4 | 8020 | 41993 |
| 5 | 8000 | 41712 |
| 6 | 9011 | 38529 |
| 7 | 52885 | 36821 |
| 8 | 2177 | 36667 |
| 9 | 7283 | 35349 |
| 10 | 8088 | 34087 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1467 |
| 2 | AL-3 | 1291 |
| 3 | GOOGLE-CLOUD | 1052 |
| 4 | PAN-22 | 938 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 429 |
| 7 | CENSY | 377 |
| 8 | INFRAWATCH | 338 |
| 9 | DE-ALPHA | 303 |
| 10 | CMNET | 270 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8283 |
| 2 | China | 3660 |
| 3 | United Kingdom | 753 |
| 4 | Singapore | 576 |
| 5 | Germany | 576 |
| 6 | France | 564 |
| 7 | Hong Kong | 306 |
| 8 | Netherlands | 296 |
| 9 | South Korea | 267 |
| 10 | Indonesia | 264 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 166880 |
| 2 | 7777 | 73121 |
| 3 | 5357 | 45903 |
| 4 | 2222 | 45094 |
| 5 | 8020 | 41569 |
| 6 | 56641 | 33605 |
| 7 | 5000 | 32731 |
| 8 | 2000 | 32425 |
| 9 | 8027 | 31731 |
| 10 | 7100 | 29657 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1434 |
| 2 | AL-3 | 1238 |
| 3 | GOOGLE-CLOUD | 1018 |
| 4 | PAN-22 | 938 |
| 5 | FR-ONYPHE-20191111 | 480 |
| 6 | ASEPL-SG | 428 |
| 7 | CENSY | 377 |
| 8 | INFRAWATCH | 301 |
| 9 | DE-ALPHA | 301 |
| 10 | CMNET | 257 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8519 |
| 2 | China | 3708 |
| 3 | United Kingdom | 750 |
| 4 | France | 584 |
| 5 | Singapore | 572 |
| 6 | Germany | 552 |
| 7 | Hong Kong | 308 |
| 8 | South Korea | 271 |
| 9 | Netherlands | 241 |
| 10 | Russian Federation | 237 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 172510 |
| 2 | 8000 | 166063 |
| 3 | 2078 | 143591 |
| 4 | 7777 | 100454 |
| 5 | 2095 | 66213 |
| 6 | 2222 | 62683 |
| 7 | 2000 | 51942 |
| 8 | 2617 | 43762 |
| 9 | 19233 | 43655 |
| 10 | 8020 | 43347 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | CLOUDFLARENET | 1509 |
| 2 | MSFT | 1450 |
| 3 | AL-3 | 1241 |
| 4 | GOOGLE-CLOUD | 1021 |
| 5 | PAN-22 | 953 |
| 6 | FR-ONYPHE-20191111 | 480 |
| 7 | ASEPL-SG | 419 |
| 8 | CENSY | 373 |
| 9 | INFRAWATCH | 339 |
| 10 | CMNET | 268 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9113 |
| 2 | China | 3628 |
| 3 | Singapore | 584 |
| 4 | France | 562 |
| 5 | United Kingdom | 521 |
| 6 | Germany | 373 |
| 7 | Hong Kong | 288 |
| 8 | South Korea | 282 |
| 9 | Netherlands | 247 |
| 10 | Russian Federation | 209 |