detection period: 2026-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 20733
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18946
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1414 |
| 2 | GOOGLE-CLOUD | 1006 |
| 3 | PAN-22 | 950 |
| 4 | AL-3 | 911 |
| 5 | BYTEPLUS-SG | 854 |
| 6 | VOLCANO-ENGINE | 481 |
| 7 | ASEPL-SG | 438 |
| 8 | ALISOFT | 403 |
| 9 | CENSY | 381 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7889 |
| 2 | China | 4313 |
| 3 | Singapore | 1494 |
| 4 | India | 473 |
| 5 | Hong Kong | 429 |
| 6 | France | 416 |
| 7 | Russian Federation | 357 |
| 8 | South Korea | 351 |
| 9 | Indonesia | 304 |
| 10 | Netherlands | 275 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 380608 |
| 2 | 2271 | 112459 |
| 3 | 6666 | 88689 |
| 4 | 1234 | 54629 |
| 5 | 22001 | 38417 |
| 6 | 5902 | 32158 |
| 7 | 6000 | 31965 |
| 8 | 1022 | 29482 |
| 9 | 22 | 27113 |
| 10 | 2222 | 24221 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1428 |
| 2 | GOOGLE-CLOUD | 1006 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 849 |
| 5 | AL-3 | 796 |
| 6 | VOLCANO-ENGINE | 489 |
| 7 | ASEPL-SG | 435 |
| 8 | ALISOFT | 378 |
| 9 | CENSY | 373 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8272 |
| 2 | China | 4579 |
| 3 | Singapore | 1506 |
| 4 | India | 497 |
| 5 | France | 429 |
| 6 | Hong Kong | 423 |
| 7 | Russian Federation | 365 |
| 8 | South Korea | 356 |
| 9 | Netherlands | 341 |
| 10 | Brazil | 313 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 387974 |
| 2 | 3412 | 89909 |
| 3 | 2026 | 80846 |
| 4 | 2241 | 80316 |
| 5 | 9026 | 78153 |
| 6 | 4242 | 71007 |
| 7 | 6666 | 59417 |
| 8 | 2271 | 54139 |
| 9 | 1234 | 52756 |
| 10 | 8008 | 45686 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1324 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | PAN-22 | 948 |
| 4 | BYTEPLUS-SG | 846 |
| 5 | AL-3 | 819 |
| 6 | VOLCANO-ENGINE | 498 |
| 7 | ASEPL-SG | 429 |
| 8 | CENSY | 381 |
| 9 | ALISOFT | 372 |
| 10 | FR-ONYPHE-20191111 | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7690 |
| 2 | China | 4421 |
| 3 | Singapore | 1472 |
| 4 | India | 494 |
| 5 | Hong Kong | 435 |
| 6 | France | 429 |
| 7 | Russian Federation | 367 |
| 8 | South Korea | 343 |
| 9 | Netherlands | 342 |
| 10 | Indonesia | 313 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 237211 |
| 2 | 8008 | 115662 |
| 3 | 2241 | 103206 |
| 4 | 4808 | 77200 |
| 5 | 2026 | 58159 |
| 6 | 1234 | 45877 |
| 7 | 22 | 36542 |
| 8 | 9026 | 30734 |
| 9 | 5902 | 28964 |
| 10 | 2022 | 26746 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1350 |
| 2 | GOOGLE-CLOUD | 1002 |
| 3 | PAN-22 | 948 |
| 4 | BYTEPLUS-SG | 846 |
| 5 | AL-3 | 810 |
| 6 | VOLCANO-ENGINE | 488 |
| 7 | ASEPL-SG | 438 |
| 8 | ALISOFT | 412 |
| 9 | CENSY | 380 |
| 10 | FR-ONYPHE-20191111 | 374 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8633 |
| 2 | China | 4362 |
| 3 | Singapore | 1511 |
| 4 | India | 512 |
| 5 | France | 506 |
| 6 | Netherlands | 489 |
| 7 | Hong Kong | 446 |
| 8 | Russian Federation | 376 |
| 9 | South Korea | 354 |
| 10 | Indonesia | 310 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 184297 |
| 2 | 2241 | 91898 |
| 3 | 22 | 48187 |
| 4 | 22522 | 34001 |
| 5 | 7322 | 30507 |
| 6 | 5902 | 28246 |
| 7 | 3022 | 25896 |
| 8 | 4808 | 21354 |
| 9 | 2248 | 20535 |
| 10 | 2222 | 20215 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1373 |
| 2 | GOOGLE-CLOUD | 1000 |
| 3 | PAN-22 | 944 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 825 |
| 6 | VOLCANO-ENGINE | 483 |
| 7 | ASEPL-SG | 440 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 396 |
| 10 | CENSY | 376 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8466 |
| 2 | China | 4786 |
| 3 | Singapore | 1490 |
| 4 | Netherlands | 550 |
| 5 | France | 521 |
| 6 | India | 473 |
| 7 | Hong Kong | 455 |
| 8 | South Korea | 398 |
| 9 | Russian Federation | 397 |
| 10 | Indonesia | 346 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 175631 |
| 2 | 22 | 94877 |
| 3 | 1722 | 83755 |
| 4 | 4808 | 52562 |
| 5 | 4488 | 46370 |
| 6 | 2248 | 44817 |
| 7 | 12345 | 34091 |
| 8 | 1822 | 29388 |
| 9 | 5902 | 28441 |
| 10 | 13722 | 24939 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1376 |
| 2 | GOOGLE-CLOUD | 1003 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 847 |
| 5 | AL-3 | 799 |
| 6 | VOLCANO-ENGINE | 484 |
| 7 | ASEPL-SG | 449 |
| 8 | FR-ONYPHE-20191111 | 415 |
| 9 | ALISOFT | 399 |
| 10 | CENSY | 373 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8636 |
| 2 | China | 4547 |
| 3 | Singapore | 1496 |
| 4 | Netherlands | 535 |
| 5 | France | 514 |
| 6 | India | 470 |
| 7 | Hong Kong | 445 |
| 8 | Russian Federation | 375 |
| 9 | South Korea | 373 |
| 10 | Brazil | 324 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 151706 |
| 2 | 22 | 98078 |
| 3 | 1722 | 71567 |
| 4 | 8004 | 51775 |
| 5 | 6666 | 31815 |
| 6 | 5902 | 31177 |
| 7 | 234 | 25215 |
| 8 | 2222 | 21840 |
| 9 | 6122 | 21000 |
| 10 | 2248 | 19764 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1367 |
| 2 | GOOGLE-CLOUD | 1008 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 811 |
| 6 | VOLCANO-ENGINE | 495 |
| 7 | ALISOFT | 457 |
| 8 | ASEPL-SG | 449 |
| 9 | FR-ONYPHE-20191111 | 416 |
| 10 | CENSY | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7818 |
| 2 | China | 5078 |
| 3 | Singapore | 1485 |
| 4 | India | 546 |
| 5 | France | 521 |
| 6 | Netherlands | 468 |
| 7 | Hong Kong | 444 |
| 8 | Russian Federation | 376 |
| 9 | South Korea | 365 |
| 10 | Brazil | 330 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 178792 |
| 2 | 6666 | 73647 |
| 3 | 2240 | 69644 |
| 4 | 8004 | 65554 |
| 5 | 22 | 62860 |
| 6 | 1722 | 59311 |
| 7 | 234 | 56088 |
| 8 | 8865 | 51896 |
| 9 | 54138 | 36832 |
| 10 | 5902 | 32344 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1367 |
| 2 | GOOGLE-CLOUD | 1004 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 847 |
| 5 | AL-3 | 823 |
| 6 | VOLCANO-ENGINE | 500 |
| 7 | ASEPL-SG | 463 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 393 |
| 10 | CMNET | 389 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7927 |
| 2 | China | 5729 |
| 3 | Singapore | 1513 |
| 4 | India | 534 |
| 5 | France | 521 |
| 6 | Hong Kong | 461 |
| 7 | Russian Federation | 394 |
| 8 | Netherlands | 389 |
| 9 | Indonesia | 373 |
| 10 | South Korea | 372 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 173775 |
| 2 | 6666 | 83388 |
| 3 | 2240 | 70894 |
| 4 | 22 | 50793 |
| 5 | 9922 | 39819 |
| 6 | 9322 | 37976 |
| 7 | 5902 | 34127 |
| 8 | 2522 | 28934 |
| 9 | 9222 | 26669 |
| 10 | 8004 | 24733 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1385 |
| 2 | GOOGLE-CLOUD | 999 |
| 3 | PAN-22 | 950 |
| 4 | BYTEPLUS-SG | 848 |
| 5 | AL-3 | 824 |
| 6 | VOLCANO-ENGINE | 494 |
| 7 | ASEPL-SG | 450 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 389 |
| 10 | CENSY | 375 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8662 |
| 2 | China | 5632 |
| 3 | Singapore | 1533 |
| 4 | India | 570 |
| 5 | France | 527 |
| 6 | Netherlands | 431 |
| 7 | Russian Federation | 428 |
| 8 | Hong Kong | 415 |
| 9 | South Korea | 390 |
| 10 | Indonesia | 383 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 168361 |
| 2 | 6666 | 80152 |
| 3 | 2240 | 69381 |
| 4 | 22 | 52613 |
| 5 | 9722 | 30633 |
| 6 | 5902 | 27578 |
| 7 | 2122 | 27351 |
| 8 | 9222 | 25832 |
| 9 | 444 | 23784 |
| 10 | 4022 | 23413 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1345 |
| 2 | GOOGLE-CLOUD | 1007 |
| 3 | PAN-22 | 946 |
| 4 | BYTEPLUS-SG | 881 |
| 5 | AL-3 | 820 |
| 6 | VOLCANO-ENGINE | 563 |
| 7 | ASEPL-SG | 448 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 411 |
| 10 | CENSY | 372 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8027 |
| 2 | China | 5526 |
| 3 | Singapore | 1536 |
| 4 | India | 590 |
| 5 | France | 537 |
| 6 | Hong Kong | 444 |
| 7 | Indonesia | 421 |
| 8 | Russian Federation | 415 |
| 9 | Brazil | 381 |
| 10 | South Korea | 376 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 178236 |
| 2 | 9722 | 73921 |
| 3 | 777 | 65772 |
| 4 | 2240 | 58217 |
| 5 | 6666 | 55777 |
| 6 | 8003 | 43017 |
| 7 | 58222 | 38860 |
| 8 | 2222 | 38630 |
| 9 | 22 | 37449 |
| 10 | 6622 | 34245 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1356 |
| 2 | GOOGLE-CLOUD | 1003 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 881 |
| 5 | AL-3 | 818 |
| 6 | VOLCANO-ENGINE | 472 |
| 7 | ASEPL-SG | 449 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | CENSY | 379 |
| 10 | ALISOFT | 357 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8716 |
| 2 | China | 6018 |
| 3 | Singapore | 1515 |
| 4 | India | 527 |
| 5 | France | 487 |
| 6 | Netherlands | 449 |
| 7 | Hong Kong | 405 |
| 8 | Russian Federation | 390 |
| 9 | Indonesia | 344 |
| 10 | Germany | 335 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 195087 |
| 2 | 777 | 96851 |
| 3 | 9722 | 81787 |
| 4 | 22 | 77169 |
| 5 | 2288 | 58709 |
| 6 | 8003 | 54959 |
| 7 | 2332 | 41804 |
| 8 | 1453 | 30043 |
| 9 | 10000 | 29127 |
| 10 | 5902 | 24737 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1381 |
| 2 | GOOGLE-CLOUD | 1002 |
| 3 | PAN-22 | 939 |
| 4 | BYTEPLUS-SG | 878 |
| 5 | AL-3 | 837 |
| 6 | VOLCANO-ENGINE | 475 |
| 7 | ASEPL-SG | 446 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | CENSY | 374 |
| 10 | CMNET | 367 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8361 |
| 2 | China | 5139 |
| 3 | Singapore | 1538 |
| 4 | India | 544 |
| 5 | France | 494 |
| 6 | Russian Federation | 435 |
| 7 | Hong Kong | 428 |
| 8 | Netherlands | 395 |
| 9 | Brazil | 395 |
| 10 | South Korea | 373 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 265222 |
| 2 | 22 | 91312 |
| 3 | 2288 | 64910 |
| 4 | 8003 | 49701 |
| 5 | 777 | 28333 |
| 6 | 9722 | 24931 |
| 7 | 9222 | 23987 |
| 8 | 5902 | 23747 |
| 9 | 3422 | 21539 |
| 10 | 522 | 21429 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1390 |
| 2 | GOOGLE-CLOUD | 1007 |
| 3 | PAN-22 | 948 |
| 4 | BYTEPLUS-SG | 878 |
| 5 | AL-3 | 850 |
| 6 | VOLCANO-ENGINE | 470 |
| 7 | ASEPL-SG | 453 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 402 |
| 10 | CENSY | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9243 |
| 2 | China | 5264 |
| 3 | Singapore | 1491 |
| 4 | Brazil | 743 |
| 5 | India | 560 |
| 6 | France | 509 |
| 7 | Netherlands | 467 |
| 8 | Russian Federation | 455 |
| 9 | Hong Kong | 433 |
| 10 | Indonesia | 338 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 340285 |
| 2 | 22 | 104299 |
| 3 | 7322 | 93655 |
| 4 | 2288 | 64989 |
| 5 | 13222 | 38289 |
| 6 | 28722 | 37229 |
| 7 | 2022 | 35187 |
| 8 | 8622 | 32481 |
| 9 | 333 | 29302 |
| 10 | 5902 | 26051 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1390 |
| 2 | GOOGLE-CLOUD | 1007 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 878 |
| 5 | AL-3 | 834 |
| 6 | VOLCANO-ENGINE | 465 |
| 7 | ASEPL-SG | 457 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | CENSY | 377 |
| 10 | ALISOFT | 372 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8663 |
| 2 | China | 5852 |
| 3 | Singapore | 1497 |
| 4 | Brazil | 1194 |
| 5 | India | 777 |
| 6 | Russian Federation | 567 |
| 7 | France | 537 |
| 8 | Indonesia | 414 |
| 9 | Hong Kong | 411 |
| 10 | Netherlands | 389 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 358756 |
| 2 | 22 | 68250 |
| 3 | 9822 | 67430 |
| 4 | 2288 | 64978 |
| 5 | 2255 | 43940 |
| 6 | 7070 | 40435 |
| 7 | 55022 | 36592 |
| 8 | 8222 | 36232 |
| 9 | 7322 | 33534 |
| 10 | 2022 | 29650 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1407 |
| 2 | GOOGLE-CLOUD | 1002 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 878 |
| 5 | AL-3 | 851 |
| 6 | VOLCANO-ENGINE | 478 |
| 7 | ASEPL-SG | 462 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 391 |
| 10 | CENSY | 381 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8808 |
| 2 | China | 6088 |
| 3 | Singapore | 1504 |
| 4 | Brazil | 1082 |
| 5 | India | 811 |
| 6 | Russian Federation | 592 |
| 7 | France | 539 |
| 8 | Hong Kong | 436 |
| 9 | South Korea | 430 |
| 10 | Indonesia | 395 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 324098 |
| 2 | 7070 | 99031 |
| 3 | 4675 | 69937 |
| 4 | 117 | 69780 |
| 5 | 8863 | 69760 |
| 6 | 8222 | 68907 |
| 7 | 2288 | 64432 |
| 8 | 9822 | 63434 |
| 9 | 2255 | 54470 |
| 10 | 2212 | 47459 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1383 |
| 2 | GOOGLE-CLOUD | 1002 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 880 |
| 5 | AL-3 | 848 |
| 6 | VOLCANO-ENGINE | 493 |
| 7 | ASEPL-SG | 463 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 377 |
| 10 | CMNET | 368 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8848 |
| 2 | China | 6154 |
| 3 | Singapore | 1529 |
| 4 | Brazil | 747 |
| 5 | India | 576 |
| 6 | France | 514 |
| 7 | Russian Federation | 490 |
| 8 | Hong Kong | 444 |
| 9 | Indonesia | 407 |
| 10 | Netherlands | 388 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 307638 |
| 2 | 7122 | 86739 |
| 3 | 6373 | 81657 |
| 4 | 3011 | 79788 |
| 5 | 2255 | 78103 |
| 6 | 26172 | 76113 |
| 7 | 30844 | 76053 |
| 8 | 7070 | 75550 |
| 9 | 8123 | 75218 |
| 10 | 13039 | 74665 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1340 |
| 2 | GOOGLE-CLOUD | 999 |
| 3 | PAN-22 | 947 |
| 4 | BYTEPLUS-SG | 882 |
| 5 | AL-3 | 850 |
| 6 | VOLCANO-ENGINE | 487 |
| 7 | ASEPL-SG | 468 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 391 |
| 10 | CENSY | 371 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8646 |
| 2 | China | 5845 |
| 3 | Singapore | 1535 |
| 4 | Brazil | 764 |
| 5 | India | 635 |
| 6 | France | 529 |
| 7 | Russian Federation | 477 |
| 8 | Netherlands | 422 |
| 9 | Indonesia | 416 |
| 10 | Hong Kong | 408 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 423268 |
| 2 | 7122 | 94513 |
| 3 | 82 | 78959 |
| 4 | 4603 | 76876 |
| 5 | 3022 | 76703 |
| 6 | 8167 | 74370 |
| 7 | 9525 | 74237 |
| 8 | 8284 | 73346 |
| 9 | 12472 | 73212 |
| 10 | 8041 | 73186 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1382 |
| 2 | GOOGLE-CLOUD | 1003 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 882 |
| 5 | AL-3 | 852 |
| 6 | VOLCANO-ENGINE | 494 |
| 7 | ASEPL-SG | 483 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 391 |
| 10 | CENSY | 375 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9206 |
| 2 | China | 6422 |
| 3 | Singapore | 1543 |
| 4 | India | 660 |
| 5 | Brazil | 604 |
| 6 | France | 568 |
| 7 | Russian Federation | 468 |
| 8 | Indonesia | 439 |
| 9 | Hong Kong | 422 |
| 10 | Netherlands | 403 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 436039 |
| 2 | 7122 | 71795 |
| 3 | 9696 | 46082 |
| 4 | 22 | 45415 |
| 5 | 522 | 32647 |
| 6 | 8002 | 32381 |
| 7 | 2288 | 27033 |
| 8 | 5901 | 26538 |
| 9 | 3389 | 21208 |
| 10 | 5902 | 19326 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1403 |
| 2 | GOOGLE-CLOUD | 1001 |
| 3 | PAN-22 | 945 |
| 4 | BYTEPLUS-SG | 882 |
| 5 | AL-3 | 857 |
| 6 | VOLCANO-ENGINE | 535 |
| 7 | ASEPL-SG | 481 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 379 |
| 10 | CENSY | 373 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8836 |
| 2 | China | 5284 |
| 3 | Singapore | 1560 |
| 4 | India | 608 |
| 5 | Brazil | 591 |
| 6 | France | 547 |
| 7 | Russian Federation | 506 |
| 8 | Indonesia | 446 |
| 9 | Hong Kong | 437 |
| 10 | Netherlands | 405 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 503061 |
| 2 | 522 | 53228 |
| 3 | 22 | 50192 |
| 4 | 2277 | 49093 |
| 5 | 5901 | 24382 |
| 6 | 7777 | 22554 |
| 7 | 3389 | 19780 |
| 8 | 23320 | 18946 |
| 9 | 5902 | 18741 |
| 10 | 59322 | 18649 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1369 |
| 2 | GOOGLE-CLOUD | 1004 |
| 3 | PAN-22 | 949 |
| 4 | BYTEPLUS-SG | 877 |
| 5 | AL-3 | 866 |
| 6 | VOLCANO-ENGINE | 508 |
| 7 | ASEPL-SG | 478 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | ALISOFT | 380 |
| 10 | CENSY | 367 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9184 |
| 2 | China | 5499 |
| 3 | Singapore | 1507 |
| 4 | Brazil | 780 |
| 5 | India | 618 |
| 6 | France | 558 |
| 7 | Russian Federation | 537 |
| 8 | Hong Kong | 429 |
| 9 | Netherlands | 427 |
| 10 | Indonesia | 369 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 492147 |
| 2 | 2277 | 78371 |
| 3 | 22 | 73691 |
| 4 | 5322 | 51964 |
| 5 | 522 | 51050 |
| 6 | 6789 | 45984 |
| 7 | 4922 | 45442 |
| 8 | 6000 | 37332 |
| 9 | 8001 | 33204 |
| 10 | 5901 | 27040 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1372 |
| 2 | GOOGLE-CLOUD | 1001 |
| 3 | PAN-22 | 949 |
| 4 | AL-3 | 879 |
| 5 | BYTEPLUS-SG | 877 |
| 6 | VOLCANO-ENGINE | 501 |
| 7 | ASEPL-SG | 480 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | CENSY | 377 |
| 10 | ALISOFT | 366 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8119 |
| 2 | China | 5665 |
| 3 | Singapore | 1504 |
| 4 | Brazil | 725 |
| 5 | India | 626 |
| 6 | Russian Federation | 620 |
| 7 | France | 586 |
| 8 | Hong Kong | 439 |
| 9 | Netherlands | 395 |
| 10 | Indonesia | 365 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 521688 |
| 2 | 4922 | 114311 |
| 3 | 2332 | 105829 |
| 4 | 5322 | 84674 |
| 5 | 8001 | 66353 |
| 6 | 5716 | 63002 |
| 7 | 8248 | 61162 |
| 8 | 22 | 58792 |
| 9 | 4343 | 58376 |
| 10 | 7127 | 56777 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1382 |
| 2 | GOOGLE-CLOUD | 1003 |
| 3 | PAN-22 | 949 |
| 4 | AL-3 | 912 |
| 5 | BYTEPLUS-SG | 877 |
| 6 | ASEPL-SG | 514 |
| 7 | VOLCANO-ENGINE | 501 |
| 8 | FR-ONYPHE-20191111 | 416 |
| 9 | CENSY | 382 |
| 10 | ALISOFT | 376 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8699 |
| 2 | China | 6159 |
| 3 | Singapore | 1578 |
| 4 | India | 681 |
| 5 | Brazil | 671 |
| 6 | Russian Federation | 628 |
| 7 | France | 577 |
| 8 | Hong Kong | 438 |
| 9 | United Kingdom | 395 |
| 10 | Indonesia | 394 |