detection period: 2021-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 37711
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34733
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | TencentCloud | 1938 |
| 2 | TENCENT-CN | 782 |
| 3 | VNPT-VN | 758 |
| 4 | VIETTEL-VN | 692 |
| 5 | DIGITALOCEAN-192-241-128-0 | 645 |
| 6 | ALISOFT | 629 |
| 7 | NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK | 613 |
| 8 | BSNLNET | 513 |
| 9 | HINET-NET | 509 |
| 10 | VE-CSVE-LACNIC | 434 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | China | 9056 |
| 2 | United States | 4662 |
| 3 | India | 2893 |
| 4 | Viet Nam | 2018 |
| 5 | Brazil | 1725 |
| 6 | Russian Federation | 1723 |
| 7 | Indonesia | 1204 |
| 8 | Thailand | 783 |
| 9 | Taiwan | 657 |
| 10 | European Union | 644 |
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 445 | 511739 |
| 2 | 1112 | 264887 |
| 3 | 1125 | 213207 |
| 4 | 1126 | 210770 |
| 5 | 1131 | 210540 |
| 6 | 1132 | 197257 |
| 7 | 1133 | 193051 |
| 8 | 1113 | 140965 |
| 9 | 1202 | 137527 |
| 10 | 1032 | 137383 |