total number of suspected botnet IPs: 15752
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15006
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:
Rank | Network | # of suspected botnet IPs |
---|---|---|
1 | DO-13 | 419 |
2 | Baidu | 416 |
3 | TENCENT-CN | 310 |
4 | KORNET | 302 |
5 | TencentCloud | 292 |
6 | HINET-NET | 267 |
7 | VNPT-VN | 248 |
8 | DIGITALOCEAN-12 | 211 |
9 | CHINANET-GD | 172 |
10 | OVH | 169 |
The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:
Rank | Country/Region | # of suspected botnet IPs |
---|---|---|
1 | China | 3458 |
2 | United States | 2458 |
3 | France | 743 |
4 | Russian Federation | 644 |
5 | India | 614 |
6 | Brazil | 585 |
7 | Viet Nam | 567 |
8 | South Korea | 503 |
9 | Indonesia | 472 |
10 | Taiwan | 330 |
The top 10 TCP ports, ordered by number of connection attempts received are:
Rank | TCP port number | # of connection attempts received |
---|---|---|
1 | 5038 | 25998 |
2 | 5000 | 23511 |
3 | 7070 | 23507 |
4 | 8000 | 23248 |
5 | 22 | 23190 |
6 | 7000 | 20605 |
7 | 445 | 16543 |
8 | 23 | 16257 |
9 | 22222 | 12659 |
10 | 5900 | 6619 |
No comments:
Post a Comment