detection period: 2021-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 28102
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25837
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
Rank | Network | # of suspected botnet IPs |
---|---|---|
1 | TencentCloud | 1711 |
2 | ALISOFT | 796 |
3 | DIGITALOCEAN-192-241-128-0 | 737 |
4 | VNPT-VN | 558 |
5 | TENCENT-CN | 526 |
6 | NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK | 510 |
7 | VIETTEL-VN | 414 |
8 | Baidu | 382 |
9 | HINET-NET | 374 |
10 | BSNLNET | 291 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
Rank | Country/Region | # of suspected botnet IPs |
---|---|---|
1 | China | 6455 |
2 | United States | 4057 |
3 | India | 1905 |
4 | Russian Federation | 1739 |
5 | Brazil | 1392 |
6 | Viet Nam | 1382 |
7 | Indonesia | 750 |
8 | Thailand | 650 |
9 | European Union | 548 |
10 | Taiwan | 504 |
The top 10 TCP ports, ordered by the number of connection attempts received are:
Rank | TCP port number | # of connection attempts received |
---|---|---|
1 | 445 | 322726 |
2 | 122 | 156131 |
3 | 2485 | 140959 |
4 | 2013 | 133165 |
5 | 1422 | 106672 |
6 | 2237 | 96229 |
7 | 2370 | 90524 |
8 | 2362 | 85607 |
9 | 22 | 79010 |
10 | 2016 | 63646 |
No comments:
Post a Comment