detection period: 2024-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 31608
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29651
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
Rank | Network | # of suspected botnet IPs |
---|---|---|
1 | ACEVILLEPTELTD-SG | 2473 |
2 | ALISOFT | 1547 |
3 | GOOGLE-CLOUD | 1068 |
4 | TencentCloud | 1012 |
5 | DIGITALOCEAN-192-241-128-0 | 546 |
6 | TENCENT-CN | 519 |
7 | CMNET | 499 |
8 | PAN-22 | 463 |
9 | KORNET-KR | 461 |
10 | ASEPL-SG | 456 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
Rank | Country/Region | # of suspected botnet IPs |
---|---|---|
1 | China | 8347 |
2 | United States | 7121 |
3 | Singapore | 2639 |
4 | India | 1302 |
5 | Russian Federation | 904 |
6 | Brazil | 899 |
7 | Hong Kong | 885 |
8 | South Korea | 805 |
9 | Viet Nam | 543 |
10 | Indonesia | 529 |
The top 10 TCP ports, ordered by the number of connection attempts received are:
Rank | TCP port number | # of connection attempts received |
---|---|---|
1 | 8122 | 239424 |
2 | 322 | 68409 |
3 | 7522 | 54998 |
4 | 2223 | 47852 |
5 | 5822 | 45337 |
6 | 22 | 42070 |
7 | 2255 | 37571 |
8 | 13 | 27232 |
9 | 57022 | 25678 |
10 | 445 | 25473 |
No comments:
Post a Comment