detection period: 2024-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 29142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27212
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
Rank | Network | # of suspected botnet IPs |
---|---|---|
1 | ACEVILLEPTELTD-SG | 2358 |
2 | ALISOFT | 1479 |
3 | GOOGLE-CLOUD | 1047 |
4 | TencentCloud | 984 |
5 | DIGITALOCEAN-192-241-128-0 | 606 |
6 | TENCENT-CN | 555 |
7 | PAN-22 | 461 |
8 | ASEPL-SG | 417 |
9 | KORNET-KR | 393 |
10 | CMNET | 379 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
Rank | Country/Region | # of suspected botnet IPs |
---|---|---|
1 | China | 7712 |
2 | United States | 7127 |
3 | Singapore | 2466 |
4 | India | 1114 |
5 | Brazil | 806 |
6 | South Korea | 785 |
7 | Hong Kong | 762 |
8 | Russian Federation | 749 |
9 | Viet Nam | 501 |
10 | Japan | 500 |
The top 10 TCP ports, ordered by the number of connection attempts received are:
Rank | TCP port number | # of connection attempts received |
---|---|---|
1 | 38322 | 100348 |
2 | 2230 | 91159 |
3 | 3722 | 77229 |
4 | 11022 | 58290 |
5 | 622 | 57451 |
6 | 7022 | 53458 |
7 | 22 | 53392 |
8 | 5822 | 50856 |
9 | 2263 | 42770 |
10 | 2255 | 41252 |
No comments:
Post a Comment