detection period: 2025-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 31385
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29553
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
Rank | Network | # of suspected botnet IPs |
---|---|---|
1 | AL-3 | 1415 |
2 | KORNET-KR | 1298 |
3 | HINET-NET | 1242 |
4 | GOOGLE-CLOUD | 1030 |
5 | BSNLNET | 976 |
6 | PAN-22 | 965 |
7 | ASEPL-SG | 957 |
8 | MSFT | 920 |
9 | ALISOFT | 731 |
10 | UK-MICROSOFT-20000324 | 559 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
Rank | Country/Region | # of suspected botnet IPs |
---|---|---|
1 | United States | 7656 |
2 | China | 6809 |
3 | India | 2187 |
4 | South Korea | 1777 |
5 | Taiwan | 1446 |
6 | Singapore | 1169 |
7 | United Kingdom | 1050 |
8 | Brazil | 643 |
9 | Russian Federation | 598 |
10 | Indonesia | 598 |
Rank | TCP port number | # of connection attempts received |
---|---|---|
1 | 5555 | 206113 |
2 | 2222 | 79600 |
3 | 22 | 70698 |
4 | 1122 | 70007 |
5 | 8443 | 56606 |
6 | 6000 | 55951 |
7 | 18471 | 55369 |
8 | 9281 | 53930 |
9 | 23 | 51483 |
10 | 2056 | 40292 |
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment