detection period: 2026-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 19491
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18394
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1795 |
| 2 | MSFT | 1393 |
| 3 | INFRAWATCH | 1178 |
| 4 | GOOGLE-CLOUD | 1050 |
| 5 | PAN-22 | 962 |
| 6 | ASEPL-SG | 656 |
| 7 | VOLCANO-ENGINE | 506 |
| 8 | FR-ONYPHE-20191111 | 400 |
| 9 | CENSY | 375 |
| 10 | CMNET | 228 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8637 |
| 2 | China | 3623 |
| 3 | Singapore | 996 |
| 4 | United Kingdom | 834 |
| 5 | Netherlands | 598 |
| 6 | Germany | 590 |
| 7 | France | 466 |
| 8 | Hong Kong | 358 |
| 9 | Indonesia | 306 |
| 10 | South Korea | 261 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 158896 |
| 2 | 2265 | 46664 |
| 3 | 2023 | 41857 |
| 4 | 5001 | 30243 |
| 5 | 7777 | 29149 |
| 6 | 8010 | 26878 |
| 7 | 23 | 24062 |
| 8 | 8015 | 23027 |
| 9 | 4714 | 22404 |
| 10 | 8022 | 22393 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1810 |
| 2 | MSFT | 1412 |
| 3 | INFRAWATCH | 1162 |
| 4 | GOOGLE-CLOUD | 1045 |
| 5 | PAN-22 | 962 |
| 6 | ASEPL-SG | 701 |
| 7 | VOLCANO-ENGINE | 505 |
| 8 | FR-ONYPHE-20191111 | 400 |
| 9 | CENSY | 377 |
| 10 | cloud | 310 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9006 |
| 2 | China | 3643 |
| 3 | Singapore | 1061 |
| 4 | United Kingdom | 940 |
| 5 | Netherlands | 641 |
| 6 | Germany | 634 |
| 7 | France | 486 |
| 8 | Hong Kong | 376 |
| 9 | Indonesia | 299 |
| 10 | South Korea | 256 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 140809 |
| 2 | 4122 | 41589 |
| 3 | 2023 | 38686 |
| 4 | 2211 | 34595 |
| 5 | 8999 | 33538 |
| 6 | 8010 | 32303 |
| 7 | 7777 | 27193 |
| 8 | 5001 | 26801 |
| 9 | 23 | 24526 |
| 10 | 8015 | 24095 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1841 |
| 2 | MSFT | 1435 |
| 3 | GOOGLE-CLOUD | 1062 |
| 4 | PAN-22 | 961 |
| 5 | INFRAWATCH | 720 |
| 6 | ASEPL-SG | 717 |
| 7 | VOLCANO-ENGINE | 509 |
| 8 | FR-ONYPHE-20191111 | 400 |
| 9 | CENSY | 371 |
| 10 | cloud | 296 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9599 |
| 2 | China | 3799 |
| 3 | Singapore | 1091 |
| 4 | United Kingdom | 660 |
| 5 | Netherlands | 638 |
| 6 | France | 480 |
| 7 | Germany | 392 |
| 8 | Hong Kong | 369 |
| 9 | Indonesia | 320 |
| 10 | South Korea | 266 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 237800 |
| 2 | 2211 | 42385 |
| 3 | 4122 | 38191 |
| 4 | 8999 | 35428 |
| 5 | 8010 | 35346 |
| 6 | 1722 | 32980 |
| 7 | 7777 | 30440 |
| 8 | 8001 | 29488 |
| 9 | 8015 | 29427 |
| 10 | 5001 | 27858 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1735 |
| 2 | MSFT | 1428 |
| 3 | GOOGLE-CLOUD | 1051 |
| 4 | PAN-22 | 966 |
| 5 | ASEPL-SG | 636 |
| 6 | VOLCANO-ENGINE | 506 |
| 7 | FR-ONYPHE-20191111 | 407 |
| 8 | CENSY | 375 |
| 9 | cloud | 302 |
| 10 | CMNET | 244 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8889 |
| 2 | China | 3801 |
| 3 | Singapore | 1023 |
| 4 | France | 479 |
| 5 | Hong Kong | 368 |
| 6 | Germany | 340 |
| 7 | Netherlands | 323 |
| 8 | Indonesia | 293 |
| 9 | South Korea | 286 |
| 10 | Viet Nam | 240 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 251056 |
| 2 | 9999 | 42802 |
| 3 | 2211 | 41367 |
| 4 | 8010 | 38113 |
| 5 | 8999 | 37991 |
| 6 | 8001 | 33328 |
| 7 | 1722 | 32473 |
| 8 | 7102 | 29321 |
| 9 | 8007 | 29163 |
| 10 | 4714 | 28711 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1623 |
| 2 | MSFT | 1450 |
| 3 | GOOGLE-CLOUD | 1050 |
| 4 | PAN-22 | 960 |
| 5 | ASEPL-SG | 611 |
| 6 | VOLCANO-ENGINE | 485 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | CENSY | 378 |
| 9 | cloud | 302 |
| 10 | CMNET | 243 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9406 |
| 2 | China | 3529 |
| 3 | Singapore | 1013 |
| 4 | France | 475 |
| 5 | Hong Kong | 372 |
| 6 | Netherlands | 357 |
| 7 | Indonesia | 332 |
| 8 | Germany | 319 |
| 9 | United Kingdom | 287 |
| 10 | South Korea | 280 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 284039 |
| 2 | 22 | 38857 |
| 3 | 2021 | 37951 |
| 4 | 8999 | 37602 |
| 5 | 8001 | 37458 |
| 6 | 8010 | 35949 |
| 7 | 2211 | 35024 |
| 8 | 7022 | 32795 |
| 9 | 8015 | 30048 |
| 10 | 4714 | 29463 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1777 |
| 2 | MSFT | 1438 |
| 3 | GOOGLE-CLOUD | 1050 |
| 4 | PAN-22 | 960 |
| 5 | ASEPL-SG | 618 |
| 6 | INFRAWATCH | 568 |
| 7 | VOLCANO-ENGINE | 495 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | CENSY | 378 |
| 10 | cloud | 306 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9045 |
| 2 | China | 3750 |
| 3 | Singapore | 978 |
| 4 | Netherlands | 613 |
| 5 | Germany | 590 |
| 6 | France | 489 |
| 7 | Hong Kong | 357 |
| 8 | Indonesia | 333 |
| 9 | Brazil | 318 |
| 10 | United Kingdom | 284 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 349840 |
| 2 | 2021 | 67295 |
| 3 | 2211 | 48795 |
| 4 | 22021 | 31604 |
| 5 | 4714 | 30318 |
| 6 | 23 | 26905 |
| 7 | 5005 | 26714 |
| 8 | 1122 | 26150 |
| 9 | 1722 | 24936 |
| 10 | 22 | 23273 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1534 |
| 2 | MSFT | 1418 |
| 3 | INFRAWATCH | 1178 |
| 4 | GOOGLE-CLOUD | 1038 |
| 5 | PAN-22 | 963 |
| 6 | ASEPL-SG | 517 |
| 7 | VOLCANO-ENGINE | 465 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | CENSY | 378 |
| 10 | cloud | 281 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9561 |
| 2 | China | 3557 |
| 3 | Singapore | 909 |
| 4 | United Kingdom | 859 |
| 5 | Germany | 655 |
| 6 | Netherlands | 592 |
| 7 | France | 473 |
| 8 | Hong Kong | 397 |
| 9 | Brazil | 394 |
| 10 | Indonesia | 351 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 403543 |
| 2 | 5525 | 90877 |
| 3 | 2021 | 69188 |
| 4 | 2211 | 53511 |
| 5 | 8122 | 50314 |
| 6 | 22021 | 49690 |
| 7 | 200 | 48444 |
| 8 | 23 | 42538 |
| 9 | 2026 | 37828 |
| 10 | 400 | 37447 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1610 |
| 2 | MSFT | 1462 |
| 3 | INFRAWATCH | 1139 |
| 4 | GOOGLE-CLOUD | 1027 |
| 5 | PAN-22 | 962 |
| 6 | CLOUDFLARENET | 734 |
| 7 | ASEPL-SG | 551 |
| 8 | VOLCANO-ENGINE | 452 |
| 9 | FR-ONYPHE-20191111 | 448 |
| 10 | CENSY | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9474 |
| 2 | China | 3629 |
| 3 | Singapore | 862 |
| 4 | United Kingdom | 814 |
| 5 | Netherlands | 605 |
| 6 | Germany | 601 |
| 7 | France | 488 |
| 8 | Brazil | 396 |
| 9 | Hong Kong | 392 |
| 10 | Indonesia | 318 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 366970 |
| 2 | 2021 | 69023 |
| 3 | 300 | 58543 |
| 4 | 49322 | 50916 |
| 5 | 49222 | 45777 |
| 6 | 49422 | 45491 |
| 7 | 49122 | 45097 |
| 8 | 22021 | 39203 |
| 9 | 23 | 39042 |
| 10 | 100 | 33042 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1626 |
| 2 | MSFT | 1444 |
| 3 | INFRAWATCH | 1135 |
| 4 | GOOGLE-CLOUD | 1045 |
| 5 | PAN-22 | 960 |
| 6 | ASEPL-SG | 559 |
| 7 | VOLCANO-ENGINE | 457 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | CENSY | 374 |
| 10 | UCLOUD-HK | 246 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8663 |
| 2 | China | 3422 |
| 3 | Singapore | 918 |
| 4 | United Kingdom | 883 |
| 5 | Netherlands | 597 |
| 6 | Germany | 545 |
| 7 | France | 511 |
| 8 | Hong Kong | 370 |
| 9 | Indonesia | 342 |
| 10 | Brazil | 339 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 270234 |
| 2 | 2021 | 62929 |
| 3 | 23 | 41170 |
| 4 | 1722 | 35376 |
| 5 | 1122 | 32407 |
| 6 | 10222 | 31622 |
| 7 | 4714 | 30123 |
| 8 | 5005 | 29576 |
| 9 | 5902 | 29204 |
| 10 | 222 | 27495 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1709 |
| 2 | MSFT | 1430 |
| 3 | GOOGLE-CLOUD | 1054 |
| 4 | INFRAWATCH | 1030 |
| 5 | PAN-22 | 960 |
| 6 | ASEPL-SG | 594 |
| 7 | VOLCANO-ENGINE | 460 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | CENSY | 381 |
| 10 | cloud | 325 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9798 |
| 2 | China | 3577 |
| 3 | Singapore | 1008 |
| 4 | United Kingdom | 757 |
| 5 | Netherlands | 625 |
| 6 | Germany | 557 |
| 7 | France | 519 |
| 8 | Brazil | 414 |
| 9 | Indonesia | 396 |
| 10 | Hong Kong | 379 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 258342 |
| 2 | 2021 | 61526 |
| 3 | 1722 | 46487 |
| 4 | 23 | 41389 |
| 5 | 1122 | 40310 |
| 6 | 4714 | 29708 |
| 7 | 7822 | 27701 |
| 8 | 5902 | 26355 |
| 9 | 5005 | 26343 |
| 10 | 4717 | 25845 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1595 |
| 2 | MSFT | 1443 |
| 3 | GOOGLE-CLOUD | 1056 |
| 4 | PAN-22 | 962 |
| 5 | INFRAWATCH | 859 |
| 6 | ACEVILLEPTELTD-SG | 728 |
| 7 | ASEPL-SG | 569 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | VOLCANO-ENGINE | 424 |
| 10 | CENSY | 372 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8764 |
| 2 | China | 3720 |
| 3 | Singapore | 1380 |
| 4 | United Kingdom | 842 |
| 5 | Netherlands | 606 |
| 6 | France | 458 |
| 7 | Hong Kong | 358 |
| 8 | Indonesia | 284 |
| 9 | Germany | 282 |
| 10 | South Korea | 273 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 296862 |
| 2 | 2261 | 66170 |
| 3 | 1722 | 47385 |
| 4 | 22020 | 34436 |
| 5 | 2332 | 33821 |
| 6 | 1122 | 30719 |
| 7 | 4714 | 30085 |
| 8 | 822 | 27570 |
| 9 | 4717 | 26741 |
| 10 | 5902 | 25766 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1709 |
| 2 | MSFT | 1435 |
| 3 | INFRAWATCH | 1076 |
| 4 | GOOGLE-CLOUD | 1051 |
| 5 | PAN-22 | 961 |
| 6 | ACEVILLEPTELTD-SG | 822 |
| 7 | ASEPL-SG | 583 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | VOLCANO-ENGINE | 426 |
| 10 | CENSY | 375 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9887 |
| 2 | China | 4735 |
| 3 | Singapore | 1473 |
| 4 | United Kingdom | 973 |
| 5 | Germany | 591 |
| 6 | Netherlands | 567 |
| 7 | France | 485 |
| 8 | Hong Kong | 356 |
| 9 | Indonesia | 283 |
| 10 | India | 264 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 182235 |
| 2 | 2261 | 85221 |
| 3 | 2332 | 80879 |
| 4 | 1722 | 47916 |
| 5 | 22020 | 33974 |
| 6 | 23 | 30682 |
| 7 | 4714 | 30468 |
| 8 | 1122 | 27464 |
| 9 | 4717 | 26648 |
| 10 | 5902 | 25273 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1707 |
| 2 | MSFT | 1442 |
| 3 | INFRAWATCH | 1108 |
| 4 | GOOGLE-CLOUD | 1054 |
| 5 | PAN-22 | 962 |
| 6 | ACEVILLEPTELTD-SG | 845 |
| 7 | ASEPL-SG | 617 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | VOLCANO-ENGINE | 436 |
| 10 | CENSY | 374 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9004 |
| 2 | China | 3287 |
| 3 | Singapore | 1633 |
| 4 | United Kingdom | 957 |
| 5 | Netherlands | 612 |
| 6 | Germany | 586 |
| 7 | France | 475 |
| 8 | Hong Kong | 358 |
| 9 | Indonesia | 322 |
| 10 | India | 261 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 167334 |
| 2 | 2332 | 44290 |
| 3 | 1722 | 43348 |
| 4 | 9011 | 38957 |
| 5 | 23 | 32605 |
| 6 | 2048 | 32262 |
| 7 | 2020 | 31597 |
| 8 | 5005 | 29410 |
| 9 | 4714 | 27040 |
| 10 | 7922 | 26013 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1669 |
| 2 | MSFT | 1425 |
| 3 | GOOGLE-CLOUD | 1024 |
| 4 | PAN-22 | 952 |
| 5 | ACEVILLEPTELTD-SG | 843 |
| 6 | INFRAWATCH | 784 |
| 7 | ASEPL-SG | 581 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | VOLCANO-ENGINE | 425 |
| 10 | CENSY | 374 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9394 |
| 2 | China | 3490 |
| 3 | Singapore | 1543 |
| 4 | United Kingdom | 729 |
| 5 | Netherlands | 560 |
| 6 | Germany | 528 |
| 7 | France | 480 |
| 8 | Hong Kong | 359 |
| 9 | Indonesia | 329 |
| 10 | India | 290 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 228987 |
| 2 | 1722 | 39765 |
| 3 | 23 | 38639 |
| 4 | 2020 | 30385 |
| 5 | 5005 | 29226 |
| 6 | 7922 | 28865 |
| 7 | 2048 | 27599 |
| 8 | 5902 | 26847 |
| 9 | 5322 | 25204 |
| 10 | 2122 | 24765 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1677 |
| 2 | MSFT | 1445 |
| 3 | GOOGLE-CLOUD | 1028 |
| 4 | PAN-22 | 956 |
| 5 | INFRAWATCH | 890 |
| 6 | ACEVILLEPTELTD-SG | 843 |
| 7 | ASEPL-SG | 515 |
| 8 | FR-ONYPHE-20191111 | 448 |
| 9 | VOLCANO-ENGINE | 429 |
| 10 | CENSY | 380 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8788 |
| 2 | China | 3377 |
| 3 | Singapore | 1431 |
| 4 | United Kingdom | 743 |
| 5 | Netherlands | 614 |
| 6 | Germany | 532 |
| 7 | France | 489 |
| 8 | India | 401 |
| 9 | Hong Kong | 364 |
| 10 | Indonesia | 357 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 197954 |
| 2 | 2210 | 55384 |
| 3 | 1722 | 38868 |
| 4 | 2020 | 38796 |
| 5 | 5432 | 38210 |
| 6 | 23 | 30396 |
| 7 | 7922 | 28222 |
| 8 | 5005 | 26986 |
| 9 | 5902 | 25321 |
| 10 | 5322 | 24958 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1706 |
| 2 | MSFT | 1470 |
| 3 | INFRAWATCH | 1090 |
| 4 | GOOGLE-CLOUD | 1038 |
| 5 | PAN-22 | 962 |
| 6 | ASEPL-SG | 607 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | VOLCANO-ENGINE | 435 |
| 9 | CENSY | 377 |
| 10 | AT-88-Z | 355 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9600 |
| 2 | China | 3669 |
| 3 | Singapore | 985 |
| 4 | United Kingdom | 902 |
| 5 | Germany | 656 |
| 6 | Netherlands | 649 |
| 7 | France | 575 |
| 8 | Indonesia | 380 |
| 9 | India | 370 |
| 10 | Hong Kong | 367 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 226993 |
| 2 | 2210 | 103122 |
| 3 | 4822 | 90055 |
| 4 | 2239 | 85952 |
| 5 | 2020 | 43779 |
| 6 | 1722 | 37690 |
| 7 | 23 | 34903 |
| 8 | 7922 | 27941 |
| 9 | 5005 | 26718 |
| 10 | 5902 | 24968 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1516 |
| 2 | MSFT | 1435 |
| 3 | INFRAWATCH | 1073 |
| 4 | GOOGLE-CLOUD | 1046 |
| 5 | PAN-22 | 964 |
| 6 | ASEPL-SG | 500 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | VOLCANO-ENGINE | 440 |
| 9 | CENSY | 381 |
| 10 | AT-88-Z | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9476 |
| 2 | China | 3457 |
| 3 | United Kingdom | 927 |
| 4 | Singapore | 908 |
| 5 | Germany | 682 |
| 6 | Netherlands | 674 |
| 7 | France | 593 |
| 8 | Brazil | 400 |
| 9 | Indonesia | 381 |
| 10 | Hong Kong | 380 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 266409 |
| 2 | 2210 | 144612 |
| 3 | 2239 | 100721 |
| 4 | 8015 | 58245 |
| 5 | 4822 | 37892 |
| 6 | 1722 | 37692 |
| 7 | 2020 | 36912 |
| 8 | 8000 | 31726 |
| 9 | 5322 | 27662 |
| 10 | 5005 | 25618 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1568 |
| 2 | MSFT | 1469 |
| 3 | INFRAWATCH | 1114 |
| 4 | GOOGLE-CLOUD | 1031 |
| 5 | PAN-22 | 953 |
| 6 | ASEPL-SG | 491 |
| 7 | VOLCANO-ENGINE | 449 |
| 8 | FR-ONYPHE-20191111 | 447 |
| 9 | CENSY | 374 |
| 10 | cloud | 331 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8669 |
| 2 | China | 3444 |
| 3 | Singapore | 890 |
| 4 | United Kingdom | 852 |
| 5 | Netherlands | 674 |
| 6 | France | 603 |
| 7 | Germany | 589 |
| 8 | Indonesia | 475 |
| 9 | Hong Kong | 387 |
| 10 | Brazil | 386 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 235972 |
| 2 | 8000 | 175907 |
| 3 | 2210 | 150165 |
| 4 | 9443 | 91789 |
| 5 | 2239 | 85828 |
| 6 | 2000 | 79546 |
| 7 | 8015 | 78504 |
| 8 | 2222 | 77927 |
| 9 | 7777 | 64548 |
| 10 | 5357 | 57893 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1752 |
| 2 | MSFT | 1434 |
| 3 | GOOGLE-CLOUD | 1029 |
| 4 | PAN-22 | 953 |
| 5 | INFRAWATCH | 889 |
| 6 | ASEPL-SG | 637 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | VOLCANO-ENGINE | 439 |
| 9 | CENSY | 373 |
| 10 | cloud | 291 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9405 |
| 2 | China | 3575 |
| 3 | Singapore | 1086 |
| 4 | United Kingdom | 887 |
| 5 | Netherlands | 745 |
| 6 | France | 596 |
| 7 | India | 509 |
| 8 | Indonesia | 493 |
| 9 | Brazil | 486 |
| 10 | Germany | 440 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 275627 |
| 2 | 2210 | 149987 |
| 3 | 1840 | 50113 |
| 4 | 5701 | 46741 |
| 5 | 9011 | 45007 |
| 6 | 2020 | 33357 |
| 7 | 3265 | 32028 |
| 8 | 23 | 31552 |
| 9 | 5999 | 31397 |
| 10 | 5902 | 24720 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1517 |
| 2 | MSFT | 1390 |
| 3 | GOOGLE-CLOUD | 1037 |
| 4 | PAN-22 | 955 |
| 5 | INFRAWATCH | 933 |
| 6 | ASEPL-SG | 499 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | CENSY | 374 |
| 9 | cloud | 340 |
| 10 | VOLCANO-ENGINE | 309 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8669 |
| 2 | China | 3051 |
| 3 | Singapore | 855 |
| 4 | United Kingdom | 841 |
| 5 | Germany | 564 |
| 6 | France | 562 |
| 7 | India | 480 |
| 8 | Netherlands | 445 |
| 9 | Brazil | 355 |
| 10 | Hong Kong | 350 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 294550 |
| 2 | 5701 | 156615 |
| 3 | 2210 | 127484 |
| 4 | 1840 | 119173 |
| 5 | 3265 | 81673 |
| 6 | 2109 | 64372 |
| 7 | 9011 | 59661 |
| 8 | 2020 | 39640 |
| 9 | 9997 | 31539 |
| 10 | 23 | 29056 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1416 |
| 2 | AL-3 | 1412 |
| 3 | INFRAWATCH | 1161 |
| 4 | GOOGLE-CLOUD | 1029 |
| 5 | PAN-22 | 954 |
| 6 | ASEPL-SG | 478 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | CENSY | 375 |
| 9 | cloud | 329 |
| 10 | VOLCANO-ENGINE | 313 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9131 |
| 2 | China | 2647 |
| 3 | United Kingdom | 871 |
| 4 | Singapore | 811 |
| 5 | Netherlands | 619 |
| 6 | Germany | 569 |
| 7 | France | 568 |
| 8 | India | 392 |
| 9 | Hong Kong | 372 |
| 10 | Brazil | 300 |
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 1840 | 782834 |
| 2 | 3265 | 652089 |
| 3 | 5318 | 434503 |
| 4 | 2109 | 310269 |
| 5 | 5900 | 304807 |
| 6 | 5701 | 249208 |
| 7 | 4486 | 233674 |
| 8 | 5473 | 227915 |
| 9 | 5676 | 209606 |
| 10 | 3379 | 156981 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1434 |
| 2 | MSFT | 1415 |
| 3 | INFRAWATCH | 1157 |
| 4 | GOOGLE-CLOUD | 1020 |
| 5 | PAN-22 | 952 |
| 6 | ASEPL-SG | 493 |
| 7 | FR-ONYPHE-20191111 | 448 |
| 8 | CENSY | 371 |
| 9 | cloud | 311 |
| 10 | VOLCANO-ENGINE | 306 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8462 |
| 2 | China | 2897 |
| 3 | United Kingdom | 855 |
| 4 | Singapore | 820 |
| 5 | Netherlands | 668 |
| 6 | France | 555 |
| 7 | Germany | 533 |
| 8 | India | 413 |
| 9 | Hong Kong | 370 |
| 10 | Brazil | 320 |