Botnet Statistics [2023-04-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 24138
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22015
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1047
2	KORNET-KR	578
3	ACEVILLEPTELTD-SG	576
4	DIGITALOCEAN-192-241-128-0	487
5	PAN-22	460
6	CHINANET-JS	418
7	HINET-NET	413
8	VNPT-VN	368
9	DIGITALOCEAN-107-170-0-0	362
10	CMNET	292

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6938
2	China	3445
3	India	1512
4	Russian Federation	967
5	Brazil	941
6	Singapore	878
7	South Korea	876
8	Viet Nam	802
9	Taiwan	572
10	Hong Kong	464

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9001	149865
2	22	62956
3	6002	53168
4	222	50366
5	445	45967
6	822	43845
7	1422	41992
8	23	38832
9	1387	31647
10	6112	31151

20230426 Botnet Detection Live Streaming 500+ zombies detected)