Botnet Statistics [2023-07-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 18421
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16848
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1058
2	DIGITALOCEAN-192-241-128-0	695
3	PAN-22	458
4	CHINANET-JS	433
5	DIGITALOCEAN-198-199-64-0	424
6	DIGITALOCEAN-107-170-0-0	416
7	DIGITALOCEAN-162-243-0-0	339
8	CMNET	321
9	BSNLNET	308
10	KORNET-KR	288

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	5901
2	China	3775
3	India	1348
4	Brazil	549
5	Russian Federation	547
6	South Korea	444
7	Hong Kong	391
8	Taiwan	323
9	Viet Nam	320
10	Indonesia	296

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9988	147179
2	4444	92772
3	4022	74312
4	1122	71726
5	445	67755
6	4455	58588
7	5900	50620
8	9998	46587
9	4822	42648
10	3522	40691

20230730 Botnet Detection Live Streaming 40+ zombies detected)