Botnet Statistics [2023-09-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 13354
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 11961
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1005
2	DIGITALOCEAN-192-241-128-0	587
3	PAN-22	458
4	CHINANET-JS	378
5	DIGITALOCEAN-107-170-0-0	363
6	DIGITALOCEAN-198-199-64-0	336
7	DIGITALOCEAN-162-243-0-0	304
8	UCLOUD-HK	246
9	HURRICANE-4	215
10	VNPT-VN	185

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	4874
2	China	2232
3	India	694
4	Russian Federation	487
5	Viet Nam	388
6	Hong Kong	380
7	Indonesia	302
8	Brazil	283
9	Netherlands	267
10	South Korea	241

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	11223	151362
2	445	125817
3	5900	38794
4	23	37271
5	8022	34476
6	52110	30012
7	19266	28913
8	6622	28396
9	2020	27537
10	9022	26949

20230907 Botnet Detection Live Streaming 50+ zombies detected)