Botnet Statistics [2023-11-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 25339
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23337
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1032
2	TencentCloud	968
3	ACEVILLEPTELTD-SG	904
4	TENCENT-CN	627
5	KORNET-KR	585
6	DIGITALOCEAN-192-241-128-0	534
7	ALISOFT	516
8	PAN-22	440
9	CMNET	428
10	CHINANET-JS	372

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6380
2	United States	6142
3	Singapore	1272
4	India	1220
5	Viet Nam	985
6	South Korea	857
7	Russian Federation	783
8	Brazil	703
9	Hong Kong	603
10	Indonesia	461

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2250	60078
2	22	53540
3	5900	48743
4	222	37152
5	830	32311
6	445	30246
7	827	27726
8	833	23926
9	5222	23751
10	2252	23609

20231124 Botnet Detection Live Streaming 400+ zombies detected)