Botnet Statistics [2023-12-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 24292
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22472
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1035
2	TencentCloud	995
3	ACEVILLEPTELTD-SG	963
4	KORNET-KR	660
5	ALISOFT	638
6	TENCENT-CN	633
7	DIGITALOCEAN-192-241-128-0	564
8	PAN-22	460
9	CMNET	435
10	CHINANET-JS	365

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6758
2	United States	6151
3	Singapore	1382
4	South Korea	1023
5	India	711
6	Viet Nam	699
7	Russian Federation	630
8	Brazil	630
9	Hong Kong	576
10	Indonesia	385

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5900	94768
2	22	63474
3	2231	45175
4	2227	43564
5	5922	23446
6	2222	22865
7	8022	20145
8	445	19057
9	2196	18079
10	3522	16931

20231204 Botnet Detection Live Streaming 300+ zombies detected)