Botnet Statistics [2024-11-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 24686
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23062
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1259
2	ALISOFT	1114
3	GOOGLE-CLOUD	1060
4	PAN-22	967
5	MSFT	948
6	ASEPL-SG	862
7	UK-MICROSOFT-20000324	644
8	HINET-NET	589
9	BSNLNET	588
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7406
2	China	6086
3	India	1264
4	Singapore	1063
5	United Kingdom	994
6	Taiwan	719
7	Russian Federation	533
8	South Korea	521
9	Indonesia	434
10	Brazil	419

Rank	TCP port number	# of connection attempts received
1	6000	130299
2	8822	118753
3	3222	97824
4	9922	94364
5	22	75040
6	11022	69942
7	10023	69734
8	36422	61937
9	10222	58624
10	22572	52188

20241122 Botnet Detection Live Streaming 100+ zombies detected)