Botnet Statistics [2024-11-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 24531
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22885
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1059
2	GOOGLE-CLOUD	1055
3	AL-3	1036
4	PAN-22	967
5	MSFT	961
6	ASEPL-SG	665
7	UK-MICROSOFT-20000324	649
8	BSNLNET	630
9	HINET-NET	545
10	CMNET	364

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7445
2	China	5942
3	India	1439
4	United Kingdom	1023
5	Singapore	867
6	Taiwan	651
7	Russian Federation	544
8	Hong Kong	541
9	South Korea	498
10	Indonesia	485

Rank	TCP port number	# of connection attempts received
1	2342	296371
2	21642	178584
3	6000	139820
4	22568	138736
5	2210	125280
6	2233	112883
7	36522	112414
8	9922	100227
9	2872	94993
10	8822	94588

20241129 Botnet Detection Live Streaming 200+ zombies detected)