Botnet Statistics [2023-05-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 21904
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19700
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1041
2	ACEVILLEPTELTD-SG	700
3	DIGITALOCEAN-192-241-128-0	476
4	PAN-22	458
5	AL-3	458
6	KORNET-KR	452
7	ASEPL-SG	377
8	DIGITALOCEAN-107-170-0-0	351
9	CMNET	313
10	DIGITALOCEAN-198-199-64-0	275

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7047
2	China	2713
3	Singapore	1213
4	India	1100
5	Brazil	774
6	Russian Federation	746
7	South Korea	708
8	Viet Nam	513
9	Hong Kong	485
10	Indonesia	483

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	72657
2	5322	68548
3	6000	64751
4	6001	59824
5	1813	51750
6	2422	49905
7	1866	45417
8	5900	44660
9	22	42147
10	10	41660

20230529 Botnet Detection Live Streaming 500+ zombies detected)