Botnet Statistics [2024-01-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 26137
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24434
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1103
2	GOOGLE-CLOUD	1041
3	ACEVILLEPTELTD-SG	1035
4	TencentCloud	907
5	UNICOM-LN	608
6	DIGITALOCEAN-192-241-128-0	599
7	TENCENT-CN	582
8	PAN-22	463
9	UCLOUD-HK	451
10	CHINANET-JS	449

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8146
2	United States	6508
3	Singapore	1452
4	India	1241
5	Hong Kong	729
6	Russian Federation	618
7	Brazil	618
8	South Korea	590
9	Viet Nam	401
10	Indonesia	374

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8022	107673
2	6000	101438
3	4383	59156
4	22	56002
5	1022	37665
6	222	35323
7	40222	34871
8	4811	33365
9	4267	32386
10	2222	28367

20240103 Botnet Detection Live Streaming 300+ zombies detected)