Botnet Statistics [2024-01-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 27810
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25990
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1176
2	GOOGLE-CLOUD	1053
3	TencentCloud	1042
4	ACEVILLEPTELTD-SG	1023
5	TENCENT-CN	682
6	DIGITALOCEAN-192-241-128-0	600
7	UNICOM-LN	524
8	ASEPL-SG	523
9	UCLOUD-HK	511
10	PAN-22	463

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8576
2	United States	6881
3	Singapore	1650
4	India	1335
5	Hong Kong	836
6	Russian Federation	654
7	Brazil	638
8	South Korea	592
9	Viet Nam	405
10	Indonesia	397

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8022	117129
2	6000	70270
3	2225	59560
4	22	53917
5	5900	38168
6	1022	38163
7	222	37455
8	2222	30236
9	24538	29378
10	23	26852

20240104 Botnet Detection Live Streaming 300+ zombies detected)