Botnet Statistics [2024-01-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 28064
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26071
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1400
2	GOOGLE-CLOUD	1045
3	ACEVILLEPTELTD-SG	1021
4	TencentCloud	995
5	TENCENT-CN	612
6	DIGITALOCEAN-192-241-128-0	588
7	KORNET-KR	577
8	PAN-22	462
9	CHINANET-JS	440
10	UCLOUD-HK	427

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8427
2	United States	6647
3	Singapore	1509
4	India	1057
5	Hong Kong	864
6	South Korea	863
7	Russian Federation	768
8	Brazil	619
9	Viet Nam	457
10	Indonesia	418

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9422	100392
2	2288	80363
3	22	47166
4	2222	36876
5	2220	35109
6	922	34895
7	22009	31567
8	6322	31062
9	3613	30817
10	9122	30573

20240131 Botnet Detection Live Streaming 300+ zombies detected)