Botnet Statistics [2024-07-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 28059
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24338
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2710
2	AL-3	1157
3	ASEPL-SG	1118
4	MSFT	1066
5	GOOGLE-CLOUD	1039
6	PAN-22	966
7	UK-MICROSOFT-20000324	713
8	KORNET-KR	627
9	CMNET	595
10	UCLOUD-HK	460

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8675
2	United States	7560
3	Singapore	1563
4	United Kingdom	1343
5	South Korea	897
6	India	872
7	Hong Kong	778
8	Brazil	582
9	Russian Federation	560
10	Indonesia	401

Rank	TCP port number	# of connection attempts received
1	4822	145878
2	6122	95145
3	23	79706
4	2255	77022
5	6222	76615
6	9322	68678
7	2282	68646
8	7222	65363
9	6522	62161
10	6668	60115

20240728 Botnet Detection Live Streaming 100+ zombies detected)