Botnet Statistics [2024-12-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 26289
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24670
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1516
2	GOOGLE-CLOUD	1013
3	PAN-22	961
4	BSNLNET	869
5	MSFT	863
6	KORNET-KR	739
7	UK-MICROSOFT-20000324	558
8	AL-3	482
9	CMNET	454
10	CENSY	377

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7900
2	China	4605
3	India	1746
4	Taiwan	1742
5	South Korea	1130
6	United Kingdom	1128
7	Russian Federation	596
8	Hong Kong	519
9	Brazil	495
10	Viet Nam	475

Rank	TCP port number	# of connection attempts received
1	3322	246601
2	1122	208690
3	8899	121645
4	21	102602
5	2222	82605
6	5900	66109
7	24	62418
8	4433	59203
9	4444	58891
10	2235	58229

20241231 Botnet Detection Live Streaming 10+ zombies detected)