Botnet Statistics [2025-01-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 31943
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30052
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	1538
2	HINET-NET	1486
3	AL-3	1026
4	GOOGLE-CLOUD	988
5	BSNLNET	988
6	PAN-22	938
7	MSFT	895
8	ALISOFT	727
9	ASEPL-SG	618
10	UK-MICROSOFT-20000324	577

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7877
2	China	6869
3	India	2138
4	South Korea	2065
5	Taiwan	1731
6	United Kingdom	1066
7	Singapore	870
8	Brazil	633
9	Russian Federation	619
10	Indonesia	595

Rank	TCP port number	# of connection attempts received
1	5555	202354
2	2323	160278
3	1122	117397
4	2222	107626
5	25070	83714
6	7777	64763
7	22	64124
8	8443	59859
9	23	53129
10	30022	45591

20250108 Botnet Detection Live Streaming 100+ zombies detected)