Botnet Statistics [2022-09-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 28910
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27444
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	1481
2	KORNET-KR	936
3	HINET-NET	706
4	CHINANET-JS	605
5	CMNET	485
6	VNPT-VN	385
7	ALISOFT	323
8	BHARTI-IN	286
9	MSFT	275
10	BSNLNET	268

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6072
2	China	4649
3	India	2074
4	South Korea	1460
5	Russian Federation	1371
6	Brazil	1324
7	Viet Nam	975
8	Taiwan	921
9	Indonesia	734
10	Hong Kong	544

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	131	70630
2	123	70124
3	23	68629
4	118	68067
5	127	67739
6	3022	67592
7	124	67436
8	128	67413
9	130	66974
10	132	66801

20220922 Botnet Detection Live Streaming 700+ zombies detected)