Botnet Statistics [2022-11-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-11-05 00:00-23:59 UTC
total number of suspected botnet IPs: 31466
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29756
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	1593
2	HINET-NET	936
3	KORNET-KR	596
4	CMNET	507
5	CHINANET-JS	507
6	VNPT-VN	474
7	ACEVILLEPTELTD-SG	398
8	MSFT	330
9	BSNLNET	295
10	VIETTEL-VN	285

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7214
2	China	4400
3	India	2126
4	Russian Federation	1591
5	Brazil	1284
6	Taiwan	1204
7	Viet Nam	1096
8	South Korea	1096
9	Indonesia	800
10	Singapore	756

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2213	121102
2	2215	88132
3	445	63780
4	9999	53199
5	23	50343
6	3389	49334
7	22	44321
8	9001	41385
9	1022	23953
10	6677	21646

20221106 Botnet Detection Live Streaming 500+ zombies detected)