Botnet Statistics [2022-11-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 30566
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29168
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	1470
2	DIGITALOCEAN-192-241-128-0	1409
3	CHINANET-JS	726
4	HINET-NET	621
5	CMNET	557
6	ACEVILLEPTELTD-SG	487
7	VNPT-VN	420
8	BSNLNET	311
9	MSFT	267
10	VIETTEL-VN	245

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6503
2	China	5188
3	South Korea	2124
4	India	1914
5	Russian Federation	1448
6	Brazil	1250
7	Viet Nam	989
8	Taiwan	836
9	Singapore	820
10	Indonesia	795

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2245	99240
2	2252	85746
3	2256	66392
4	23	65410
5	1222	63616
6	445	49170
7	1020	47209
8	3389	39792
9	3457	38519
10	10675	37140

20221117 Botnet Detection Live Streaming 500+ zombies detected)