Botnet Statistics [2022-12-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 26749
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25558
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	1450
2	HINET-NET	864
3	CHINANET-JS	605
4	KORNET-KR	561
5	ACEVILLEPTELTD-SG	466
6	CMNET	371
7	VNPT-VN	297
8	DO-13	281
9	IDNIC-LINKDATA-ID	256
10	MSFT	249

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6779
2	China	4054
3	India	1582
4	Russian Federation	1212
5	Taiwan	1076
6	Brazil	1063
7	South Korea	1036
8	Indonesia	839
9	Singapore	793
10	Viet Nam	758

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	66491
2	23	62497
3	6969	60028
4	3999	56613
5	6009	34339
6	22	28306
7	5656	26814
8	5522	24981
9	3322	23178
10	9022	18582

20221206 Botnet Detection Live Streaming 20+ zombies detected)