Botnet Statistics [2023-01-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 30265
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28278
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1432
2	KORNET-KR	1353
3	DIGITALOCEAN-192-241-128-0	579
4	CMNET	469
5	ACEVILLEPTELTD-SG	442
6	DIGITALOCEAN-107-170-0-0	427
7	CHINANET-JS	424
8	AFRINIC-042005	394
9	DIGITALOCEAN-162-243-0-0	317
10	DIGITALOCEAN-198-199-64-0	311

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7619
2	China	3709
3	South Korea	2005
4	Taiwan	1833
5	India	1770
6	Brazil	1130
7	Russian Federation	1126
8	Singapore	897
9	Hong Kong	632
10	Mauritius	622

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	22	225712
2	23	62340
3	1616	33080
4	445	32246
5	3389	26089
6	6002	25078
7	1822	24666
8	2222	19590
9	49022	19468
10	49722	19151

20230122 Botnet Detection Live Streaming 500+ zombies detected)