Botnet Statistics [2023-01-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 30731
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29290
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	1250
2	HINET-NET	1216
3	DIGITALOCEAN-192-241-128-0	580
4	ACEVILLEPTELTD-SG	507
5	CMNET	463
6	DIGITALOCEAN-107-170-0-0	433
7	CHINANET-JS	420
8	DIGITALOCEAN-198-199-64-0	320
9	DIGITALOCEAN-162-243-0-0	316
10	LINODE-US	292

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7962
2	China	3709
3	South Korea	1899
4	Taiwan	1554
5	India	1500
6	Russian Federation	1387
7	Brazil	1234
8	Singapore	991
9	Indonesia	783
10	Viet Nam	551

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	22	100848
2	1522	72580
3	23	58134
4	3022	46634
5	7022	41335
6	2122	39898
7	3322	39531
8	3389	35018
9	2230	33426
10	1102	33156

20230127 Botnet Detection Live Streaming 500+ zombies detected)