Botnet Statistics [2022-12-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 28286
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27050
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	911
2	DIGITALOCEAN-192-241-128-0	645
3	HINET-NET	590
4	CHINANET-JS	558
5	CMNET	472
6	ACEVILLEPTELTD-SG	398
7	DIGITALOCEAN-107-170-0-0	359
8	VNPT-VN	329
9	DIGITALOCEAN-198-199-64-0	278
10	DIGITALOCEAN-162-243-0-0	276

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7240
2	China	4115
3	India	1675
4	South Korea	1453
5	Russian Federation	1256
6	Brazil	1108
7	Singapore	836
8	Viet Nam	817
9	Taiwan	811
10	Indonesia	719

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	23	74824
2	22	69678
3	6001	40784
4	445	36789
5	1222	35376
6	1011	32145
7	6000	20890
8	10001	17604
9	2022	14177
10	222	11706

20221222 Botnet Detection Live Streaming 600+ zombies detected)