Botnet Statistics [2023-01-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 29205
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27905
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	1202
2	HINET-NET	1144
3	DIGITALOCEAN-192-241-128-0	580
4	ACEVILLEPTELTD-SG	496
5	CHINANET-JS	483
6	CMNET	458
7	DIGITALOCEAN-107-170-0-0	427
8	DIGITALOCEAN-162-243-0-0	321
9	DIGITALOCEAN-198-199-64-0	317
10	LINODE-US	252

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7463
2	China	3911
3	South Korea	1829
4	India	1728
5	Taiwan	1445
6	Russian Federation	1115
7	Brazil	1090
8	Singapore	939
9	Indonesia	674
10	Hong Kong	583

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	22	111573
2	1822	91713
3	23	61401
4	3022	55625
5	2211	37490
6	8048	32548
7	1291	29827
8	3842	28891
9	445	26260
10	3389	23855

20230129 Botnet Detection Live Streaming 500+ zombies detected)