Botnet Statistics [2023-01-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2023. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2023-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 29427
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 28055
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	KORNET-KR	1123
2	HINET-NET	1022
3	DIGITALOCEAN-192-241-128-0	579
4	CHINANET-JS	566
5	ACEVILLEPTELTD-SG	501
6	CMNET	473
7	DIGITALOCEAN-107-170-0-0	430
8	VNPT-VN	333
9	DIGITALOCEAN-198-199-64-0	321
10	DIGITALOCEAN-162-243-0-0	319

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7068
2	China	3985
3	India	1732
4	South Korea	1713
5	Russian Federation	1328
6	Taiwan	1303
7	Brazil	1244
8	Singapore	910
9	Viet Nam	791
10	Indonesia	774

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	3006	102284
2	9999	96293
3	23	90116
4	22	86521
5	3001	77552
6	6000	43648
7	445	39913
8	1022	36172
9	8118	30592
10	50020	29651

20230201 Botnet Detection Live Streaming 500+ zombies detected)