Botnet Statistics [2022-01-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-01-01 00:00-23:59 UTC
total number of suspected botnet IPs: 16551
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 14804
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	785
2	DIGITALOCEAN-192-241-128-0	698
3	TencentCloud	394
4	HINET-NET	287
5	CMNET	286
6	VNPT-VN	255
7	LINODE-US	236
8	VIETTEL-VN	211
9	BSNLNET	197
10	CHINANET-GD	179

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3391
2	United States	2714
3	India	1077
4	Russian Federation	1019
5	Viet Nam	729
6	Brazil	704
7	Indonesia	413
8	Taiwan	390
9	Mexico	307
10	Turkey	264

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	142	382824
2	141	375390
3	145	355921
4	146	340329
5	144	264132
6	143	140063
7	6000	107723
8	3389	103481
9	5900	76501
10	5901	53461

20220102 Botnet Detection Live Streaming 50+ zombies detected)