Botnet Statistics [2022-01-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 18429
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16903
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	732
2	DIGITALOCEAN-192-241-128-0	577
3	TencentCloud	491
4	ACEVILLEPTELTD-SG	410
5	CMNET	340
6	VNPT-VN	292
7	HINET-NET	260
8	VIETTEL-VN	228
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	188
10	TENCENT-CN	174

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3760
2	United States	3373
3	Russian Federation	1166
4	Brazil	825
5	Viet Nam	778
6	India	768
7	Indonesia	466
8	Singapore	458
9	Mexico	386
10	Taiwan	373

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	60	199002
2	63722	146729
3	63922	126428
4	63822	123518
5	221	103166
6	61	66915
7	5900	64771
8	9002	63583
9	64022	61580
10	6002	61362

20220117 Botnet Detection Live Streaming 200+ zombies detected)