Botnet Statistics [2022-01-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 25881
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23765
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1226
2	DIGITALOCEAN-192-241-128-0	739
3	ACEVILLEPTELTD-SG	672
4	ALISOFT	611
5	VNPT-VN	501
6	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	390
7	TENCENT-CN	375
8	VIETTEL-VN	324
9	HINET-NET	323
10	CHINANET-SD	295

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	5413
2	United States	4691
3	Russian Federation	1457
4	Brazil	1145
5	Viet Nam	1118
6	India	1007
7	Singapore	833
8	Indonesia	747
9	Thailand	526
10	Hong Kong	443

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9000	323526
2	10000	315642
3	400	314340
4	500	311575
5	200	309974
6	100	300140
7	300	290012
8	800	288429
9	700	285387
10	600	271893

20220127 Botnet Detection Live Streaming 600+ zombies detected)