Botnet Statistics [2022-02-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-02-25 00:00-23:59 UTC
total number of suspected botnet IPs: 25856
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24207
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1227
2	DIGITALOCEAN-192-241-128-0	943
3	ACEVILLEPTELTD-SG	758
4	ALISOFT	583
5	VNPT-VN	417
6	Baidu	416
7	TENCENT-CN	407
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	404
9	MSFT	329
10	VIETTEL-VN	316

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	5732
2	United States	5123
3	India	1415
4	Russian Federation	1346
5	Viet Nam	1071
6	Brazil	1039
7	Singapore	902
8	Indonesia	672
9	Hong Kong	606
10	European Union	444

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9622	84329
2	9522	63577
3	445	53240
4	9722	45308
5	6022	39448
6	22	26100
7	11111	25657
8	23	21192
9	212	17845
10	496	17729

20220226 Botnet Detection Live Streaming 1400+ zombies detected)