Botnet Statistics [2022-01-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20042
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18276
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	800
2	DIGITALOCEAN-192-241-128-0	718
3	VNPT-VN	499
4	VIETTEL-VN	373
5	TencentCloud	339
6	HINET-NET	327
7	CMNET	303
8	BSNLNET	252
9	TELKOMNET	240
10	AFRINIC-042005	203

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3450
2	United States	3225
3	India	1475
4	Viet Nam	1215
5	Russian Federation	1198
6	Brazil	992
7	Indonesia	663
8	Thailand	537
9	Taiwan	434
10	Mexico	420

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	3389	134713
2	1122	114155
3	445	77076
4	6001	74398
5	6000	34386
6	23	31328
7	5900	30428
8	2212	27728
9	50321	25512
10	3122	25157

20220105 Botnet Detection Live Streaming 60+ zombies detected)