Botnet Statistics [2022-02-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2022. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2022-02-27 00:00-23:59 UTC
total number of suspected botnet IPs: 24766
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23182
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1206
2	ACEVILLEPTELTD-SG	997
3	DIGITALOCEAN-192-241-128-0	743
4	ALISOFT	508
5	Baidu	413
6	TENCENT-CN	409
7	CMNET	378
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	372
9	VNPT-VN	321
10	MSFT	297

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6085
2	United States	4741
3	Russian Federation	1309
4	Singapore	1089
5	India	984
6	Brazil	960
7	Viet Nam	866
8	Hong Kong	591
9	Indonesia	505
10	European Union	415

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	226	92419
2	1534	59827
3	5900	55989
4	225	48162
5	445	46116
6	6000	44384
7	7000	36224
8	22	36038
9	24777	29563
10	23	27447

20220228 Botnet Detection Live Streaming 1100+ zombies detected)