Botnet Statistics [2021-11-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-11-05 00:00-23:59 UTC
total number of suspected botnet IPs: 19276
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17727
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	748
2	ALISOFT	671
3	TencentCloud	487
4	VNPT-VN	458
5	VIETTEL-VN	378
6	HINET-NET	334
7	CMNET	267
8	TELKOMNET	232
9	AFRINIC-042005	207
10	LINODE-US	180

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3575
2	United States	3020
3	Russian Federation	1179
4	Viet Nam	1168
5	India	1037
6	Brazil	1020
7	Indonesia	620
8	Thailand	518
9	Taiwan	454
10	Mexico	442

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6000	230350
2	1212	151138
3	2226	120193
4	445	120173
5	1020	100238
6	6006	98161
7	2704	97448
8	2204	95117
9	7001	83786
10	2235	72168

20211106 Botnet Detection Live Streaming 60+ zombies detected)