Botnet Statistics [2021-11-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-11-07 00:00-23:59 UTC
total number of suspected botnet IPs: 18253
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16912
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	750
2	ALISOFT	734
3	TencentCloud	531
4	HINET-NET	294
5	VIETTEL-VN	282
6	CMNET	276
7	VNPT-VN	269
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	171
9	AFRINIC-042005	170
10	ACEVILLEPTELTD-SG	170

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3914
2	United States	3274
3	Russian Federation	1170
4	India	863
5	Viet Nam	779
6	Brazil	747
7	Indonesia	434
8	Taiwan	399
9	Mexico	356
10	South Korea	311

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	2227	162435
2	6022	127197
3	6522	124517
4	5422	123831
5	5322	121759
6	6822	121572
7	7322	121512
8	6622	121007
9	6922	119722
10	5122	119440

20211108 Botnet Detection Live Streaming 140+ zombies detected)