Botnet Statistics [2021-11-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 18524
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17151
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	759
2	ALISOFT	649
3	TencentCloud	380
4	HINET-NET	332
5	CMNET	321
6	VNPT-VN	293
7	VIETTEL-VN	278
8	KORNET	190
9	AFRINIC-042005	186
10	ACEVILLEPTELTD-SG	180

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	3555
2	China	3554
3	Russian Federation	1267
4	India	858
5	Brazil	817
6	Viet Nam	806
7	Taiwan	462
8	Indonesia	430
9	South Korea	350
10	Mexico	324

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6003	253903
2	5522	126001
3	6001	121930
4	6022	113825
5	445	112901
6	3023	107809
7	6722	107252
8	5422	104348
9	2970	103379
10	5122	96770

20211115 Botnet Detection Live Streaming 100+ zombies detected)