Botnet Statistics [2021-11-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21120
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19447
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	725
2	VNPT-VN	574
3	ALISOFT	560
4	VIETTEL-VN	405
5	HINET-NET	384
6	TencentCloud	270
7	TELKOMNET	252
8	BSNLNET	245
9	AFRINIC-042005	240
10	LINODE-US	217

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	3850
2	China	3028
3	India	1447
4	Russian Federation	1411
5	Viet Nam	1390
6	Brazil	965
7	Indonesia	785
8	Thailand	519
9	Taiwan	501
10	South Korea	416

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	182869
2	8282	153759
3	8023	126745
4	2233	119628
5	3002	101945
6	8022	96882
7	8222	92418
8	8822	92275
9	1903	90872
10	641	90552

20211130 Botnet Detection Live Streaming 220+ zombies detected)