Botnet Statistics [2021-12-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 20961
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19245
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	709
2	ALISOFT	587
3	VNPT-VN	525
4	VIETTEL-VN	411
5	HINET-NET	328
6	CMNET	275
7	TELKOMNET	253
8	TencentCloud	251
9	BSNLNET	244
10	AT-88-Z	237

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	3607
2	China	3009
3	India	1517
4	Russian Federation	1339
5	Viet Nam	1320
6	Brazil	1087
7	Indonesia	752
8	Thailand	548
9	Taiwan	434
10	South Korea	419

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	132746
2	3003	101436
3	587	96931
4	8686	92280
5	1461	90643
6	130	76181
7	6599	76175
8	140	76151
9	6422	70932
10	7722	66625

20211202 Botnet Detection Live Streaming 200+ zombies detected)