Botnet Statistics [2021-12-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-12-04 00:00-23:59 UTC
total number of suspected botnet IPs: 18779
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17186
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	702
2	ALISOFT	624
3	VNPT-VN	360
4	VIETTEL-VN	341
5	HINET-NET	319
6	CMNET	302
7	TencentCloud	284
8	BSNLNET	205
9	TELKOMNET	173
10	AFRINIC-042005	170

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3109
2	United States	3008
3	India	1344
4	Russian Federation	1223
5	Viet Nam	1012
6	Brazil	893
7	Indonesia	497
8	Taiwan	451
9	Mexico	384
10	South Korea	380

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9003	121067
2	10000	100371
3	9023	98258
4	445	97336
5	9002	95046
6	9822	93173
7	6000	80460
8	9222	79226
9	7422	78514
10	8322	78429

20211205 Botnet Detection Live Streaming 260+ zombies detected)