Botnet Statistics [2021-12-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 18369
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16935
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	725
2	ALISOFT	643
3	HINET-NET	321
4	CMNET	289
5	VNPT-VN	283
6	TencentCloud	266
7	VIETTEL-VN	264
8	AFRINIC-042005	202
9	KORNET	191
10	LINODE-US	154

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	3314
2	China	3228
3	Russian Federation	1265
4	India	895
5	Brazil	868
6	Viet Nam	802
7	Indonesia	452
8	Taiwan	443
9	South Korea	405
10	Mexico	358

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9022	137779
2	9023	98433
3	8722	95889
4	10022	90899
5	10011	85774
6	8022	81799
7	8322	80822
8	7922	80210
9	9122	79058
10	9522	78976

20211206 Botnet Detection Live Streaming 210+ zombies detected)