Botnet Statistics [2021-12-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 18754
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17182
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	744
2	DIGITALOCEAN-192-241-128-0	709
3	VNPT-VN	398
4	CMNET	363
5	HINET-NET	321
6	TencentCloud	319
7	VIETTEL-VN	299
8	BSNLNET	226
9	TELKOMNET	204
10	LINODE-US	202

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3504
2	United States	3078
3	India	1312
4	Russian Federation	1166
5	Viet Nam	957
6	Brazil	882
7	Indonesia	559
8	Taiwan	436
9	South Korea	424
10	Mexico	383

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6001	313638
2	2232	95492
3	3389	84837
4	9999	75322
5	445	68005
6	11022	60252
7	4444	51231
8	10122	47578
9	2211	42407
10	11000	42375

20211219 Botnet Detection Live Streaming 70+ zombies detected)