Botnet Statistics [2021-11-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 19919
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18374
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	DIGITALOCEAN-192-241-128-0	717
2	ALISOFT	607
3	VNPT-VN	397
4	HINET-NET	380
5	TencentCloud	314
6	VIETTEL-VN	309
7	CMNET	286
8	AFRINIC-042005	210
9	LINODE-US	199
10	AT-88-Z	199

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	3647
2	China	3520
3	India	1304
4	Russian Federation	1219
5	Viet Nam	1069
6	Brazil	939
7	Indonesia	505
8	Taiwan	496
9	South Korea	427
10	Mexico	346

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	3992	232072
2	4270	178508
3	445	144273
4	10889	134812
5	8080	103066
6	3001	95120
7	9898	92651
8	2286	83243
9	2021	73013
10	8771	69179

20211128 Botnet Detection Live Streaming 230+ zombies detected)