Botnet Statistics [2021-12-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 19505
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17709
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	826
2	DIGITALOCEAN-192-241-128-0	719
3	VNPT-VN	475
4	HINET-NET	341
5	VIETTEL-VN	334
6	TencentCloud	309
7	CMNET	295
8	BSNLNET	219
9	TELKOMNET	215
10	AFRINIC-042005	190

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	3388
2	United States	3251
3	India	1375
4	Russian Federation	1301
5	Viet Nam	1152
6	Brazil	904
7	Indonesia	612
8	Thailand	508
9	Taiwan	472
10	Mexico	338

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6969	114835
2	11422	101596
3	11322	98016
4	3389	76330
5	445	71413
6	11822	68538
7	11522	66241
8	11922	65257
9	11722	63556
10	12722	62527

20211228 Botnet Detection Live Streaming 210+ zombies detected)