Daily Botnet Statistics: January 2021

Sunday, January 31, 2021

Botnet Statistics [2021-01-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 39116
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36266
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1764
2	HINET-NET	781
3	TENCENT-CN	727
4	VNPT-VN	715
5	DIGITALOCEAN-192-241-128-0	666
6	KORNET	652
7	VIETTEL-VN	587
8	ALISOFT	522
9	VE-CSVE-LACNIC	519
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	514

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8359
2	United States	5244
3	India	2478
4	Russian Federation	2200
5	Viet Nam	1868
6	Brazil	1628
7	Taiwan	1137
8	Hong Kong	1123
9	South Korea	1115
10	Indonesia	985

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	234349
2	2234	105809
3	1112	69697
4	22	65222
5	23	36678
6	1433	32377
7	1111	27750
8	36	25988
9	227	25810
10	3389	23198

Saturday, January 30, 2021

Botnet Statistics [2021-01-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 41406
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38372
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1805
2	VNPT-VN	1003
3	HINET-NET	828
4	VIETTEL-VN	795
5	TENCENT-CN	753
6	KORNET	686
7	DIGITALOCEAN-192-241-128-0	675
8	VE-CSVE-LACNIC	518
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	514
10	ALISOFT	514

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8454
2	United States	4877
3	India	2755
4	Russian Federation	2459
5	Viet Nam	2449
6	Brazil	1976
7	Indonesia	1214
8	Taiwan	1177
9	South Korea	1131
10	Hong Kong	1083

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	272810
2	22	75175
3	1112	65578
4	1433	36908
5	3389	33219
6	23	31390
7	35	28225
8	1111	22457
9	66	17456
10	5900	14517

Friday, January 29, 2021

Botnet Statistics [2021-01-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 41126
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 37982
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1836
2	VNPT-VN	1036
3	HINET-NET	810
4	VIETTEL-VN	773
5	TENCENT-CN	766
6	KORNET	686
7	DIGITALOCEAN-192-241-128-0	674
8	VE-CSVE-LACNIC	556
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	530
10	ALISOFT	525

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8758
2	United States	4291
3	India	2612
4	Russian Federation	2493
5	Viet Nam	2491
6	Brazil	1893
7	Indonesia	1247
8	Taiwan	1154
9	Hong Kong	1044
10	South Korea	1017

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	293395
2	22	70872
3	1112	64263
4	3389	41394
5	1433	34757
6	25	28317
7	23	28223
8	1111	26901
9	66	22363
10	30002	16168

Thursday, January 28, 2021

Botnet Statistics [2021-01-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 41623
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38553
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1871
2	VNPT-VN	1004
3	VIETTEL-VN	820
4	HINET-NET	796
5	TENCENT-CN	783
6	DIGITALOCEAN-192-241-128-0	679
7	KORNET	628
8	ALISOFT	579
9	VE-CSVE-LACNIC	549
10	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	532

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9078
2	United States	4354
3	India	2645
4	Viet Nam	2515
5	Russian Federation	2463
6	Brazil	1994
7	Indonesia	1297
8	Taiwan	1117
9	Hong Kong	963
10	South Korea	958

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1630	2122195
2	445	354159
3	2522	109052
4	2622	108187
5	2922	103856
6	3022	99331
7	2422	99060
8	2822	94097
9	2722	93270
10	22	61596

Wednesday, January 27, 2021

Botnet Statistics [2021-01-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 43850
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 40651
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1859
2	VNPT-VN	1067
3	HINET-NET	884
4	VIETTEL-VN	841
5	KORNET	839
6	TENCENT-CN	789
7	DIGITALOCEAN-192-241-128-0	673
8	NETVIGATOR	618
9	VE-CSVE-LACNIC	597
10	ALISOFT	567

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9133
2	United States	4860
3	Russian Federation	2777
4	Viet Nam	2633
5	Brazil	2097
6	India	1711
7	Indonesia	1337
8	Hong Kong	1308
9	Taiwan	1284
10	South Korea	1229

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	276579
2	22	101158
3	2020	65845
4	1433	54865
5	2422	50574
6	2822	50074
7	2622	41833
8	2722	40823
9	2522	39555
10	2922	39040

Tuesday, January 26, 2021

Botnet Statistics [2021-01-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 43179
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 39952
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1969
2	VNPT-VN	1055
3	TENCENT-CN	824
4	VIETTEL-VN	814
5	HINET-NET	771
6	DIGITALOCEAN-192-241-128-0	651
7	ALISOFT	608
8	VE-CSVE-LACNIC	588
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	581
10	KORNET	524

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9456
2	United States	5104
3	India	2713
4	Viet Nam	2577
5	Russian Federation	2490
6	Brazil	1998
7	Indonesia	1349
8	Taiwan	1046
9	France	934
10	Thailand	925

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1622	1013951
2	1722	1002661
3	1922	978597
4	1822	967597
5	122	482291
6	322	467302
7	822	465637
8	1122	463876
9	422	461350
10	1322	458388

Monday, January 25, 2021

Botnet Statistics [2021-01-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 39005
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36244
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2044
2	TENCENT-CN	865
3	DIGITALOCEAN-192-241-128-0	687
4	HINET-NET	684
5	ALISOFT	655
6	VNPT-VN	610
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	566
8	VIETTEL-VN	528
9	KORNET	505
10	CHINANET-JS	459

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	10027
2	United States	5303
3	Russian Federation	2138
4	India	1699
5	Viet Nam	1673
6	Brazil	1643
7	Taiwan	953
8	France	896
9	South Korea	870
10	Indonesia	855

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1122	787326
2	922	778146
3	722	777889
4	122	776814
5	322	774176
6	622	771732
7	422	767217
8	822	765045
9	522	764643
10	1222	762785

Sunday, January 24, 2021

Botnet Statistics [2021-01-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 37366
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34559
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1850
2	TENCENT-CN	794
3	VNPT-VN	699
4	DIGITALOCEAN-192-241-128-0	671
5	HINET-NET	638
6	VIETTEL-VN	609
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	544
8	ALISOFT	541
9	KORNET	437
10	CHINANET-GD	436

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9035
2	United States	4667
3	India	2346
4	Russian Federation	2183
5	Viet Nam	1895
6	Brazil	1611
7	Indonesia	972
8	Taiwan	877
9	France	834
10	South Korea	750

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1020	823948
2	445	223564
3	3606	178471
4	22	65001
5	900	40032
6	400	37224
7	1500	35795
8	1433	34431
9	60004	31796
10	3389	30577

Saturday, January 23, 2021

Botnet Statistics [2021-01-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 41128
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38191
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1875
2	VNPT-VN	900
3	TENCENT-CN	821
4	VIETTEL-VN	819
5	DIGITALOCEAN-192-241-128-0	684
6	HINET-NET	651
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	547
8	ALISOFT	547
9	VE-CSVE-LACNIC	515
10	CHINANET-JS	459

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9517
2	United States	5092
3	India	2695
4	Russian Federation	2425
5	Viet Nam	2417
6	Brazil	1952
7	Indonesia	1255
8	Taiwan	915
9	Thailand	905
10	France	832

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	262336
2	22	70981
3	1122	39133
4	1433	38474
5	1100	37454
6	23	27243
7	3389	26322
8	1022	25118
9	66	23716
10	422	19902

Friday, January 22, 2021

Botnet Statistics [2021-01-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 42368
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 39219
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1930
2	VNPT-VN	1001
3	VIETTEL-VN	828
4	TENCENT-CN	822
5	DIGITALOCEAN-192-241-128-0	677
6	HINET-NET	634
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	588
8	ALISOFT	556
9	VE-CSVE-LACNIC	514
10	KORNET	509

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9707
2	United States	4924
3	India	2777
4	Viet Nam	2552
5	Russian Federation	2440
6	Brazil	2009
7	Indonesia	1392
8	Thailand	938
9	Taiwan	907
10	Hong Kong	832

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	288319
2	3049	175510
3	3333	106605
4	22	85439
5	2707	60003
6	1433	53833
7	23	38212
8	1700	38034
9	3389	25735
10	66	23873

Thursday, January 21, 2021

Botnet Statistics [2021-01-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 42090
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38997
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1928
2	VNPT-VN	1001
3	TENCENT-CN	839
4	VIETTEL-VN	832
5	DIGITALOCEAN-192-241-128-0	685
6	HINET-NET	614
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	581
8	ALISOFT	530
9	CHINANET-JS	514
10	VE-CSVE-LACNIC	499

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9682
2	United States	4970
3	India	2722
4	Viet Nam	2523
5	Russian Federation	2455
6	Brazil	1992
7	Indonesia	1395
8	Thailand	933
9	Taiwan	867
10	France	843

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1111	793476
2	445	273494
3	2707	93172
4	22	77889
5	1433	43149
6	23	29071
7	300	26555
8	3389	22652
9	1022	19338
10	1222	17186

Wednesday, January 20, 2021

Botnet Statistics [2021-01-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 43552
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 40426
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2072
2	VNPT-VN	1039
3	TENCENT-CN	883
4	VIETTEL-VN	878
5	DIGITALOCEAN-192-241-128-0	673
6	HINET-NET	645
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	605
8	ALISOFT	565
9	VE-CSVE-LACNIC	521
10	TELKOMNET	509

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9901
2	United States	5783
3	India	2794
4	Viet Nam	2660
5	Russian Federation	2471
6	Brazil	2013
7	Indonesia	1408
8	Thailand	992
9	France	888
10	Taiwan	872

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	280174
2	1111	96366
3	22	83039
4	1433	71200
5	1000	39078
6	23	30179
7	66	23975
8	2707	22349
9	3389	19766
10	1022	19558

Tuesday, January 19, 2021

Botnet Statistics [2021-01-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 40970
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38045
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1860
2	VNPT-VN	1028
3	VIETTEL-VN	873
4	TENCENT-CN	797
5	DIGITALOCEAN-192-241-128-0	684
6	HINET-NET	580
7	VE-CSVE-LACNIC	537
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	527
9	ALISOFT	515
10	TELKOMNET	500

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8930
2	United States	5546
3	India	2742
4	Viet Nam	2603
5	Russian Federation	2315
6	Brazil	1858
7	Indonesia	1384
8	Thailand	965
9	France	784
10	Taiwan	770

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	320276
2	2989	175853
3	22	81912
4	2555	50155
5	1433	49690
6	587	39357
7	600	36603
8	23	30136
9	3389	21979
10	66	10595

Monday, January 18, 2021

Botnet Statistics [2021-01-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 35320
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32857
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1857
2	TENCENT-CN	794
3	DIGITALOCEAN-192-241-128-0	681
4	VNPT-VN	604
5	HINET-NET	527
6	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	514
7	VIETTEL-VN	503
8	ALISOFT	501
9	CHINANET-JS	465
10	VE-CSVE-LACNIC	430

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8809
2	United States	5684
3	Russian Federation	1977
4	Viet Nam	1606
5	India	1513
6	Brazil	1455
7	Indonesia	838
8	France	811
9	Taiwan	738
10	Hong Kong	566

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	190388
2	2337	175837
3	2555	126302
4	22	64325
5	21	49921
6	1433	34752
7	23	32277
8	3022	30715
9	1122	23328
10	3389	21830

Sunday, January 17, 2021

Botnet Statistics [2021-01-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 38499
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35774
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1877
2	TENCENT-CN	796
3	VNPT-VN	741
4	VIETTEL-VN	692
5	DIGITALOCEAN-192-241-128-0	681
6	HINET-NET	550
7	ALISOFT	524
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	513
9	CENTURYLINK-LEGACY-QWEST-INET-118	499
10	CHINANET-JS	470

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9239
2	United States	5869
3	India	2263
4	Russian Federation	2172
5	Viet Nam	2035
6	Brazil	1674
7	Indonesia	1032
8	France	804
9	Taiwan	792
10	Hong Kong	643

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	223451
2	23	100071
3	1433	96590
4	22	77715
5	1600	39695
6	233	36796
7	1000	30566
8	3389	21683
9	21	17433
10	66	16324

Saturday, January 16, 2021

Botnet Statistics [2021-01-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-15 00:00-23:59 UTC
total number of suspected botnet IPs: 41650
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38737
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1950
2	VNPT-VN	936
3	TENCENT-CN	818
4	VIETTEL-VN	791
5	DIGITALOCEAN-192-241-128-0	694
6	CENTURYLINK-LEGACY-QWEST-INET-118	662
7	HINET-NET	614
8	ALISOFT	551
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	545
10	VE-CSVE-LACNIC	507

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9490
2	United States	6603
3	India	2421
4	Russian Federation	2369
5	Viet Nam	2362
6	Brazil	1896
7	Indonesia	1280
8	Thailand	937
9	France	850
10	Taiwan	833

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	326162
2	3389	203346
3	1000	154260
4	22	61601
5	23	55216
6	1433	48050
7	221	28017
8	322	25399
9	1922	24429
10	422	23308

Friday, January 15, 2021

Botnet Statistics [2021-01-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-14 00:00-23:59 UTC
total number of suspected botnet IPs: 42195
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 39147
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1944
2	VNPT-VN	1067
3	VIETTEL-VN	868
4	TENCENT-CN	813
5	CENTURYLINK-LEGACY-QWEST-INET-118	792
6	DIGITALOCEAN-192-241-128-0	698
7	HINET-NET	660
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	563
9	ALISOFT	550
10	VE-CSVE-LACNIC	522

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9437
2	United States	6956
3	Viet Nam	2652
4	Russian Federation	2382
5	India	2239
6	Brazil	1890
7	Indonesia	1362
8	Thailand	940
9	France	854
10	Taiwan	853

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	467029
2	1000	300355
3	1433	74456
4	22	73789
5	3389	62213
6	1222	59322
7	23	55115
8	2525	53384
9	1500	36095
10	1800	35029

Thursday, January 14, 2021

Botnet Statistics [2021-01-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-13 00:00-23:59 UTC
total number of suspected botnet IPs: 43429
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 40333
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2016
2	VNPT-VN	974
3	CENTURYLINK-LEGACY-QWEST-INET-118	847
4	TENCENT-CN	832
5	VIETTEL-VN	830
6	DIGITALOCEAN-192-241-128-0	681
7	HINET-NET	582
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	575
9	ALISOFT	558
10	VE-CSVE-LACNIC	502

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9650
2	United States	7531
3	Viet Nam	2567
4	India	2557
5	Russian Federation	2404
6	Brazil	1974
7	Indonesia	1332
8	Thailand	921
9	France	858
10	Taiwan	779

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	296186
2	1433	107204
3	2525	72477
4	22	71429
5	23	47672
6	400	37686
7	1222	22999
8	1000	17714
9	2053	17622
10	1001	17268

Wednesday, January 13, 2021

Botnet Statistics [2021-01-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-12 00:00-23:59 UTC
total number of suspected botnet IPs: 44409
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 41302
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2054
2	CENTURYLINK-LEGACY-QWEST-INET-118	1046
3	VNPT-VN	1031
4	VIETTEL-VN	837
5	TENCENT-CN	831
6	DIGITALOCEAN-192-241-128-0	702
7	HINET-NET	608
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	582
9	VE-CSVE-LACNIC	530
10	ALISOFT	480

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9524
2	United States	8403
3	India	2637
4	Viet Nam	2580
5	Russian Federation	2437
6	Brazil	1947
7	Indonesia	1357
8	Thailand	926
9	France	807
10	Taiwan	792

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	336711
2	22	73545
3	23	55363
4	2525	53164
5	3022	40717
6	1433	36421
7	1300	34700
8	82	27074
9	672	24778
10	66	24449

Tuesday, January 12, 2021

Botnet Statistics [2021-01-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-11 00:00-23:59 UTC
total number of suspected botnet IPs: 45594
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 42487
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2091
2	CENTURYLINK-LEGACY-QWEST-INET-118	1173
3	VNPT-VN	1001
4	TENCENT-CN	847
5	VIETTEL-VN	809
6	DIGITALOCEAN-192-241-128-0	687
7	HINET-NET	617
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	604
9	TELKOMNET	524
10	VE-CSVE-LACNIC	497

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9491
2	United States	9307
3	India	2642
4	Viet Nam	2539
5	Russian Federation	2405
6	Brazil	1925
7	Indonesia	1502
8	Thailand	971
9	France	864
10	Taiwan	813

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	299296
2	2350	178172
3	2140	175542
4	22	98351
5	23	73943
6	1433	47105
7	3022	25693
8	222	17864
9	1010	17419
10	8022	15493

Monday, January 11, 2021

Botnet Statistics [2021-01-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-10 00:00-23:59 UTC
total number of suspected botnet IPs: 41740
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38960
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2065
2	CENTURYLINK-LEGACY-QWEST-INET-118	1203
3	TENCENT-CN	846
4	DIGITALOCEAN-192-241-128-0	694
5	HINET-NET	614
6	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	593
7	VNPT-VN	580
8	VIETTEL-VN	571
9	ALISOFT	524
10	CENTURYLINK-LEGACY-QWEST-INET-124	506

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9810
2	United States	9389
3	Russian Federation	2049
4	India	1727
5	Viet Nam	1688
6	Brazil	1656
7	Indonesia	938
8	France	865
9	Taiwan	796
10	European Union	624

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	269561
2	222	89074
3	23	62566
4	22	58139
5	1322	43583
6	1433	35014
7	2255	21691
8	1008	21126
9	1009	20823
10	27	19712

Sunday, January 10, 2021

Botnet Statistics [2021-01-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-09 00:00-23:59 UTC
total number of suspected botnet IPs: 39952
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 37181
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1805
2	CENTURYLINK-LEGACY-QWEST-INET-118	1109
3	TENCENT-CN	748
4	VNPT-VN	716
5	DIGITALOCEAN-192-241-128-0	702
6	VIETTEL-VN	683
7	HINET-NET	540
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	494
9	CENTURYLINK-LEGACY-QWEST-INET-124	493
10	ALISOFT	449

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8982
2	United States	8185
3	India	2318
4	Russian Federation	2024
5	Viet Nam	2009
6	Brazil	1620
7	Indonesia	1079
8	France	776
9	Taiwan	717
10	Mauritius	649

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	291780
2	22	73396
3	23	54229
4	1433	48114
5	830	24428
6	3822	22851
7	622	22582
8	1322	21712
9	2255	21711
10	1111	21709

Saturday, January 9, 2021

Botnet Statistics [2021-01-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-08 00:00-23:59 UTC
total number of suspected botnet IPs: 39356
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36409
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1799
2	VNPT-VN	1015
3	VIETTEL-VN	836
4	TENCENT-CN	729
5	DIGITALOCEAN-192-241-128-0	682
6	HINET-NET	547
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	499
8	TELKOMNET	468
9	VE-CSVE-LACNIC	459
10	ALISOFT	447

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9239
2	United States	5306
3	India	2733
4	Viet Nam	2583
5	Russian Federation	1940
6	Brazil	1837
7	Indonesia	1360
8	Thailand	977
9	France	782
10	Taiwan	723

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	321918
2	1322	171252
3	22	70405
4	1433	35105
5	23	33639
6	587	30114
7	1622	28695
8	81	22202
9	66	22142
10	2255	21806

Friday, January 8, 2021

Botnet Statistics [2021-01-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-07 00:00-23:59 UTC
total number of suspected botnet IPs: 39243
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 36204
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1865
2	VNPT-VN	967
3	VIETTEL-VN	841
4	TENCENT-CN	757
5	DIGITALOCEAN-192-241-128-0	689
6	HINET-NET	649
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	540
8	VE-CSVE-LACNIC	499
9	ALISOFT	467
10	CHINANET-JS	463

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9377
2	United States	4556
3	India	2720
4	Viet Nam	2523
5	Russian Federation	1976
6	Brazil	1846
7	Indonesia	1351
8	Thailand	937
9	Taiwan	824
10	France	805

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	358500
2	22	82771
3	1433	66361
4	23	33897
5	3022	24795
6	587	24701
7	2255	21874
8	6022	19166
9	3389	18279
10	66	13970

Thursday, January 7, 2021

Botnet Statistics [2021-01-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-06 00:00-23:59 UTC
total number of suspected botnet IPs: 40964
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 37747
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1903
2	VNPT-VN	1031
3	VIETTEL-VN	809
4	TENCENT-CN	773
5	DIGITALOCEAN-192-241-128-0	692
6	HINET-NET	605
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	552
8	ALISOFT	524
9	VE-CSVE-LACNIC	503
10	CHINANET-JS	502

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9901
2	United States	4420
3	India	2872
4	Viet Nam	2570
5	Russian Federation	2048
6	Brazil	1987
7	Indonesia	1398
8	Thailand	931
9	Taiwan	840
10	France	822

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	378167
2	1622	112860
3	1822	110577
4	1922	110496
5	22	77519
6	1433	62509
7	23	45185
8	3022	31224
9	53	28189
10	66	26138

Wednesday, January 6, 2021

Botnet Statistics [2021-01-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-05 00:00-23:59 UTC
total number of suspected botnet IPs: 41540
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 38280
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1834
2	VNPT-VN	1017
3	VIETTEL-VN	837
4	TENCENT-CN	766
5	DIGITALOCEAN-192-241-128-0	682
6	HINET-NET	648
7	CHINANET-JS	556
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	548
9	ALISOFT	522
10	Baidu	443

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9722
2	United States	4564
3	India	2805
4	Viet Nam	2654
5	Russian Federation	2078
6	Brazil	1986
7	Indonesia	1383
8	Thailand	1010
9	Taiwan	862
10	France	860

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	530104
2	1622	106153
3	1922	105589
4	1822	105164
5	22	73835
6	23	47378
7	1433	35343
8	2255	21397
9	66	17456
10	21	17444

Tuesday, January 5, 2021

Botnet Statistics [2021-01-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-04 00:00-23:59 UTC
total number of suspected botnet IPs: 42356
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 39065
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1895
2	VNPT-VN	1028
3	VIETTEL-VN	918
4	TENCENT-CN	797
5	DIGITALOCEAN-192-241-128-0	681
6	HINET-NET	679
7	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	559
8	CHINANET-JS	543
9	ALISOFT	508
10	VE-CSVE-LACNIC	480

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9859
2	United States	4846
3	Viet Nam	2717
4	India	2684
5	Russian Federation	2154
6	Brazil	1979
7	Indonesia	1421
8	Thailand	1010
9	Taiwan	915
10	France	894

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	386101
2	2444	167802
3	22	92331
4	122	70318
5	922	69340
6	1222	55815
7	322	55553
8	422	55527
9	1022	54988
10	1422	54491

Monday, January 4, 2021

Botnet Statistics [2021-01-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-03 00:00-23:59 UTC
total number of suspected botnet IPs: 38101
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35300
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1989
2	TENCENT-CN	849
3	DIGITALOCEAN-192-241-128-0	687
4	HINET-NET	604
5	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	580
6	VNPT-VN	561
7	VIETTEL-VN	554
8	ALISOFT	529
9	Baidu	486
10	CHINANET-GD	472

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	10045
2	United States	4866
3	Russian Federation	2154
4	India	1642
5	Viet Nam	1620
6	Brazil	1596
7	Indonesia	960
8	France	886
9	Taiwan	850
10	Hong Kong	767

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	207062
2	22	70536
3	1433	35298
4	1022	34928
5	922	30712
6	23	28033
7	992	27640
8	3022	27625
9	882	24639
10	3389	17998

Sunday, January 3, 2021

Botnet Statistics [2021-01-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-02 00:00-23:59 UTC
total number of suspected botnet IPs: 37044
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34138
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1746
2	TENCENT-CN	741
3	DIGITALOCEAN-192-241-128-0	684
4	HINET-NET	617
5	VIETTEL-VN	595
6	CHINANET-JS	595
7	VNPT-VN	549
8	ALISOFT	517
9	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	484
10	Baidu	448

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9582
2	United States	4231
3	India	2327
4	Russian Federation	2054
5	Viet Nam	1685
6	Brazil	1591
7	Indonesia	968
8	Taiwan	859
9	France	857
10	South Korea	696

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	307789
2	922	170279
3	1022	148078
4	422	147588
5	322	147431
6	122	147415
7	1222	146707
8	822	143518
9	1422	142850
10	1122	142669