Botnet Statistics [2021-03-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 36064
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 33176
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2176
2	TENCENT-CN	859
3	ALISOFT	798
4	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	667
5	VNPT-VN	578
6	HINET-NET	509
7	VIETTEL-VN	505
8	DIGITALOCEAN-192-241-128-0	490
9	CMNET	420
10	Baidu	412

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9695
2	United States	4956
3	Russian Federation	2014
4	India	1854
5	Viet Nam	1602
6	Brazil	1495
7	Indonesia	851
8	Mauritius	722
9	Taiwan	684
10	European Union	684

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1222	418488
2	445	358015
3	129	189643
4	130	184748
5	10930	107694
6	27	81382
7	1070	81159
8	1170	79777
9	10920	78468
10	22	65754

20210329 Botnet Detection Live Streaming (1500+ zombies detected)