Botnet Statistics [2021-05-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 28400
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26281
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2067
2	ALISOFT	938
3	TENCENT-CN	689
4	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	619
5	Baidu	393
6	HINET-NET	383
7	VNPT-VN	320
8	VIETTEL-VN	305
9	CHINANET-SD	297
10	ACEVILLEPTELTD-SG	289

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8405
2	United States	4221
3	Russian Federation	1549
4	India	1246
5	Brazil	1177
6	Viet Nam	924
7	European Union	643
8	Indonesia	597
9	Taiwan	526
10	South Korea	522

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1313	190796
2	445	158578
3	10003	72167
4	5900	71648
5	4224	71051
6	3737	58248
7	5166	51487
8	10021	47728
9	6666	43297
10	2510	41875

20210531 Botnet Detection Live Streaming 1600+ zombies detected)