Botnet Statistics [2021-07-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 31715
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29038
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2250
2	ALISOFT	1006
3	DIGITALOCEAN-192-241-128-0	784
4	TENCENT-CN	678
5	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	665
6	Baidu	453
7	VNPT-VN	429
8	HINET-NET	394
9	VIETTEL-VN	355
10	CHINANET-SD	331

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8282
2	United States	5021
3	India	2116
4	Russian Federation	1668
5	Brazil	1416
6	Viet Nam	1135
7	Indonesia	819
8	European Union	700
9	Thailand	620
10	South Korea	537

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	258494
2	8922	115711
3	322	108054
4	1222	107550
5	1146	96748
6	4222	89023
7	1259	78278
8	6001	75286
9	2272	74357
10	168	71901

20210728 Botnet Detection Live Streaming 700+ zombies detected)