Botnet Statistics [2021-03-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 38687
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 35473
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2080
2	VNPT-VN	943
3	VIETTEL-VN	848
4	TENCENT-CN	797
5	ALISOFT	663
6	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	654
7	HINET-NET	603
8	DIGITALOCEAN-192-241-128-0	440
9	VE-CSVE-LACNIC	435
10	AFRINIC-042005	402

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9148
2	United States	4222
3	India	2907
4	Viet Nam	2468
5	Russian Federation	2198
6	Brazil	1770
7	Indonesia	1460
8	Thailand	891
9	Taiwan	784
10	Turkey	686

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	452849
2	22	68050
3	1433	31847
4	23	29525
5	60000	29449
6	125	27829
7	26	26858
8	1080	26594
9	25000	26333
10	3942	26201

20210401 Botnet Detection Live Streaming (3000+ zombies detected)