Botnet Statistics [2021-05-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 33034
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 30379
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2476
2	TENCENT-CN	865
3	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	737
4	ALISOFT	737
5	DIGITALOCEAN-192-241-128-0	678
6	HINET-NET	465
7	VNPT-VN	448
8	Baidu	407
9	VIETTEL-VN	395
10	CMNET	328

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9006
2	United States	4944
3	India	1964
4	Brazil	1526
5	Russian Federation	1515
6	Viet Nam	1286
7	Indonesia	923
8	Thailand	769
9	European Union	756
10	Taiwan	595

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	5038	347033
2	445	337800
3	1019	224285
4	1016	217218
5	1031	210443
6	1018	210238
7	1017	209743
8	1066	133962
9	22	62008
10	8882	59095

20210504 Botnet Detection Live Streaming (2000+ zombies detected)