Botnet Statistics [2021-05-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 28852
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26785
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2018
2	ALISOFT	904
3	DIGITALOCEAN-192-241-128-0	702
4	TENCENT-CN	699
5	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	604
6	HINET-NET	399
7	Baidu	359
8	VNPT-VN	353
9	VIETTEL-VN	306
10	ACEVILLEPTELTD-SG	298

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	7960
2	United States	4858
3	Russian Federation	1554
4	India	1256
5	Brazil	1147
6	Viet Nam	935
7	Indonesia	675
8	European Union	632
9	Taiwan	553
10	South Korea	483

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	9444	143005
2	445	93352
3	6220	72394
4	10081	65534
5	5900	61487
6	10425	60585
7	2622	42968
8	22	39808
9	3131	38507
10	10355	37974

20210524 Botnet Detection Live Streaming 1600+ zombies detected)