Botnet Statistics [2021-05-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 35153
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 32560
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2328
2	ALISOFT	1072
3	TENCENT-CN	804
4	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	737
5	DIGITALOCEAN-192-241-128-0	700
6	VNPT-VN	580
7	HINET-NET	499
8	VIETTEL-VN	454
9	Baidu	431
10	BSNLNET	338

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9369
2	United States	5257
3	India	1916
4	Russian Federation	1880
5	Brazil	1561
6	Viet Nam	1490
7	Indonesia	1000
8	European Union	759
9	Thailand	714
10	Taiwan	654

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	6220	158029
2	445	140131
3	9622	87993
4	10040	80219
5	7822	68714
6	5222	65200
7	5900	62093
8	1111	58311
9	22	49513
10	9322	47155

20210525 Botnet Detection Live Streaming 1700+ zombies detected)