Botnet Statistics [2021-05-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 32132
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 29553
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	2119
2	ALISOFT	1027
3	TENCENT-CN	723
4	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	680
5	VNPT-VN	601
6	VIETTEL-VN	468
7	HINET-NET	454
8	Baidu	409
9	CHINANET-SD	331
10	TELKOMNET	298

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8739
2	United States	4102
3	India	1844
4	Russian Federation	1797
5	Viet Nam	1514
6	Brazil	1484
7	Indonesia	927
8	European Union	713
9	Thailand	705
10	Taiwan	601

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1422	160642
2	445	139798
3	1223	135347
4	624	61404
5	22	49058
6	6001	47426
7	10001	44546
8	9342	44084
9	2000	39059
10	3389	38909

20210528 Botnet Detection Live Streaming 1800+ zombies detected)