Botnet Statistics [2021-09-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2021. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2021-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 29711
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 27501
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1393
2	ALISOFT	890
3	DIGITALOCEAN-192-241-128-0	737
4	VNPT-VN	423
5	VIETTEL-VN	420
6	HINET-NET	409
7	TENCENT-CN	377
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	368
9	CMNET	351
10	BSNLNET	343

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	6407
2	United States	4552
3	India	2334
4	Russian Federation	1868
5	Brazil	1613
6	Viet Nam	1255
7	Indonesia	917
8	Thailand	710
9	Mauritius	526
10	Taiwan	523

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	8989	1008313
2	6001	298034
3	445	262193
4	4122	211000
5	4722	160550
6	10203	157721
7	6000	153802
8	5122	144697
9	3122	138581
10	9522	123971

20210917 Botnet Detection Live Streaming 40+ zombies detected)