Botnet Statistics [2024-12-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 22309
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20831
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1051
2	PAN-22	968
3	MSFT	880
4	BSNLNET	716
5	UK-MICROSOFT-20000324	618
6	CMNET	598
7	AL-3	515
8	HINET-NET	486
9	CHINANET-JS	359
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6484
2	China	5403
3	India	1505
4	United Kingdom	974
5	South Korea	607
6	Taiwan	593
7	Russian Federation	550
8	Hong Kong	545
9	Singapore	410
10	Indonesia	408

Rank	TCP port number	# of connection attempts received
1	2269	211644
2	22942	156116
3	23592	155724
4	2102	131437
5	29122	128923
6	22242	113787
7	7622	111350
8	29272	108857
9	6000	100255
10	22568	96340

20241213 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 22344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20888
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1038
2	PAN-22	967
3	MSFT	887
4	BSNLNET	736
5	UK-MICROSOFT-20000324	622
6	CMNET	616
7	HINET-NET	494
8	AL-3	420
9	HURRICANE-4	348
10	CHINANET-JS	322

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6375
2	China	5220
3	India	1518
4	United Kingdom	999
5	South Korea	896
6	Taiwan	623
7	Russian Federation	573
8	Hong Kong	516
9	Singapore	436
10	Brazil	374

Rank	TCP port number	# of connection attempts received
1	2269	244994
2	2102	203640
3	26792	171768
4	22942	167595
5	23592	164732
6	24382	124112
7	22240	122034
8	29122	103567
9	52922	103277
10	22469	100860

20241212 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 22083
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20644
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1006
2	PAN-22	957
3	MSFT	901
4	BSNLNET	656
5	UK-MICROSOFT-20000324	637
6	CMNET	523
7	AL-3	480
8	HINET-NET	471
9	HURRICANE-4	347
10	Xpeed	332

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6747
2	China	4928
3	India	1356
4	United Kingdom	1026
5	South Korea	908
6	Taiwan	562
7	Russian Federation	556
8	Hong Kong	530
9	Singapore	423
10	Brazil	379

Rank	TCP port number	# of connection attempts received
1	2269	213649
2	26792	170552
3	3389	155248
4	2102	154652
5	6000	135856
6	7622	125950
7	21762	124239
8	23592	123950
9	22240	111610
10	22942	110885

20241211 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-09 00:00-23:59 UTC
total number of suspected botnet IPs: 21046
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19650
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1039
2	PAN-22	969
3	MSFT	893
4	UK-MICROSOFT-20000324	638
5	BSNLNET	590
6	AL-3	508
7	HINET-NET	465
8	CMNET	425
9	Xpeed	356
10	HURRICANE-4	350

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6597
2	China	4586
3	India	1201
4	United Kingdom	1083
5	South Korea	820
6	Taiwan	553
7	Russian Federation	522
8	Hong Kong	464
9	Singapore	442
10	Indonesia	370

Rank	TCP port number	# of connection attempts received
1	2269	225012
2	26792	172327
3	7622	161216
4	29802	147414
5	1922	133908
6	33022	129740
7	6000	122929
8	21762	120654
9	22240	120559
10	22942	117043

20241210 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-08 00:00-23:59 UTC
total number of suspected botnet IPs: 20764
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19393
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1036
2	PAN-22	968
3	MSFT	909
4	UK-MICROSOFT-20000324	640
5	BSNLNET	558
6	AL-3	496
7	HINET-NET	467
8	CMNET	446
9	Xpeed	394
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6606
2	China	4663
3	India	1092
4	United Kingdom	1028
5	South Korea	861
6	Taiwan	558
7	Russian Federation	475
8	Hong Kong	473
9	Singapore	440
10	Brazil	339

Rank	TCP port number	# of connection attempts received
1	2269	212389
2	26792	161248
3	22240	140292
4	7622	135900
5	6000	119904
6	33022	106564
7	2342	104233
8	2102	96388
9	3389	96209
10	2212	94738

20241209 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-12-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20703
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19365
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1037
2	PAN-22	969
3	MSFT	911
4	UK-MICROSOFT-20000324	640
5	BSNLNET	606
6	HINET-NET	478
7	AL-3	457
8	CMNET	434
9	Xpeed	415
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6515
2	China	4587
3	India	1220
4	United Kingdom	996
5	South Korea	882
6	Taiwan	571
7	Hong Kong	503
8	Russian Federation	460
9	Singapore	421
10	European Union	328

Rank	TCP port number	# of connection attempts received
1	2269	184759
2	22240	150156
3	26792	145115
4	5322	124678
5	7622	124539
6	22697	115057
7	6000	114335
8	26142	112400
9	22469	106158
10	2102	100449

20241208 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-06 00:00-23:59 UTC
total number of suspected botnet IPs: 21037
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19614
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1043
2	PAN-22	968
3	MSFT	924
4	UK-MICROSOFT-20000324	639
5	BSNLNET	548
6	AL-3	484
7	HINET-NET	442
8	CMNET	422
9	HURRICANE-4	349
10	Xpeed	345

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6978
2	China	4424
3	India	1189
4	United Kingdom	996
5	South Korea	802
6	Taiwan	536
7	Hong Kong	512
8	Russian Federation	507
9	Singapore	426
10	Indonesia	396

Rank	TCP port number	# of connection attempts received
1	2269	159986
2	26792	144328
3	7622	133265
4	6000	130745
5	22240	122145
6	2342	114198
7	24382	111772
8	2267	106721
9	9922	105295
10	2732	97787

20241207 Botnet Detection Live Streaming 60+ zombies detected)

Botnet Statistics [2024-12-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 20427
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18983
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1054
2	PAN-22	968
3	MSFT	914
4	UK-MICROSOFT-20000324	646
5	BSNLNET	498
6	HINET-NET	490
7	CMNET	449
8	AL-3	440
9	HURRICANE-4	348
10	CENSY	303

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6558
2	China	4400
3	India	1116
4	United Kingdom	984
5	South Korea	757
6	Taiwan	595
7	Russian Federation	543
8	Hong Kong	510
9	Indonesia	376
10	Singapore	352

Rank	TCP port number	# of connection attempts received
1	26792	172828
2	2269	155102
3	8122	148824
4	6000	136831
5	2342	116723
6	7622	115943
7	22942	114523
8	22067	113284
9	22920	110519
10	22240	108890

20241206 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-04 00:00-23:59 UTC
total number of suspected botnet IPs: 19907
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18562
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1036
2	PAN-22	968
3	MSFT	903
4	UK-MICROSOFT-20000324	638
5	CMNET	512
6	HINET-NET	480
7	AL-3	442
8	BSNLNET	428
9	HURRICANE-4	348
10	CENSY	301

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6557
2	China	4221
3	India	1055
4	United Kingdom	983
5	South Korea	683
6	Taiwan	567
7	Russian Federation	483
8	Hong Kong	465
9	Singapore	375
10	Indonesia	357

Rank	TCP port number	# of connection attempts received
1	22469	155393
2	2269	140010
3	22920	116484
4	6000	115886
5	22171	115796
6	22240	113716
7	36522	112730
8	9922	111587
9	2342	107247
10	4322	103584

20241205 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20346
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18992
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1009
2	PAN-22	956
3	MSFT	907
4	UK-MICROSOFT-20000324	643
5	HINET-NET	494
6	AL-3	481
7	BSNLNET	476
8	CMNET	468
9	HURRICANE-4	348
10	CENSY	304

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6401
2	China	4542
3	India	1140
4	United Kingdom	1009
5	Taiwan	600
6	Russian Federation	513
7	South Korea	503
8	Hong Kong	487
9	Indonesia	474
10	Singapore	446

Rank	TCP port number	# of connection attempts received
1	21762	169861
2	27082	159317
3	2269	135997
4	2342	133734
5	22469	129984
6	22171	129423
7	6000	127352
8	9922	118095
9	24112	112301
10	2732	109943

20241204 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 20672
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19252
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1035
2	PAN-22	964
3	MSFT	917
4	UK-MICROSOFT-20000324	641
5	BSNLNET	541
6	CMNET	483
7	HINET-NET	480
8	AL-3	446
9	HURRICANE-4	350
10	CHINANET-JS	299

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6243
2	China	5063
3	India	1216
4	United Kingdom	982
5	Taiwan	575
6	Russian Federation	529
7	South Korea	467
8	Hong Kong	467
9	Indonesia	382
10	Singapore	371

Rank	TCP port number	# of connection attempts received
1	21762	156009
2	9122	146215
3	2269	137619
4	2342	132173
5	22694	131037
6	22240	122069
7	2233	116606
8	22171	112729
9	22470	109604
10	22299	108883

20241203 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 23825
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22336
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1198
2	GOOGLE-CLOUD	1046
3	ALISOFT	1024
4	PAN-22	968
5	MSFT	945
6	ASEPL-SG	812
7	UK-MICROSOFT-20000324	639
8	CMNET	576
9	BSNLNET	510
10	HINET-NET	476

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7293
2	China	6328
3	India	1106
4	Singapore	1012
5	United Kingdom	997
6	Taiwan	579
7	Russian Federation	526
8	Hong Kong	515
9	South Korea	492
10	Brazil	380

Rank	TCP port number	# of connection attempts received
1	2269	167416
2	27812	161905
3	6000	130981
4	22697	126602
5	21762	123088
6	22470	116303
7	2342	114950
8	22067	114054
9	27082	113975
10	29802	112662

20241202 Botnet Detection Live Streaming 100+ zombies detected)

Daily Zombie Lists for December 2024 （2024年12月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for December 2024 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2024年12月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

12/01: download link 下載網址; MD5sum: 204145ef1f6af5d66381c63c50b5e89d

12/02: download link 下載網址; MD5sum: b0f9ee73d0f03e71efd4addc371d87d3

12/03: download link 下載網址; MD5sum: 6c78731ce6e07252df963c1b88e1b44d

12/04: download link 下載網址; MD5sum: 113231703e19926fde0be2bdf94334c1

12/05: download link 下載網址; MD5sum: 9190984b9e61e86d3457cd36eb76ef19

12/06: download link 下載網址; MD5sum: 8f77423755e03dd03423b0ca6a4e9b92

12/07: download link 下載網址; MD5sum: 3353706361c0f1cdcad634a0f186c464

12/08: download link 下載網址; MD5sum: 9a30942ca6c1769d41c60040123aca31

12/09: download link 下載網址; MD5sum: 8ae230008e3a788931f922842698b6c0

12/10: download link 下載網址; MD5sum: a3265cd5154b2cebd64d578fd865f54f

12/11: download link 下載網址; MD5sum: cad5f5f52786acc283301960768f1f64

12/12: download link 下載網址; MD5sum: e561560f6674ab724e7161345bbe7416

Botnet Statistics [2024-11-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 24285
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22703
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1113
2	ALISOFT	1044
3	GOOGLE-CLOUD	1041
4	PAN-22	968
5	MSFT	942
6	ASEPL-SG	749
7	UK-MICROSOFT-20000324	643
8	CMNET	596
9	HINET-NET	514
10	BSNLNET	511

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7205
2	China	6238
3	India	1268
4	United Kingdom	1037
5	Singapore	924
6	Taiwan	616
7	Russian Federation	562
8	Hong Kong	531
9	South Korea	507
10	Indonesia	435

Rank	TCP port number	# of connection attempts received
1	2342	204559
2	6000	146524
3	2269	113666
4	22697	113467
5	22568	111615
6	2210	105213
7	2233	96893
8	22470	89884
9	2872	84965
10	9922	83809

20241201 Botnet Detection Live Streaming 200+ zombies detected)