Custom Search

Thursday, December 4, 2025

Botnet Statistics [2025-12-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 22002
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20653
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1494
2AL-31093
3GOOGLE-CLOUD1005
4PAN-22947
5BYTEPLUS-SG744
6ASEPL-SG690
7CMNET554
8VOLCANO-ENGINE547
9ALISOFT442
10CENSY377


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8269
2China4455
3Singapore1604
4Hong Kong479
5India429
6Indonesia416
7South Korea415
8United Kingdom394
9European Union352
10Russian Federation329

Wednesday, December 3, 2025

Botnet Statistics [2025-12-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 22362
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20924
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900117720
2887765963
3778864269
42251063
5525243218
6842239323
75522236944
8227725453
9323324870
1022224827
RankNetwork# of suspected botnet IPs
1MSFT1512
2AL-31153
3GOOGLE-CLOUD1010
4PAN-22949
5BYTEPLUS-SG742
6ASEPL-SG690
7CLOUDFLARENET645
8VOLCANO-ENGINE543
9ALISOFT428
10CENSY381


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9185
2China3877
3Singapore1690
4Hong Kong443
5India422
6United Kingdom410
7South Korea368
8Indonesia342
9Netherlands335
10Russian Federation328

Botnet Statistics [2025-12-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21280
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19835
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900147965
2887764290
3778859434
45522242725
5333340017
62239632
7842239307
82211237933
95548830565
10200226164
RankNetwork# of suspected botnet IPs
1MSFT1484
2AL-31110
3GOOGLE-CLOUD1002
4PAN-22941
5BYTEPLUS-SG750
6ASEPL-SG693
7CLOUDFLARENET645
8VOLCANO-ENGINE554
9ALISOFT422
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8427
2China3812
3Singapore1615
4Hong Kong441
5India421
6United Kingdom382
7South Korea377
8Germany339
9Netherlands330
10Indonesia323

Tuesday, December 2, 2025

Daily Zombie Lists for December 2025(2025年12月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for December 2025 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2025年12月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

12/01: download link 下載網址; MD5sum: a62aa3bc64f4ca2fda43c2b23b86d6a5
12/02: download link 下載網址; MD5sum: f507907e2059fc68a42e0b04defbf1bb
12/03: download link 下載網址; MD5sum: d3b04a11f4e6475d6d7894d165fb109d

Monday, December 1, 2025

Botnet Statistics [2025-11-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 21261
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19954
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590099337
2555566667
3333539247
4626236855
55522236745
6842232254
72228436
8200228261
92319718
10777718788
RankNetwork# of suspected botnet IPs
1MSFT1506
2AL-31109
3GOOGLE-CLOUD1005
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG698
7VOLCANO-ENGINE560
8ALISOFT425
9CENSY381
10LINODE-US312


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8657
2China3851
3Singapore1723
4Hong Kong458
5United Kingdom396
6India371
7South Korea349
8Netherlands327
9Brazil297
10Germany296

Sunday, November 30, 2025

Botnet Statistics [2025-11-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21538
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20163
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900116451
26262112280
3555591305
42256366
5333540168
65522238131
7558826862
8200224947
9590123184
10777720818
RankNetwork# of suspected botnet IPs
1MSFT1511
2AL-31102
3GOOGLE-CLOUD1006
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG697
7VOLCANO-ENGINE554
8ALISOFT414
9CENSY382
10CMNET329


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7933
2China4072
3Singapore1608
4India545
5Hong Kong510
6South Korea441
7Russian Federation388
8United Kingdom375
9Brazil347
10Indonesia327

Saturday, November 29, 2025

Botnet Statistics [2025-11-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 22634
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21207
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900110487
25555108141
3832290717
4626289494
52243964
6777731824
7662225925
8590120892
91333320171
10558819412
RankNetwork# of suspected botnet IPs
1MSFT1499
2AL-31110
3GOOGLE-CLOUD1008
4PAN-22949
5BYTEPLUS-SG751
6ASEPL-SG741
7VOLCANO-ENGINE568
8ALISOFT434
9CMNET388
10CENSY371


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8488
2China4242
3Singapore1743
4India505
5Hong Kong498
6South Korea469
7Brazil430
8United Kingdom386
9Indonesia378
10Russian Federation370

Friday, November 28, 2025

Botnet Statistics [2025-11-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23556
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22062
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15555130263
28322105648
35900100617
41222258553
52241506
6444435930
7777732432
8662226107
9590119928
105552218139
RankNetwork# of suspected botnet IPs
1MSFT1527
2AL-31165
3GOOGLE-CLOUD1006
4PAN-22949
5BYTEPLUS-SG751
6ASEPL-SG741
7VOLCANO-ENGINE553
8ALISOFT458
9CENSY381
10CMNET366


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9084
2China4805
3Singapore1772
4Hong Kong497
5South Korea461
6India420
7United Kingdom402
8Brazil372
9Indonesia365
10Russian Federation357

Thursday, November 27, 2025

Botnet Statistics [2025-11-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 23503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21979
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
18322107619
25555101793
3590096680
41222265738
5888845318
62238483
7662230462
8323226983
95552222202
104545419281
RankNetwork# of suspected botnet IPs
1MSFT1523
2AL-31132
3GOOGLE-CLOUD1010
4PAN-22946
5BYTEPLUS-SG883
6ASEPL-SG693
7VOLCANO-ENGINE538
8ALISOFT424
9CENSY375
10CMNET352


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8446
2China5193
3Singapore1862
4India484
5Hong Kong471
6South Korea447
7Indonesia427
8United Kingdom397
9Brazil377
10Russian Federation342

Wednesday, November 26, 2025

Botnet Statistics [2025-11-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 25833
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24273
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15555120694
26622107702
3323292448
4590082350
51222261785
6888853493
71100036257
82233591
9832230467
10702126522
RankNetwork# of suspected botnet IPs
1MSFT1526
2AL-31115
3GOOGLE-CLOUD1012
4PAN-22949
5BYTEPLUS-SG888
6ASEPL-SG692
7VOLCANO-ENGINE538
8CMNET428
9ALISOFT421
10CENSY383


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8950
2China5494
3Singapore1868
4India584
5South Korea567
6Hong Kong520
7Brazil497
8Indonesia460
9Russian Federation440
10United Kingdom417

Tuesday, November 25, 2025

Botnet Statistics [2025-11-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 25237
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23493
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16622113756
2590085095
3323266514
4888852710
5555551607
61100045578
72228030
8143325118
95552222239
102802220944
RankNetwork# of suspected botnet IPs
1MSFT1515
2AL-31114
3GOOGLE-CLOUD996
4PAN-22941
5BYTEPLUS-SG889
6ASEPL-SG707
7VOLCANO-ENGINE556
8CMNET438
9ALISOFT421
10CENSY382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8187
2China5719
3Singapore1863
4India603
5South Korea498
6Hong Kong477
7Brazil463
8Russian Federation446
9United Kingdom403
10Indonesia393

Monday, November 24, 2025

Botnet Statistics [2025-11-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24330
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22704
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590085836
22245345
3888827652
45552222223
5590121122
6812220960
72802220892
82314713
9323213450
10892212040
RankNetwork# of suspected botnet IPs
1MSFT1526
2AL-31047
3GOOGLE-CLOUD1014
4PAN-22949
5BYTEPLUS-SG889
6ASEPL-SG704
7VOLCANO-ENGINE551
8CMNET432
9ALISOFT396
10CENSY375


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8298
2China5519
3Singapore1901
4Brazil582
5India546
6South Korea486
7Hong Kong486
8Russian Federation431
9United Kingdom418
10Netherlands337

Sunday, November 23, 2025

Botnet Statistics [2025-11-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 24194
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22549
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1722287361
2590084468
31562068907
4666663136
5828255833
62245185
7812240977
83002326109
9888825039
102802220874
RankNetwork# of suspected botnet IPs
1MSFT1493
2AL-31068
3GOOGLE-CLOUD1008
4PAN-22948
5BYTEPLUS-SG890
6ASEPL-SG693
7VOLCANO-ENGINE545
8CMNET416
9ALISOFT409
10CENSY379


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8194
2China5370
3Singapore1872
4India560
5Brazil523
6Hong Kong513
7South Korea495
8Russian Federation456
9Indonesia385
10United Kingdom384

Saturday, November 22, 2025

Botnet Statistics [2025-11-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 24806
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23066
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1666699128
2722296403
3600366702
42266542
5590065058
6828258385
7812240131
8199339057
9772237379
10888832448
RankNetwork# of suspected botnet IPs
1MSFT1419
2AL-31092
3GOOGLE-CLOUD1011
4PAN-22952
5BYTEPLUS-SG888
6ASEPL-SG739
7VOLCANO-ENGINE550
8CMNET480
9ALISOFT399
10CENSY382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7923
2China5931
3Singapore1902
4India649
5Brazil638
6South Korea489
7Hong Kong485
8Russian Federation462
9Indonesia427
10United Kingdom343

Friday, November 21, 2025

Botnet Statistics [2025-11-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 25936
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24152
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17722122908
27222108272
36666104101
4590082528
52252129
6812243904
7828242273
8199339105
9888835442
103002331634
RankNetwork# of suspected botnet IPs
1MSFT1216
2AL-31090
3GOOGLE-CLOUD1022
4PAN-22951
5BYTEPLUS-SG828
6ASEPL-SG724
7VOLCANO-ENGINE532
8CMNET483
9ALISOFT398
10COGENT-A382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8739
2China6280
3Singapore1759
4India680
5Brazil552
6Indonesia527
7Hong Kong497
8Russian Federation474
9South Korea471
10Germany358

Thursday, November 20, 2025

Botnet Statistics [2025-11-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 25162
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23235
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17722124401
26666104982
3590086053
4202652272
5412248611
6199339065
72238798
8200235025
9622229289
10590121299
RankNetwork# of suspected botnet IPs
1MSFT1556
2AL-31073
3GOOGLE-CLOUD1006
4PAN-22951
5BYTEPLUS-SG859
6ASEPL-SG724
7VOLCANO-ENGINE571
8CMNET476
9ALISOFT395
10CENSY384


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8424
2China5348
3Singapore1887
4India660
5Brazil569
6Indonesia544
7Hong Kong522
8South Korea483
9Russian Federation466
10United Kingdom363

Wednesday, November 19, 2025

Botnet Statistics [2025-11-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 22187
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20760
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16666108044
2590078362
3772270296
42240637
5590121189
6202617488
7143316260
8287415740
9600213769
10412213712
RankNetwork# of suspected botnet IPs
1MSFT1522
2AL-31023
3GOOGLE-CLOUD1011
4PAN-22951
5ASEPL-SG700
6VOLCANO-ENGINE524
7CMNET475
8ALISOFT405
9CENSY382
10KORNET-KR292


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8265
2China5220
3Singapore1184
4India542
5Hong Kong491
6South Korea479
7Russian Federation415
8United Kingdom340
9Indonesia323
10European Union312

Tuesday, November 18, 2025

Botnet Statistics [2025-11-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21834
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20361
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16666106980
2590078676
32248037
4141138682
5442230463
6590120955
7221115324
8590313483
9202213182
10590513073
RankNetwork# of suspected botnet IPs
1MSFT1548
2AL-31061
3GOOGLE-CLOUD1003
4PAN-22952
5ASEPL-SG714
6VOLCANO-ENGINE530
7CMNET508
8ALISOFT416
9CENSY376
10BYTEPLUS-SG286


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7803
2China4945
3Singapore1278
4India592
5South Korea479
6Hong Kong477
7Russian Federation428
8Indonesia377
9Brazil338
10United Kingdom328

Monday, November 17, 2025

Botnet Statistics [2025-11-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 21254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19890
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900172598
26666107717
3141150375
42243801
5442242867
6600042257
7703737431
8522226583
9590120317
101003819801
RankNetwork# of suspected botnet IPs
1MSFT1539
2AL-31059
3GOOGLE-CLOUD1012
4PAN-22959
5ASEPL-SG706
6VOLCANO-ENGINE519
7CMNET460
8ALISOFT419
9CENSY372
10KORNET-KR340


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8304
2China4445
3Singapore1221
4South Korea534
5India515
6Hong Kong467
7Russian Federation403
8United Kingdom336
9European Union294
10Indonesia277

Sunday, November 16, 2025

Botnet Statistics [2025-11-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 23058
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21503
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900250233
2670091826
3412073075
42030049134
51592048849
62242808
7442242531
8600041474
9141133050
10666627474
RankNetwork# of suspected botnet IPs
1MSFT1575
2AL-31087
3GOOGLE-CLOUD1013
4PAN-22958
5ASEPL-SG717
6CLOUDFLARENET655
7VOLCANO-ENGINE530
8CMNET501
9KORNET-KR450
10ALISOFT439


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8806
2China4753
3Singapore1285
4South Korea678
5India585
6Hong Kong489
7Russian Federation409
8United Kingdom349
9Indonesia336
10Germany318

Saturday, November 15, 2025

Botnet Statistics [2025-11-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 22705
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21079
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900294300
2422477163
3141150179
42240566
5830028461
62328048
7472227703
8390024557
91590021867
102162021322
RankNetwork# of suspected botnet IPs
1MSFT1548
2AL-31068
3GOOGLE-CLOUD1013
4PAN-22959
5BYTEPLUS-SG876
6ASEPL-SG709
7VOLCANO-ENGINE522
8CMNET503
9ALISOFT431
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8039
2China4689
3Singapore1769
4India619
5Hong Kong505
6Russian Federation478
7South Korea473
8Indonesia374
9United Kingdom357
10Brazil330

Friday, November 14, 2025

Botnet Statistics [2025-11-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-13 00:00-23:59 UTC
total number of suspected botnet IPs: 24017
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22388
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900301150
24224116308
3141153485
42232706
5199526938
6543215849
7590114621
8143312471
92310465
10222310314
RankNetwork# of suspected botnet IPs
1MSFT1568
2AL-31098
3GOOGLE-CLOUD1021
4PAN-22962
5BYTEPLUS-SG876
6ASEPL-SG760
7VOLCANO-ENGINE524
8CMNET522
9ALISOFT438
10CENSY383


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8732
2China4877
3Singapore1906
4India622
5Hong Kong505
6Russian Federation490
7South Korea477
8Indonesia414
9United Kingdom392
10Brazil371

Thursday, November 13, 2025

Botnet Statistics [2025-11-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-12 00:00-23:59 UTC
total number of suspected botnet IPs: 22862
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21299
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900382637
2199566963
3141153516
41202030118
52227666
644516571
7590115377
8143313524
9222211881
102310628
RankNetwork# of suspected botnet IPs
1MSFT1567
2AL-31097
3GOOGLE-CLOUD1010
4PAN-22961
5BYTEPLUS-SG874
6ASEPL-SG723
7VOLCANO-ENGINE532
8CMNET503
9ALISOFT453
10CENSY381


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7928
2China4933
3Singapore1800
4India535
5Hong Kong494
6South Korea455
7Russian Federation444
8Indonesia398
9Germany355
10United Kingdom347

Wednesday, November 12, 2025

Botnet Statistics [2025-11-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-11 00:00-23:59 UTC
total number of suspected botnet IPs: 23370
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21727
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900378046
2199567056
32249882
4141142154
5888836347
6143321022
7332220508
82532217505
952216704
10333315357
RankNetwork# of suspected botnet IPs
1MSFT1551
2AL-31210
3GOOGLE-CLOUD1013
4PAN-22964
5BYTEPLUS-SG870
6ASEPL-SG771
7VOLCANO-ENGINE529
8CMNET485
9ALISOFT426
10CENSY384


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8471
2China4801
3Singapore1873
4India526
5Hong Kong476
6Russian Federation444
7South Korea429
8Indonesia413
9United Kingdom367
10Brazil364

Tuesday, November 11, 2025

Botnet Statistics [2025-11-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-10 00:00-23:59 UTC
total number of suspected botnet IPs: 21653
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20121
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900477869
2888895433
3332254832
4141146031
5772238624
6333328497
72226361
8212218363
9543217579
10590114833
RankNetwork# of suspected botnet IPs
1MSFT1554
2AL-31230
3GOOGLE-CLOUD1013
4PAN-22964
5BYTEPLUS-SG870
6ASEPL-SG775
7VOLCANO-ENGINE534
8ALISOFT444
9CMNET407
10CENSY379


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7849
2China4667
3Singapore1819
4Hong Kong508
5India426
6Indonesia426
7United Kingdom361
8South Korea341
9Russian Federation335
10Brazil304

Monday, November 10, 2025

Botnet Statistics [2025-11-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-09 00:00-23:59 UTC
total number of suspected botnet IPs: 23381
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21819
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900433636
2888896063
3141153606
42229964
5332219557
6222317360
7543216700
8590115444
9143314292
10333314041
RankNetwork# of suspected botnet IPs
1MSFT1566
2AL-31233
3GOOGLE-CLOUD1015
4PAN-22950
5BYTEPLUS-SG871
6ASEPL-SG768
7VOLCANO-ENGINE548
8CMNET497
9ALISOFT429
10CENSY379


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8418
2China4936
3Singapore1798
4India553
5Hong Kong552
6South Korea491
7Russian Federation477
8United Kingdom393
9Brazil337
10Indonesia332

Sunday, November 9, 2025

Botnet Statistics [2025-11-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-08 00:00-23:59 UTC
total number of suspected botnet IPs: 22808
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21206
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900418898
21996108520
3888897237
4141153622
5446046608
62237497
75875523427
8590116935
9543215315
10802214144
RankNetwork# of suspected botnet IPs
1MSFT1552
2AL-31231
3GOOGLE-CLOUD1018
4PAN-22950
5ASEPL-SG776
6BYTEPLUS-SG770
7VOLCANO-ENGINE535
8CMNET514
9ALISOFT429
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7888
2China4611
3Singapore1727
4India591
5Hong Kong566
6Brazil558
7Russian Federation481
8South Korea470
9United Kingdom384
10Indonesia362

Saturday, November 8, 2025

Botnet Statistics [2025-11-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-07 00:00-23:59 UTC
total number of suspected botnet IPs: 23567
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21817
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900276305
2888897342
3141153569
4199645283
514739580
6900037765
72233989
8222328759
9555526329
101999822622
RankNetwork# of suspected botnet IPs
1MSFT1558
2AL-31228
3GOOGLE-CLOUD1014
4PAN-22951
5ASEPL-SG774
6BYTEPLUS-SG768
7CMNET533
8VOLCANO-ENGINE530
9ALISOFT440
10CENSY384


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8131
2China4618
3Singapore1713
4Brazil688
5India653
6Hong Kong569
7Russian Federation484
8South Korea476
9Indonesia462
10United Kingdom381

Friday, November 7, 2025

Botnet Statistics [2025-11-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-06 00:00-23:59 UTC
total number of suspected botnet IPs: 24447
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22691
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900323829
2888897519
35687462629
4141153614
55429840808
62237640
7835829162
8143329102
99126299
10202622042
RankNetwork# of suspected botnet IPs
1MSFT1556
2AL-31212
3GOOGLE-CLOUD1026
4PAN-22951
5BYTEPLUS-SG800
6ASEPL-SG773
7CMNET562
8VOLCANO-ENGINE529
9ALISOFT409
10UCLOUD-HK385


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8697
2China4622
3Singapore1764
4Brazil677
5India644
6Hong Kong633
7Russian Federation530
8South Korea489
9Indonesia471
10United Kingdom394

Thursday, November 6, 2025

Botnet Statistics [2025-11-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-05 00:00-23:59 UTC
total number of suspected botnet IPs: 24275
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22485
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900444849
25687466844
393265715
4141153650
5700040963
6888839919
7202627455
8999926268
92224088
109122221
RankNetwork# of suspected botnet IPs
1MSFT1536
2AL-31219
3GOOGLE-CLOUD1011
4PAN-22950
5ASEPL-SG783
6CMNET667
7VOLCANO-ENGINE536
8ALISOFT417
9UCLOUD-HK403
10CENSY382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8253
2China4842
3Singapore1079
4Brazil743
5India678
6Hong Kong643
7Russian Federation545
8South Korea498
9Indonesia485
10United Kingdom386
RankTCP port number# of connection attempts received
15900369254
25687461960
337052329
4141151025
5361036168
62222909
732219380
82319367
9143314738
10543213855