detection period: 2025-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 24151
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22381
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1850 |
| 2 | AL-3 | 1222 |
| 3 | GOOGLE-CLOUD | 999 |
| 4 | PAN-22 | 953 |
| 5 | ASEPL-SG | 739 |
| 6 | BSNLNET | 710 |
| 7 | KORNET-KR | 530 |
| 8 | ALISOFT | 455 |
| 9 | HURRICANE-4 | 452 |
| 10 | CMNET | 411 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8688 |
| 2 | China | 5860 |
| 3 | India | 1375 |
| 4 | Singapore | 931 |
| 5 | South Korea | 810 |
| 6 | Hong Kong | 643 |
| 7 | Netherlands | 413 |
| 8 | Russian Federation | 394 |
| 9 | European Union | 317 |
| 10 | United Kingdom | 315 |
Sunday, May 4, 2025
Botnet Statistics [2025-05-03]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 24194
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22341
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 24194
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22341
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 77785 |
| 2 | 22 | 42775 |
| 3 | 2221 | 39252 |
| 4 | 8822 | 37078 |
| 5 | 2227 | 35932 |
| 6 | 2224 | 34146 |
| 7 | 5222 | 31154 |
| 8 | 4122 | 31084 |
| 9 | 722 | 30874 |
| 10 | 5322 | 30674 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1848 |
| 2 | AL-3 | 1197 |
| 3 | GOOGLE-CLOUD | 1000 |
| 4 | PAN-22 | 953 |
| 5 | ASEPL-SG | 751 |
| 6 | BSNLNET | 730 |
| 7 | KORNET-KR | 555 |
| 8 | HURRICANE-4 | 450 |
| 9 | CMNET | 428 |
| 10 | ALISOFT | 425 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8386 |
| 2 | China | 5792 |
| 3 | India | 1489 |
| 4 | Singapore | 933 |
| 5 | South Korea | 841 |
| 6 | Hong Kong | 653 |
| 7 | Russian Federation | 438 |
| 8 | Netherlands | 392 |
| 9 | United Kingdom | 339 |
| 10 | European Union | 335 |
Saturday, May 3, 2025
Botnet Statistics [2025-05-02]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-02 00:00-23:59 UTC
total number of suspected botnet IPs: 23529
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21693
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-02 00:00-23:59 UTC
total number of suspected botnet IPs: 23529
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21693
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 7522 | 78973 |
| 2 | 5900 | 68784 |
| 3 | 2024 | 53764 |
| 4 | 2227 | 43835 |
| 5 | 22 | 43109 |
| 6 | 23 | 29176 |
| 7 | 2224 | 26377 |
| 8 | 32200 | 23510 |
| 9 | 2122 | 19023 |
| 10 | 9222 | 19002 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1859 |
| 2 | AL-3 | 1212 |
| 3 | GOOGLE-CLOUD | 1013 |
| 4 | PAN-22 | 958 |
| 5 | ASEPL-SG | 783 |
| 6 | BSNLNET | 745 |
| 7 | HURRICANE-4 | 445 |
| 8 | ALISOFT | 436 |
| 9 | CMNET | 434 |
| 10 | KORNET-KR | 401 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8083 |
| 2 | China | 5725 |
| 3 | India | 1510 |
| 4 | Singapore | 946 |
| 5 | Hong Kong | 699 |
| 6 | South Korea | 659 |
| 7 | Russian Federation | 409 |
| 8 | United Kingdom | 369 |
| 9 | Indonesia | 319 |
| 10 | Germany | 316 |
Friday, May 2, 2025
Botnet Statistics [2025-05-01]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-01 00:00-23:59 UTC
total number of suspected botnet IPs: 23344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21585
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-01 00:00-23:59 UTC
total number of suspected botnet IPs: 23344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21585
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 4444 | 135599 |
| 2 | 2024 | 82302 |
| 3 | 2227 | 43283 |
| 4 | 22 | 42360 |
| 5 | 4022 | 32830 |
| 6 | 5900 | 23282 |
| 7 | 8022 | 22900 |
| 8 | 2122 | 18525 |
| 9 | 1022 | 15709 |
| 10 | 8090 | 15070 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1843 |
| 2 | AL-3 | 1177 |
| 3 | GOOGLE-CLOUD | 1019 |
| 4 | PAN-22 | 959 |
| 5 | ASEPL-SG | 731 |
| 6 | BSNLNET | 702 |
| 7 | HURRICANE-4 | 448 |
| 8 | ALISOFT | 405 |
| 9 | CENSY | 399 |
| 10 | CMNET | 390 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8430 |
| 2 | China | 5647 |
| 3 | India | 1440 |
| 4 | Singapore | 898 |
| 5 | Hong Kong | 637 |
| 6 | South Korea | 600 |
| 7 | Russian Federation | 391 |
| 8 | United Kingdom | 385 |
| 9 | European Union | 330 |
| 10 | Viet Nam | 303 |
Daily Zombie Lists for May 2025（2025年05月，每日殭屍電腦IP清單）
To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：
Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；
Column 2: Zombie IP;
第2欄：該殭屍電腦的IP位址；
Column 3: TCP destination port number scanned by the zombie.
第3欄：該殭屍電腦所掃描的TCP埠號。
Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。
Here are the download links of the daily zombie IP lists for May 2025 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2025年05月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：
05/01: download link 下載網址; MD5sum: 54429eb5be3c8a69cf2b210ab6e49d42
05/02: download link 下載網址; MD5sum: 09f5e3bfbb8c651d3ba28da9fd89d483
05/03: download link 下載網址; MD5sum: 6fade8400cef6a4dcb71a2ff1e43f96e
05/04: download link 下載網址; MD5sum: 33e014640d52fd80d3dbb914420b24dd
Thursday, May 1, 2025
Botnet Statistics [2025-04-30]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 23665
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21778
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 23665
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21778
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 1234 | 135320 |
| 2 | 1122 | 75854 |
| 3 | 4022 | 72435 |
| 4 | 22 | 43656 |
| 5 | 2227 | 43465 |
| 6 | 4444 | 30453 |
| 7 | 5900 | 26239 |
| 8 | 8022 | 22608 |
| 9 | 23 | 13608 |
| 10 | 222 | 13603 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1851 |
| 2 | AL-3 | 1248 |
| 3 | GOOGLE-CLOUD | 1007 |
| 4 | PAN-22 | 957 |
| 5 | ASEPL-SG | 783 |
| 6 | BSNLNET | 721 |
| 7 | HURRICANE-4 | 451 |
| 8 | ALISOFT | 447 |
| 9 | CMNET | 425 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8265 |
| 2 | China | 5705 |
| 3 | India | 1485 |
| 4 | Singapore | 956 |
| 5 | Hong Kong | 629 |
| 6 | South Korea | 593 |
| 7 | Russian Federation | 452 |
| 8 | European Union | 359 |
| 9 | Indonesia | 348 |
| 10 | United Kingdom | 339 |
Wednesday, April 30, 2025
Botnet Statistics [2025-04-29]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 25006
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23118
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 25006
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23118
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 4022 | 71394 |
| 2 | 8443 | 60352 |
| 3 | 1234 | 55140 |
| 4 | 1122 | 53974 |
| 5 | 3322 | 48600 |
| 6 | 22 | 44128 |
| 7 | 5900 | 42123 |
| 8 | 9322 | 32021 |
| 9 | 8022 | 22401 |
| 10 | 2028 | 21704 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1851 |
| 2 | AL-3 | 1232 |
| 3 | GOOGLE-CLOUD | 967 |
| 4 | PAN-22 | 937 |
| 5 | ASEPL-SG | 783 |
| 6 | BSNLNET | 769 |
| 7 | CMNET | 462 |
| 8 | ALISOFT | 458 |
| 9 | HURRICANE-4 | 441 |
| 10 | CENSY | 397 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9007 |
| 2 | China | 5869 |
| 3 | India | 1574 |
| 4 | Singapore | 954 |
| 5 | Hong Kong | 639 |
| 6 | South Korea | 617 |
| 7 | Russian Federation | 498 |
| 8 | Netherlands | 390 |
| 9 | United Kingdom | 342 |
| 10 | European Union | 341 |
Tuesday, April 29, 2025
Botnet Statistics [2025-04-28]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 23751
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21813
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 23751
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21813
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 73126 |
| 2 | 2211 | 72571 |
| 3 | 3322 | 64715 |
| 4 | 4022 | 51192 |
| 5 | 2929 | 44040 |
| 6 | 2025 | 42589 |
| 7 | 22 | 42115 |
| 8 | 4444 | 33033 |
| 9 | 10002 | 23892 |
| 10 | 1122 | 22555 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1857 |
| 2 | AL-3 | 1221 |
| 3 | GOOGLE-CLOUD | 978 |
| 4 | PAN-22 | 937 |
| 5 | ASEPL-SG | 765 |
| 6 | BSNLNET | 701 |
| 7 | HURRICANE-4 | 454 |
| 8 | ALISOFT | 449 |
| 9 | CENSY | 395 |
| 10 | KORNET-KR | 388 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8379 |
| 2 | China | 5700 |
| 3 | India | 1442 |
| 4 | Singapore | 927 |
| 5 | South Korea | 633 |
| 6 | Hong Kong | 557 |
| 7 | Russian Federation | 493 |
| 8 | United Kingdom | 362 |
| 9 | Viet Nam | 333 |
| 10 | Indonesia | 333 |
Monday, April 28, 2025
Botnet Statistics [2025-04-27]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23129
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21404
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23129
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21404
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2211 | 77071 |
| 2 | 22 | 40426 |
| 3 | 4444 | 38824 |
| 4 | 2226 | 34716 |
| 5 | 3022 | 33095 |
| 6 | 23 | 27233 |
| 7 | 322 | 26533 |
| 8 | 4222 | 26420 |
| 9 | 4122 | 25772 |
| 10 | 822 | 25560 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1845 |
| 2 | AL-3 | 1237 |
| 3 | GOOGLE-CLOUD | 1015 |
| 4 | PAN-22 | 957 |
| 5 | ASEPL-SG | 775 |
| 6 | TCIMZD | 753 |
| 7 | BSNLNET | 649 |
| 8 | ALISOFT | 472 |
| 9 | HURRICANE-4 | 443 |
| 10 | CENSY | 396 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8569 |
| 2 | China | 5369 |
| 3 | India | 1265 |
| 4 | Iran | 915 |
| 5 | Singapore | 900 |
| 6 | Hong Kong | 497 |
| 7 | South Korea | 493 |
| 8 | United Kingdom | 414 |
| 9 | Russian Federation | 343 |
| 10 | European Union | 319 |
Sunday, April 27, 2025
Botnet Statistics [2025-04-26]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 21925
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20156
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 21925
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20156
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 4444 | 121305 |
| 2 | 2211 | 77038 |
| 3 | 2226 | 71457 |
| 4 | 2025 | 44793 |
| 5 | 22 | 41081 |
| 6 | 23 | 28515 |
| 7 | 5222 | 26910 |
| 8 | 5122 | 26248 |
| 9 | 522 | 26243 |
| 10 | 722 | 26039 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1833 |
| 2 | AL-3 | 1223 |
| 3 | GOOGLE-CLOUD | 1014 |
| 4 | PAN-22 | 957 |
| 5 | ASEPL-SG | 770 |
| 6 | BSNLNET | 690 |
| 7 | ALISOFT | 461 |
| 8 | HURRICANE-4 | 438 |
| 9 | CENSY | 398 |
| 10 | KORNET-KR | 320 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8238 |
| 2 | China | 5034 |
| 3 | India | 1321 |
| 4 | Singapore | 894 |
| 5 | South Korea | 510 |
| 6 | Hong Kong | 508 |
| 7 | European Union | 341 |
| 8 | Russian Federation | 322 |
| 9 | United Kingdom | 316 |
| 10 | Viet Nam | 304 |
Saturday, April 26, 2025
Botnet Statistics [2025-04-25]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 23467
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21640
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 23467
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21640
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3010 | 121654 |
| 2 | 2211 | 66679 |
| 3 | 2231 | 45752 |
| 4 | 2226 | 45220 |
| 5 | 10001 | 41094 |
| 6 | 22 | 38932 |
| 7 | 5900 | 23717 |
| 8 | 7122 | 21658 |
| 9 | 33222 | 20906 |
| 10 | 7005 | 18370 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1804 |
| 2 | AL-3 | 1214 |
| 3 | GOOGLE-CLOUD | 1016 |
| 4 | PAN-22 | 962 |
| 5 | ASEPL-SG | 794 |
| 6 | BSNLNET | 729 |
| 7 | MCCI | 514 |
| 8 | ALISOFT | 459 |
| 9 | HURRICANE-4 | 446 |
| 10 | CENSY | 399 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8155 |
| 2 | China | 5475 |
| 3 | India | 1450 |
| 4 | Singapore | 921 |
| 5 | Iran | 655 |
| 6 | South Korea | 564 |
| 7 | Hong Kong | 517 |
| 8 | European Union | 377 |
| 9 | United Kingdom | 361 |
| 10 | Indonesia | 348 |
Friday, April 25, 2025
Botnet Statistics [2025-04-24]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22192
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20423
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22192
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20423
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2231 | 55323 |
| 2 | 5900 | 47527 |
| 3 | 22 | 43563 |
| 4 | 2226 | 40763 |
| 5 | 2269 | 40526 |
| 6 | 2211 | 30703 |
| 7 | 2727 | 21994 |
| 8 | 7005 | 18545 |
| 9 | 23 | 16648 |
| 10 | 1433 | 16219 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1647 |
| 2 | AL-3 | 1148 |
| 3 | GOOGLE-CLOUD | 1020 |
| 4 | PAN-22 | 963 |
| 5 | ASEPL-SG | 733 |
| 6 | BSNLNET | 614 |
| 7 | ALISOFT | 476 |
| 8 | HURRICANE-4 | 447 |
| 9 | CENSY | 401 |
| 10 | KORNET-KR | 358 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8328 |
| 2 | China | 5015 |
| 3 | India | 1252 |
| 4 | Singapore | 853 |
| 5 | Hong Kong | 586 |
| 6 | South Korea | 572 |
| 7 | United Kingdom | 385 |
| 8 | Russian Federation | 365 |
| 9 | European Union | 362 |
| 10 | Indonesia | 352 |
Thursday, April 24, 2025
Botnet Statistics [2025-04-23]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20500
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18258
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20500
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18258
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2231 | 75033 |
| 2 | 2226 | 48704 |
| 3 | 22 | 37483 |
| 4 | 5900 | 26838 |
| 5 | 2211 | 26778 |
| 6 | 33322 | 25926 |
| 7 | 445 | 18279 |
| 8 | 6922 | 16053 |
| 9 | 23 | 15632 |
| 10 | 2289 | 12684 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1425 |
| 2 | AL-3 | 1123 |
| 3 | GOOGLE-CLOUD | 1020 |
| 4 | PAN-22 | 961 |
| 5 | ASEPL-SG | 735 |
| 6 | BSNLNET | 632 |
| 7 | ALISOFT | 444 |
| 8 | HURRICANE-4 | 436 |
| 9 | CENSY | 398 |
| 10 | KORNET-KR | 397 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7472 |
| 2 | China | 4672 |
| 3 | India | 1129 |
| 4 | Singapore | 843 |
| 5 | South Korea | 617 |
| 6 | Hong Kong | 503 |
| 7 | European Union | 308 |
| 8 | Indonesia | 296 |
| 9 | Viet Nam | 277 |
| 10 | United Kingdom | 272 |
Wednesday, April 23, 2025
Botnet Statistics [2025-04-22]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 22879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21096
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 22879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21096
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2231 | 39045 |
| 2 | 22 | 37020 |
| 3 | 5900 | 33068 |
| 4 | 2211 | 24844 |
| 5 | 6822 | 21019 |
| 6 | 23 | 15995 |
| 7 | 2226 | 13487 |
| 8 | 2230 | 11972 |
| 9 | 9988 | 11810 |
| 10 | 9977 | 11744 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1393 |
| 2 | AL-3 | 1198 |
| 3 | GOOGLE-CLOUD | 989 |
| 4 | PAN-22 | 948 |
| 5 | ASEPL-SG | 795 |
| 6 | BSNLNET | 676 |
| 7 | KORNET-KR | 592 |
| 8 | ALISOFT | 494 |
| 9 | HURRICANE-4 | 449 |
| 10 | CENSY | 397 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8363 |
| 2 | China | 5341 |
| 3 | India | 1312 |
| 4 | Singapore | 963 |
| 5 | South Korea | 822 |
| 6 | Hong Kong | 560 |
| 7 | Russian Federation | 360 |
| 8 | Indonesia | 351 |
| 9 | United Kingdom | 350 |
| 10 | European Union | 343 |
Tuesday, April 22, 2025
Botnet Statistics [2025-04-21]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 21503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19811
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 21503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19811
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 13022 | 53784 |
| 2 | 22 | 40297 |
| 3 | 7005 | 27802 |
| 4 | 6722 | 21932 |
| 5 | 9622 | 21656 |
| 6 | 5900 | 21361 |
| 7 | 23 | 19328 |
| 8 | 2211 | 19054 |
| 9 | 8022 | 17789 |
| 10 | 8822 | 16819 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1422 |
| 2 | AL-3 | 1174 |
| 3 | GOOGLE-CLOUD | 999 |
| 4 | PAN-22 | 948 |
| 5 | ASEPL-SG | 798 |
| 6 | BSNLNET | 693 |
| 7 | ALISOFT | 498 |
| 8 | HURRICANE-4 | 450 |
| 9 | CENSY | 397 |
| 10 | KORNET-KR | 381 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7717 |
| 2 | China | 5173 |
| 3 | India | 1303 |
| 4 | Singapore | 963 |
| 5 | South Korea | 575 |
| 6 | Hong Kong | 561 |
| 7 | Indonesia | 387 |
| 8 | Russian Federation | 379 |
| 9 | Viet Nam | 317 |
| 10 | European Union | 317 |
Monday, April 21, 2025
Botnet Statistics [2025-04-20]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 21986
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20305
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 21986
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20305
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 87637 |
| 2 | 22 | 44334 |
| 3 | 9522 | 41939 |
| 4 | 6622 | 29532 |
| 5 | 12022 | 29227 |
| 6 | 7005 | 27812 |
| 7 | 5900 | 25482 |
| 8 | 650 | 22753 |
| 9 | 1122 | 18546 |
| 10 | 23 | 15865 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1399 |
| 2 | AL-3 | 1196 |
| 3 | GOOGLE-CLOUD | 1023 |
| 4 | PAN-22 | 963 |
| 5 | ASEPL-SG | 814 |
| 6 | BSNLNET | 649 |
| 7 | ALISOFT | 456 |
| 8 | HURRICANE-4 | 445 |
| 9 | CENSY | 396 |
| 10 | VOLCANO-ENGINE | 331 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8257 |
| 2 | China | 5353 |
| 3 | India | 1195 |
| 4 | Singapore | 987 |
| 5 | Hong Kong | 562 |
| 6 | South Korea | 498 |
| 7 | Russian Federation | 327 |
| 8 | Indonesia | 327 |
| 9 | European Union | 327 |
| 10 | United Kingdom | 301 |
Sunday, April 20, 2025
Botnet Statistics [2025-04-19]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 22604
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20126
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 22604
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20126
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 105050 |
| 2 | 9522 | 103607 |
| 3 | 6622 | 86448 |
| 4 | 2025 | 67721 |
| 5 | 1122 | 57078 |
| 6 | 12022 | 40183 |
| 7 | 22 | 39665 |
| 8 | 7005 | 26640 |
| 9 | 5900 | 25275 |
| 10 | 23 | 17101 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1377 |
| 2 | AL-3 | 1204 |
| 3 | GOOGLE-CLOUD | 1022 |
| 4 | PAN-22 | 964 |
| 5 | ASEPL-SG | 802 |
| 6 | BSNLNET | 692 |
| 7 | ALISOFT | 466 |
| 8 | HURRICANE-4 | 438 |
| 9 | CENSY | 400 |
| 10 | CMNET | 380 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7835 |
| 2 | China | 5440 |
| 3 | India | 1363 |
| 4 | Singapore | 957 |
| 5 | South Korea | 586 |
| 6 | Hong Kong | 582 |
| 7 | European Union | 335 |
| 8 | Viet Nam | 318 |
| 9 | Russian Federation | 309 |
| 10 | Indonesia | 303 |
Saturday, April 19, 2025
Botnet Statistics [2025-04-18]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 22696
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20844
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 22696
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20844
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 101486 |
| 2 | 2224 | 73109 |
| 3 | 1122 | 57485 |
| 4 | 22 | 40029 |
| 5 | 6622 | 30638 |
| 6 | 7005 | 27544 |
| 7 | 5900 | 21926 |
| 8 | 2626 | 21908 |
| 9 | 23 | 16511 |
| 10 | 2028 | 16001 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1396 |
| 2 | AL-3 | 1257 |
| 3 | GOOGLE-CLOUD | 1017 |
| 4 | PAN-22 | 963 |
| 5 | ASEPL-SG | 858 |
| 6 | BSNLNET | 666 |
| 7 | HURRICANE-4 | 450 |
| 8 | ALISOFT | 441 |
| 9 | CENSY | 400 |
| 10 | CMNET | 330 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7955 |
| 2 | China | 5134 |
| 3 | India | 1378 |
| 4 | Singapore | 1017 |
| 5 | Hong Kong | 584 |
| 6 | South Korea | 544 |
| 7 | Russian Federation | 466 |
| 8 | Viet Nam | 357 |
| 9 | European Union | 343 |
| 10 | Indonesia | 341 |
Friday, April 18, 2025
Botnet Statistics [2025-04-17]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 23530
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21456
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 23530
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21456
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 100192 |
| 2 | 9422 | 95783 |
| 3 | 2224 | 72951 |
| 4 | 1122 | 57462 |
| 5 | 5900 | 48731 |
| 6 | 22 | 39582 |
| 7 | 23 | 20017 |
| 8 | 10000 | 13113 |
| 9 | 5432 | 11657 |
| 10 | 9999 | 10987 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1359 |
| 2 | AL-3 | 1206 |
| 3 | GOOGLE-CLOUD | 1027 |
| 4 | PAN-22 | 964 |
| 5 | ASEPL-SG | 822 |
| 6 | BSNLNET | 679 |
| 7 | ALISOFT | 482 |
| 8 | HURRICANE-4 | 436 |
| 9 | CENSY | 397 |
| 10 | VOLCANO-ENGINE | 332 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8151 |
| 2 | China | 5137 |
| 3 | India | 1358 |
| 4 | Singapore | 996 |
| 5 | Russian Federation | 584 |
| 6 | Hong Kong | 572 |
| 7 | South Korea | 479 |
| 8 | Indonesia | 388 |
| 9 | Viet Nam | 350 |
| 10 | European Union | 347 |
Thursday, April 17, 2025
Botnet Statistics [2025-04-16]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24057
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22001
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24057
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22001
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 99960 |
| 2 | 5900 | 80958 |
| 3 | 2224 | 74179 |
| 4 | 22 | 43531 |
| 5 | 9422 | 37238 |
| 6 | 23 | 23626 |
| 7 | 1022 | 22837 |
| 8 | 445 | 14340 |
| 9 | 10000 | 12819 |
| 10 | 9999 | 12145 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1345 |
| 2 | AL-3 | 1233 |
| 3 | GOOGLE-CLOUD | 1020 |
| 4 | PAN-22 | 963 |
| 5 | ASEPL-SG | 828 |
| 6 | BSNLNET | 647 |
| 7 | ALISOFT | 469 |
| 8 | HURRICANE-4 | 446 |
| 9 | CENSY | 397 |
| 10 | CMNET | 338 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8178 |
| 2 | China | 5371 |
| 3 | India | 1274 |
| 4 | Singapore | 1008 |
| 5 | Russian Federation | 624 |
| 6 | Hong Kong | 584 |
| 7 | South Korea | 470 |
| 8 | Indonesia | 415 |
| 9 | Viet Nam | 412 |
| 10 | Brazil | 362 |
Wednesday, April 16, 2025
Botnet Statistics [2025-04-15]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 24928
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22919
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 24928
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22919
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 95533 |
| 2 | 5900 | 82272 |
| 3 | 2224 | 75148 |
| 4 | 4422 | 64265 |
| 5 | 22 | 42157 |
| 6 | 9322 | 21522 |
| 7 | 23 | 19633 |
| 8 | 472 | 13537 |
| 9 | 10000 | 12973 |
| 10 | 2525 | 11572 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1340 |
| 2 | AL-3 | 1242 |
| 3 | GOOGLE-CLOUD | 999 |
| 4 | PAN-22 | 956 |
| 5 | ASEPL-SG | 818 |
| 6 | BSNLNET | 711 |
| 7 | ALISOFT | 506 |
| 8 | HURRICANE-4 | 450 |
| 9 | CENSY | 396 |
| 10 | CMNET | 323 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8527 |
| 2 | China | 5585 |
| 3 | India | 1417 |
| 4 | Singapore | 1043 |
| 5 | Hong Kong | 619 |
| 6 | Russian Federation | 561 |
| 7 | South Korea | 525 |
| 8 | Indonesia | 436 |
| 9 | United Kingdom | 399 |
| 10 | Viet Nam | 398 |
Tuesday, April 15, 2025
Botnet Statistics [2025-04-14]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 25254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23045
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 25254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23045
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2424 | 124355 |
| 2 | 2225 | 97729 |
| 3 | 4422 | 91247 |
| 4 | 5900 | 77101 |
| 5 | 2224 | 73882 |
| 6 | 223 | 66221 |
| 7 | 22 | 40862 |
| 8 | 6667 | 22326 |
| 9 | 23 | 19802 |
| 10 | 4222 | 14673 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1905 |
| 2 | AL-3 | 1250 |
| 3 | GOOGLE-CLOUD | 986 |
| 4 | PAN-22 | 954 |
| 5 | ASEPL-SG | 843 |
| 6 | BSNLNET | 664 |
| 7 | ALISOFT | 485 |
| 8 | HURRICANE-4 | 418 |
| 9 | CENSY | 399 |
| 10 | KORNET-KR | 351 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8784 |
| 2 | China | 5221 |
| 3 | India | 1381 |
| 4 | Singapore | 1069 |
| 5 | United Kingdom | 756 |
| 6 | Hong Kong | 593 |
| 7 | South Korea | 573 |
| 8 | Russian Federation | 560 |
| 9 | Indonesia | 441 |
| 10 | Taiwan | 392 |
Sunday, April 13, 2025
Botnet Statistics [2025-04-12]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 26560
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24164
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 26560
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24164
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 101394 |
| 2 | 223 | 76710 |
| 3 | 2224 | 71088 |
| 4 | 4422 | 64916 |
| 5 | 2020 | 63547 |
| 6 | 22 | 39648 |
| 7 | 5900 | 27139 |
| 8 | 8022 | 21444 |
| 9 | 9022 | 19768 |
| 10 | 23 | 19025 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1876 |
| 2 | AL-3 | 1241 |
| 3 | GOOGLE-CLOUD | 1015 |
| 4 | PAN-22 | 962 |
| 5 | ASEPL-SG | 829 |
| 6 | BSNLNET | 701 |
| 7 | CLOUDFLARENET | 632 |
| 8 | ALISOFT | 475 |
| 9 | CMNET | 460 |
| 10 | HURRICANE-4 | 448 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9412 |
| 2 | China | 5695 |
| 3 | India | 1545 |
| 4 | Singapore | 1063 |
| 5 | United Kingdom | 703 |
| 6 | South Korea | 670 |
| 7 | Hong Kong | 629 |
| 8 | Russian Federation | 501 |
| 9 | Indonesia | 454 |
| 10 | Mauritius | 426 |
Saturday, April 12, 2025
Botnet Statistics [2025-04-11]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26136
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23653
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26136
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23653
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2225 | 105681 |
| 2 | 223 | 77635 |
| 3 | 2224 | 75539 |
| 4 | 2244 | 52865 |
| 5 | 5900 | 47052 |
| 6 | 22 | 36430 |
| 7 | 5901 | 25735 |
| 8 | 8022 | 21259 |
| 9 | 9022 | 19250 |
| 10 | 23 | 16335 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1746 |
| 2 | AL-3 | 1253 |
| 3 | GOOGLE-CLOUD | 1015 |
| 4 | PAN-22 | 956 |
| 5 | ASEPL-SG | 841 |
| 6 | BSNLNET | 725 |
| 7 | ALISOFT | 555 |
| 8 | HURRICANE-4 | 442 |
| 9 | CMNET | 434 |
| 10 | KORNET-KR | 404 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8517 |
| 2 | China | 5951 |
| 3 | India | 1560 |
| 4 | Singapore | 1108 |
| 5 | Hong Kong | 665 |
| 6 | South Korea | 650 |
| 7 | United Kingdom | 637 |
| 8 | Russian Federation | 573 |
| 9 | Indonesia | 513 |
| 10 | Viet Nam | 378 |
Friday, April 11, 2025
Botnet Statistics [2025-04-10]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 25988
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23851
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 25988
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23851
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 223 | 77519 |
| 2 | 2224 | 75068 |
| 3 | 2244 | 53167 |
| 4 | 22 | 40252 |
| 5 | 2225 | 29600 |
| 6 | 8022 | 23382 |
| 7 | 9022 | 21392 |
| 8 | 5900 | 21005 |
| 9 | 23 | 16840 |
| 10 | 6000 | 16632 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1591 |
| 2 | AL-3 | 1205 |
| 3 | GOOGLE-CLOUD | 1016 |
| 4 | PAN-22 | 959 |
| 5 | ASEPL-SG | 851 |
| 6 | BSNLNET | 706 |
| 7 | ALISOFT | 525 |
| 8 | HURRICANE-4 | 451 |
| 9 | CMNET | 438 |
| 10 | KORNET-KR | 412 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8899 |
| 2 | China | 5747 |
| 3 | India | 1486 |
| 4 | Singapore | 1104 |
| 5 | South Korea | 679 |
| 6 | Hong Kong | 638 |
| 7 | United Kingdom | 604 |
| 8 | Russian Federation | 542 |
| 9 | Indonesia | 455 |
| 10 | European Union | 404 |
Thursday, April 10, 2025
Botnet Statistics [2025-04-09]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 26251
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24219
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 26251
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24219
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 223 | 78072 |
| 2 | 2224 | 73255 |
| 3 | 2244 | 53237 |
| 4 | 22 | 44923 |
| 5 | 5900 | 21392 |
| 6 | 3389 | 21136 |
| 7 | 23 | 17433 |
| 8 | 5901 | 16518 |
| 9 | 9922 | 15632 |
| 10 | 4522 | 14678 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1854 |
| 2 | AL-3 | 1207 |
| 3 | GOOGLE-CLOUD | 1009 |
| 4 | PAN-22 | 960 |
| 5 | ASEPL-SG | 799 |
| 6 | BSNLNET | 695 |
| 7 | ALISOFT | 570 |
| 8 | UK-MICROSOFT-20000324 | 557 |
| 9 | CMNET | 456 |
| 10 | HURRICANE-4 | 446 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8608 |
| 2 | China | 5773 |
| 3 | India | 1502 |
| 4 | Singapore | 1023 |
| 5 | United Kingdom | 891 |
| 6 | South Korea | 734 |
| 7 | Hong Kong | 606 |
| 8 | Russian Federation | 571 |
| 9 | Indonesia | 448 |
| 10 | Viet Nam | 404 |
Wednesday, April 9, 2025
Botnet Statistics [2025-04-08]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26337
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24349
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26337
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24349
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 223 | 80016 |
| 2 | 2224 | 71487 |
| 3 | 22 | 40813 |
| 4 | 2244 | 27110 |
| 5 | 5900 | 22428 |
| 6 | 3389 | 20135 |
| 7 | 445 | 18456 |
| 8 | 23 | 16444 |
| 9 | 10000 | 14831 |
| 10 | 9922 | 13930 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1551 |
| 2 | AL-3 | 1233 |
| 3 | GOOGLE-CLOUD | 986 |
| 4 | PAN-22 | 948 |
| 5 | ASEPL-SG | 877 |
| 6 | BSNLNET | 645 |
| 7 | ALISOFT | 584 |
| 8 | HURRICANE-4 | 451 |
| 9 | CMNET | 442 |
| 10 | KORNET-KR | 415 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8715 |
| 2 | China | 5927 |
| 3 | India | 1452 |
| 4 | Singapore | 1131 |
| 5 | South Korea | 732 |
| 6 | United Kingdom | 708 |
| 7 | Hong Kong | 600 |
| 8 | Russian Federation | 564 |
| 9 | Indonesia | 460 |
| 10 | Viet Nam | 387 |
Subscribe to:
Posts (Atom)
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 223 | 83412 |
| 2 | 5522 | 79151 |
| 3 | 2224 | 72077 |
| 4 | 22 | 50067 |
| 5 | 5900 | 44881 |
| 6 | 5901 | 20800 |
| 7 | 2202 | 19690 |
| 8 | 3389 | 18654 |
| 9 | 9922 | 17197 |
| 10 | 23 | 15563 |