Custom Search

Friday, December 12, 2025

Botnet Statistics [2025-12-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 23484
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22094
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1410
2AL-31072
3GOOGLE-CLOUD1013
4PAN-22949
5BYTEPLUS-SG881
6ASEPL-SG665
7CMNET572
8VOLCANO-ENGINE564
9ALISOFT500
10CENSY378


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8353
2China5808
3Singapore1788
4Indonesia449
5Hong Kong440
6South Korea423
7India420
8United Kingdom395
9Germany370
10Brazil345

Thursday, December 11, 2025

Botnet Statistics [2025-12-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 22811
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21384
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
14242123629
25900107544
32265522
4198730989
5333325457
6808824428
7590119744
8590219571
9345616793
10222014620
RankNetwork# of suspected botnet IPs
1MSFT1429
2AL-31092
3GOOGLE-CLOUD1007
4PAN-22946
5BYTEPLUS-SG881
6ASEPL-SG678
7CMNET583
8VOLCANO-ENGINE556
9ALISOFT501
10CENSY373


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7499
2China5827
3Singapore1728
4India460
5Hong Kong456
6Indonesia440
7Germany389
8South Korea386
9United Kingdom350
10Brazil341

Wednesday, December 10, 2025

Botnet Statistics [2025-12-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-09 00:00-23:59 UTC
total number of suspected botnet IPs: 25095
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23595
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
14242123921
25900108494
32244740
4225533027
5556627241
6808822648
7333321715
8590120468
9590219473
10526516248
RankNetwork# of suspected botnet IPs
1MSFT1481
2AL-31136
3GOOGLE-CLOUD1013
4PAN-22949
5BYTEPLUS-SG881
6ASEPL-SG713
7CMNET592
8VOLCANO-ENGINE571
9ALISOFT526
10CENSY378


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8809
2China6191
3Singapore1834
4India547
5Indonesia478
6Hong Kong457
7South Korea399
8Brazil369
9Russian Federation355
10United Kingdom343

Tuesday, December 9, 2025

Botnet Statistics [2025-12-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-08 00:00-23:59 UTC
total number of suspected botnet IPs: 24093
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22570
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900100481
2556694805
3424278260
42258933
5198858718
6232344602
7225534106
8333331594
9590125297
10812221906
RankNetwork# of suspected botnet IPs
1MSFT1487
2AL-31110
3GOOGLE-CLOUD1009
4PAN-22948
5BYTEPLUS-SG870
6ASEPL-SG698
7CMNET636
8VOLCANO-ENGINE577
9ALISOFT487
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8056
2China5790
3Singapore1781
4India534
5Indonesia514
6Hong Kong471
7South Korea410
8Russian Federation390
9Netherlands378
10Brazil378

Monday, December 8, 2025

Botnet Statistics [2025-12-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-07 00:00-23:59 UTC
total number of suspected botnet IPs: 21957
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20632
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
12323112114
25900110486
3556694602
4812273956
5198872858
62246202
7225535664
8600130411
9888028015
10333327808
RankNetwork# of suspected botnet IPs
1MSFT1464
2AL-31054
3GOOGLE-CLOUD1015
4PAN-22948
5BYTEPLUS-SG741
6ASEPL-SG667
7CMNET591
8VOLCANO-ENGINE532
9ALISOFT428
10CENSY377


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8336
2China4620
3Singapore1564
4Hong Kong468
5United Kingdom392
6India379
7South Korea377
8Netherlands366
9Brazil355
10Russian Federation317

Sunday, December 7, 2025

Botnet Statistics [2025-12-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-06 00:00-23:59 UTC
total number of suspected botnet IPs: 21506
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20129
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900108720
22323100651
3812275434
42260956
5800133615
6556628716
7525227995
8590122890
9333321379
1022220664
RankNetwork# of suspected botnet IPs
1MSFT1455
2AL-31083
3GOOGLE-CLOUD1012
4PAN-22949
5BYTEPLUS-SG742
6ASEPL-SG676
7CMNET565
8VOLCANO-ENGINE527
9ALISOFT436
10CENSY381


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7934
2China4384
3Singapore1548
4India461
5Hong Kong457
6United Kingdom399
7South Korea388
8Brazil343
9Netherlands338
10European Union308

Saturday, December 6, 2025

Botnet Statistics [2025-12-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 21280
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19152
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900105727
2888886301
3812277234
4525254582
52244874
66624135
722223919
8590122945
9333322190
10590219128
RankNetwork# of suspected botnet IPs
1MSFT1466
2AL-31069
3GOOGLE-CLOUD1011
4PAN-22949
5BYTEPLUS-SG743
6ASEPL-SG680
7CMNET583
8VOLCANO-ENGINE543
9ALISOFT428
10CENSY383


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7726
2China4337
3Singapore1572
4Hong Kong456
5South Korea394
6India381
7United Kingdom367
8European Union314
9Indonesia301
10Taiwan300

Friday, December 5, 2025

Botnet Statistics [2025-12-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-04 00:00-23:59 UTC
total number of suspected botnet IPs: 22901
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21502
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900117543
2888897395
3323386164
4198982305
5887761795
6778860328
7525254952
82254143
9812241774
10424239040
RankNetwork# of suspected botnet IPs
1MSFT1481
2AL-31080
3GOOGLE-CLOUD1021
4PAN-22949
5BYTEPLUS-SG753
6ASEPL-SG686
7CLOUDFLARENET639
8VOLCANO-ENGINE552
9CMNET529
10ALISOFT432


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9403
2China4428
3Singapore1636
4India419
5United Kingdom405
6South Korea389
7Indonesia361
8Hong Kong346
9Russian Federation338
10Netherlands331

Thursday, December 4, 2025

Botnet Statistics [2025-12-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 22002
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20653
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
13233132067
25900114868
3198971963
4887762677
52261698
6778857876
7525255676
81400040366
9842239885
10232333697
RankNetwork# of suspected botnet IPs
1MSFT1494
2AL-31093
3GOOGLE-CLOUD1005
4PAN-22947
5BYTEPLUS-SG744
6ASEPL-SG690
7CMNET554
8VOLCANO-ENGINE547
9ALISOFT442
10CENSY377


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8269
2China4455
3Singapore1604
4Hong Kong479
5India429
6Indonesia416
7South Korea415
8United Kingdom394
9European Union352
10Russian Federation329

Wednesday, December 3, 2025

Botnet Statistics [2025-12-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 22362
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20924
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900117720
2887765963
3778864269
42251063
5525243218
6842239323
75522236944
8227725453
9323324870
1022224827
RankNetwork# of suspected botnet IPs
1MSFT1512
2AL-31153
3GOOGLE-CLOUD1010
4PAN-22949
5BYTEPLUS-SG742
6ASEPL-SG690
7CLOUDFLARENET645
8VOLCANO-ENGINE543
9ALISOFT428
10CENSY381


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9185
2China3877
3Singapore1690
4Hong Kong443
5India422
6United Kingdom410
7South Korea368
8Indonesia342
9Netherlands335
10Russian Federation328

Botnet Statistics [2025-12-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2025.
detection period: 2025-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21280
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19835
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900147965
2887764290
3778859434
45522242725
5333340017
62239632
7842239307
82211237933
95548830565
10200226164
RankNetwork# of suspected botnet IPs
1MSFT1484
2AL-31110
3GOOGLE-CLOUD1002
4PAN-22941
5BYTEPLUS-SG750
6ASEPL-SG693
7CLOUDFLARENET645
8VOLCANO-ENGINE554
9ALISOFT422
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8427
2China3812
3Singapore1615
4Hong Kong441
5India421
6United Kingdom382
7South Korea377
8Germany339
9Netherlands330
10Indonesia323

Tuesday, December 2, 2025

Daily Zombie Lists for December 2025(2025年12月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for December 2025 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2025年12月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

12/01: download link 下載網址; MD5sum: a62aa3bc64f4ca2fda43c2b23b86d6a5
12/02: download link 下載網址; MD5sum: f507907e2059fc68a42e0b04defbf1bb
12/03: download link 下載網址; MD5sum: d3b04a11f4e6475d6d7894d165fb109d
12/04: download link 下載網址; MD5sum: 75165b2a399b40bc734e19febbf62d3f
12/05: download link 下載網址; MD5sum: 92ad12bd974f793ca44febdbb5e34d52
12/06: download link 下載網址; MD5sum: 89f5090f4a2ee8ba18080282e25986be
12/07: download link 下載網址; MD5sum: bc57a02d6ead4904af57bc05989945e5
12/08: download link 下載網址; MD5sum: 93b78ee982bfa30d024e222906ef4640
12/09: download link 下載網址; MD5sum: 8109f1d49488f5ad56ebcc61173f14d4
12/10: download link 下載網址; MD5sum: 527f5ba95f852d5393507965d3d57b18
12/11: download link 下載網址; MD5sum: 3a77b104189cbb008bc00c34bd4b1a69

Monday, December 1, 2025

Botnet Statistics [2025-11-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 21261
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19954
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590099337
2555566667
3333539247
4626236855
55522236745
6842232254
72228436
8200228261
92319718
10777718788
RankNetwork# of suspected botnet IPs
1MSFT1506
2AL-31109
3GOOGLE-CLOUD1005
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG698
7VOLCANO-ENGINE560
8ALISOFT425
9CENSY381
10LINODE-US312


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8657
2China3851
3Singapore1723
4Hong Kong458
5United Kingdom396
6India371
7South Korea349
8Netherlands327
9Brazil297
10Germany296

Sunday, November 30, 2025

Botnet Statistics [2025-11-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21538
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20163
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900116451
26262112280
3555591305
42256366
5333540168
65522238131
7558826862
8200224947
9590123184
10777720818
RankNetwork# of suspected botnet IPs
1MSFT1511
2AL-31102
3GOOGLE-CLOUD1006
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG697
7VOLCANO-ENGINE554
8ALISOFT414
9CENSY382
10CMNET329


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7933
2China4072
3Singapore1608
4India545
5Hong Kong510
6South Korea441
7Russian Federation388
8United Kingdom375
9Brazil347
10Indonesia327

Saturday, November 29, 2025

Botnet Statistics [2025-11-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 22634
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21207
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900110487
25555108141
3832290717
4626289494
52243964
6777731824
7662225925
8590120892
91333320171
10558819412
RankNetwork# of suspected botnet IPs
1MSFT1499
2AL-31110
3GOOGLE-CLOUD1008
4PAN-22949
5BYTEPLUS-SG751
6ASEPL-SG741
7VOLCANO-ENGINE568
8ALISOFT434
9CMNET388
10CENSY371


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8488
2China4242
3Singapore1743
4India505
5Hong Kong498
6South Korea469
7Brazil430
8United Kingdom386
9Indonesia378
10Russian Federation370

Friday, November 28, 2025

Botnet Statistics [2025-11-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23556
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22062
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15555130263
28322105648
35900100617
41222258553
52241506
6444435930
7777732432
8662226107
9590119928
105552218139
RankNetwork# of suspected botnet IPs
1MSFT1527
2AL-31165
3GOOGLE-CLOUD1006
4PAN-22949
5BYTEPLUS-SG751
6ASEPL-SG741
7VOLCANO-ENGINE553
8ALISOFT458
9CENSY381
10CMNET366


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9084
2China4805
3Singapore1772
4Hong Kong497
5South Korea461
6India420
7United Kingdom402
8Brazil372
9Indonesia365
10Russian Federation357

Thursday, November 27, 2025

Botnet Statistics [2025-11-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 23503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21979
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
18322107619
25555101793
3590096680
41222265738
5888845318
62238483
7662230462
8323226983
95552222202
104545419281
RankNetwork# of suspected botnet IPs
1MSFT1523
2AL-31132
3GOOGLE-CLOUD1010
4PAN-22946
5BYTEPLUS-SG883
6ASEPL-SG693
7VOLCANO-ENGINE538
8ALISOFT424
9CENSY375
10CMNET352


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8446
2China5193
3Singapore1862
4India484
5Hong Kong471
6South Korea447
7Indonesia427
8United Kingdom397
9Brazil377
10Russian Federation342

Wednesday, November 26, 2025

Botnet Statistics [2025-11-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 25833
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24273
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15555120694
26622107702
3323292448
4590082350
51222261785
6888853493
71100036257
82233591
9832230467
10702126522
RankNetwork# of suspected botnet IPs
1MSFT1526
2AL-31115
3GOOGLE-CLOUD1012
4PAN-22949
5BYTEPLUS-SG888
6ASEPL-SG692
7VOLCANO-ENGINE538
8CMNET428
9ALISOFT421
10CENSY383


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8950
2China5494
3Singapore1868
4India584
5South Korea567
6Hong Kong520
7Brazil497
8Indonesia460
9Russian Federation440
10United Kingdom417

Tuesday, November 25, 2025

Botnet Statistics [2025-11-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 25237
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23493
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16622113756
2590085095
3323266514
4888852710
5555551607
61100045578
72228030
8143325118
95552222239
102802220944
RankNetwork# of suspected botnet IPs
1MSFT1515
2AL-31114
3GOOGLE-CLOUD996
4PAN-22941
5BYTEPLUS-SG889
6ASEPL-SG707
7VOLCANO-ENGINE556
8CMNET438
9ALISOFT421
10CENSY382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8187
2China5719
3Singapore1863
4India603
5South Korea498
6Hong Kong477
7Brazil463
8Russian Federation446
9United Kingdom403
10Indonesia393

Monday, November 24, 2025

Botnet Statistics [2025-11-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24330
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22704
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590085836
22245345
3888827652
45552222223
5590121122
6812220960
72802220892
82314713
9323213450
10892212040
RankNetwork# of suspected botnet IPs
1MSFT1526
2AL-31047
3GOOGLE-CLOUD1014
4PAN-22949
5BYTEPLUS-SG889
6ASEPL-SG704
7VOLCANO-ENGINE551
8CMNET432
9ALISOFT396
10CENSY375


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8298
2China5519
3Singapore1901
4Brazil582
5India546
6South Korea486
7Hong Kong486
8Russian Federation431
9United Kingdom418
10Netherlands337

Sunday, November 23, 2025

Botnet Statistics [2025-11-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-22 00:00-23:59 UTC
total number of suspected botnet IPs: 24194
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22549
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1722287361
2590084468
31562068907
4666663136
5828255833
62245185
7812240977
83002326109
9888825039
102802220874
RankNetwork# of suspected botnet IPs
1MSFT1493
2AL-31068
3GOOGLE-CLOUD1008
4PAN-22948
5BYTEPLUS-SG890
6ASEPL-SG693
7VOLCANO-ENGINE545
8CMNET416
9ALISOFT409
10CENSY379


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8194
2China5370
3Singapore1872
4India560
5Brazil523
6Hong Kong513
7South Korea495
8Russian Federation456
9Indonesia385
10United Kingdom384

Saturday, November 22, 2025

Botnet Statistics [2025-11-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-21 00:00-23:59 UTC
total number of suspected botnet IPs: 24806
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23066
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1666699128
2722296403
3600366702
42266542
5590065058
6828258385
7812240131
8199339057
9772237379
10888832448
RankNetwork# of suspected botnet IPs
1MSFT1419
2AL-31092
3GOOGLE-CLOUD1011
4PAN-22952
5BYTEPLUS-SG888
6ASEPL-SG739
7VOLCANO-ENGINE550
8CMNET480
9ALISOFT399
10CENSY382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7923
2China5931
3Singapore1902
4India649
5Brazil638
6South Korea489
7Hong Kong485
8Russian Federation462
9Indonesia427
10United Kingdom343

Friday, November 21, 2025

Botnet Statistics [2025-11-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-20 00:00-23:59 UTC
total number of suspected botnet IPs: 25936
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24152
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17722122908
27222108272
36666104101
4590082528
52252129
6812243904
7828242273
8199339105
9888835442
103002331634
RankNetwork# of suspected botnet IPs
1MSFT1216
2AL-31090
3GOOGLE-CLOUD1022
4PAN-22951
5BYTEPLUS-SG828
6ASEPL-SG724
7VOLCANO-ENGINE532
8CMNET483
9ALISOFT398
10COGENT-A382


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8739
2China6280
3Singapore1759
4India680
5Brazil552
6Indonesia527
7Hong Kong497
8Russian Federation474
9South Korea471
10Germany358

Thursday, November 20, 2025

Botnet Statistics [2025-11-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-19 00:00-23:59 UTC
total number of suspected botnet IPs: 25162
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23235
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17722124401
26666104982
3590086053
4202652272
5412248611
6199339065
72238798
8200235025
9622229289
10590121299
RankNetwork# of suspected botnet IPs
1MSFT1556
2AL-31073
3GOOGLE-CLOUD1006
4PAN-22951
5BYTEPLUS-SG859
6ASEPL-SG724
7VOLCANO-ENGINE571
8CMNET476
9ALISOFT395
10CENSY384


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8424
2China5348
3Singapore1887
4India660
5Brazil569
6Indonesia544
7Hong Kong522
8South Korea483
9Russian Federation466
10United Kingdom363

Wednesday, November 19, 2025

Botnet Statistics [2025-11-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-18 00:00-23:59 UTC
total number of suspected botnet IPs: 22187
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20760
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16666108044
2590078362
3772270296
42240637
5590121189
6202617488
7143316260
8287415740
9600213769
10412213712
RankNetwork# of suspected botnet IPs
1MSFT1522
2AL-31023
3GOOGLE-CLOUD1011
4PAN-22951
5ASEPL-SG700
6VOLCANO-ENGINE524
7CMNET475
8ALISOFT405
9CENSY382
10KORNET-KR292


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8265
2China5220
3Singapore1184
4India542
5Hong Kong491
6South Korea479
7Russian Federation415
8United Kingdom340
9Indonesia323
10European Union312

Tuesday, November 18, 2025

Botnet Statistics [2025-11-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21834
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20361
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16666106980
2590078676
32248037
4141138682
5442230463
6590120955
7221115324
8590313483
9202213182
10590513073
RankNetwork# of suspected botnet IPs
1MSFT1548
2AL-31061
3GOOGLE-CLOUD1003
4PAN-22952
5ASEPL-SG714
6VOLCANO-ENGINE530
7CMNET508
8ALISOFT416
9CENSY376
10BYTEPLUS-SG286


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7803
2China4945
3Singapore1278
4India592
5South Korea479
6Hong Kong477
7Russian Federation428
8Indonesia377
9Brazil338
10United Kingdom328

Monday, November 17, 2025

Botnet Statistics [2025-11-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-16 00:00-23:59 UTC
total number of suspected botnet IPs: 21254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19890
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900172598
26666107717
3141150375
42243801
5442242867
6600042257
7703737431
8522226583
9590120317
101003819801
RankNetwork# of suspected botnet IPs
1MSFT1539
2AL-31059
3GOOGLE-CLOUD1012
4PAN-22959
5ASEPL-SG706
6VOLCANO-ENGINE519
7CMNET460
8ALISOFT419
9CENSY372
10KORNET-KR340


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8304
2China4445
3Singapore1221
4South Korea534
5India515
6Hong Kong467
7Russian Federation403
8United Kingdom336
9European Union294
10Indonesia277

Sunday, November 16, 2025

Botnet Statistics [2025-11-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-15 00:00-23:59 UTC
total number of suspected botnet IPs: 23058
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21503
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900250233
2670091826
3412073075
42030049134
51592048849
62242808
7442242531
8600041474
9141133050
10666627474
RankNetwork# of suspected botnet IPs
1MSFT1575
2AL-31087
3GOOGLE-CLOUD1013
4PAN-22958
5ASEPL-SG717
6CLOUDFLARENET655
7VOLCANO-ENGINE530
8CMNET501
9KORNET-KR450
10ALISOFT439


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8806
2China4753
3Singapore1285
4South Korea678
5India585
6Hong Kong489
7Russian Federation409
8United Kingdom349
9Indonesia336
10Germany318

Saturday, November 15, 2025

Botnet Statistics [2025-11-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-14 00:00-23:59 UTC
total number of suspected botnet IPs: 22705
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21079
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900294300
2422477163
3141150179
42240566
5830028461
62328048
7472227703
8390024557
91590021867
102162021322
RankNetwork# of suspected botnet IPs
1MSFT1548
2AL-31068
3GOOGLE-CLOUD1013
4PAN-22959
5BYTEPLUS-SG876
6ASEPL-SG709
7VOLCANO-ENGINE522
8CMNET503
9ALISOFT431
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8039
2China4689
3Singapore1769
4India619
5Hong Kong505
6Russian Federation478
7South Korea473
8Indonesia374
9United Kingdom357
10Brazil330
RankTCP port number# of connection attempts received
15900301150
24224116308
3141153485
42232706
5199526938
6543215849
7590114621
8143312471
92310465
10222310314