Botnet Statistics [2025-03-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 23493
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21857
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1502
2	GOOGLE-CLOUD	1022
3	PAN-22	967
4	HINET-NET	959
5	AL-3	955
6	ASEPL-SG	609
7	ALISOFT	512
8	BSNLNET	509
9	HURRICANE-4	450
10	CENSY	395

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8004
2	China	5399
3	Taiwan	1093
4	India	1052
5	Singapore	793
6	United Kingdom	615
7	South Korea	572
8	Hong Kong	530
9	Russian Federation	411
10	Indonesia	366

20250331 Botnet Detection Live Streaming 30+ zombies detected)

Sunday, March 30, 2025

Botnet Statistics [2025-03-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 22103
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20447
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	68610
2	5900	31116
3	23	24489
4	2202	19737
5	10000	16662
6	2323	16218
7	7713	14986
8	7722	12094
9	8182	12072
10	8555	12048

Rank	Network	# of suspected botnet IPs
1	MSFT	1507
2	GOOGLE-CLOUD	1028
3	AL-3	1028
4	PAN-22	969
5	ASEPL-SG	687
6	BSNLNET	562
7	ALISOFT	487
8	HURRICANE-4	450
9	CENSY	398
10	UK-MICROSOFT-20000324	369

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7597
2	China	5274
3	India	1284
4	Singapore	828
5	United Kingdom	590
6	South Korea	542
7	Hong Kong	475
8	Russian Federation	401
9	Taiwan	388
10	Indonesia	388

20250330 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, March 29, 2025

Botnet Statistics [2025-03-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 23119
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21297
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	44338
2	1020	35506
3	3684	29880
4	5900	23127
5	23	22040
6	9690	21556
7	2202	20999
8	10000	16433
9	2323	16133
10	38045	15087

Rank	Network	# of suspected botnet IPs
1	MSFT	1515
2	GOOGLE-CLOUD	1027
3	PAN-22	967
4	AL-3	938
5	ASEPL-SG	631
6	BSNLNET	550
7	ALISOFT	502
8	HURRICANE-4	453
9	VOLCANO-ENGINE	408
10	CENSY	392

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7766
2	China	5657
3	India	1210
4	Singapore	801
5	United Kingdom	601
6	Hong Kong	472
7	Russian Federation	456
8	South Korea	433
9	Indonesia	423
10	Brazil	365

20250329 Botnet Detection Live Streaming 40+ zombies detected)

Friday, March 28, 2025

Botnet Statistics [2025-03-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 22797
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21050
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	79026
2	5900	46353
3	22	43088
4	1020	35508
5	23	25019
6	3646	24303
7	2202	20115
8	5022	20078
9	445	15448
10	7722	14861

Rank	Network	# of suspected botnet IPs
1	MSFT	1521
2	GOOGLE-CLOUD	1045
3	AL-3	1014
4	PAN-22	967
5	ASEPL-SG	683
6	BSNLNET	564
7	ALISOFT	476
8	HURRICANE-4	456
9	CENSY	400
10	UK-MICROSOFT-20000324	372

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8285
2	China	5288
3	India	1213
4	Singapore	832
5	United Kingdom	585
6	Hong Kong	445
7	Russian Federation	416
8	South Korea	409
9	Taiwan	379
10	Indonesia	367

20250328 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, March 27, 2025

Botnet Statistics [2025-03-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22499
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20811
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118216
2	22	43178
3	1020	37587
4	5900	31796
5	3643	25400
6	23	24814
7	2202	20111
8	2024	18713
9	445	15912
10	3644	15366

Rank	Network	# of suspected botnet IPs
1	MSFT	1633
2	GOOGLE-CLOUD	1020
3	PAN-22	967
4	AL-3	939
5	ASEPL-SG	572
6	BSNLNET	570
7	HINET-NET	541
8	ALISOFT	457
9	CENSY	397
10	HURRICANE-4	388

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7951
2	China	5133
3	India	1138
4	Singapore	717
5	United Kingdom	657
6	Taiwan	643
7	Hong Kong	485
8	South Korea	415
9	Russian Federation	405
10	Indonesia	348

20250327 Botnet Detection Live Streaming 40+ zombies detected)

Wednesday, March 26, 2025

Botnet Statistics [2025-03-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 24585
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22839
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118203
2	4422	56395
3	2024	54366
4	22	40972
5	23	39137
6	8888	36850
7	5900	22583
8	2202	20151
9	8181	16077
10	10000	15403

Rank	Network	# of suspected botnet IPs
1	MSFT	1558
2	AL-3	1038
3	GOOGLE-CLOUD	1001
4	PAN-22	954
5	HINET-NET	775
6	ASEPL-SG	693
7	BSNLNET	565
8	ALISOFT	479
9	CMNET	456
10	CENSY	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8186
2	China	5652
3	India	1247
4	Taiwan	939
5	Singapore	869
6	South Korea	587
7	United Kingdom	537
8	Russian Federation	507
9	Hong Kong	486
10	European Union	358

20250326 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, March 25, 2025

Botnet Statistics [2025-03-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 24559
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22779
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118267
2	9122	70064
3	8888	64918
4	4422	64663
5	2024	53647
6	22	38828
7	666	36532
8	5900	36380
9	23	33081
10	7691	27760

Rank	Network	# of suspected botnet IPs
1	MSFT	1561
2	AL-3	1004
3	GOOGLE-CLOUD	992
4	PAN-22	949
5	HINET-NET	753
6	ASEPL-SG	594
7	CMNET	550
8	ALISOFT	543
9	BSNLNET	531
10	CENSY	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7663
2	China	5736
3	India	1279
4	Taiwan	965
5	Singapore	780
6	South Korea	667
7	Russian Federation	546
8	United Kingdom	540
9	Hong Kong	519
10	Indonesia	393

20250325 Botnet Detection Live Streaming 30+ zombies detected)

Monday, March 24, 2025

Botnet Statistics [2025-03-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24058
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22357
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118161
2	666	67782
3	9122	64529
4	8888	54085
5	2024	53270
6	4422	52087
7	22	46877
8	9670	40954
9	5900	27280
10	7722	26449

Rank	Network	# of suspected botnet IPs
1	MSFT	1581
2	AL-3	1097
3	GOOGLE-CLOUD	1034
4	PAN-22	966
5	HINET-NET	797
6	ASEPL-SG	685
7	CMNET	492
8	ALISOFT	492
9	BSNLNET	400
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8340
2	China	5321
3	India	1052
4	Taiwan	980
5	Singapore	876
6	South Korea	663
7	United Kingdom	580
8	Russian Federation	523
9	Hong Kong	505
10	Brazil	355

20250324 Botnet Detection Live Streaming 20+ zombies detected)

Sunday, March 23, 2025

Botnet Statistics [2025-03-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 25326
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23524
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118122
2	22	44848
3	9647	33732
4	2201	27798
5	7722	25942
6	8182	25910
7	8555	25875
8	3052	20260
9	23	18277
10	5900	15483

Rank	Network	# of suspected botnet IPs
1	MSFT	1554
2	GOOGLE-CLOUD	1040
3	PAN-22	967
4	AL-3	966
5	HINET-NET	858
6	ASEPL-SG	551
7	CMNET	475
8	ALISOFT	436
9	KORNET-KR	411
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8142
2	China	5394
3	India	1162
4	Taiwan	1034
5	South Korea	774
6	Singapore	763
7	Hong Kong	651
8	United Kingdom	564
9	Russian Federation	510
10	Brazil	357

20250323 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, March 22, 2025

Botnet Statistics [2025-03-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 25326
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23524
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	116400
2	22	48703
3	2201	45419
4	10000	32062
5	7722	25495
6	8182	25480
7	8555	25457
8	4455	25265
9	5900	23315
10	3572	22797

Rank	Network	# of suspected botnet IPs
1	MSFT	1563
2	AL-3	1061
3	GOOGLE-CLOUD	1036
4	PAN-22	967
5	HINET-NET	937
6	ASEPL-SG	718
7	CMNET	504
8	KORNET-KR	495
9	ALISOFT	475
10	BSNLNET	465

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8011
2	China	5382
3	India	1310
4	Taiwan	1146
5	Singapore	941
6	South Korea	869
7	Hong Kong	637
8	Russian Federation	586
9	United Kingdom	556
10	Brazil	419

20250322 Botnet Detection Live Streaming 20+ zombies detected)

Friday, March 21, 2025

Botnet Statistics [2025-03-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 26037
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24212
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	118476
2	22	41937
3	7722	25975
4	8182	25925
5	8555	25868
6	1559	20369
7	572	17609
8	1003	16862
9	1059	15920
10	98	15612

Rank	Network	# of suspected botnet IPs
1	MSFT	1614
2	GOOGLE-CLOUD	1047
3	PAN-22	967
4	AL-3	925
5	HINET-NET	840
6	BSNLNET	636
7	KORNET-KR	616
8	ASEPL-SG	555
9	CMNET	551
10	ALISOFT	438

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8180
2	China	5406
3	India	1562
4	Taiwan	1054
5	South Korea	983
6	Singapore	781
7	Hong Kong	636
8	United Kingdom	628
9	Russian Federation	626
10	Indonesia	444

20250321 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, March 20, 2025

Botnet Staitistics [2025-03-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 25638
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23743
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	220	96505
2	22	44440
3	5901	32922
4	1003	18168
5	1559	16199
6	541	15919
7	767	15914
8	6560	15874
9	9885	15672
10	5900	15363

Rank	Network	# of suspected botnet IPs
1	MSFT	1570
2	AL-3	1106
3	GOOGLE-CLOUD	1032
4	PAN-22	966
5	ASEPL-SG	725
6	BSNLNET	608
7	CMNET	562
8	ALISOFT	519
9	CENSY	399
10	HURRICANE-4	385

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8156
2	China	5713
3	India	1517
4	Singapore	953
5	South Korea	768
6	Hong Kong	640
7	Russian Federation	600
8	United Kingdom	512
9	Taiwan	485
10	Indonesia	453

20250320 Botnet Detection Live Streaming 10+ zombies detected)

Wednesday, March 19, 2025

Botnet Statistics [2025-03-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 25999
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24056
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	42827
2	9609	37515
3	22999	20176
4	1003	19273
5	5900	18558
6	767	18022
7	7604	17496
8	572	16624
9	2022	16325
10	2201	15930

Rank	Network	# of suspected botnet IPs
1	MSFT	1564
2	GOOGLE-CLOUD	1013
3	PAN-22	959
4	AL-3	956
5	HINET-NET	592
6	ASEPL-SG	592
7	BSNLNET	511
8	CMNET	504
9	ALISOFT	439
10	CENSY	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8509
2	China	5679
3	India	1305
4	Singapore	845
5	South Korea	733
6	Taiwan	718
7	Hong Kong	618
8	Russian Federation	609
9	United Kingdom	525
10	Indonesia	438

20250319 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, March 18, 2025

Botnet Statistics [2025-03-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 25046
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22588
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	125784
2	2222	80490
3	1011	74178
4	22	40804
5	22999	20201
6	7928	19164
7	541	16944
8	225	16659
9	9885	15766
10	1382	15753

Rank	Network	# of suspected botnet IPs
1	MSFT	1505
2	AL-3	1367
3	GOOGLE-CLOUD	1005
4	PAN-22	959
5	ASEPL-SG	954
6	HINET-NET	840
7	BSNLNET	638
8	ALISOFT	510
9	CENSY	400
10	HURRICANE-4	388

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7954
2	China	5217
3	India	1332
4	Singapore	1194
5	Taiwan	966
6	United Kingdom	633
7	South Korea	546
8	Russian Federation	457
9	Hong Kong	424
10	Indonesia	419

20250318 Botnet Detection Live Streaming 20+ zombies detected)

Monday, March 17, 2025

Botnet Statistics [2025-03-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 22470
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20970
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2222	100168
2	1011	84196
3	22	39736
4	5900	35828
5	767	18724
6	9885	17833
7	1003	16209
8	1181	15920
9	1539	15857
10	23	15685

Rank	Network	# of suspected botnet IPs
1	MSFT	1369
2	GOOGLE-CLOUD	1032
3	AL-3	1008
4	HINET-NET	1003
5	PAN-22	963
6	ASEPL-SG	670
7	BSNLNET	562
8	ALISOFT	452
9	CENSY	396
10	HURRICANE-4	387

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7861
2	China	4864
3	Taiwan	1130
4	India	1047
5	Singapore	878
6	United Kingdom	637
7	Hong Kong	564
8	South Korea	458
9	Russian Federation	373
10	European Union	312

20250317 Botnet Detection Live Streaming 30+ zombies detected)

Sunday, March 16, 2025

Botnet Statistics [2025-03-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 22332
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20824
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2222	102363
2	22	40455
3	7928	28530
4	639	28388
5	944	27944
6	98	27829
7	612	27310
8	8771	25916
9	1069	24314
10	7009	23032

Rank	Network	# of suspected botnet IPs
1	MSFT	1377
2	AL-3	1045
3	GOOGLE-CLOUD	1028
4	HINET-NET	969
5	PAN-22	965
6	ASEPL-SG	730
7	BSNLNET	551
8	ALISOFT	462
9	CENSY	397
10	HURRICANE-4	385

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7543
2	China	5062
3	Taiwan	1116
4	India	1067
5	Singapore	909
6	United Kingdom	628
7	Hong Kong	530
8	South Korea	428
9	Russian Federation	410
10	Germany	339

20250316 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, March 15, 2025

Botnet Statistics [2025-03-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 23222
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21740
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2222	100325
2	7928	42744
3	8008	38912
4	8771	38506
5	612	37556
6	22	35854
7	944	32814
8	98	29341
9	639	28995
10	7009	22991

Rank	Network	# of suspected botnet IPs
1	MSFT	1392
2	AL-3	1241
3	HINET-NET	1062
4	GOOGLE-CLOUD	1032
5	PAN-22	965
6	ASEPL-SG	771
7	BSNLNET	558
8	ALISOFT	461
9	CENSY	397
10	VOLCANO-ENGINE	364

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8031
2	China	4969
3	Taiwan	1217
4	India	1072
5	Singapore	980
6	United Kingdom	645
7	Hong Kong	542
8	South Korea	504
9	Russian Federation	440
10	Brazil	347

20250315 Botnet Detection Live Streaming 10+ zombies detected)

Friday, March 14, 2025

Botnet Statistics [2025-03-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 24316
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22730
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1010	99160
2	221	96814
3	2222	86029
4	2282	82759
5	290	71451
6	22	45146
7	28729	37051
8	2051	31005
9	25019	23318
10	24322	22145

Rank	Network	# of suspected botnet IPs
1	MSFT	1391
2	HINET-NET	1139
3	GOOGLE-CLOUD	1044
4	AL-3	1031
5	PAN-22	965
6	ASEPL-SG	717
7	BSNLNET	601
8	ALISOFT	469
9	CMNET	402
10	CENSY	390

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8220
2	China	5016
3	Taiwan	1315
4	India	1203
5	Singapore	963
6	United Kingdom	668
7	South Korea	628
8	Hong Kong	583
9	Russian Federation	487
10	Brazil	360

20250314 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, March 13, 2025

Botnet Statistics [2025-03-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 25098
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23493
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2222	141030
2	1010	84416
3	221	83088
4	2282	79833
5	290	63924
6	22	59759
7	8007	40188
8	28729	34085
9	25019	33979
10	2051	21515

Rank	Network	# of suspected botnet IPs
1	MSFT	1398
2	HINET-NET	1278
3	AL-3	1079
4	GOOGLE-CLOUD	1024
5	PAN-22	965
6	ASEPL-SG	686
7	BSNLNET	682
8	KORNET-KR	508
9	ALISOFT	458
10	CMNET	457

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7975
2	China	5175
3	Taiwan	1482
4	India	1384
5	Singapore	907
6	South Korea	845
7	Hong Kong	676
8	United Kingdom	655
9	Russian Federation	514
10	Brazil	360

20250313 Botnet Detection Live Streaming 20+ zombies detected)

Wednesday, March 12, 2025

Botnet Statistics [2025-03-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 24821
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23265
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	221	57210
2	2282	56744
3	22	47604
4	290	43358
5	23	22815
6	2222	19704
7	30357	19580
8	48193	19000
9	28729	18446
10	2022	18442

Rank	Network	# of suspected botnet IPs
1	MSFT	1417
2	AL-3	1130
3	GOOGLE-CLOUD	994
4	PAN-22	947
5	HINET-NET	871
6	ASEPL-SG	774
7	BSNLNET	696
8	CMNET	495
9	ALISOFT	482
10	KORNET-KR	407

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7997
2	China	5455
3	India	1433
4	Taiwan	1016
5	Singapore	988
6	South Korea	704
7	United Kingdom	651
8	Hong Kong	609
9	Russian Federation	560
10	Brazil	411

20250312 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, March 11, 2025

Botnet Statistics [2025-03-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 24283
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22692
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	51591
2	23	33625
3	24	25843
4	8005	25137
5	2022	23666
6	1313	22616
7	30357	20963
8	48193	20541
9	2922	17805
10	98	13647

Rank	Network	# of suspected botnet IPs
1	MSFT	1391
2	AL-3	1114
3	GOOGLE-CLOUD	993
4	PAN-22	952
5	HINET-NET	875
6	ASEPL-SG	750
7	BSNLNET	687
8	ALISOFT	521
9	CMNET	447
10	KORNET-KR	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7769
2	China	5397
3	India	1417
4	Taiwan	999
5	Singapore	958
6	United Kingdom	666
7	South Korea	642
8	Hong Kong	563
9	Russian Federation	536
10	Brazil	427

20250311 Botnet Detection Live Streaming 30+ zombies detected)

Monday, March 10, 2025

Botnet Statistics [2025-03-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 22929
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21498
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1313	81614
2	23	68176
3	22	42688
4	234	32413
5	2022	27232
6	8005	23661
7	30357	21633
8	48193	21113
9	24	18568
10	1249	16887

Rank	Network	# of suspected botnet IPs
1	MSFT	1355
2	AL-3	1070
3	GOOGLE-CLOUD	1024
4	PAN-22	965
5	HINET-NET	831
6	ASEPL-SG	777
7	BSNLNET	723
8	ALISOFT	489
9	CMNET	419
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7629
2	China	5116
3	India	1364
4	Taiwan	967
5	Singapore	966
6	United Kingdom	649
7	South Korea	569
8	Hong Kong	506
9	Russian Federation	428
10	Brazil	398

20250310 Botnet Detection Live Streaming 20+ zombies detected)

Sunday, March 9, 2025

Botnet Statistics [2025-03-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 23259
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21782
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1313	42790
2	22	42684
3	23	36215
4	2022	26897
5	30357	21249
6	48193	20750
7	4535	16536
8	20222	14348
9	25922	14344
10	4534	14225

Rank	Network	# of suspected botnet IPs
1	MSFT	1348
2	GOOGLE-CLOUD	1027
3	AL-3	1015
4	PAN-22	965
5	HINET-NET	861
6	BSNLNET	695
7	ASEPL-SG	680
8	ALISOFT	514
9	CMNET	463
10	CENSY	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7176
2	China	5441
3	India	1412
4	Taiwan	989
5	Singapore	875
6	United Kingdom	630
7	South Korea	598
8	Hong Kong	544
9	Russian Federation	462
10	Brazil	397

20250309 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, March 8, 2025

Botnet Statistics [2025-03-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 23699
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22141
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	40592
2	23	36737
3	2022	26254
4	30357	21654
5	48193	21196
6	1559	14063
7	7043	13690
8	8022	13528
9	1003	13289
10	1382	12845

Rank	Network	# of suspected botnet IPs
1	MSFT	1347
2	AL-3	1060
3	GOOGLE-CLOUD	1028
4	PAN-22	965
5	HINET-NET	902
6	ASEPL-SG	762
7	BSNLNET	693
8	CMNET	482
9	ALISOFT	467
10	CENSY	394

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7277
2	China	5418
3	India	1498
4	Taiwan	1036
5	Singapore	961
6	United Kingdom	644
7	Hong Kong	597
8	South Korea	581
9	Russian Federation	469
10	Brazil	415

20250308 Botnet Detection Live Streaming 10+ zombies detected)

Friday, March 7, 2025

Botnet Statistics [2025-03-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 24067
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22467
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	23	49171
2	22	43667
3	8002	36773
4	2022	26648
5	30357	17235
6	48193	16734
7	1357	16660
8	445	15901
9	194	14101
10	767	13694

Rank	Network	# of suspected botnet IPs
1	MSFT	1357
2	AL-3	1049
3	GOOGLE-CLOUD	1047
4	PAN-22	965
5	HINET-NET	918
6	BSNLNET	741
7	ASEPL-SG	682
8	ALISOFT	473
9	CMNET	438
10	CENSY	392

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7686
2	China	5340
3	India	1494
4	Taiwan	1071
5	Singapore	881
6	United Kingdom	659
7	South Korea	583
8	Hong Kong	554
9	Russian Federation	506
10	Brazil	414

20250307 Botnet Detection Live Streaming 30+ zombies detected)

Thursday, March 6, 2025

Botnet Statistics [2025-03-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 24303
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22727
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	23	39910
2	22	38937
3	2022	26529
4	10021	20893
5	30357	20791
6	48193	20257
7	445	18790
8	221	15555
9	6969	14598
10	505	14060

Rank	Network	# of suspected botnet IPs
1	MSFT	1374
2	AL-3	1075
3	GOOGLE-CLOUD	1037
4	HINET-NET	1015
5	PAN-22	963
6	ASEPL-SG	767
7	BSNLNET	702
8	ALISOFT	505
9	CMNET	462
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7514
2	China	5494
3	India	1500
4	Taiwan	1173
5	Singapore	971
6	United Kingdom	627
7	South Korea	602
8	Hong Kong	572
9	Russian Federation	501
10	Brazil	416

20250306 Botnet Detection Live Streaming 40+ zombies detected)

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5869)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (61)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (345)
  • December (5)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	23	45560
2	22	39518
3	2022	25425
4	30357	21298
5	48193	20853
6	445	14950
7	1249	14699
8	1003	14271
9	1357	13724
10	3512	13170