Botnet Statistics [2025-04-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 25006
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23118
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1851
2	AL-3	1232
3	GOOGLE-CLOUD	967
4	PAN-22	937
5	ASEPL-SG	783
6	BSNLNET	769
7	CMNET	462
8	ALISOFT	458
9	HURRICANE-4	441
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9007
2	China	5869
3	India	1574
4	Singapore	954
5	Hong Kong	639
6	South Korea	617
7	Russian Federation	498
8	Netherlands	390
9	United Kingdom	342
10	European Union	341

20250430 Botnet Detection Live Streaming 10+ zombies detected)

Tuesday, April 29, 2025

Botnet Statistics [2025-04-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 23751
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21813
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	73126
2	2211	72571
3	3322	64715
4	4022	51192
5	2929	44040
6	2025	42589
7	22	42115
8	4444	33033
9	10002	23892
10	1122	22555

Rank	Network	# of suspected botnet IPs
1	MSFT	1857
2	AL-3	1221
3	GOOGLE-CLOUD	978
4	PAN-22	937
5	ASEPL-SG	765
6	BSNLNET	701
7	HURRICANE-4	454
8	ALISOFT	449
9	CENSY	395
10	KORNET-KR	388

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8379
2	China	5700
3	India	1442
4	Singapore	927
5	South Korea	633
6	Hong Kong	557
7	Russian Federation	493
8	United Kingdom	362
9	Viet Nam	333
10	Indonesia	333

20250429 Botnet Detection Live Streaming 20+ zombies detected)

Monday, April 28, 2025

Botnet Statistics [2025-04-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23129
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21404
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2211	77071
2	22	40426
3	4444	38824
4	2226	34716
5	3022	33095
6	23	27233
7	322	26533
8	4222	26420
9	4122	25772
10	822	25560

Rank	Network	# of suspected botnet IPs
1	MSFT	1845
2	AL-3	1237
3	GOOGLE-CLOUD	1015
4	PAN-22	957
5	ASEPL-SG	775
6	TCIMZD	753
7	BSNLNET	649
8	ALISOFT	472
9	HURRICANE-4	443
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8569
2	China	5369
3	India	1265
4	Iran	915
5	Singapore	900
6	Hong Kong	497
7	South Korea	493
8	United Kingdom	414
9	Russian Federation	343
10	European Union	319

20250428 Botnet Detection Live Streaming 10+ zombies detected)

Sunday, April 27, 2025

Botnet Statistics [2025-04-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 21925
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20156
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	4444	121305
2	2211	77038
3	2226	71457
4	2025	44793
5	22	41081
6	23	28515
7	5222	26910
8	5122	26248
9	522	26243
10	722	26039

Rank	Network	# of suspected botnet IPs
1	MSFT	1833
2	AL-3	1223
3	GOOGLE-CLOUD	1014
4	PAN-22	957
5	ASEPL-SG	770
6	BSNLNET	690
7	ALISOFT	461
8	HURRICANE-4	438
9	CENSY	398
10	KORNET-KR	320

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8238
2	China	5034
3	India	1321
4	Singapore	894
5	South Korea	510
6	Hong Kong	508
7	European Union	341
8	Russian Federation	322
9	United Kingdom	316
10	Viet Nam	304

20250427 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, April 26, 2025

Botnet Statistics [2025-04-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 23467
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21640
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3010	121654
2	2211	66679
3	2231	45752
4	2226	45220
5	10001	41094
6	22	38932
7	5900	23717
8	7122	21658
9	33222	20906
10	7005	18370

Rank	Network	# of suspected botnet IPs
1	MSFT	1804
2	AL-3	1214
3	GOOGLE-CLOUD	1016
4	PAN-22	962
5	ASEPL-SG	794
6	BSNLNET	729
7	MCCI	514
8	ALISOFT	459
9	HURRICANE-4	446
10	CENSY	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8155
2	China	5475
3	India	1450
4	Singapore	921
5	Iran	655
6	South Korea	564
7	Hong Kong	517
8	European Union	377
9	United Kingdom	361
10	Indonesia	348

20250426 Botnet Detection Live Streaming 10+ zombies detected)

Friday, April 25, 2025

Botnet Statistics [2025-04-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22192
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20423
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2231	55323
2	5900	47527
3	22	43563
4	2226	40763
5	2269	40526
6	2211	30703
7	2727	21994
8	7005	18545
9	23	16648
10	1433	16219

Rank	Network	# of suspected botnet IPs
1	MSFT	1647
2	AL-3	1148
3	GOOGLE-CLOUD	1020
4	PAN-22	963
5	ASEPL-SG	733
6	BSNLNET	614
7	ALISOFT	476
8	HURRICANE-4	447
9	CENSY	401
10	KORNET-KR	358

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8328
2	China	5015
3	India	1252
4	Singapore	853
5	Hong Kong	586
6	South Korea	572
7	United Kingdom	385
8	Russian Federation	365
9	European Union	362
10	Indonesia	352

20250425 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, April 24, 2025

Botnet Statistics [2025-04-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20500
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18258
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2231	75033
2	2226	48704
3	22	37483
4	5900	26838
5	2211	26778
6	33322	25926
7	445	18279
8	6922	16053
9	23	15632
10	2289	12684

Rank	Network	# of suspected botnet IPs
1	MSFT	1425
2	AL-3	1123
3	GOOGLE-CLOUD	1020
4	PAN-22	961
5	ASEPL-SG	735
6	BSNLNET	632
7	ALISOFT	444
8	HURRICANE-4	436
9	CENSY	398
10	KORNET-KR	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7472
2	China	4672
3	India	1129
4	Singapore	843
5	South Korea	617
6	Hong Kong	503
7	European Union	308
8	Indonesia	296
9	Viet Nam	277
10	United Kingdom	272

20250424 Botnet Detection Live Streaming 10+ zombies detected)

Wednesday, April 23, 2025

Botnet Statistics [2025-04-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 22879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21096
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2231	39045
2	22	37020
3	5900	33068
4	2211	24844
5	6822	21019
6	23	15995
7	2226	13487
8	2230	11972
9	9988	11810
10	9977	11744

Rank	Network	# of suspected botnet IPs
1	MSFT	1393
2	AL-3	1198
3	GOOGLE-CLOUD	989
4	PAN-22	948
5	ASEPL-SG	795
6	BSNLNET	676
7	KORNET-KR	592
8	ALISOFT	494
9	HURRICANE-4	449
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8363
2	China	5341
3	India	1312
4	Singapore	963
5	South Korea	822
6	Hong Kong	560
7	Russian Federation	360
8	Indonesia	351
9	United Kingdom	350
10	European Union	343

20250423 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, April 22, 2025

Botnet Statistics [2025-04-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 21503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19811
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	13022	53784
2	22	40297
3	7005	27802
4	6722	21932
5	9622	21656
6	5900	21361
7	23	19328
8	2211	19054
9	8022	17789
10	8822	16819

Rank	Network	# of suspected botnet IPs
1	MSFT	1422
2	AL-3	1174
3	GOOGLE-CLOUD	999
4	PAN-22	948
5	ASEPL-SG	798
6	BSNLNET	693
7	ALISOFT	498
8	HURRICANE-4	450
9	CENSY	397
10	KORNET-KR	381

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7717
2	China	5173
3	India	1303
4	Singapore	963
5	South Korea	575
6	Hong Kong	561
7	Indonesia	387
8	Russian Federation	379
9	Viet Nam	317
10	European Union	317

20250422 Botnet Detection Live Streaming 20+ zombies detected)

Monday, April 21, 2025

Botnet Statistics [2025-04-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 21986
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20305
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	87637
2	22	44334
3	9522	41939
4	6622	29532
5	12022	29227
6	7005	27812
7	5900	25482
8	650	22753
9	1122	18546
10	23	15865

Rank	Network	# of suspected botnet IPs
1	MSFT	1399
2	AL-3	1196
3	GOOGLE-CLOUD	1023
4	PAN-22	963
5	ASEPL-SG	814
6	BSNLNET	649
7	ALISOFT	456
8	HURRICANE-4	445
9	CENSY	396
10	VOLCANO-ENGINE	331

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8257
2	China	5353
3	India	1195
4	Singapore	987
5	Hong Kong	562
6	South Korea	498
7	Russian Federation	327
8	Indonesia	327
9	European Union	327
10	United Kingdom	301

20250421 Botnet Detection Live Streaming 20+ zombies detected)

Sunday, April 20, 2025

Botnet Statistics [2025-04-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 22604
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20126
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	105050
2	9522	103607
3	6622	86448
4	2025	67721
5	1122	57078
6	12022	40183
7	22	39665
8	7005	26640
9	5900	25275
10	23	17101

Rank	Network	# of suspected botnet IPs
1	MSFT	1377
2	AL-3	1204
3	GOOGLE-CLOUD	1022
4	PAN-22	964
5	ASEPL-SG	802
6	BSNLNET	692
7	ALISOFT	466
8	HURRICANE-4	438
9	CENSY	400
10	CMNET	380

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7835
2	China	5440
3	India	1363
4	Singapore	957
5	South Korea	586
6	Hong Kong	582
7	European Union	335
8	Viet Nam	318
9	Russian Federation	309
10	Indonesia	303

20250420 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, April 19, 2025

Botnet Statistics [2025-04-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 22696
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20844
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	101486
2	2224	73109
3	1122	57485
4	22	40029
5	6622	30638
6	7005	27544
7	5900	21926
8	2626	21908
9	23	16511
10	2028	16001

Rank	Network	# of suspected botnet IPs
1	MSFT	1396
2	AL-3	1257
3	GOOGLE-CLOUD	1017
4	PAN-22	963
5	ASEPL-SG	858
6	BSNLNET	666
7	HURRICANE-4	450
8	ALISOFT	441
9	CENSY	400
10	CMNET	330

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7955
2	China	5134
3	India	1378
4	Singapore	1017
5	Hong Kong	584
6	South Korea	544
7	Russian Federation	466
8	Viet Nam	357
9	European Union	343
10	Indonesia	341

20250419 Botnet Detection Live Streaming 20+ zombies detected)

Friday, April 18, 2025

Botnet Statistics [2025-04-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 23530
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21456
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	100192
2	9422	95783
3	2224	72951
4	1122	57462
5	5900	48731
6	22	39582
7	23	20017
8	10000	13113
9	5432	11657
10	9999	10987

Rank	Network	# of suspected botnet IPs
1	MSFT	1359
2	AL-3	1206
3	GOOGLE-CLOUD	1027
4	PAN-22	964
5	ASEPL-SG	822
6	BSNLNET	679
7	ALISOFT	482
8	HURRICANE-4	436
9	CENSY	397
10	VOLCANO-ENGINE	332

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8151
2	China	5137
3	India	1358
4	Singapore	996
5	Russian Federation	584
6	Hong Kong	572
7	South Korea	479
8	Indonesia	388
9	Viet Nam	350
10	European Union	347

20250418 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, April 17, 2025

Botnet Statistics [2025-04-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24057
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22001
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	99960
2	5900	80958
3	2224	74179
4	22	43531
5	9422	37238
6	23	23626
7	1022	22837
8	445	14340
9	10000	12819
10	9999	12145

Rank	Network	# of suspected botnet IPs
1	MSFT	1345
2	AL-3	1233
3	GOOGLE-CLOUD	1020
4	PAN-22	963
5	ASEPL-SG	828
6	BSNLNET	647
7	ALISOFT	469
8	HURRICANE-4	446
9	CENSY	397
10	CMNET	338

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8178
2	China	5371
3	India	1274
4	Singapore	1008
5	Russian Federation	624
6	Hong Kong	584
7	South Korea	470
8	Indonesia	415
9	Viet Nam	412
10	Brazil	362

20250417 Botnet Detection Live Streaming 40+ zombies detected)

Wednesday, April 16, 2025

Botnet Statistics [2025-04-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 24928
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22919
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	95533
2	5900	82272
3	2224	75148
4	4422	64265
5	22	42157
6	9322	21522
7	23	19633
8	472	13537
9	10000	12973
10	2525	11572

Rank	Network	# of suspected botnet IPs
1	MSFT	1340
2	AL-3	1242
3	GOOGLE-CLOUD	999
4	PAN-22	956
5	ASEPL-SG	818
6	BSNLNET	711
7	ALISOFT	506
8	HURRICANE-4	450
9	CENSY	396
10	CMNET	323

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8527
2	China	5585
3	India	1417
4	Singapore	1043
5	Hong Kong	619
6	Russian Federation	561
7	South Korea	525
8	Indonesia	436
9	United Kingdom	399
10	Viet Nam	398

20250416 Botnet Detection Live Streaming 10+ zombies detected)

Tuesday, April 15, 2025

Botnet Statistics [2025-04-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 25254
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23045
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2424	124355
2	2225	97729
3	4422	91247
4	5900	77101
5	2224	73882
6	223	66221
7	22	40862
8	6667	22326
9	23	19802
10	4222	14673

Rank	Network	# of suspected botnet IPs
1	MSFT	1905
2	AL-3	1250
3	GOOGLE-CLOUD	986
4	PAN-22	954
5	ASEPL-SG	843
6	BSNLNET	664
7	ALISOFT	485
8	HURRICANE-4	418
9	CENSY	399
10	KORNET-KR	351

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8784
2	China	5221
3	India	1381
4	Singapore	1069
5	United Kingdom	756
6	Hong Kong	593
7	South Korea	573
8	Russian Federation	560
9	Indonesia	441
10	Taiwan	392

20250415 Botnet Detection Live Streaming 10+ zombies detected)

Sunday, April 13, 2025

Botnet Statistics [2025-04-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 26560
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24164
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	101394
2	223	76710
3	2224	71088
4	4422	64916
5	2020	63547
6	22	39648
7	5900	27139
8	8022	21444
9	9022	19768
10	23	19025

Rank	Network	# of suspected botnet IPs
1	MSFT	1876
2	AL-3	1241
3	GOOGLE-CLOUD	1015
4	PAN-22	962
5	ASEPL-SG	829
6	BSNLNET	701
7	CLOUDFLARENET	632
8	ALISOFT	475
9	CMNET	460
10	HURRICANE-4	448

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9412
2	China	5695
3	India	1545
4	Singapore	1063
5	United Kingdom	703
6	South Korea	670
7	Hong Kong	629
8	Russian Federation	501
9	Indonesia	454
10	Mauritius	426

20250413 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, April 12, 2025

Botnet Statistics [2025-04-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26136
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23653
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2225	105681
2	223	77635
3	2224	75539
4	2244	52865
5	5900	47052
6	22	36430
7	5901	25735
8	8022	21259
9	9022	19250
10	23	16335

Rank	Network	# of suspected botnet IPs
1	MSFT	1746
2	AL-3	1253
3	GOOGLE-CLOUD	1015
4	PAN-22	956
5	ASEPL-SG	841
6	BSNLNET	725
7	ALISOFT	555
8	HURRICANE-4	442
9	CMNET	434
10	KORNET-KR	404

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8517
2	China	5951
3	India	1560
4	Singapore	1108
5	Hong Kong	665
6	South Korea	650
7	United Kingdom	637
8	Russian Federation	573
9	Indonesia	513
10	Viet Nam	378

20250412 Botnet Detection Live Streaming 20+ zombies detected)

Friday, April 11, 2025

Botnet Statistics [2025-04-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 25988
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23851
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	77519
2	2224	75068
3	2244	53167
4	22	40252
5	2225	29600
6	8022	23382
7	9022	21392
8	5900	21005
9	23	16840
10	6000	16632

Rank	Network	# of suspected botnet IPs
1	MSFT	1591
2	AL-3	1205
3	GOOGLE-CLOUD	1016
4	PAN-22	959
5	ASEPL-SG	851
6	BSNLNET	706
7	ALISOFT	525
8	HURRICANE-4	451
9	CMNET	438
10	KORNET-KR	412

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8899
2	China	5747
3	India	1486
4	Singapore	1104
5	South Korea	679
6	Hong Kong	638
7	United Kingdom	604
8	Russian Federation	542
9	Indonesia	455
10	European Union	404

20250411 Botnet Detection Live Streaming 20+ zombies detected)

Thursday, April 10, 2025

Botnet Statistics [2025-04-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 26251
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24219
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	78072
2	2224	73255
3	2244	53237
4	22	44923
5	5900	21392
6	3389	21136
7	23	17433
8	5901	16518
9	9922	15632
10	4522	14678

Rank	Network	# of suspected botnet IPs
1	MSFT	1854
2	AL-3	1207
3	GOOGLE-CLOUD	1009
4	PAN-22	960
5	ASEPL-SG	799
6	BSNLNET	695
7	ALISOFT	570
8	UK-MICROSOFT-20000324	557
9	CMNET	456
10	HURRICANE-4	446

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8608
2	China	5773
3	India	1502
4	Singapore	1023
5	United Kingdom	891
6	South Korea	734
7	Hong Kong	606
8	Russian Federation	571
9	Indonesia	448
10	Viet Nam	404

20250410 Botnet Detection Live Streaming 20+ zombies detected)

Wednesday, April 9, 2025

Botnet Statistics [2025-04-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26337
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24349
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	80016
2	2224	71487
3	22	40813
4	2244	27110
5	5900	22428
6	3389	20135
7	445	18456
8	23	16444
9	10000	14831
10	9922	13930

Rank	Network	# of suspected botnet IPs
1	MSFT	1551
2	AL-3	1233
3	GOOGLE-CLOUD	986
4	PAN-22	948
5	ASEPL-SG	877
6	BSNLNET	645
7	ALISOFT	584
8	HURRICANE-4	451
9	CMNET	442
10	KORNET-KR	415

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8715
2	China	5927
3	India	1452
4	Singapore	1131
5	South Korea	732
6	United Kingdom	708
7	Hong Kong	600
8	Russian Federation	564
9	Indonesia	460
10	Viet Nam	387

20250409 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, April 8, 2025

Botnet Statistics [2025-04-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 25504
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23504
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	83412
2	5522	79151
3	2224	72077
4	22	50067
5	5900	44881
6	5901	20800
7	2202	19690
8	3389	18654
9	9922	17197
10	23	15563

Rank	Network	# of suspected botnet IPs
1	MSFT	1542
2	AL-3	1146
3	GOOGLE-CLOUD	987
4	PAN-22	950
5	ASEPL-SG	778
6	BSNLNET	627
7	ALISOFT	568
8	HURRICANE-4	445
9	CMNET	424
10	KORNET-KR	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8216
2	China	5777
3	India	1412
4	Singapore	1038
5	United Kingdom	707
6	South Korea	698
7	Hong Kong	607
8	Russian Federation	561
9	Indonesia	475
10	Brazil	394

20250408 Botnet Detection Live Streaming 50+ zombies detected)

Monday, April 7, 2025

Botnet Statistics [2025-04-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 24194
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22401
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	77369
2	2224	65284
3	22	64723
4	55022	34731
5	5901	19916
6	2202	19265
7	3389	17510
8	23	17059
9	225	16529
10	5900	14837

Rank	Network	# of suspected botnet IPs
1	MSFT	1518
2	AL-3	1191
3	GOOGLE-CLOUD	1020
4	PAN-22	963
5	ASEPL-SG	834
6	BSNLNET	612
7	ALISOFT	548
8	HURRICANE-4	449
9	CMNET	424
10	KORNET-KR	421

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8230
2	China	5720
3	India	1214
4	Singapore	1037
5	South Korea	702
6	United Kingdom	650
7	Hong Kong	585
8	Russian Federation	508
9	Indonesia	345
10	European Union	341

20250407 Botnet Detection Live Streaming 30+ zombies detected)

Sunday, April 6, 2025

Botnet Statistics [2025-04-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 24025
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22204
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	80260
2	2224	78002
3	22	54071
4	55022	32470
5	5900	29784
6	2202	19633
7	10000	19238
8	23	18305
9	3389	17720
10	2323	14941

Rank	Network	# of suspected botnet IPs
1	MSFT	1510
2	AL-3	1081
3	GOOGLE-CLOUD	1026
4	PAN-22	966
5	ASEPL-SG	715
6	BSNLNET	640
7	ALISOFT	510
8	KORNET-KR	471
9	HURRICANE-4	449
10	CMNET	403

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7784
2	China	5589
3	India	1325
4	Singapore	917
5	South Korea	758
6	Hong Kong	631
7	United Kingdom	622
8	Russian Federation	495
9	Taiwan	435
10	Indonesia	368

20250406 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, April 5, 2025

Botnet Statistics [2025-04-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 25850
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23976
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	223	85756
2	2224	79062
3	22	51398
4	55555	27755
5	2202	27412
6	23	24996
7	7722	22564
8	9999	20793
9	10000	19276
10	2323	17749

Rank	Network	# of suspected botnet IPs
1	MSFT	1519
2	AL-3	1151
3	GOOGLE-CLOUD	1022
4	PAN-22	966
5	ASEPL-SG	817
6	BSNLNET	723
7	HINET-NET	720
8	ALISOFT	548
9	HURRICANE-4	449
10	KORNET-KR	432

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8237
2	China	5687
3	India	1464
4	Singapore	1015
5	Taiwan	863
6	South Korea	736
7	United Kingdom	694
8	Hong Kong	691
9	Russian Federation	518
10	Indonesia	374

20250405 Botnet Detection Live Streaming 30+ zombies detected)

Friday, April 4, 2025

Botnet Statistics [2025-04-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 25599
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23777
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	7722	90416
2	223	86629
3	2224	81370
4	22	41360
5	7777	32363
6	23	31466
7	2202	31165
8	5900	27637
9	10000	20031
10	55555	20000

Rank	Network	# of suspected botnet IPs
1	MSFT	1505
2	AL-3	1068
3	GOOGLE-CLOUD	1033
4	PAN-22	967
5	HINET-NET	966
6	BSNLNET	686
7	ASEPL-SG	669
8	ALISOFT	557
9	HURRICANE-4	444
10	KORNET-KR	413

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8574
2	China	5317
3	India	1388
4	Taiwan	1137
5	Singapore	899
6	South Korea	695
7	United Kingdom	691
8	Hong Kong	582
9	Russian Federation	442
10	European Union	392

20250404 Botnet Detection Live Streaming 30+ zombies detected)

Subscribe to: Posts (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5669)
• botnet detection (7)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (54)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (136)
  • May (13)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	7722	86647
2	223	84772
3	8765	66463
4	37699	64648
5	5900	62917
6	22	42604
7	23	33491
8	2224	29525
9	7777	29255
10	6000	22884