detection period: 2025-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 24938
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23011
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1569 |
| 2 | AL-3 | 1554 |
| 3 | BSNLNET | 1095 |
| 4 | ASEPL-SG | 1045 |
| 5 | GOOGLE-CLOUD | 1007 |
| 6 | PAN-22 | 959 |
| 7 | KORNET-KR | 622 |
| 8 | ALISOFT | 500 |
| 9 | VOLCANO-ENGINE | 452 |
| 10 | HURRICANE-4 | 452 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8343 |
| 2 | China | 5284 |
| 3 | India | 1901 |
| 4 | Singapore | 1221 |
| 5 | South Korea | 850 |
| 6 | Hong Kong | 530 |
| 7 | Russian Federation | 447 |
| 8 | Indonesia | 420 |
| 9 | Venezuela | 412 |
| 10 | United Kingdom | 389 |
Friday, May 30, 2025
Botnet Statistics [2025-05-29]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 26084
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22963
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 26084
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22963
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 4444 | 66353 |
| 2 | 2023 | 62288 |
| 3 | 7777 | 53713 |
| 4 | 2021 | 44863 |
| 5 | 2024 | 43494 |
| 6 | 8008 | 29199 |
| 7 | 23 | 24303 |
| 8 | 22 | 23916 |
| 9 | 5900 | 21060 |
| 10 | 2020 | 19604 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1636 |
| 2 | AL-3 | 1570 |
| 3 | BSNLNET | 1110 |
| 4 | GOOGLE-CLOUD | 1022 |
| 5 | ASEPL-SG | 994 |
| 6 | PAN-22 | 959 |
| 7 | KORNET-KR | 609 |
| 8 | ALISOFT | 572 |
| 9 | VOLCANO-ENGINE | 475 |
| 10 | HURRICANE-4 | 443 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8668 |
| 2 | China | 5412 |
| 3 | India | 1922 |
| 4 | Singapore | 1191 |
| 5 | South Korea | 810 |
| 6 | Netherlands | 565 |
| 7 | Hong Kong | 503 |
| 8 | United Kingdom | 428 |
| 9 | Venezuela | 395 |
| 10 | Indonesia | 377 |
Thursday, May 29, 2025
Botnet Statistics [2025-05-28]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 24204
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22433
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 24204
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22433
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 63343 |
| 2 | 3822 | 50216 |
| 3 | 23 | 34610 |
| 4 | 22 | 23233 |
| 5 | 1222 | 15068 |
| 6 | 445 | 14688 |
| 7 | 8007 | 14313 |
| 8 | 2223 | 13667 |
| 9 | 2248 | 12562 |
| 10 | 2222 | 11840 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1553 |
| 2 | AL-3 | 1435 |
| 3 | BSNLNET | 1219 |
| 4 | GOOGLE-CLOUD | 1011 |
| 5 | ASEPL-SG | 972 |
| 6 | PAN-22 | 958 |
| 7 | KORNET-KR | 643 |
| 8 | ALISOFT | 516 |
| 9 | HURRICANE-4 | 436 |
| 10 | VOLCANO-ENGINE | 420 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8108 |
| 2 | China | 5296 |
| 3 | India | 2106 |
| 4 | Singapore | 1103 |
| 5 | South Korea | 850 |
| 6 | Netherlands | 519 |
| 7 | Hong Kong | 507 |
| 8 | United Kingdom | 425 |
| 9 | Germany | 366 |
| 10 | Russian Federation | 351 |
Wednesday, May 28, 2025
Botnet Statistics [2025-05-27]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 24142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22320
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 24142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22320
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3822 | 62271 |
| 2 | 23 | 28107 |
| 3 | 22 | 24334 |
| 4 | 5900 | 22836 |
| 5 | 4322 | 16483 |
| 6 | 445 | 15898 |
| 7 | 8822 | 15110 |
| 8 | 2246 | 13981 |
| 9 | 8007 | 13827 |
| 10 | 7777 | 13486 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1510 |
| 2 | MSFT | 1301 |
| 3 | ASEPL-SG | 1109 |
| 4 | GOOGLE-CLOUD | 975 |
| 5 | BSNLNET | 950 |
| 6 | PAN-22 | 949 |
| 7 | KORNET-KR | 912 |
| 8 | HURRICANE-4 | 445 |
| 9 | ALISOFT | 427 |
| 10 | VOLCANO-ENGINE | 418 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8669 |
| 2 | China | 5140 |
| 3 | India | 1697 |
| 4 | Singapore | 1238 |
| 5 | South Korea | 1153 |
| 6 | Hong Kong | 521 |
| 7 | Germany | 386 |
| 8 | United Kingdom | 362 |
| 9 | Russian Federation | 328 |
| 10 | European Union | 327 |
Tuesday, May 27, 2025
Botnet Statistics [2025-05-26]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22271
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20536
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22271
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20536
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 23 | 29870 |
| 2 | 7512 | 26687 |
| 3 | 22 | 22357 |
| 4 | 5900 | 19996 |
| 5 | 8822 | 14382 |
| 6 | 4322 | 13423 |
| 7 | 3422 | 12616 |
| 8 | 445 | 11418 |
| 9 | 28022 | 10605 |
| 10 | 5122 | 10285 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1465 |
| 2 | MSFT | 1200 |
| 3 | ASEPL-SG | 1071 |
| 4 | GOOGLE-CLOUD | 982 |
| 5 | PAN-22 | 945 |
| 6 | KORNET-KR | 829 |
| 7 | BSNLNET | 542 |
| 8 | ALISOFT | 485 |
| 9 | HURRICANE-4 | 439 |
| 10 | VOLCANO-ENGINE | 433 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7789 |
| 2 | China | 5207 |
| 3 | Singapore | 1230 |
| 4 | India | 1068 |
| 5 | South Korea | 1055 |
| 6 | Hong Kong | 514 |
| 7 | Russian Federation | 356 |
| 8 | Indonesia | 327 |
| 9 | European Union | 311 |
| 10 | Viet Nam | 305 |
Monday, May 26, 2025
Botnet Statistics [2025-05-25]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 22007
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20167
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 22007
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20167
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 62749 |
| 2 | 2822 | 61833 |
| 3 | 2722 | 60454 |
| 4 | 2922 | 60000 |
| 5 | 5022 | 37676 |
| 6 | 23 | 23626 |
| 7 | 22 | 21411 |
| 8 | 8005 | 20610 |
| 9 | 5900 | 19486 |
| 10 | 4322 | 18616 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1463 |
| 2 | MSFT | 1211 |
| 3 | ASEPL-SG | 1099 |
| 4 | GOOGLE-CLOUD | 1004 |
| 5 | PAN-22 | 959 |
| 6 | ALISOFT | 596 |
| 7 | BSNLNET | 551 |
| 8 | HURRICANE-4 | 451 |
| 9 | VOLCANO-ENGINE | 430 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8018 |
| 2 | China | 5466 |
| 3 | Singapore | 1268 |
| 4 | India | 1050 |
| 5 | Hong Kong | 499 |
| 6 | Netherlands | 451 |
| 7 | United Kingdom | 339 |
| 8 | Russian Federation | 319 |
| 9 | South Korea | 319 |
| 10 | European Union | 305 |
Sunday, May 25, 2025
Botnet Statistics [2025-05-24]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 20765
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19055
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 20765
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19055
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2255 | 72978 |
| 2 | 2822 | 33240 |
| 3 | 2722 | 31065 |
| 4 | 6666 | 30009 |
| 5 | 2922 | 29996 |
| 6 | 3022 | 29601 |
| 7 | 5900 | 27394 |
| 8 | 22 | 26402 |
| 9 | 4322 | 20460 |
| 10 | 5022 | 18739 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1474 |
| 2 | MSFT | 1255 |
| 3 | ASEPL-SG | 1104 |
| 4 | GOOGLE-CLOUD | 997 |
| 5 | PAN-22 | 960 |
| 6 | ALISOFT | 556 |
| 7 | HURRICANE-4 | 447 |
| 8 | BSNLNET | 439 |
| 9 | VOLCANO-ENGINE | 426 |
| 10 | CENSY | 401 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7797 |
| 2 | China | 5252 |
| 3 | Singapore | 1257 |
| 4 | India | 895 |
| 5 | Hong Kong | 494 |
| 6 | South Korea | 343 |
| 7 | United Kingdom | 311 |
| 8 | European Union | 303 |
| 9 | Indonesia | 282 |
| 10 | Russian Federation | 281 |
Saturday, May 24, 2025
Botnet Statistics [2025-05-23]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19214
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20879
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19214
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2255 | 70419 |
| 2 | 6666 | 59764 |
| 3 | 22 | 24530 |
| 4 | 9022 | 24074 |
| 5 | 5900 | 21074 |
| 6 | 23 | 13472 |
| 7 | 5422 | 13304 |
| 8 | 2233 | 12490 |
| 9 | 25 | 12351 |
| 10 | 2200 | 10187 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1383 |
| 2 | MSFT | 1275 |
| 3 | GOOGLE-CLOUD | 1002 |
| 4 | PAN-22 | 959 |
| 5 | ASEPL-SG | 935 |
| 6 | BSNLNET | 535 |
| 7 | HURRICANE-4 | 433 |
| 8 | ALISOFT | 429 |
| 9 | VOLCANO-ENGINE | 427 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7749 |
| 2 | China | 4767 |
| 3 | Singapore | 1096 |
| 4 | India | 1047 |
| 5 | Netherlands | 594 |
| 6 | Hong Kong | 500 |
| 7 | United Kingdom | 387 |
| 8 | South Korea | 340 |
| 9 | Indonesia | 335 |
| 10 | European Union | 313 |
Friday, May 23, 2025
Botnet Statistics [2025-05-22]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 20289
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18585
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 20289
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18585
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 5900 | 400265 |
| 2 | 3022 | 61945 |
| 3 | 6666 | 52522 |
| 4 | 22 | 31751 |
| 5 | 9022 | 21363 |
| 6 | 8002 | 16779 |
| 7 | 6000 | 15781 |
| 8 | 2244 | 14804 |
| 9 | 5522 | 14465 |
| 10 | 9422 | 13158 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1314 |
| 2 | AL-3 | 1146 |
| 3 | GOOGLE-CLOUD | 1012 |
| 4 | PAN-22 | 960 |
| 5 | ASEPL-SG | 742 |
| 6 | BSNLNET | 512 |
| 7 | HURRICANE-4 | 444 |
| 8 | VOLCANO-ENGINE | 417 |
| 9 | CENSY | 397 |
| 10 | ALISOFT | 378 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7628 |
| 2 | China | 4791 |
| 3 | India | 1033 |
| 4 | Singapore | 921 |
| 5 | Hong Kong | 486 |
| 6 | South Korea | 346 |
| 7 | United Kingdom | 342 |
| 8 | European Union | 342 |
| 9 | Indonesia | 338 |
| 10 | Russian Federation | 314 |
Thursday, May 22, 2025
Botnet Statistics [2025-05-21]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 19601
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18075
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 19601
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18075
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 91737 |
| 2 | 23022 | 41767 |
| 3 | 2244 | 32251 |
| 4 | 5900 | 23640 |
| 5 | 22 | 21342 |
| 6 | 7922 | 15329 |
| 7 | 13032 | 14986 |
| 8 | 32132 | 14672 |
| 9 | 13028 | 14220 |
| 10 | 5522 | 14207 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1330 |
| 2 | AL-3 | 1316 |
| 3 | GOOGLE-CLOUD | 1001 |
| 4 | PAN-22 | 958 |
| 5 | ASEPL-SG | 850 |
| 6 | BSNLNET | 512 |
| 7 | VOLCANO-ENGINE | 425 |
| 8 | CENSY | 400 |
| 9 | HURRICANE-4 | 381 |
| 10 | ALISOFT | 364 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7243 |
| 2 | China | 4529 |
| 3 | Singapore | 1006 |
| 4 | India | 1006 |
| 5 | Hong Kong | 468 |
| 6 | Netherlands | 358 |
| 7 | United Kingdom | 338 |
| 8 | European Union | 332 |
| 9 | South Korea | 329 |
| 10 | Indonesia | 329 |
Wednesday, May 21, 2025
Botnet Statistics [2025-05-20]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 21290
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19462
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 21290
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19462
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 7000 | 115160 |
| 2 | 3022 | 86424 |
| 3 | 2244 | 30652 |
| 4 | 8001 | 26659 |
| 5 | 5900 | 24377 |
| 6 | 23022 | 19056 |
| 7 | 22 | 18618 |
| 8 | 32132 | 14713 |
| 9 | 13032 | 14142 |
| 10 | 25 | 13278 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1369 |
| 2 | MSFT | 1314 |
| 3 | GOOGLE-CLOUD | 972 |
| 4 | PAN-22 | 951 |
| 5 | ASEPL-SG | 869 |
| 6 | BSNLNET | 621 |
| 7 | ALISOFT | 465 |
| 8 | HURRICANE-4 | 433 |
| 9 | VOLCANO-ENGINE | 422 |
| 10 | CENSY | 402 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7845 |
| 2 | China | 5175 |
| 3 | India | 1197 |
| 4 | Singapore | 1029 |
| 5 | Hong Kong | 489 |
| 6 | United Kingdom | 382 |
| 7 | South Korea | 332 |
| 8 | Indonesia | 317 |
| 9 | European Union | 315 |
| 10 | Netherlands | 310 |
Tuesday, May 20, 2025
Botnet Statistics [2025-05-19]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 21114
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19328
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 21114
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19328
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 91824 |
| 2 | 5900 | 44844 |
| 3 | 2244 | 32900 |
| 4 | 11222 | 32805 |
| 5 | 5902 | 23431 |
| 6 | 22 | 17617 |
| 7 | 445 | 16236 |
| 8 | 32132 | 15067 |
| 9 | 6002 | 14488 |
| 10 | 25 | 14463 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | AL-3 | 1371 |
| 2 | MSFT | 1364 |
| 3 | GOOGLE-CLOUD | 979 |
| 4 | PAN-22 | 948 |
| 5 | ASEPL-SG | 868 |
| 6 | BSNLNET | 573 |
| 7 | ALISOFT | 452 |
| 8 | VOLCANO-ENGINE | 442 |
| 9 | HURRICANE-4 | 431 |
| 10 | CENSY | 400 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7901 |
| 2 | China | 5051 |
| 3 | India | 1106 |
| 4 | Singapore | 1008 |
| 5 | Hong Kong | 494 |
| 6 | South Korea | 380 |
| 7 | Indonesia | 343 |
| 8 | European Union | 317 |
| 9 | United Kingdom | 314 |
| 10 | Russian Federation | 307 |
Monday, May 19, 2025
Botnet Statistics [2025-05-18]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 20918
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19278
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-18 00:00-23:59 UTC
total number of suspected botnet IPs: 20918
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19278
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 87993 |
| 2 | 6000 | 67718 |
| 3 | 5900 | 48462 |
| 4 | 11222 | 46503 |
| 5 | 2244 | 32986 |
| 6 | 22222 | 30405 |
| 7 | 22 | 27123 |
| 8 | 5000 | 18436 |
| 9 | 1220 | 17504 |
| 10 | 11022 | 16623 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1392 |
| 2 | AL-3 | 1388 |
| 3 | GOOGLE-CLOUD | 1003 |
| 4 | PAN-22 | 958 |
| 5 | ASEPL-SG | 876 |
| 6 | BSNLNET | 577 |
| 7 | ALISOFT | 459 |
| 8 | HURRICANE-4 | 431 |
| 9 | VOLCANO-ENGINE | 429 |
| 10 | CENSY | 397 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8216 |
| 2 | China | 4769 |
| 3 | India | 1046 |
| 4 | Singapore | 1011 |
| 5 | Hong Kong | 488 |
| 6 | Netherlands | 455 |
| 7 | South Korea | 373 |
| 8 | United Kingdom | 325 |
| 9 | European Union | 306 |
| 10 | Indonesia | 274 |
Sunday, May 18, 2025
Botnet Statistics [2025-05-17]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 22003
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20282
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-17 00:00-23:59 UTC
total number of suspected botnet IPs: 22003
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20282
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 91086 |
| 2 | 6000 | 55744 |
| 3 | 33322 | 44212 |
| 4 | 20000 | 41192 |
| 5 | 22 | 39899 |
| 6 | 5900 | 39472 |
| 7 | 2244 | 32247 |
| 8 | 18022 | 28783 |
| 9 | 11222 | 23244 |
| 10 | 2222 | 16565 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1460 |
| 2 | AL-3 | 1363 |
| 3 | GOOGLE-CLOUD | 1004 |
| 4 | PAN-22 | 957 |
| 5 | ASEPL-SG | 880 |
| 6 | BSNLNET | 691 |
| 7 | ALISOFT | 458 |
| 8 | HURRICANE-4 | 425 |
| 9 | VOLCANO-ENGINE | 418 |
| 10 | CENSY | 401 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7935 |
| 2 | China | 5197 |
| 3 | India | 1337 |
| 4 | Singapore | 1015 |
| 5 | Hong Kong | 504 |
| 6 | Netherlands | 462 |
| 7 | South Korea | 436 |
| 8 | United Kingdom | 328 |
| 9 | Russian Federation | 316 |
| 10 | European Union | 315 |
Saturday, May 17, 2025
Botnet Statistics [2025-05-16]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24409
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22376
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24409
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22376
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 85956 |
| 2 | 5900 | 44234 |
| 3 | 22 | 40777 |
| 4 | 6000 | 38467 |
| 5 | 33322 | 36655 |
| 6 | 8822 | 26554 |
| 7 | 5902 | 17532 |
| 8 | 2244 | 16880 |
| 9 | 5522 | 15801 |
| 10 | 2222 | 15495 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1482 |
| 2 | AL-3 | 1406 |
| 3 | GOOGLE-CLOUD | 1014 |
| 4 | PAN-22 | 959 |
| 5 | ASEPL-SG | 915 |
| 6 | BSNLNET | 742 |
| 7 | HURRICANE-4 | 445 |
| 8 | ALISOFT | 437 |
| 9 | VOLCANO-ENGINE | 412 |
| 10 | CMNET | 412 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 7994 |
| 2 | China | 5476 |
| 3 | India | 1544 |
| 4 | Singapore | 1059 |
| 5 | South Korea | 647 |
| 6 | Hong Kong | 590 |
| 7 | Russian Federation | 476 |
| 8 | Netherlands | 461 |
| 9 | United Kingdom | 389 |
| 10 | Indonesia | 355 |
Friday, May 16, 2025
Botnet Statistics [2025-05-15]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 25523
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23398
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-15 00:00-23:59 UTC
total number of suspected botnet IPs: 25523
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23398
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 90848 |
| 2 | 5900 | 63683 |
| 3 | 8822 | 40790 |
| 4 | 22 | 40322 |
| 5 | 2233 | 35230 |
| 6 | 2222 | 28156 |
| 7 | 50010 | 26597 |
| 8 | 5902 | 17483 |
| 9 | 54545 | 16093 |
| 10 | 2022 | 15218 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1543 |
| 2 | AL-3 | 1397 |
| 3 | GOOGLE-CLOUD | 1024 |
| 4 | PAN-22 | 958 |
| 5 | ASEPL-SG | 875 |
| 6 | BSNLNET | 772 |
| 7 | ALISOFT | 498 |
| 8 | CMNET | 495 |
| 9 | KORNET-KR | 452 |
| 10 | HURRICANE-4 | 434 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8752 |
| 2 | China | 5444 |
| 3 | India | 1589 |
| 4 | Singapore | 1024 |
| 5 | South Korea | 716 |
| 6 | Hong Kong | 593 |
| 7 | Russian Federation | 505 |
| 8 | Netherlands | 472 |
| 9 | United Kingdom | 378 |
| 10 | Indonesia | 371 |
Thursday, May 15, 2025
Botnet Statistics [2025-05-14]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 26033
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23978
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-14 00:00-23:59 UTC
total number of suspected botnet IPs: 26033
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23978
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 92414 |
| 2 | 5900 | 79813 |
| 3 | 2233 | 51789 |
| 4 | 22 | 42574 |
| 5 | 8822 | 41513 |
| 6 | 59999 | 30841 |
| 7 | 2022 | 18998 |
| 8 | 5902 | 17872 |
| 9 | 2222 | 17678 |
| 10 | 55522 | 17624 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1556 |
| 2 | AL-3 | 1389 |
| 3 | GOOGLE-CLOUD | 1020 |
| 4 | PAN-22 | 956 |
| 5 | ASEPL-SG | 942 |
| 6 | BSNLNET | 807 |
| 7 | KORNET-KR | 509 |
| 8 | CMNET | 481 |
| 9 | ALISOFT | 468 |
| 10 | HURRICANE-4 | 443 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8692 |
| 2 | China | 5798 |
| 3 | India | 1635 |
| 4 | Singapore | 1088 |
| 5 | South Korea | 794 |
| 6 | Hong Kong | 599 |
| 7 | Russian Federation | 508 |
| 8 | Netherlands | 473 |
| 9 | United Kingdom | 444 |
| 10 | Indonesia | 390 |
Wednesday, May 14, 2025
Botnet Statistics [2025-05-13]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 25988
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23414
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-13 00:00-23:59 UTC
total number of suspected botnet IPs: 25988
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23414
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 3022 | 92552 |
| 2 | 2233 | 53020 |
| 3 | 22 | 45673 |
| 4 | 5900 | 36253 |
| 5 | 55522 | 25337 |
| 6 | 23 | 23158 |
| 7 | 5902 | 18088 |
| 8 | 54545 | 17486 |
| 9 | 2222 | 17018 |
| 10 | 225 | 15822 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1563 |
| 2 | AL-3 | 1324 |
| 3 | GOOGLE-CLOUD | 987 |
| 4 | PAN-22 | 949 |
| 5 | ASEPL-SG | 857 |
| 6 | BSNLNET | 803 |
| 7 | KORNET-KR | 481 |
| 8 | CMNET | 472 |
| 9 | ALISOFT | 455 |
| 10 | HURRICANE-4 | 438 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8798 |
| 2 | China | 5581 |
| 3 | India | 1661 |
| 4 | Singapore | 1010 |
| 5 | South Korea | 756 |
| 6 | Hong Kong | 584 |
| 7 | Russian Federation | 516 |
| 8 | Netherlands | 489 |
| 9 | Germany | 408 |
| 10 | United Kingdom | 398 |
Tuesday, May 13, 2025
Botnet Statistics [2025-05-12]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 25450
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23414
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-12 00:00-23:59 UTC
total number of suspected botnet IPs: 25450
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23414
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 87577 |
| 2 | 4444 | 63971 |
| 3 | 3022 | 58469 |
| 4 | 10000 | 48395 |
| 5 | 22 | 41742 |
| 6 | 9999 | 35959 |
| 7 | 8022 | 32894 |
| 8 | 4422 | 30407 |
| 9 | 2233 | 30116 |
| 10 | 5900 | 22627 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1574 |
| 2 | AL-3 | 1326 |
| 3 | GOOGLE-CLOUD | 995 |
| 4 | PAN-22 | 945 |
| 5 | ASEPL-SG | 841 |
| 6 | BSNLNET | 733 |
| 7 | TCIMZD | 703 |
| 8 | KORNET-KR | 556 |
| 9 | CMNET | 454 |
| 10 | HURRICANE-4 | 445 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8427 |
| 2 | China | 5583 |
| 3 | India | 1503 |
| 4 | Singapore | 991 |
| 5 | South Korea | 838 |
| 6 | Iran | 836 |
| 7 | Hong Kong | 599 |
| 8 | Russian Federation | 488 |
| 9 | United Kingdom | 432 |
| 10 | European Union | 351 |
Monday, May 12, 2025
Botnet Statistics [2025-05-11]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 25238
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23294
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-11 00:00-23:59 UTC
total number of suspected botnet IPs: 25238
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23294
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 87577 |
| 2 | 4444 | 63971 |
| 3 | 3022 | 58469 |
| 4 | 10000 | 48395 |
| 5 | 22 | 41742 |
| 6 | 9999 | 35959 |
| 7 | 8022 | 32894 |
| 8 | 4422 | 30407 |
| 9 | 2233 | 30116 |
| 10 | 5900 | 22627 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1574 |
| 2 | AL-3 | 1215 |
| 3 | GOOGLE-CLOUD | 1010 |
| 4 | PAN-22 | 953 |
| 5 | ASEPL-SG | 802 |
| 6 | BSNLNET | 734 |
| 7 | KORNET-KR | 565 |
| 8 | TCIMZD | 481 |
| 9 | CMNET | 457 |
| 10 | HURRICANE-4 | 451 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8628 |
| 2 | China | 5738 |
| 3 | India | 1437 |
| 4 | Singapore | 991 |
| 5 | South Korea | 862 |
| 6 | Iran | 634 |
| 7 | Hong Kong | 596 |
| 8 | Russian Federation | 463 |
| 9 | United Kingdom | 359 |
| 10 | Germany | 342 |
Sunday, May 11, 2025
Botnet Statistics [2025-05-10]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 29344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26661
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-10 00:00-23:59 UTC
total number of suspected botnet IPs: 29344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26661
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 120776 |
| 2 | 5555 | 45158 |
| 3 | 4422 | 38702 |
| 4 | 10000 | 38333 |
| 5 | 22 | 36923 |
| 6 | 9999 | 36678 |
| 7 | 12022 | 30329 |
| 8 | 2233 | 29462 |
| 9 | 8022 | 26019 |
| 10 | 23 | 25393 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1552 |
| 2 | AL-3 | 1314 |
| 3 | GOOGLE-CLOUD | 1009 |
| 4 | PAN-22 | 954 |
| 5 | ASEPL-SG | 867 |
| 6 | BSNLNET | 734 |
| 7 | KORNET-KR | 662 |
| 8 | HURRICANE-4 | 446 |
| 9 | ALISOFT | 438 |
| 10 | CMNET | 426 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8270 |
| 2 | China | 5846 |
| 3 | India | 1854 |
| 4 | Singapore | 1044 |
| 5 | South Korea | 995 |
| 6 | Brazil | 770 |
| 7 | Indonesia | 629 |
| 8 | Hong Kong | 608 |
| 9 | Viet Nam | 530 |
| 10 | Russian Federation | 469 |
Saturday, May 10, 2025
Botnet Statistics [2025-05-09]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 24873
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22854
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-09 00:00-23:59 UTC
total number of suspected botnet IPs: 24873
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22854
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 164681 |
| 2 | 7722 | 140715 |
| 3 | 5555 | 79708 |
| 4 | 4422 | 45267 |
| 5 | 22 | 44312 |
| 6 | 12022 | 35622 |
| 7 | 9999 | 33842 |
| 8 | 23 | 31077 |
| 9 | 5900 | 30517 |
| 10 | 8022 | 20697 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1566 |
| 2 | AL-3 | 1205 |
| 3 | GOOGLE-CLOUD | 1010 |
| 4 | PAN-22 | 953 |
| 5 | BSNLNET | 840 |
| 6 | ASEPL-SG | 767 |
| 7 | KORNET-KR | 678 |
| 8 | HURRICANE-4 | 451 |
| 9 | ALISOFT | 423 |
| 10 | VOLCANO-ENGINE | 416 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8227 |
| 2 | China | 5534 |
| 3 | India | 1681 |
| 4 | South Korea | 997 |
| 5 | Singapore | 953 |
| 6 | Hong Kong | 583 |
| 7 | Russian Federation | 465 |
| 8 | United Kingdom | 460 |
| 9 | Indonesia | 397 |
| 10 | Viet Nam | 362 |
Friday, May 9, 2025
Botnet Statistics [2025-05-08]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26255
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24250
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26255
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24250
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 93826 |
| 2 | 7722 | 88053 |
| 3 | 8090 | 42372 |
| 4 | 22 | 41566 |
| 5 | 5900 | 37670 |
| 6 | 5555 | 29719 |
| 7 | 23 | 27854 |
| 8 | 8022 | 23112 |
| 9 | 9999 | 20888 |
| 10 | 2122 | 17775 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1579 |
| 2 | AL-3 | 1349 |
| 3 | GOOGLE-CLOUD | 1017 |
| 4 | PAN-22 | 951 |
| 5 | ASEPL-SG | 951 |
| 6 | BSNLNET | 822 |
| 7 | KORNET-KR | 592 |
| 8 | HURRICANE-4 | 448 |
| 9 | ALISOFT | 448 |
| 10 | VOLCANO-ENGINE | 405 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9037 |
| 2 | China | 5811 |
| 3 | India | 1667 |
| 4 | Singapore | 1147 |
| 5 | South Korea | 864 |
| 6 | Hong Kong | 577 |
| 7 | Russian Federation | 472 |
| 8 | United Kingdom | 468 |
| 9 | Netherlands | 418 |
| 10 | Indonesia | 396 |
Thursday, May 8, 2025
Botnet Statistics [2025-05-07]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 24761
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22669
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-07 00:00-23:59 UTC
total number of suspected botnet IPs: 24761
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22669
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 126293 |
| 2 | 22 | 43105 |
| 3 | 5900 | 37843 |
| 4 | 8022 | 23800 |
| 5 | 8822 | 23391 |
| 6 | 10101 | 21483 |
| 7 | 1022 | 14717 |
| 8 | 222 | 14715 |
| 9 | 9922 | 14114 |
| 10 | 445 | 13363 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1566 |
| 2 | AL-3 | 1168 |
| 3 | GOOGLE-CLOUD | 1005 |
| 4 | PAN-22 | 951 |
| 5 | BSNLNET | 787 |
| 6 | ASEPL-SG | 744 |
| 7 | KORNET-KR | 457 |
| 8 | HURRICANE-4 | 454 |
| 9 | ALISOFT | 448 |
| 10 | VOLCANO-ENGINE | 425 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8327 |
| 2 | China | 5943 |
| 3 | India | 1586 |
| 4 | Singapore | 926 |
| 5 | South Korea | 678 |
| 6 | Hong Kong | 568 |
| 7 | Russian Federation | 494 |
| 8 | Indonesia | 455 |
| 9 | United Kingdom | 437 |
| 10 | European Union | 346 |
Wednesday, May 7, 2025
Botnet Statistics [2025-05-06]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 25353
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23355
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 25353
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23355
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 141321 |
| 2 | 22 | 42912 |
| 3 | 7722 | 39721 |
| 4 | 23 | 37654 |
| 5 | 8822 | 36357 |
| 6 | 4422 | 34071 |
| 7 | 5900 | 33821 |
| 8 | 8022 | 24946 |
| 9 | 9999 | 24764 |
| 10 | 5522 | 21804 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1930 |
| 2 | AL-3 | 1407 |
| 3 | GOOGLE-CLOUD | 972 |
| 4 | ASEPL-SG | 956 |
| 5 | PAN-22 | 937 |
| 6 | BSNLNET | 710 |
| 7 | KORNET-KR | 501 |
| 8 | ALISOFT | 457 |
| 9 | VOLCANO-ENGINE | 454 |
| 10 | HURRICANE-4 | 441 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 9185 |
| 2 | China | 5696 |
| 3 | India | 1441 |
| 4 | Singapore | 1191 |
| 5 | South Korea | 733 |
| 6 | Hong Kong | 579 |
| 7 | United Kingdom | 458 |
| 8 | Indonesia | 455 |
| 9 | Russian Federation | 400 |
| 10 | European Union | 351 |
Tuesday, May 6, 2025
Botnet Statistics [2025-05-05]
(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 24142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22300
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
detection period: 2025-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 24142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22300
number of spam blocked: 0
recipient count of spam blocked: 0
The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 2228 | 45875 |
| 2 | 22 | 42815 |
| 3 | 8822 | 37079 |
| 4 | 5900 | 27494 |
| 5 | 2029 | 21558 |
| 6 | 9922 | 16615 |
| 7 | 445 | 16046 |
| 8 | 2224 | 15946 |
| 9 | 222 | 15644 |
| 10 | 1022 | 14989 |
| Rank | Network | # of suspected botnet IPs |
|---|---|---|
| 1 | MSFT | 1855 |
| 2 | AL-3 | 1203 |
| 3 | GOOGLE-CLOUD | 966 |
| 4 | PAN-22 | 945 |
| 5 | BSNLNET | 790 |
| 6 | ASEPL-SG | 752 |
| 7 | KORNET-KR | 537 |
| 8 | HURRICANE-4 | 450 |
| 9 | ALISOFT | 409 |
| 10 | CENSY | 399 |
The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:
The top 10 TCP ports, ordered by the number of connection attempts received are:
| Rank | Country/Region | # of suspected botnet IPs |
|---|---|---|
| 1 | United States | 8465 |
| 2 | China | 5686 |
| 3 | India | 1578 |
| 4 | Singapore | 933 |
| 5 | South Korea | 815 |
| 6 | Hong Kong | 632 |
| 7 | Russian Federation | 429 |
| 8 | Netherlands | 394 |
| 9 | Indonesia | 336 |
| 10 | European Union | 332 |
Subscribe to:
Comments (Atom)
| Rank | TCP port number | # of connection attempts received |
|---|---|---|
| 1 | 22 | 43007 |
| 2 | 2224 | 41065 |
| 3 | 8822 | 36420 |
| 4 | 5900 | 36419 |
| 5 | 2221 | 26105 |
| 6 | 9922 | 16384 |
| 7 | 222 | 14989 |
| 8 | 1022 | 14835 |
| 9 | 7890 | 14755 |
| 10 | 9022 | 12883 |