Botnet Statistics [2025-06-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21979
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20550
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1592
2	AL-3	1489
3	ASEPL-SG	1053
4	GOOGLE-CLOUD	1014
5	PAN-22	960
6	BSNLNET	727
7	ALISOFT	499
8	VOLCANO-ENGINE	489
9	VE-CSVE-LACNIC	410
10	CENSY	392

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8181
2	China	4235
3	India	1291
4	Singapore	1183
5	South Korea	466
6	Hong Kong	424
7	Venezuela	423
8	United Kingdom	372
9	Indonesia	357
10	Viet Nam	341

20250630 Botnet Detection Live Streaming 20+ zombies detected)

Sunday, June 29, 2025

Botnet Statistics [2025-06-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-28 00:00-23:59 UTC
total number of suspected botnet IPs: 22773
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21443
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	171034
2	6000	67384
3	22	56276
4	9922	53249
5	6022	52100
6	3022	28820
7	5900	28778
8	3333	25994
9	22987	19235
10	23	16891

Rank	Network	# of suspected botnet IPs
1	MSFT	1591
2	AL-3	1493
3	ASEPL-SG	1130
4	GOOGLE-CLOUD	1018
5	PAN-22	959
6	BSNLNET	737
7	ALISOFT	492
8	VOLCANO-ENGINE	491
9	CENSY	392
10	VE-CSVE-LACNIC	377

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7922
2	China	4461
3	India	1371
4	Singapore	1285
5	South Korea	549
6	Hong Kong	451
7	Russian Federation	408
8	Venezuela	391
9	Indonesia	391
10	United Kingdom	358

20250629 Botnet Detection Live Streaming 70+ zombies detected)

Saturday, June 28, 2025

Botnet Statistics [2025-06-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-27 00:00-23:59 UTC
total number of suspected botnet IPs: 23987
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22635
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	173049
2	9922	54690
3	22	48901
4	6002	42291
5	6022	42285
6	6000	34210
7	3022	29366
8	5900	27938
9	2233	24336
10	3333	16154

Rank	Network	# of suspected botnet IPs
1	MSFT	1585
2	AL-3	1515
3	ASEPL-SG	1091
4	GOOGLE-CLOUD	1028
5	PAN-22	959
6	BSNLNET	790
7	ALISOFT	525
8	KORNET-KR	524
9	VOLCANO-ENGINE	485
10	CMNET	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8129
2	China	4700
3	India	1506
4	Singapore	1246
5	South Korea	756
6	Hong Kong	470
7	Russian Federation	452
8	Brazil	398
9	Indonesia	385
10	Venezuela	384

20250628 Botnet Detection Live Streaming 30+ zombies detected)

Friday, June 27, 2025

Botnet Statistics [2025-06-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22818
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21565
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	171837
2	7000	110873
3	6002	91272
4	9922	55695
5	6000	34352
6	3022	28594
7	5900	20805
8	22	19992
9	23	17391
10	445	14880

Rank	Network	# of suspected botnet IPs
1	MSFT	1594
2	AL-3	1513
3	ASEPL-SG	1116
4	GOOGLE-CLOUD	1026
5	PAN-22	959
6	BSNLNET	772
7	ALISOFT	517
8	VOLCANO-ENGINE	475
9	VE-CSVE-LACNIC	424
10	CENSY	391

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8386
2	China	4290
3	India	1415
4	Singapore	1257
5	South Korea	484
6	Venezuela	436
7	Hong Kong	434
8	Indonesia	424
9	United Kingdom	385
10	Russian Federation	356

20250627 Botnet Detection Live Streaming 30+ zombies detected)

Thursday, June 26, 2025

Botnet Statistics [2025-06-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-25 00:00-23:59 UTC
total number of suspected botnet IPs: 21891
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20564
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	169673
2	6000	114745
3	6002	99296
4	8228	96168
5	5900	67821
6	2323	65246
7	5901	45046
8	3022	29383
9	2234	24264
10	7000	19086

Rank	Network	# of suspected botnet IPs
1	MSFT	1601
2	AL-3	1546
3	ASEPL-SG	1115
4	GOOGLE-CLOUD	1021
5	PAN-22	959
6	BSNLNET	550
7	ALISOFT	500
8	VOLCANO-ENGINE	475
9	VE-CSVE-LACNIC	393
10	CENSY	391

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7592
2	China	4225
3	Singapore	1274
4	India	1124
5	South Korea	463
6	Indonesia	444
7	Hong Kong	435
8	Venezuela	411
9	Germany	409
10	Brazil	378

20250626 Botnet Detection Live Streaming 20+ zombies detected)

Wednesday, June 25, 2025

Botnet Statistics [2025-06-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22650
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21264
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	150249
2	5900	118585
3	6000	114073
4	5901	109198
5	6002	96373
6	2323	62415
7	58000	50854
8	2234	33246
9	3022	28159
10	9922	25804

Rank	Network	# of suspected botnet IPs
1	MSFT	1612
2	AL-3	1548
3	ASEPL-SG	1139
4	GOOGLE-CLOUD	974
5	PAN-22	943
6	BSNLNET	657
7	ALISOFT	500
8	VOLCANO-ENGINE	475
9	CENSY	392
10	VE-CSVE-LACNIC	385

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8214
2	China	4134
3	India	1340
4	Singapore	1296
5	Hong Kong	471
6	Indonesia	454
7	Russian Federation	409
8	Venezuela	396
9	United Kingdom	392
10	Brazil	392

20250625 Botnet Detection Live Streaming 30+ zombies detected)

Tuesday, June 24, 2025

Botnet Statistics [2025-06-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-23 00:00-23:59 UTC
total number of suspected botnet IPs: 24656
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22559
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	133850
2	5901	107854
3	6000	100931
4	6002	97988
5	5900	94763
6	3022	27624
7	2234	20067
8	22	19054
9	445	16223
10	44000	15321

Rank	Network	# of suspected botnet IPs
1	MSFT	1623
2	AL-3	1544
3	ASEPL-SG	1158
4	GOOGLE-CLOUD	985
5	PAN-22	952
6	BSNLNET	687
7	ALISOFT	525
8	VOLCANO-ENGINE	484
9	HURRICANE-4	444
10	VE-CSVE-LACNIC	441

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8524
2	China	4678
3	India	1430
4	Singapore	1319
5	Hong Kong	557
6	Russian Federation	546
7	South Korea	522
8	Indonesia	469
9	Venezuela	460
10	Brazil	391

20250624 Botnet Detection Live Streaming 30+ zombies detected)

Monday, June 23, 2025

Botnet Statistics [2025-06-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-22 00:00-23:59 UTC
total number of suspected botnet IPs: 23732
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21889
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	122360
2	6000	102180
3	6002	41149
4	5900	40876
5	6007	21565
6	6008	19938
7	3022	19480
8	22	19335
9	40022	18729
10	23	18098

Rank	Network	# of suspected botnet IPs
1	MSFT	1591
2	AL-3	1488
3	ASEPL-SG	1077
4	GOOGLE-CLOUD	1014
5	PAN-22	960
6	BSNLNET	609
7	ALISOFT	506
8	VOLCANO-ENGINE	448
9	HURRICANE-4	440
10	VE-CSVE-LACNIC	406

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8809
2	China	4640
3	India	1227
4	Singapore	1199
5	Hong Kong	553
6	South Korea	495
7	Russian Federation	448
8	Netherlands	445
9	Venezuela	419
10	United Kingdom	388

20250623 Botnet Detection Live Streaming 30+ zombies detected)

Sunday, June 22, 2025

Botnet Statistics [2025-06-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-21 00:00-23:59 UTC
total number of suspected botnet IPs: 23650
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21736
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	41713
2	6001	37740
3	5900	25210
4	4222	19285
5	23	19172
6	40022	17961
7	445	17032
8	22	16885
9	6002	11852
10	6004	11514

Rank	Network	# of suspected botnet IPs
1	MSFT	1593
2	AL-3	1527
3	ASEPL-SG	1075
4	GOOGLE-CLOUD	1018
5	PAN-22	959
6	BSNLNET	829
7	ALISOFT	508
8	HURRICANE-4	439
9	VOLCANO-ENGINE	433
10	CMNET	403

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8213
2	China	4879
3	India	1538
4	Singapore	1208
5	Hong Kong	523
6	Russian Federation	459
7	South Korea	457
8	United Kingdom	356
9	Venezuela	329
10	Brazil	325

20250622 Botnet Detection Live Streaming 30+ zombies detected)

Friday, June 20, 2025

Botnet Statistics [2025-06-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-19 00:00-23:59 UTC
total number of suspected botnet IPs: 24648
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22626
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	12345	43423
2	6000	38128
3	6001	36513
4	5900	31603
5	23	23635
6	8174	22928
7	22	16144
8	445	13538
9	1000	12549
10	6003	11339

Rank	Network	# of suspected botnet IPs
1	MSFT	1580
2	AL-3	1494
3	ASEPL-SG	1112
4	GOOGLE-CLOUD	1025
5	PAN-22	959
6	BSNLNET	940
7	ALISOFT	506
8	VOLCANO-ENGINE	447
9	HURRICANE-4	442
10	CMNET	420

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8724
2	China	4647
3	India	1787
4	Singapore	1278
5	Hong Kong	532
6	South Korea	484
7	Russian Federation	465
8	Venezuela	435
9	Netherlands	433
10	United Kingdom	375

20250620 Botnet Detection Live Streaming 10+ zombies detected)

Thursday, June 19, 2025

Botnet Statistics [2025-06-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-18 00:00-23:59 UTC
total number of suspected botnet IPs: 23878
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21874
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5522	78730
2	12345	62519
3	6000	39985
4	6001	39956
5	5900	31537
6	23	22673
7	22	19866
8	445	13708
9	60000	11022
10	6769	10460

Rank	Network	# of suspected botnet IPs
1	MSFT	1564
2	AL-3	1474
3	ASEPL-SG	1128
4	GOOGLE-CLOUD	1014
5	PAN-22	959
6	BSNLNET	658
7	ALISOFT	508
8	HURRICANE-4	448
9	VOLCANO-ENGINE	443
10	CMNET	422

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8409
2	China	4650
3	India	1343
4	Singapore	1296
5	South Korea	527
6	Hong Kong	519
7	Russian Federation	470
8	Venezuela	425
9	Viet Nam	359
10	United Kingdom	356

20250619 Botnet Detection Live Streaming 40+ zombies detected)

Wednesday, June 18, 2025

Botnet Statistics [2025-06-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-17 00:00-23:59 UTC
total number of suspected botnet IPs: 23589
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21591
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	12345	62872
2	9001	53670
3	6001	36351
4	6000	36098
5	23	24882
6	5522	23846
7	5900	18838
8	22	18347
9	9000	17547
10	445	16058

Rank	Network	# of suspected botnet IPs
1	AL-3	1455
2	MSFT	1401
3	ASEPL-SG	1105
4	GOOGLE-CLOUD	973
5	PAN-22	948
6	BSNLNET	678
7	ALISOFT	501
8	HURRICANE-4	441
9	VOLCANO-ENGINE	435
10	VE-CSVE-LACNIC	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8104
2	China	4733
3	India	1289
4	Singapore	1253
5	Hong Kong	523
6	South Korea	510
7	Russian Federation	475
8	Venezuela	411
9	Brazil	377
10	United Kingdom	351

20250618 Botnet Detection Live Streaming 90+ zombies detected)

Tuesday, June 17, 2025

Botnet Statistics [2025-06-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-16 00:00-23:59 UTC
total number of suspected botnet IPs: 24018
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22055
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	12345	62915
2	1980	35528
3	4001	29432
4	6000	25417
5	23	24405
6	6001	21243
7	5900	18648
8	9022	16472
9	22	15938
10	2217	15847

Rank	Network	# of suspected botnet IPs
1	AL-3	1494
2	MSFT	1453
3	ASEPL-SG	1095
4	GOOGLE-CLOUD	990
5	PAN-22	946
6	BSNLNET	691
7	ALISOFT	462
8	VOLCANO-ENGINE	448
9	HURRICANE-4	446
10	VE-CSVE-LACNIC	422

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8444
2	China	4754
3	India	1349
4	Singapore	1235
5	Hong Kong	535
6	Russian Federation	504
7	South Korea	446
8	Venezuela	436
9	Brazil	381
10	Viet Nam	344

20250617 Botnet Detection Live Streaming 30+ zombies detected)

Monday, June 16, 2025

Botnet Statistics [2025-06-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-15 00:00-23:59 UTC
total number of suspected botnet IPs: 24011
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22070
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6666	98115
2	12345	59764
3	6000	31189
4	23	23287
5	5900	21809
6	1980	20449
7	22	18135
8	6001	16161
9	445	15499
10	55284	15035

Rank	Network	# of suspected botnet IPs
1	MSFT	1497
2	AL-3	1483
3	ASEPL-SG	1112
4	GOOGLE-CLOUD	1009
5	PAN-22	959
6	BSNLNET	609
7	ALISOFT	505
8	HURRICANE-4	447
9	VOLCANO-ENGINE	441
10	VE-CSVE-LACNIC	427

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9052
2	China	4641
3	Singapore	1281
4	India	1148
5	Hong Kong	532
6	South Korea	452
7	Russian Federation	444
8	Venezuela	439
9	United Kingdom	384
10	Taiwan	353

20250616 Botnet Detection Live Streaming 40+ zombies detected)

Sunday, June 15, 2025

Botnet Statistics [2025-06-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-14 00:00-23:59 UTC
total number of suspected botnet IPs: 23149
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21210
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	65605
2	12345	62979
3	6666	34774
4	5900	29844
5	52598	28483
6	5000	27108
7	23	24138
8	22	18954
9	19976	12947
10	2001	12098

Rank	Network	# of suspected botnet IPs
1	MSFT	1544
2	AL-3	1437
3	ASEPL-SG	1090
4	GOOGLE-CLOUD	1016
5	PAN-22	958
6	BSNLNET	588
7	ALISOFT	472
8	VOLCANO-ENGINE	448
9	HURRICANE-4	437
10	CENSY	393

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8107
2	China	4603
3	Singapore	1217
4	India	1166
5	Hong Kong	516
6	Netherlands	510
7	South Korea	496
8	Russian Federation	480
9	Venezuela	378
10	United Kingdom	366

20250615 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, June 14, 2025

Botnet Statistics [2025-06-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-13 00:00-23:59 UTC
total number of suspected botnet IPs: 23550
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21496
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	90757
2	5900	27423
3	12345	23693
4	23	21356
5	22	18132
6	7005	15881
7	7006	15742
8	7009	15492
9	4447	15208
10	3332	15102

Rank	Network	# of suspected botnet IPs
1	MSFT	1559
2	AL-3	1442
3	GOOGLE-CLOUD	1019
4	ASEPL-SG	988
5	PAN-22	959
6	BSNLNET	614
7	ALISOFT	481
8	HURRICANE-4	450
9	VOLCANO-ENGINE	438
10	VE-CSVE-LACNIC	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8116
2	China	4805
3	India	1292
4	Singapore	1121
5	Hong Kong	545
6	South Korea	493
7	Russian Federation	455
8	Venezuela	417
9	United Kingdom	390
10	Brazil	381

20250614 Botnet Detection Live Streaming 40+ zombies detected)

Friday, June 13, 2025

Botnet Statistics [2025-06-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-12 00:00-23:59 UTC
total number of suspected botnet IPs: 24309
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22392
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	10720	45179
2	13201	43516
3	6000	37163
4	4884	23318
5	23	22725
6	5900	21591
7	22	18040
8	21013	16128
9	1136	12653
10	7001	11459

Rank	Network	# of suspected botnet IPs
1	MSFT	1580
2	AL-3	1459
3	GOOGLE-CLOUD	1017
4	ASEPL-SG	1010
5	PAN-22	960
6	ALISOFT	467
7	BSNLNET	459
8	HURRICANE-4	445
9	VOLCANO-ENGINE	441
10	VE-CSVE-LACNIC	425

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8821
2	China	4816
3	Singapore	1145
4	India	1085
5	Hong Kong	543
6	South Korea	513
7	Venezuela	441
8	Russian Federation	431
9	Thailand	410
10	United Kingdom	408

20250613 Botnet Detection Live Streaming 20+ zombies detected)

Botnet Statistics [2025-06-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-11 00:00-23:59 UTC
total number of suspected botnet IPs: 24506
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22434
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5122	27605
2	23	24946
3	9753	23477
4	445	19005
5	5900	18507
6	22	15977
7	9622	15544
8	54002	14992
9	1010	10152
10	1136	10023

Rank	Network	# of suspected botnet IPs
1	MSFT	1600
2	AL-3	1460
3	ASEPL-SG	1002
4	GOOGLE-CLOUD	982
5	PAN-22	948
6	BSNLNET	521
7	ALISOFT	495
8	VE-CSVE-LACNIC	449
9	HURRICANE-4	442
10	VOLCANO-ENGINE	439

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8398
2	China	4701
3	India	1164
4	Singapore	1125
5	Hong Kong	570
6	South Korea	532
7	Netherlands	519
8	Russian Federation	511
9	Venezuela	459
10	Brazil	381

20250612 Botnet Detection Live Streaming 30+ zombies detected)

Wednesday, June 11, 2025

Botnet Statistics [2025-06-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-10 00:00-23:59 UTC
total number of suspected botnet IPs: 25528
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23514
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	79055
2	5122	57712
3	23	23459
4	906	21591
5	1587	18090
6	22	15809
7	445	13159
8	1243	12854
9	5022	11657
10	5023	11636

Rank	Network	# of suspected botnet IPs
1	MSFT	1526
2	AL-3	1498
3	ASEPL-SG	1076
4	GOOGLE-CLOUD	967
5	PAN-22	946
6	BSNLNET	549
7	ALISOFT	473
8	VOLCANO-ENGINE	438
9	CMNET	437
10	HURRICANE-4	407

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9116
2	China	5144
3	Singapore	1295
4	India	1222
5	South Korea	638
6	Hong Kong	551
7	Russian Federation	530
8	Venezuela	401
9	Germany	384
10	United Kingdom	376

20250611 Botnet Detection Live Streaming 20+ zombies detected)

Tuesday, June 10, 2025

Botnet Statistics [2025-06-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-09 00:00-23:59 UTC
total number of suspected botnet IPs: 24174
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22124
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5122	55775
2	23	24790
3	9938	22501
4	5900	17892
5	6222	15819
6	22	15052
7	5022	12069
8	445	11757
9	5023	11384
10	2025	10942

Rank	Network	# of suspected botnet IPs
1	AL-3	1534
2	MSFT	1473
3	ASEPL-SG	1160
4	GOOGLE-CLOUD	977
5	PAN-22	943
6	ALISOFT	475
7	VOLCANO-ENGINE	446
8	KORNET-KR	429
9	HURRICANE-4	421
10	CENSY	400

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8289
2	China	5158
3	Singapore	1339
4	India	988
5	South Korea	664
6	Hong Kong	564
7	Russian Federation	495
8	Viet Nam	423
9	United Kingdom	376
10	Brazil	367

20250610 Botnet Detection Live Streaming 10+ zombies detected)

Monday, June 9, 2025

Botnet Statistics [2025-06-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-08 00:00-23:59 UTC
total number of suspected botnet IPs: 22646
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20756
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	23	23790
2	5122	22763
3	5900	17060
4	445	16023
5	2204	15362
6	22	13941
7	3333	11438
8	6222	11248
9	9003	9665
10	1433	9198

Rank	Network	# of suspected botnet IPs
1	MSFT	1495
2	AL-3	1494
3	ASEPL-SG	1134
4	GOOGLE-CLOUD	1007
5	PAN-22	959
6	ALISOFT	489
7	BSNLNET	488
8	HURRICANE-4	450
9	VOLCANO-ENGINE	443
10	CENSY	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8695
2	China	4287
3	Singapore	1315
4	India	939
5	South Korea	584
6	Hong Kong	519
7	Russian Federation	402
8	Venezuela	395
9	United Kingdom	390
10	Viet Nam	356

20250609 Botnet Detection Live Streaming 10+ zombies detected)

Sunday, June 8, 2025

Botnet Statistics [2025-06-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-07 00:00-23:59 UTC
total number of suspected botnet IPs: 21999
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20134
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1798	30432
2	23	24801
3	2626	22925
4	4884	22904
5	6018	18748
6	5900	18098
7	2230	14729
8	27708	14598
9	22	14161
10	35033	12619

Rank	Network	# of suspected botnet IPs
1	MSFT	1517
2	AL-3	1494
3	ASEPL-SG	1105
4	GOOGLE-CLOUD	1012
5	PAN-22	959
6	BSNLNET	511
7	ALISOFT	496
8	HURRICANE-4	449
9	VOLCANO-ENGINE	439
10	KORNET-KR	411

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8194
2	China	4368
3	Singapore	1275
4	India	976
5	South Korea	568
6	Hong Kong	528
7	Venezuela	363
8	Viet Nam	353
9	Russian Federation	350
10	United Kingdom	331

20250608 Botnet Detection Live Streaming 20+ zombies detected)

Saturday, June 7, 2025

Botnet Statistics [2025-06-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-06 00:00-23:59 UTC
total number of suspected botnet IPs: 22431
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20467
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	39282	49542
2	37126	35450
3	18579	33895
4	21814	28556
5	23	25348
6	5900	16727
7	39020	16523
8	23772	15345
9	3333	14736
10	54002	13286

Rank	Network	# of suspected botnet IPs
1	MSFT	1531
2	AL-3	1504
3	ASEPL-SG	1064
4	GOOGLE-CLOUD	1013
5	PAN-22	960
6	BSNLNET	618
7	ALISOFT	473
8	KORNET-KR	472
9	HURRICANE-4	454
10	VOLCANO-ENGINE	440

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8398
2	China	4398
3	Singapore	1244
4	India	1136
5	South Korea	647
6	Hong Kong	501
7	Venezuela	393
8	United Kingdom	371
9	Russian Federation	358
10	European Union	326

20250607 Botnet Detection Live Streaming 30+ zombies detected)

Friday, June 6, 2025

Botnet Statistics [2025-06-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-05 00:00-23:59 UTC
total number of suspected botnet IPs: 23035
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21002
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	23	24613
2	1804	23347
3	7532	22652
4	22	18474
5	5900	15433
6	2216	13974
7	2222	9769
8	9003	9448
9	22200	8517
10	22203	7988

Rank	Network	# of suspected botnet IPs
1	MSFT	1597
2	AL-3	1565
3	ASEPL-SG	1028
4	GOOGLE-CLOUD	1012
5	PAN-22	959
6	BSNLNET	695
7	ALISOFT	495
8	HURRICANE-4	449
9	VOLCANO-ENGINE	443
10	KORNET-KR	421

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8504
2	China	4449
3	India	1298
4	Singapore	1217
5	South Korea	588
6	Hong Kong	541
7	Venezuela	400
8	Russian Federation	381
9	Indonesia	377
10	United Kingdom	358

20250606 Botnet Detection Live Streaming 40+ zombies detected)

Thursday, June 5, 2025

Botnet Statistics [2025-06-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-04 00:00-23:59 UTC
total number of suspected botnet IPs: 23070
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21062
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	23	22580
2	6000	19436
3	5900	18323
4	22	17445
5	2215	13946
6	38262	13521
7	445	12969
8	1433	9543
9	9003	9249
10	20002	7223

Rank	Network	# of suspected botnet IPs
1	MSFT	1596
2	AL-3	1528
3	ASEPL-SG	1056
4	GOOGLE-CLOUD	1013
5	PAN-22	958
6	BSNLNET	724
7	KORNET-KR	616
8	ALISOFT	475
9	HURRICANE-4	449
10	VOLCANO-ENGINE	445

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8219
2	China	4471
3	India	1378
4	Singapore	1224
5	South Korea	835
6	Hong Kong	566
7	Venezuela	404
8	Indonesia	390
9	Russian Federation	370
10	United Kingdom	367

20250605 Botnet Detection Live Streaming 20+ zombies detected)

Wednesday, June 4, 2025

Botnet Statistics [2025-06-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-06-03 00:00-23:59 UTC
total number of suspected botnet IPs: 24063
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21995
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	9003	40411
2	8888	35171
3	7777	28967
4	23	24997
5	5900	22343
6	34753	21553
7	22	21018
8	9000	20170
9	6001	16698
10	6003	15057

Rank	Network	# of suspected botnet IPs
1	MSFT	1553
2	AL-3	1548
3	ASEPL-SG	1095
4	GOOGLE-CLOUD	987
5	BSNLNET	966
6	PAN-22	948
7	KORNET-KR	886
8	ALISOFT	491
9	VOLCANO-ENGINE	459
10	HURRICANE-4	437

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8682
2	China	4514
3	India	1680
4	Singapore	1284
5	South Korea	1114
6	Hong Kong	516
7	Venezuela	414
8	Indonesia	386
9	United Kingdom	370
10	Russian Federation	341

20250604 Botnet Detection Live Streaming 40+ zombies detected)

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5877)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (61)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (353)
  • December (13)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	4444	68549
2	8888	59377
3	9003	56834
4	7777	44422
5	23	31680
6	22	23665
7	7667	23088
8	8833	22956
9	55522	21901
10	6001	21700