Botnet Statistics [2025-07-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-30 00:00-23:59 UTC
total number of suspected botnet IPs: 22680
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21328
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1646
2	MSFT	1544
3	GOOGLE-CLOUD	1343
4	ASEPL-SG	1264
5	PAN-22	954
6	GOOGL-2	529
7	ALISOFT	527
8	VOLCANO-ENGINE	525
9	CENSY	400
10	KORNET-KR	342

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8627
2	China	4233
3	Singapore	1521
4	Indonesia	574
5	Hong Kong	569
6	South Korea	509
7	Russian Federation	470
8	India	442
9	Viet Nam	384
10	United Kingdom	328

20250731 Botnet Detection Live Streaming 100+ zombies detected)

Wednesday, July 30, 2025

Botnet Statistics [2025-07-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21426
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20184
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	66105
2	8022	35433
3	3022	30110
4	22	28419
5	8888	26902
6	23432	22683
7	9000	19364
8	15022	17256
9	23	15856
10	22222	15687

Rank	Network	# of suspected botnet IPs
1	MSFT	1550
2	GOOGLE-CLOUD	1491
3	AL-3	1347
4	ASEPL-SG	1020
5	PAN-22	958
6	GOOGL-2	682
7	ALISOFT	474
8	VOLCANO-ENGINE	426
9	CENSY	400
10	KORNET-KR	339

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9051
2	China	3788
3	Singapore	1225
4	Hong Kong	507
5	South Korea	473
6	Indonesia	390
7	Russian Federation	374
8	Viet Nam	345
9	Thailand	328
10	United Kingdom	322

20250730 Botnet Detection Live Streaming 130+ zombies detected)

Tuesday, July 29, 2025

Botnet Statistics [2025-07-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-28 00:00-23:59 UTC
total number of suspected botnet IPs: 20259
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18986
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	157687
2	5555	55073
3	3022	30591
4	3026	29640
5	6060	29204
6	22	26436
7	33	23825
8	22222	22793
9	23	19245
10	222	15423

Rank	Network	# of suspected botnet IPs
1	MSFT	1558
2	AL-3	1347
3	ASEPL-SG	1051
4	GOOGLE-CLOUD	1009
5	PAN-22	956
6	ALISOFT	484
7	VOLCANO-ENGINE	417
8	CENSY	397
9	KORNET-KR	337
10	LINODE-US	265

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7645
2	China	3929
3	Singapore	1225
4	Hong Kong	486
5	South Korea	476
6	Thailand	408
7	Russian Federation	382
8	India	346
9	Indonesia	339
10	Viet Nam	326

20250729 Botnet Detection Live Streaming 30+ zombies detected)

Monday, July 28, 2025

Botnet Statistics [2025-07-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-27 00:00-23:59 UTC
total number of suspected botnet IPs: 20515
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19289
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	108965
2	5555	50487
3	53389	34684
4	22	23663
5	3022	20872
6	9069	17542
7	9062	17258
8	9061	17104
9	23	17049
10	8022	15601

Rank	Network	# of suspected botnet IPs
1	MSFT	1542
2	AL-3	1357
3	ASEPL-SG	1020
4	GOOGLE-CLOUD	1010
5	PAN-22	955
6	ALISOFT	496
7	VOLCANO-ENGINE	423
8	CENSY	397
9	KORNET-KR	339
10	UCLOUD-HK	255

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8304
2	China	3492
3	Singapore	1218
4	Hong Kong	513
5	South Korea	499
6	Thailand	478
7	Brazil	327
8	United Kingdom	322
9	European Union	322
10	Russian Federation	313

20250728 Botnet Detection Live Streaming 50+ zombies detected)

Sunday, July 27, 2025

Botnet Statistics [2025-07-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-26 00:00-23:59 UTC
total number of suspected botnet IPs: 19765
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18531
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	88321
2	5900	80689
3	2000	57288
4	5901	30312
5	8888	29628
6	3333	24436
7	22	21954
8	13022	20856
9	1112	19573
10	9069	19450

Rank	Network	# of suspected botnet IPs
1	MSFT	1571
2	AL-3	1322
3	GOOGLE-CLOUD	1011
4	ASEPL-SG	990
5	PAN-22	956
6	ALISOFT	485
7	VOLCANO-ENGINE	431
8	CENSY	394
9	KORNET-KR	355
10	LINODE-US	278

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7537
2	China	3674
3	Singapore	1152
4	South Korea	523
5	Hong Kong	506
6	Brazil	419
7	India	370
8	Russian Federation	359
9	European Union	309
10	United Kingdom	305

20250727 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, July 26, 2025

Botnet Statistics [2025-07-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-25 00:00-23:59 UTC
total number of suspected botnet IPs: 19067
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17911
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	99951
2	6000	86705
3	5900	68302
4	3333	40438
5	5901	37286
6	6669	33081
7	8022	28555
8	1112	22308
9	3022	20787
10	9062	19669

Rank	Network	# of suspected botnet IPs
1	MSFT	1554
2	AL-3	1331
3	ASEPL-SG	1034
4	GOOGLE-CLOUD	1010
5	PAN-22	959
6	ALISOFT	458
7	VOLCANO-ENGINE	440
8	CENSY	398
9	KORNET-KR	389
10	LINODE-US	270

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7499
2	China	3616
3	Singapore	1219
4	South Korea	555
5	Hong Kong	530
6	Russian Federation	385
7	United Kingdom	338
8	India	337
9	European Union	324
10	Indonesia	317

20250726 Botnet Detection Live Streaming 30+ zombies detected)

Friday, July 25, 2025

Botnet Statistics [2025-07-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-24 00:00-23:59 UTC
total number of suspected botnet IPs: 20620
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19325
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6001	57914
2	1122	44111
3	5900	43989
4	3333	37617
5	5901	37416
6	8022	26549
7	2821	24590
8	30022	23806
9	22	20417
10	222	19334

Rank	Network	# of suspected botnet IPs
1	MSFT	1571
2	AL-3	1398
3	ASEPL-SG	1083
4	GOOGLE-CLOUD	1029
5	PAN-22	959
6	VOLCANO-ENGINE	470
7	ALISOFT	470
8	KORNET-KR	416
9	CENSY	399
10	UCLOUD-HK	261

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8065
2	China	3834
3	Singapore	1307
4	South Korea	608
5	Hong Kong	523
6	Russian Federation	428
7	India	420
8	Indonesia	391
9	European Union	335
10	United Kingdom	334

20250725 Botnet Detection Live Streaming 30+ zombies detected)

Thursday, July 24, 2025

Botnet Statistics [2025-07-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-23 00:00-23:59 UTC
total number of suspected botnet IPs: 20235
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18975
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	83940
2	6001	48324
3	3333	40089
4	5901	40028
5	5900	30978
6	8022	29334
7	227	29231
8	22	24375
9	6633	24188
10	8179	22639

Rank	Network	# of suspected botnet IPs
1	MSFT	1545
2	AL-3	1387
3	ASEPL-SG	1054
4	GOOGLE-CLOUD	1009
5	PAN-22	959
6	KORNET-KR	515
7	VOLCANO-ENGINE	471
8	ALISOFT	470
9	CENSY	396
10	CMNET	273

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7307
2	China	4025
3	Singapore	1219
4	South Korea	771
5	Hong Kong	537
6	India	456
7	Russian Federation	414
8	Indonesia	373
9	European Union	353
10	Germany	320

20250724 Botnet Detection Live Streaming 60+ zombies detected)

Wednesday, July 23, 2025

Botnet Statistics [2025-07-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-22 00:00-23:59 UTC
total number of suspected botnet IPs: 21224
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20004
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	71763
2	6000	55855
3	2222	54401
4	1122	45847
5	3333	40114
6	8022	39463
7	226	29505
8	22	26441
9	31022	22533
10	3022	20133

Rank	Network	# of suspected botnet IPs
1	MSFT	1571
2	AL-3	1424
3	ASEPL-SG	1097
4	GOOGLE-CLOUD	1007
5	PAN-22	960
6	ALISOFT	489
7	KORNET-KR	484
8	VOLCANO-ENGINE	447
9	CENSY	397
10	CMNET	305

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8249
2	China	3969
3	Singapore	1303
4	South Korea	752
5	Hong Kong	553
6	Russian Federation	426
7	India	421
8	Indonesia	366
9	United Kingdom	350
10	Viet Nam	329

20250723 Botnet Detection Live Streaming 50+ zombies detected)

Tuesday, July 22, 2025

Botnet Statistics [2025-07-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-21 00:00-23:59 UTC
total number of suspected botnet IPs: 19730
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18555
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	178861
2	225	100043
3	6000	95991
4	30001	50929
5	2323	41907
6	8022	39159
7	22	22427
8	9011	19322
9	3022	19311
10	23	18861

Rank	Network	# of suspected botnet IPs
1	MSFT	1553
2	AL-3	1429
3	ASEPL-SG	1070
4	GOOGLE-CLOUD	1013
5	PAN-22	958
6	ALISOFT	482
7	VOLCANO-ENGINE	446
8	CENSY	396
9	KORNET-KR	374
10	UCLOUD-HK	252

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7377
2	China	3868
3	Singapore	1254
4	South Korea	528
5	Hong Kong	502
6	Russian Federation	387
7	Viet Nam	365
8	India	365
9	Indonesia	361
10	European Union	335

20250722 Botnet Detection Live Streaming 110+ zombies detected)

Monday, July 21, 2025

Botnet Statistics [2025-07-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-20 00:00-23:59 UTC
total number of suspected botnet IPs: 19920
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18764
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	247599
2	2323	127910
3	225	63652
4	6000	46852
5	8022	31336
6	3244	30426
7	9011	28443
8	222	24407
9	22	23669
10	3022	20516

Rank	Network	# of suspected botnet IPs
1	MSFT	1569
2	AL-3	1424
3	ASEPL-SG	1063
4	GOOGLE-CLOUD	1012
5	PAN-22	959
6	ALISOFT	455
7	VOLCANO-ENGINE	428
8	CENSY	396
9	KORNET-KR	369
10	LINODE-US	318

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8014
2	China	3949
3	Singapore	1229
4	South Korea	507
5	Hong Kong	451
6	Russian Federation	359
7	India	336
8	Indonesia	328
9	United Kingdom	328
10	European Union	328

20250721 Botnet Detection Live Streaming 50+ zombies detected)

Sunday, July 20, 2025

Botnet Statistics [2025-07-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19672
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18395
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	289071
2	224	30930
3	8022	29797
4	5002	29703
5	3344	23900
6	22	23774
7	222	21578
8	3022	19877
9	2025	19245
10	11022	18485

Rank	Network	# of suspected botnet IPs
1	MSFT	1573
2	AL-3	1427
3	ASEPL-SG	1078
4	GOOGLE-CLOUD	1017
5	PAN-22	957
6	ALISOFT	488
7	VOLCANO-ENGINE	440
8	CENSY	397
9	KORNET-KR	368
10	CMNET	264

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7358
2	China	4021
3	Singapore	1233
4	South Korea	525
5	Hong Kong	455
6	India	361
7	Viet Nam	339
8	Russian Federation	338
9	European Union	325
10	Indonesia	324

20250720 Botnet Detection Live Streaming 80+ zombies detected)

Saturday, July 19, 2025

Botnet Statistics [2025-07-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-18 00:00-23:59 UTC
total number of suspected botnet IPs: 20498
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19120
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	318764
2	2232	32731
3	6001	31447
4	222	28446
5	6000	28412
6	22	23611
7	3022	20853
8	2025	19798
9	5001	18620
10	8022	16579

Rank	Network	# of suspected botnet IPs
1	MSFT	1581
2	AL-3	1444
3	ASEPL-SG	1167
4	GOOGLE-CLOUD	1019
5	PAN-22	960
6	ALISOFT	493
7	VOLCANO-ENGINE	481
8	CLOUDFLARENET	465
9	CENSY	400
10	KORNET-KR	391

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7916
2	China	3669
3	Singapore	1343
4	South Korea	553
5	Hong Kong	457
6	Russian Federation	416
7	Viet Nam	382
8	Indonesia	369
9	India	364
10	United Kingdom	347

20250719 Botnet Detection Live Streaming 40+ zombies detected)

Friday, July 18, 2025

Botnet Statistics [2025-07-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21173
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19843
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	226402
2	3322	69733
3	223	64229
4	2232	54631
5	4444	46390
6	222	32695
7	6001	31159
8	23	31046
9	6000	28146
10	22	23946

Rank	Network	# of suspected botnet IPs
1	MSFT	1544
2	AL-3	1465
3	ASEPL-SG	1202
4	GOOGLE-CLOUD	1023
5	PAN-22	960
6	VOLCANO-ENGINE	487
7	ALISOFT	476
8	KORNET-KR	408
9	CENSY	396
10	CLOUDFLARENET	334

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8443
2	China	3599
3	Singapore	1394
4	South Korea	569
5	India	489
6	Hong Kong	464
7	Russian Federation	457
8	Indonesia	413
9	Viet Nam	383
10	United Kingdom	338

20250718 Botnet Detection Live Streaming 130+ zombies detected)

Thursday, July 17, 2025

Botnet Statistics [2025-07-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-16 00:00-23:59 UTC
total number of suspected botnet IPs: 20660
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19311
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3322	77247
2	4444	69999
3	223	65144
4	2232	51013
5	5900	44612
6	8888	37411
7	6001	31497
8	5000	30081
9	6000	27842
10	22	24597

Rank	Network	# of suspected botnet IPs
1	MSFT	1553
2	AL-3	1482
3	ASEPL-SG	1125
4	GOOGLE-CLOUD	1013
5	PAN-22	959
6	VOLCANO-ENGINE	483
7	ALISOFT	477
8	KORNET-KR	471
9	CENSY	399
10	CLOUDFLARENET	326

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7728
2	China	3797
3	Singapore	1324
4	South Korea	647
5	Hong Kong	461
6	India	432
7	Indonesia	407
8	Russian Federation	406
9	Viet Nam	391
10	United Kingdom	346

20250717 Botnet Detection Live Streaming 50+ zombies detected)

Tuesday, July 15, 2025

Botnet Statistics [2025-07-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-14 00:00-23:59 UTC
total number of suspected botnet IPs: 22062
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20768
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	180661
2	4444	66571
3	223	38929
4	6001	30600
5	6000	26516
6	2221	25428
7	4422	24990
8	22	23309
9	3022	21130
10	23	18018

Rank	Network	# of suspected botnet IPs
1	MSFT	1538
2	AL-3	1497
3	ASEPL-SG	1173
4	GOOGLE-CLOUD	1010
5	PAN-22	956
6	ALISOFT	518
7	VOLCANO-ENGINE	473
8	KORNET-KR	402
9	CENSY	399
10	LINODE-US	293

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8005
2	China	3948
3	Singapore	1375
4	South Korea	590
5	India	548
6	Hong Kong	470
7	Viet Nam	411
8	Taiwan	397
9	Thailand	390
10	Russian Federation	390

20250715 Botnet Detection Live Streaming 30+ zombies detected)

Monday, July 14, 2025

Botnet Statistics [2025-07-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-13 00:00-23:59 UTC
total number of suspected botnet IPs: 21016
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19722
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	475071
2	221	86200
3	33222	72232
4	12222	56397
5	6022	43602
6	6001	33026
7	5901	30051
8	6000	28586
9	23	25734
10	3022	21356

Rank	Network	# of suspected botnet IPs
1	MSFT	1542
2	AL-3	1467
3	ASEPL-SG	1095
4	GOOGLE-CLOUD	1011
5	PAN-22	958
6	ALISOFT	499
7	VOLCANO-ENGINE	476
8	KORNET-KR	442
9	CENSY	397
10	UCLOUD-HK	273

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8043
2	China	3887
3	Singapore	1296
4	South Korea	620
5	Hong Kong	481
6	Russian Federation	389
7	Indonesia	349
8	Viet Nam	340
9	India	339
10	United Kingdom	323

20250714 Botnet Detection Live Streaming 100+ zombies detected)

Sunday, July 13, 2025

Botnet Statistics [2025-07-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-12 00:00-23:59 UTC
total number of suspected botnet IPs: 20071
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18793
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	445036
2	221	50737
3	6022	44260
4	6001	31377
5	9822	29238
6	6000	28396
7	3022	24310
8	22	22296
9	2233	19646
10	5901	19185

Rank	Network	# of suspected botnet IPs
1	MSFT	1561
2	AL-3	1469
3	ASEPL-SG	1153
4	GOOGLE-CLOUD	1011
5	PAN-22	958
6	ALISOFT	504
7	VOLCANO-ENGINE	475
8	KORNET-KR	432
9	CENSY	397
10	CMNET	285

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7356
2	China	4107
3	Singapore	1351
4	South Korea	608
5	Hong Kong	482
6	India	384
7	Russian Federation	377
8	Indonesia	369
9	Viet Nam	352
10	United Kingdom	304

20250713 Botnet Detection Live Streaming 80+ zombies detected)

Saturday, July 12, 2025

Botnet Statistics [2025-07-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-11 00:00-23:59 UTC
total number of suspected botnet IPs: 20864
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19524
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	368197
2	5555	60809
3	6022	44571
4	3022	32708
5	6001	32284
6	6000	29931
7	10222	28185
8	11022	26865
9	22	22601
10	5901	21554

Rank	Network	# of suspected botnet IPs
1	MSFT	1571
2	AL-3	1466
3	ASEPL-SG	1135
4	GOOGLE-CLOUD	1017
5	PAN-22	959
6	ALISOFT	526
7	VOLCANO-ENGINE	477
8	KORNET-KR	447
9	CENSY	395
10	UCLOUD-HK	284

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7362
2	China	4427
3	Singapore	1342
4	South Korea	606
5	Hong Kong	520
6	India	482
7	Indonesia	410
8	Russian Federation	385
9	United Kingdom	337
10	Viet Nam	314

20250712 Botnet Detection Live Streaming 30+ zombies detected)

Friday, July 11, 2025

Botnet Statistics [2025-07-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-10 00:00-23:59 UTC
total number of suspected botnet IPs: 22859
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21427
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	326770
2	5555	103929
3	10222	69552
4	11022	53994
5	6022	43480
6	2746	32792
7	6001	31920
8	6000	28852
9	3022	27881
10	220	23831

Rank	Network	# of suspected botnet IPs
1	MSFT	1555
2	AL-3	1480
3	ASEPL-SG	1160
4	GOOGLE-CLOUD	1020
5	PAN-22	959
6	ALISOFT	513
7	KORNET-KR	488
8	VOLCANO-ENGINE	483
9	CENSY	400
10	CMNET	301

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8295
2	China	4613
3	Singapore	1374
4	South Korea	662
5	India	632
6	Hong Kong	489
7	Russian Federation	469
8	Indonesia	466
9	Viet Nam	374
10	United Kingdom	336

20250711 Botnet Detection Live Streaming 30+ zombies detected)

Botnet Statistics [2025-07-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-09 00:00-23:59 UTC
total number of suspected botnet IPs: 22811
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21412
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	349828
2	6022	43986
3	6001	32963
4	6000	32155
5	22	24778
6	30022	22592
7	23	20758
8	2233	20444
9	3022	20438
10	5901	16550

Rank	Network	# of suspected botnet IPs
1	MSFT	1577
2	AL-3	1571
3	ASEPL-SG	1242
4	GOOGLE-CLOUD	1019
5	PAN-22	959
6	ALISOFT	544
7	VOLCANO-ENGINE	534
8	KORNET-KR	519
9	CENSY	401
10	BSNLNET	399

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7581
2	China	4538
3	Singapore	1412
4	India	943
5	South Korea	717
6	Indonesia	503
7	Hong Kong	488
8	Russian Federation	474
9	Viet Nam	397
10	United Kingdom	321

20250710 Botnet Detection Live Streaming 90+ zombies detected)

Wednesday, July 9, 2025

Botnet Statistics [2025-07-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 21709
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20468
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	222509
2	6022	46346
3	6001	38756
4	6000	36613
5	2233	27294
6	22	25884
7	23	23757
8	30022	22801
9	3022	22697
10	445	13358

Rank	Network	# of suspected botnet IPs
1	MSFT	1579
2	AL-3	1403
3	ASEPL-SG	1141
4	GOOGLE-CLOUD	977
5	PAN-22	950
6	BSNLNET	570
7	ALISOFT	491
8	VOLCANO-ENGINE	480
9	KORNET-KR	450
10	CENSY	401

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8158
2	China	4018
3	Singapore	1270
4	India	1050
5	South Korea	615
6	Hong Kong	450
7	Russian Federation	412
8	Viet Nam	391
9	United Kingdom	357
10	Indonesia	356

20250709 Botnet Detection Live Streaming 40+ zombies detected)

Tuesday, July 8, 2025

Botnet Statistics [2025-07-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20775
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19537
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	133689
2	6022	43249
3	8122	38462
4	6001	36670
5	6000	36005
6	23	24548
7	3022	22104
8	22	17713
9	2233	17693
10	60000	10551

Rank	Network	# of suspected botnet IPs
1	MSFT	1569
2	AL-3	1441
3	ASEPL-SG	1059
4	GOOGLE-CLOUD	959
5	PAN-22	927
6	BSNLNET	628
7	ALISOFT	505
8	VOLCANO-ENGINE	488
9	CENSY	399
10	KORNET-KR	352

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7475
2	China	4204
3	Singapore	1207
4	India	1128
5	South Korea	509
6	Hong Kong	437
7	Russian Federation	367
8	United Kingdom	353
9	Indonesia	333
10	Viet Nam	329

20250708 Botnet Detection Live Streaming 20+ zombies detected)

Monday, July 7, 2025

Botnet Statistics [2025-07-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 20338
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19296
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	131914
2	8122	64707
3	6022	44985
4	5902	38745
5	6001	33484
6	445	31841
7	6000	30007
8	8010	29550
9	23	24795
10	6003	23353

Rank	Network	# of suspected botnet IPs
1	MSFT	1560
2	AL-3	1449
3	ASEPL-SG	1090
4	GOOGLE-CLOUD	1007
5	PAN-22	958
6	BSNLNET	500
7	VOLCANO-ENGINE	487
8	ALISOFT	479
9	CENSY	398
10	VE-CSVE-LACNIC	361

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7938
2	China	3821
3	Singapore	1267
4	India	859
5	South Korea	506
6	Hong Kong	457
7	Venezuela	369
8	Viet Nam	324
9	Russian Federation	322
10	United Kingdom	320

20250707 Botnet Detection Live Streaming 20+ zombies detected)

Sunday, July 6, 2025

Botnet Statistics [2025-07-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 21767
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20560
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	156929
2	445	93795
3	8888	71002
4	5902	49339
5	6022	48566
6	6001	33750
7	6002	33189
8	6000	30238
9	8002	29932
10	23	23769

Rank	Network	# of suspected botnet IPs
1	MSFT	1580
2	AL-3	1443
3	ASEPL-SG	1070
4	GOOGLE-CLOUD	1013
5	PAN-22	959
6	BSNLNET	794
7	VOLCANO-ENGINE	480
8	ALISOFT	469
9	KORNET-KR	461
10	VE-CSVE-LACNIC	427

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7619
2	China	4273
3	India	1404
4	Singapore	1228
5	South Korea	656
6	Hong Kong	454
7	Venezuela	438
8	Russian Federation	426
9	United Kingdom	327
10	Viet Nam	316

20250706 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, July 5, 2025

Botnet Statistics [2025-07-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 22827
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21466
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	162770
2	8888	88457
3	5902	50950
4	6022	47180
5	6001	34480
6	6000	30941
7	23	29496
8	8001	25549
9	9022	23995
10	3022	22679

Rank	Network	# of suspected botnet IPs
1	MSFT	1544
2	AL-3	1449
3	ASEPL-SG	1077
4	GOOGLE-CLOUD	1014
5	PAN-22	959
6	BSNLNET	819
7	KORNET-KR	513
8	VOLCANO-ENGINE	496
9	ALISOFT	492
10	VE-CSVE-LACNIC	421

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7499
2	China	4509
3	India	1395
4	Singapore	1239
5	South Korea	728
6	Hong Kong	490
7	Russian Federation	448
8	Venezuela	442
9	Viet Nam	383
10	Brazil	372

20250705 Botnet Detection Live Streaming 30+ zombies detected)

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5869)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (61)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (345)
  • December (5)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	132940
2	6022	47400
3	6001	34363
4	6000	30978
5	5902	29998
6	23	28175
7	445	25134
8	3022	24641
9	22	16283
10	25	11958