Botnet Statistics [2025-08-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-30 00:00-23:59 UTC
total number of suspected botnet IPs: 18449
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17317
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1539
2	AL-3	1293
3	GOOGLE-CLOUD	1010
4	PAN-22	952
5	ASEPL-SG	837
6	VOLCANO-ENGINE	450
7	ALISOFT	413
8	CENSY	395
9	KORNET-KR	357
10	UCLOUD-HK	352

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7396
2	China	3808
3	Singapore	1069
4	Hong Kong	545
5	South Korea	533
6	European Union	322
7	United Kingdom	310
8	Russian Federation	306
9	Indonesia	276
10	Germany	276

20250831 Botnet Detection Live Streaming 60+ zombies detected)

Saturday, August 30, 2025

Botnet Statistics [2025-08-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-29 00:00-23:59 UTC
total number of suspected botnet IPs: 19002
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17630
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	174504
2	22	78251
3	3333	63896
4	6001	56432
5	12122	55522
6	33333	52379
7	6003	51238
8	6002	50781
9	1122	50154
10	5901	48538

Rank	Network	# of suspected botnet IPs
1	MSFT	1525
2	AL-3	1290
3	GOOGLE-CLOUD	1012
4	PAN-22	952
5	ASEPL-SG	831
6	VOLCANO-ENGINE	451
7	ALISOFT	422
8	KORNET-KR	409
9	CENSY	400
10	UCLOUD-HK	352

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7513
2	China	3563
3	Singapore	1083
4	South Korea	597
5	Hong Kong	551
6	Russian Federation	349
7	Indonesia	328
8	United Kingdom	321
9	India	285
10	Seychelles	259

20250830 Botnet Detection Live Streaming 70+ zombies detected)

Friday, August 29, 2025

Botnet Statistics [2025-08-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-28 00:00-23:59 UTC
total number of suspected botnet IPs: 21643
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20046
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	170252
2	3333	66072
3	12122	62102
4	6001	56787
5	6002	53695
6	22322	53065
7	33333	52748
8	6003	51887
9	8999	51589
10	1122	48347

Rank	Network	# of suspected botnet IPs
1	MSFT	1551
2	AL-3	1318
3	GOOGLE-CLOUD	1018
4	PAN-22	952
5	ASEPL-SG	859
6	VOLCANO-ENGINE	464
7	ALISOFT	449
8	KORNET-KR	412
9	CENSY	400
10	UCLOUD-HK	365

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8692
2	China	3809
3	Singapore	1088
4	South Korea	614
5	Hong Kong	562
6	Russian Federation	378
7	United Kingdom	377
8	Indonesia	308
9	Viet Nam	287
10	Romania	285

20250829 Botnet Detection Live Streaming 100+ zombies detected)

Thursday, August 28, 2025

Botnet Statistics [2025-08-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-27 00:00-23:59 UTC
total number of suspected botnet IPs: 20441
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19008
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	177339
2	3333	74468
3	12122	54288
4	1122	53766
5	33333	52686
6	22322	48373
7	6001	42463
8	5901	42164
9	2211	40965
10	6003	38738

Rank	Network	# of suspected botnet IPs
1	MSFT	1537
2	AL-3	1312
3	GOOGLE-CLOUD	1004
4	PAN-22	952
5	ASEPL-SG	835
6	VOLCANO-ENGINE	466
7	ALISOFT	455
8	KORNET-KR	410
9	CENSY	392
10	UCLOUD-HK	369

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8047
2	China	3868
3	Singapore	1091
4	South Korea	604
5	Hong Kong	581
6	Indonesia	362
7	United Kingdom	359
8	Russian Federation	333
9	India	264
10	Romania	263

20250828 Botnet Detection Live Streaming 80+ zombies detected)

Wednesday, August 27, 2025

Botnet Statistics [2025-08-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-26 00:00-23:59 UTC
total number of suspected botnet IPs: 18522
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17456
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	199889
2	3333	71268
3	6669	66021
4	33333	52288
5	22322	46413
6	9223	44749
7	6001	43188
8	5901	42450
9	2211	40929
10	6003	38610

Rank	Network	# of suspected botnet IPs
1	AL-3	1301
2	MSFT	1103
3	GOOGLE-CLOUD	1010
4	PAN-22	952
5	ASEPL-SG	858
6	VOLCANO-ENGINE	461
7	ALISOFT	429
8	CENSY	393
9	KORNET-KR	384
10	UCLOUD-HK	361

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7425
2	China	3928
3	Singapore	1140
4	South Korea	559
5	Hong Kong	535
6	Indonesia	339
7	Russian Federation	326
8	European Union	291
9	United Kingdom	273
10	India	268

20250827 Botnet Detection Live Streaming 50+ zombies detected)

Tuesday, August 26, 2025

Botnet Statistics [2025-08-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-25 00:00-23:59 UTC
total number of suspected botnet IPs: 17834
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16788
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	268580
2	555	92618
3	2228	84057
4	3333	65758
5	22322	52184
6	6001	51346
7	6003	50182
8	6002	48279
9	33333	47620
10	850	46970

Rank	Network	# of suspected botnet IPs
1	MSFT	1447
2	AL-3	1310
3	GOOGLE-CLOUD	995
4	PAN-22	948
5	ASEPL-SG	853
6	VOLCANO-ENGINE	462
7	ALISOFT	431
8	CENSY	398
9	KORNET-KR	397
10	UCLOUD-HK	383

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7013
2	China	3676
3	Singapore	1114
4	South Korea	585
5	Hong Kong	574
6	Indonesia	343
7	European Union	329
8	Russian Federation	323
9	United Kingdom	313
10	India	255

20250826 Botnet Detection Live Streaming 100+ zombies detected)

Monday, August 25, 2025

Botnet Statistics [2025-08-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-24 00:00-23:59 UTC
total number of suspected botnet IPs: 18206
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17068
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	281906
2	555	95943
3	6002	74821
4	6001	68893
5	6003	64929
6	3333	62190
7	2228	55606
8	6000	51429
9	9221	50392
10	33333	47263

Rank	Network	# of suspected botnet IPs
1	MSFT	1498
2	AL-3	1322
3	GOOGLE-CLOUD	1007
4	PAN-22	953
5	ASEPL-SG	855
6	VOLCANO-ENGINE	460
7	ALISOFT	457
8	KORNET-KR	448
9	CENSY	394
10	UCLOUD-HK	354

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7597
2	China	3325
3	Singapore	1145
4	South Korea	644
5	Hong Kong	534
6	Russian Federation	330
7	United Kingdom	321
8	European Union	304
9	Seychelles	258
10	Indonesia	242

20250825 Botnet Detection Live Streaming 140+ zombies detected)

Sunday, August 24, 2025

Botnet Statistics [2025-08-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-23 00:00-23:59 UTC
total number of suspected botnet IPs: 17959
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16762
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	315131
2	555	101985
3	3333	66328
4	6001	63008
5	6002	61156
6	6003	60835
7	33333	52723
8	6000	51493
9	5901	43443
10	9222	38136

Rank	Network	# of suspected botnet IPs
1	MSFT	1486
2	AL-3	1264
3	GOOGLE-CLOUD	1007
4	PAN-22	953
5	ASEPL-SG	836
6	VOLCANO-ENGINE	459
7	KORNET-KR	432
8	ALISOFT	427
9	CENSY	399
10	UNICOM-LN	379

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6859
2	China	3636
3	Singapore	1053
4	South Korea	627
5	Hong Kong	550
6	Russian Federation	355
7	European Union	334
8	United Kingdom	304
9	Viet Nam	266
10	India	262

20250824 Botnet Detection Live Streaming 30+ zombies detected)

Thursday, August 21, 2025

Botnet Statistics [2025-08-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 18522
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17357
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	302359
2	3333	65391
3	6001	59363
4	6003	57495
5	6002	57070
6	33333	49429
7	6000	47445
8	5901	46874
9	9222	39196
10	22	35203

Rank	Network	# of suspected botnet IPs
1	MSFT	1522
2	AL-3	1267
3	GOOGLE-CLOUD	1007
4	PAN-22	951
5	ASEPL-SG	828
6	VOLCANO-ENGINE	472
7	ALISOFT	439
8	KORNET-KR	419
9	CENSY	395
10	UCLOUD-HK	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7048
2	China	3521
3	Singapore	1084
4	South Korea	609
5	Hong Kong	575
6	Russian Federation	374
7	Indonesia	370
8	Taiwan	359
9	European Union	332
10	Germany	330

20250821 Botnet Detection Live Streaming 30+ zombies detected)

Wednesday, August 20, 2025

Botnet Statistics [2025-08-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19510
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18131
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	140440
2	2255	121007
3	3333	93440
4	10222	63910
5	33333	52831
6	5901	51850
7	2244	50233
8	6003	43505
9	6001	43139
10	6002	40503

Rank	Network	# of suspected botnet IPs
1	MSFT	1525
2	AL-3	1280
3	GOOGLE-CLOUD	1009
4	PAN-22	956
5	ASEPL-SG	877
6	KORNET-KR	488
7	VOLCANO-ENGINE	460
8	ALISOFT	457
9	CENSY	393
10	UCLOUD-HK	348

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7892
2	China	3227
3	Singapore	1142
4	South Korea	715
5	Hong Kong	565
6	Taiwan	409
7	Indonesia	376
8	Russian Federation	371
9	European Union	335
10	United Kingdom	332

20250820 Botnet Detection Live Streaming 30+ zombies detected)

Tuesday, August 19, 2025

Botnet Statistics [2025-08-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 19510
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18131
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	148511
2	2255	120563
3	3333	88779
4	7890	66025
5	10222	60562
6	666	57182
7	33333	52226
8	5901	51132
9	888	49260
10	2244	48960

Rank	Network	# of suspected botnet IPs
1	MSFT	1507
2	AL-3	1285
3	GOOGLE-CLOUD	1010
4	PAN-22	954
5	ASEPL-SG	851
6	VOLCANO-ENGINE	464
7	ALISOFT	453
8	KORNET-KR	439
9	CENSY	398
10	UCLOUD-HK	327

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7670
2	China	3026
3	Singapore	1201
4	South Korea	649
5	Hong Kong	549
6	Russian Federation	421
7	Taiwan	385
8	India	338
9	United Kingdom	324
10	Indonesia	319

20250819 Botnet Detection Live Streaming 80+ zombies detected)

Monday, August 18, 2025

Botnet Statistics [2025-08-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 18947
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17753
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	183777
2	666	131322
3	2255	114720
4	6000	103229
5	3333	73186
6	2244	48850
7	5901	47303
8	33333	42695
9	422	36813
10	1212	35494

Rank	Network	# of suspected botnet IPs
1	MSFT	1524
2	AL-3	1286
3	GOOGLE-CLOUD	1012
4	PAN-22	956
5	ASEPL-SG	885
6	KORNET-KR	514
7	VOLCANO-ENGINE	475
8	ALISOFT	453
9	CENSY	399
10	UCLOUD-HK	335

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7733
2	China	3086
3	Singapore	1189
4	South Korea	728
5	Hong Kong	558
6	Russian Federation	413
7	Taiwan	392
8	United Kingdom	329
9	European Union	324
10	Indonesia	284

20250818 Botnet Detection Live Streaming 40+ zombies detected)

Sunday, August 17, 2025

Botnet Statistics [2025-08-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 18784
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17512
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	156488
2	6000	142807
3	3333	70414
4	6005	60378
5	2244	49356
6	5902	43189
7	6789	42375
8	5901	37210
9	1212	31401
10	234	30040

Rank	Network	# of suspected botnet IPs
1	MSFT	1529
2	AL-3	1297
3	GOOGLE-CLOUD	1006
4	PAN-22	955
5	ASEPL-SG	856
6	KORNET-KR	514
7	VOLCANO-ENGINE	465
8	ALISOFT	434
9	CENSY	398
10	UCLOUD-HK	328

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7289
2	China	3179
3	Singapore	1130
4	South Korea	743
5	Hong Kong	543
6	Russian Federation	371
7	Taiwan	335
8	European Union	335
9	United Kingdom	324
10	Viet Nam	313

20250817 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, August 16, 2025

Botnet Statistics [2025-08-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 19561
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18345
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	167349
2	6622	125666
3	5900	117347
4	8888	102760
5	3333	70700
6	444	64262
7	2244	52222
8	5902	42848
9	23	42732
10	5901	37340

Rank	Network	# of suspected botnet IPs
1	MSFT	1546
2	AL-3	1331
3	GOOGLE-CLOUD	1009
4	PAN-22	956
5	ASEPL-SG	867
6	KORNET-KR	582
7	VOLCANO-ENGINE	480
8	ALISOFT	460
9	CENSY	382
10	UCLOUD-HK	314

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7514
2	China	3484
3	Singapore	1148
4	South Korea	822
5	Hong Kong	531
6	Taiwan	382
7	Indonesia	369
8	Russian Federation	366
9	European Union	344
10	Viet Nam	337

20250816 Botnet Detection Live Streaming 40+ zombies detected)

Friday, August 15, 2025

Botnet Statistics [2025-08-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 20551
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19193
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	182345
2	6622	120484
3	8888	95637
4	5900	80922
5	9999	79688
6	3333	70540
7	444	56547
8	33322	55399
9	2244	52499
10	56789	50165

Rank	Network	# of suspected botnet IPs
1	MSFT	1524
2	AL-3	1312
3	GOOGLE-CLOUD	1017
4	PAN-22	956
5	ASEPL-SG	861
6	KORNET-KR	734
7	VOLCANO-ENGINE	473
8	ALISOFT	446
9	CENSY	379
10	UCLOUD-HK	375

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8209
2	China	3332
3	Singapore	1158
4	South Korea	968
5	Hong Kong	580
6	Indonesia	393
7	Russian Federation	381
8	Viet Nam	380
9	Taiwan	350
10	European Union	347

20250815 Botnet Detection Live Streaming 70+ zombies detected)

Thursday, August 14, 2025

Botnet Statistics [2025-08-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 19884
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18686
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	191600
2	8888	96494
3	9999	85021
4	33322	72330
5	3333	70502
6	5900	68818
7	56789	49483
8	5901	39812
9	5902	38691
10	6622	33800

Rank	Network	# of suspected botnet IPs
1	MSFT	1545
2	AL-3	1326
3	GOOGLE-CLOUD	1003
4	PAN-22	956
5	ASEPL-SG	927
6	KORNET-KR	651
7	VOLCANO-ENGINE	470
8	ALISOFT	459
9	CENSY	393
10	UCLOUD-HK	360

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7510
2	China	3355
3	Singapore	1197
4	South Korea	852
5	Hong Kong	582
6	Russian Federation	433
7	Indonesia	406
8	Viet Nam	375
9	Taiwan	343
10	United Kingdom	330

20250814 Botnet Detection Live Streaming 40+ zombies detected)

Wednesday, August 13, 2025

Botnet Statistics [2025-08-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 21273
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19973
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	194690
2	333	114512
3	5900	113340
4	7722	100425
5	9999	85805
6	8888	84256
7	33322	68737
8	3444	66734
9	3333	54914
10	56789	46403

Rank	Network	# of suspected botnet IPs
1	MSFT	1533
2	AL-3	1344
3	GOOGLE-CLOUD	1013
4	PAN-22	958
5	ASEPL-SG	888
6	ALISOFT	532
7	KORNET-KR	521
8	VOLCANO-ENGINE	475
9	CENSY	397
10	UCLOUD-HK	355

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8462
2	China	3746
3	Singapore	1175
4	South Korea	688
5	Hong Kong	570
6	Russian Federation	414
7	Indonesia	380
8	Viet Nam	373
9	Taiwan	365
10	United Kingdom	355

20250813 Botnet Detection Live Streaming 100+ zombies detected)

Tuesday, August 12, 2025

Botnet Statistics [2025-08-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 19714
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18451
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	333	187185
2	6000	142509
3	5900	133793
4	7722	121891
5	3222	96691
6	9999	85413
7	5522	69334
8	5902	36448
9	23	26697
10	9000	25770

Rank	Network	# of suspected botnet IPs
1	MSFT	1526
2	AL-3	1295
3	GOOGLE-CLOUD	1004
4	PAN-22	952
5	ASEPL-SG	900
6	ALISOFT	577
7	VOLCANO-ENGINE	523
8	KORNET-KR	471
9	CENSY	400
10	CHINANET-JS	385

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7517
2	China	4160
3	Singapore	1105
4	South Korea	638
5	Hong Kong	461
6	Russian Federation	400
7	Indonesia	388
8	Viet Nam	365
9	United Kingdom	331
10	India	303

20250812 Botnet Detection Live Streaming 100+ zombies detected)

Monday, August 11, 2025

Botnet Statistics [2025-08-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 20105
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18875
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3222	157592
2	7722	122314
3	5900	119697
4	333	112960
5	9000	91051
6	5522	69613
7	3333	45935
8	6000	43096
9	5000	30428
10	9017	29680

Rank	Network	# of suspected botnet IPs
1	MSFT	1549
2	AL-3	1312
3	GOOGLE-CLOUD	1013
4	PAN-22	959
5	ASEPL-SG	887
6	KORNET-KR	530
7	VOLCANO-ENGINE	496
8	ALISOFT	476
9	CENSY	397
10	CMNET	266

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8030
2	China	3918
3	Singapore	1104
4	South Korea	717
5	Hong Kong	509
6	Russian Federation	413
7	Viet Nam	365
8	India	354
9	United Kingdom	341
10	Indonesia	311

20250811 Botnet Detection Live Streaming 50+ zombies detected)

Sunday, August 10, 2025

Botnet Statistics [2025-08-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 18624
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17425
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	9122	170671
2	4422	100767
3	5900	87121
4	3222	86823
5	9000	86371
6	6000	78737
7	5522	70013
8	12022	46857
9	7777	42216
10	333	33127

Rank	Network	# of suspected botnet IPs
1	MSFT	1544
2	AL-3	1341
3	GOOGLE-CLOUD	1006
4	PAN-22	960
5	ASEPL-SG	941
6	VOLCANO-ENGINE	486
7	ALISOFT	483
8	KORNET-KR	427
9	CENSY	399
10	UCLOUD-HK	263

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7316
2	China	3709
3	Singapore	1133
4	South Korea	574
5	Hong Kong	462
6	Indonesia	349
7	Russian Federation	343
8	Viet Nam	330
9	United Kingdom	314
10	Germany	291

20250810 Botnet Detection Live Streaming 30+ zombies detected)

Saturday, August 9, 2025

Botnet Statistics [2025-08-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-08 00:00-23:59 UTC
total number of suspected botnet IPs: 18960
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17703
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	4422	196211
2	6000	189775
3	9122	169064
4	7777	138056
5	9000	90489
6	5522	69782
7	5900	56965
8	12022	30486
9	22	23824
10	23	17797

Rank	Network	# of suspected botnet IPs
1	MSFT	1533
2	AL-3	1349
3	GOOGLE-CLOUD	1012
4	PAN-22	959
5	ASEPL-SG	922
6	VOLCANO-ENGINE	479
7	ALISOFT	479
8	CENSY	400
9	KORNET-KR	330
10	UCLOUD-HK	260

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7304
2	China	3689
3	Singapore	1106
4	Hong Kong	467
5	South Korea	460
6	Indonesia	409
7	Viet Nam	378
8	Russian Federation	377
9	United Kingdom	325
10	India	317

20250809 Botnet Detection Live Streaming 20+ zombies detected)

Friday, August 8, 2025

Botnet Statistics [2025-08-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20364
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19110
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	4422	197488
2	6000	195860
3	7777	138456
4	9000	87098
5	5900	78056
6	5522	69221
7	4666	55685
8	3122	35350
9	3128	34613
10	22443	27753

Rank	Network	# of suspected botnet IPs
1	MSFT	1529
2	AL-3	1415
3	GOOGLE-CLOUD	1022
4	ASEPL-SG	962
5	PAN-22	958
6	VOLCANO-ENGINE	487
7	ALISOFT	475
8	CENSY	398
9	KORNET-KR	299
10	UCLOUD-HK	261

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8239
2	China	3870
3	Singapore	1221
4	Hong Kong	478
5	Indonesia	463
6	South Korea	442
7	Russian Federation	362
8	Viet Nam	361
9	India	354
10	United Kingdom	346

20250808 Botnet Detection Live Streaming 70+ zombies detected)

Thursday, August 7, 2025

Botnet Statistics [2025-08-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-06 00:00-23:59 UTC
total number of suspected botnet IPs: 19366
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18131
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	164345
2	4422	144817
3	2323	93573
4	5900	82939
5	7777	54617
6	4334	43792
7	9000	39471
8	3128	33263
9	4666	30366
10	5522	28844

Rank	Network	# of suspected botnet IPs
1	MSFT	1516
2	AL-3	1442
3	GOOGLE-CLOUD	1015
4	ASEPL-SG	961
5	PAN-22	958
6	ALISOFT	464
7	VOLCANO-ENGINE	463
8	CENSY	391
9	KORNET-KR	287
10	LINODE-US	251

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7734
2	China	3780
3	Singapore	1184
4	Indonesia	462
5	Hong Kong	441
6	South Korea	393
7	Russian Federation	385
8	Viet Nam	358
9	European Union	317
10	United Kingdom	314

20250807 Botnet Detection Live Streaming 70+ zombies detected)

Wednesday, August 6, 2025

Botnet Statistics [2025-08-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-05 00:00-23:59 UTC
total number of suspected botnet IPs: 20242
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19031
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	140939
2	5900	131439
3	4422	41643
4	22	31780
5	16028	22489
6	7799	19366
7	3022	19227
8	23	15651
9	3389	13767
10	38222	10193

Rank	Network	# of suspected botnet IPs
1	MSFT	1544
2	AL-3	1412
3	GOOGLE-CLOUD	1014
4	ASEPL-SG	972
5	PAN-22	958
6	ALISOFT	488
7	VOLCANO-ENGINE	480
8	CENSY	399
9	KORNET-KR	298
10	UCLOUD-HK	261

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8128
2	China	3771
3	Singapore	1187
4	Indonesia	487
5	Hong Kong	472
6	South Korea	441
7	Viet Nam	426
8	Russian Federation	380
9	Germany	374
10	United Kingdom	346

20250806 Botnet Detection Live Streaming 30+ zombies detected)

Tuesday, August 5, 2025

Botnet Statistics [2025-08-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20177
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18955
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6000	127946
2	5900	117486
3	9876	41703
4	22	25936
5	3022	19012
6	23	14362
7	2201	14213
8	3389	12133
9	445	11541
10	102	10818

Rank	Network	# of suspected botnet IPs
1	MSFT	1555
2	AL-3	1459
3	GOOGLE-CLOUD	1012
4	ASEPL-SG	982
5	PAN-22	957
6	ALISOFT	512
7	VOLCANO-ENGINE	502
8	CENSY	401
9	KORNET-KR	283
10	CMNET	253

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7672
2	China	3958
3	Singapore	1192
4	Indonesia	490
5	Hong Kong	458
6	South Korea	428
7	Thailand	389
8	Russian Federation	380
9	India	349
10	Viet Nam	348

20250805 Botnet Detection Live Streaming 100+ zombies detected)

Monday, August 4, 2025

Botnet Statistics [2025-08-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-08-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20442
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19290
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	160088
2	6000	116812
3	28222	29398
4	22	27333
5	3022	19693
6	222	19313
7	8022	16567
8	23	13560
9	8080	11683
10	4040	11108

Rank	Network	# of suspected botnet IPs
1	MSFT	1563
2	AL-3	1426
3	GOOGLE-CLOUD	1031
4	ASEPL-SG	975
5	PAN-22	958
6	ALISOFT	503
7	VOLCANO-ENGINE	483
8	CENSY	395
9	KORNET-KR	283
10	UCLOUD-HK	257

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8213
2	China	3723
3	Singapore	1184
4	Hong Kong	528
5	South Korea	440
6	Indonesia	422
7	Thailand	416
8	Russian Federation	394
9	Viet Nam	342
10	United Kingdom	331

20250804 Botnet Detection Live Streaming 40+ zombies detected)

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5869)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (61)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (345)
  • December (5)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	138369
2	9122	99252
3	8022	36139
4	22	33253
5	57495	31215
6	6000	31106
7	3022	19813
8	23	19620
9	222	18597
10	2022	13931