Botnet Statistics [2025-09-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025.
detection period: 2025-09-29 00:00-23:59 UTC
total number of suspected botnet IPs: 22141
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20730
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1500
2	AL-3	1256
3	GOOGLE-CLOUD	1072
4	PAN-22	944
5	ASEPL-SG	887
6	CMNET	735
7	VOLCANO-ENGINE	574
8	ALISOFT	480
9	CENSY	393
10	UCLOUD-HK	346

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7970
2	China	5428
3	Singapore	1207
4	Hong Kong	565
5	South Korea	504
6	Indonesia	459
7	India	431
8	Russian Federation	369
9	United Kingdom	339
10	Viet Nam	335

Monday, September 29, 2025

Botnet Statistics [2025-09-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025.
detection period: 2025-09-28 00:00-23:59 UTC
total number of suspected botnet IPs: 22375
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20992
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	427349
2	2020	59731
3	5902	53692
4	5901	25898
5	6001	22682
6	6003	22555
7	1220	21220
8	6002	21160
9	22	19764
10	6000	18585

Rank	Network	# of suspected botnet IPs
1	MSFT	1536
2	AL-3	1261
3	GOOGLE-CLOUD	1081
4	PAN-22	950
5	ASEPL-SG	868
6	CMNET	806
7	VOLCANO-ENGINE	566
8	ALISOFT	483
9	CENSY	394
10	UCLOUD-HK	331

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8145
2	China	5543
3	Singapore	1188
4	Hong Kong	561
5	South Korea	479
6	Indonesia	390
7	India	388
8	Russian Federation	386
9	United Kingdom	359
10	European Union	298

Sunday, September 28, 2025

Botnet Statistics [2025-09-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025.
detection period: 2025-09-27 00:00-23:59 UTC
total number of suspected botnet IPs: 21945
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20579
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	394899
2	2020	57815
3	5902	51595
4	8001	25435
5	3022	22814
6	1433	22659
7	5901	20281
8	22	18886
9	6001	18498
10	6000	18074

Rank	Network	# of suspected botnet IPs
1	MSFT	1498
2	AL-3	1282
3	GOOGLE-CLOUD	1053
4	PAN-22	951
5	ASEPL-SG	879
6	CMNET	814
7	VOLCANO-ENGINE	562
8	ALISOFT	494
9	CENSY	395
10	UCLOUD-HK	346

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7787
2	China	5513
3	Singapore	1165
4	Hong Kong	561
5	South Korea	497
6	Indonesia	402
7	India	397
8	Russian Federation	380
9	United Kingdom	333
10	European Union	313

Saturday, September 27, 2025

Botnet Statistics [2025-09-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22993
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21439
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	336241
2	5902	51560
3	2020	50269
4	9999	31099
5	3022	21523
6	6001	19689
7	6000	18830
8	5901	18761
9	6003	18493
10	22	18417

Rank	Network	# of suspected botnet IPs
1	MSFT	1528
2	AL-3	1276
3	GOOGLE-CLOUD	1017
4	PAN-22	951
5	ASEPL-SG	880
6	CMNET	834
7	VOLCANO-ENGINE	562
8	ALISOFT	515
9	UCLOUD-HK	420
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7813
2	China	5536
3	Singapore	1173
4	Hong Kong	646
5	South Korea	514
6	India	443
7	Indonesia	433
8	United Kingdom	374
9	Russian Federation	360
10	European Union	355

Friday, September 26, 2025

Botnet Statistics [2025-09-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-25 00:00-23:59 UTC
total number of suspected botnet IPs: 23544
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21885
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	356786
2	5902	52189
3	9999	33453
4	3022	22072
5	6001	19577
6	5901	19265
7	23	19013
8	13822	18969
9	12822	18946
10	22	18854

Rank	Network	# of suspected botnet IPs
1	MSFT	1502
2	AL-3	1293
3	GOOGLE-CLOUD	1020
4	PAN-22	951
5	ASEPL-SG	886
6	CMNET	843
7	VOLCANO-ENGINE	560
8	ALISOFT	487
9	UCLOUD-HK	423
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8012
2	China	5253
3	Singapore	1180
4	Hong Kong	658
5	Indonesia	513
6	South Korea	489
7	India	476
8	European Union	411
9	Russian Federation	402
10	United Kingdom	393

Thursday, September 25, 2025

Botnet Statistics [2025-09-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22481
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21056
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	350076
2	5902	48700
3	1433	34823
4	9999	32327
5	3022	22804
6	22	21166
7	6001	19572
8	13822	18762
9	12822	18738
10	23	18195

Rank	Network	# of suspected botnet IPs
1	MSFT	1502
2	AL-3	1335
3	GOOGLE-CLOUD	1010
4	PAN-22	951
5	ASEPL-SG	923
6	CMNET	800
7	VOLCANO-ENGINE	558
8	ALISOFT	507
9	UCLOUD-HK	417
10	CENSY	392

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7511
2	China	5573
3	Singapore	1237
4	Hong Kong	657
5	Indonesia	526
6	South Korea	502
7	India	430
8	European Union	408
9	United Kingdom	380
10	Russian Federation	378

20250925 Botnet Detection Live Streaming 300+ zombies detected)

Wednesday, September 24, 2025

Botnet Statistics [2025-09-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-23 00:00-23:59 UTC
total number of suspected botnet IPs: 22894
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21457
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	327452
2	5902	43347
3	5022	40020
4	3022	20953
5	20220	18393
6	23	18282
7	22	16920
8	1433	15204
9	6001	14173
10	5901	13923

Rank	Network	# of suspected botnet IPs
1	MSFT	1532
2	AL-3	1301
3	GOOGLE-CLOUD	1020
4	PAN-22	952
5	ASEPL-SG	895
6	CMNET	746
7	VOLCANO-ENGINE	548
8	ALISOFT	491
9	UCLOUD-HK	423
10	CENSY	390

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7898
2	China	5598
3	Singapore	1198
4	Hong Kong	634
5	Indonesia	553
6	South Korea	498
7	Russian Federation	428
8	European Union	426
9	India	412
10	United Kingdom	357

20250924 Botnet Detection Live Streaming 190+ zombies detected)

Tuesday, September 23, 2025

Botnet Statistics [2025-09-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-22 00:00-23:59 UTC
total number of suspected botnet IPs: 22995
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21488
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	341799
2	5022	48869
3	5902	43657
4	3022	22760
5	22	20048
6	23	19647
7	20220	18363
8	2288	17733
9	22000	16232
10	1433	15003

Rank	Network	# of suspected botnet IPs
1	MSFT	1536
2	AL-3	1431
3	ASEPL-SG	1079
4	GOOGLE-CLOUD	1015
5	PAN-22	950
6	CMNET	701
7	VOLCANO-ENGINE	598
8	ALISOFT	587
9	CENSY	395
10	UCLOUD-HK	392

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7718
2	China	5552
3	Singapore	1388
4	Indonesia	694
5	Hong Kong	616
6	South Korea	435
7	European Union	414
8	Russian Federation	406
9	India	397
10	United Kingdom	363

20250923 Botnet Detection Live Streaming 220+ zombies detected)

Monday, September 22, 2025

Botnet Statistics [2025-09-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-21 00:00-23:59 UTC
total number of suspected botnet IPs: 20055
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18872
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	215657
2	5902	48677
3	5022	48470
4	1433	25097
5	3022	22859
6	22	21452
7	5903	18981
8	20220	18373
9	5901	17932
10	6022	16408

Rank	Network	# of suspected botnet IPs
1	MSFT	1509
2	AL-3	1285
3	GOOGLE-CLOUD	1026
4	PAN-22	951
5	ASEPL-SG	868
6	CMNET	633
7	ALISOFT	499
8	VOLCANO-ENGINE	485
9	CENSY	394
10	UCLOUD-HK	370

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7594
2	China	4799
3	Singapore	1076
4	Hong Kong	549
5	South Korea	393
6	European Union	390
7	Indonesia	363
8	United Kingdom	354
9	Russian Federation	288
10	Netherlands	265

20250922 Botnet Detection Live Streaming 90+ zombies detected)

Sunday, September 21, 2025

Botnet Statistics [2025-09-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 19417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18285
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	182729
2	5022	51646
3	5902	49873
4	5903	30991
5	6006	28230
6	3022	28057
7	6007	25727
8	6020	25718
9	6060	25253
10	6011	23346

Rank	Network	# of suspected botnet IPs
1	MSFT	1512
2	AL-3	1307
3	GOOGLE-CLOUD	1056
4	PAN-22	951
5	ASEPL-SG	866
6	CMNET	638
7	ALISOFT	502
8	VOLCANO-ENGINE	482
9	CENSY	389
10	UCLOUD-HK	374

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7400
2	China	4676
3	Singapore	1047
4	Hong Kong	573
5	South Korea	420
6	European Union	366
7	Indonesia	349
8	Russian Federation	302
9	United Kingdom	294
10	Viet Nam	255

20250921 Botnet Detection Live Streaming 220+ zombies detected)

Saturday, September 20, 2025

Botnet Statistics [2025-09-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19846
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18690
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	132647
2	5022	61646
3	5902	47637
4	5903	32423
5	5522	30291
6	6006	28214
7	6007	26432
8	6020	25736
9	6060	25370
10	3333	24319

Rank	Network	# of suspected botnet IPs
1	MSFT	1484
2	AL-3	1305
3	GOOGLE-CLOUD	1108
4	PAN-22	941
5	ASEPL-SG	872
6	CMNET	601
7	ALISOFT	494
8	VOLCANO-ENGINE	490
9	UCLOUD-HK	409
10	CENSY	395

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7337
2	China	4727
3	Singapore	1108
4	Hong Kong	591
5	South Korea	421
6	Indonesia	397
7	European Union	374
8	United Kingdom	321
9	Russian Federation	315
10	Viet Nam	295

20250920 Botnet Detection Live Streaming 130+ zombies detected)

Friday, September 19, 2025

Botnet Statistics [2025-09-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 21134
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19876
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	105449
2	3333	61579
3	5522	54156
4	6622	50715
5	5022	36929
6	6008	34867
7	6009	33970
8	4444	29663
9	3334	29192
10	6007	27357

Rank	Network	# of suspected botnet IPs
1	MSFT	1523
2	AL-3	1336
3	GOOGLE-CLOUD	1129
4	PAN-22	933
5	ASEPL-SG	882
6	CMNET	621
7	ALISOFT	545
8	VOLCANO-ENGINE	487
9	UCLOUD-HK	425
10	CENSY	395

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8089
2	China	4803
3	Singapore	1139
4	Hong Kong	613
5	Indonesia	463
6	South Korea	439
7	Russian Federation	373
8	European Union	363
9	United Kingdom	354
10	India	301

20250919 Botnet Detection Live Streaming 80+ zombies detected)

Thursday, September 18, 2025

Botnet Statistics [2025-09-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 20621
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19373
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3333	70444
2	5522	68085
3	5900	63509
4	6622	59106
5	2228	40649
6	2229	39145
7	4444	38549
8	3334	35173
9	6020	30051
10	6006	29662

Rank	Network	# of suspected botnet IPs
1	MSFT	1534
2	AL-3	1334
3	GOOGLE-CLOUD	1071
4	PAN-22	930
5	ASEPL-SG	876
6	CMNET	628
7	ALISOFT	553
8	VOLCANO-ENGINE	486
9	UCLOUD-HK	396
10	CENSY	390

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7451
2	China	4805
3	Singapore	1178
4	Indonesia	602
5	Hong Kong	569
6	South Korea	421
7	Russian Federation	385
8	European Union	379
9	Germany	334
10	United Kingdom	327

20250918 Botnet Detection Live Streaming 160+ zombies detected)

Wednesday, September 17, 2025

Botnet Statistics [2025-09-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 21330
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20098
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	4455	113175
2	9422	84860
3	5900	63980
4	5522	57525
5	3333	56817
6	4444	41060
7	8888	39621
8	6007	37515
9	6622	37265
10	3334	33969

Rank	Network	# of suspected botnet IPs
1	MSFT	1506
2	AL-3	1342
3	GOOGLE-CLOUD	1059
4	PAN-22	933
5	ASEPL-SG	887
6	CMNET	632
7	ALISOFT	556
8	VOLCANO-ENGINE	487
9	UCLOUD-HK	414
10	CENSY	394

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7844
2	China	4936
3	Singapore	1227
4	Hong Kong	611
5	Indonesia	564
6	South Korea	414
7	United Kingdom	359
8	European Union	358
9	Russian Federation	346
10	India	317

20250917 Botnet Detection Live Streaming 200+ zombies detected)

Tuesday, September 16, 2025

Botnet Statistics [2025-09-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 20755
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19536
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	4455	114682
2	9422	100435
3	8888	72368
4	221	59199
5	5900	58964
6	6007	28565
7	6020	28419
8	6006	28219
9	6060	27037
10	5522	25914

Rank	Network	# of suspected botnet IPs
1	MSFT	1480
2	AL-3	1364
3	GOOGLE-CLOUD	1038
4	ASEPL-SG	956
5	PAN-22	932
6	CMNET	532
7	ALISOFT	527
8	VOLCANO-ENGINE	489
9	UCLOUD-HK	435
10	CENSY	393

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7683
2	China	4652
3	Singapore	1340
4	Hong Kong	626
5	South Korea	457
6	Indonesia	452
7	Russian Federation	385
8	United Kingdom	329
9	Viet Nam	309
10	India	290

20250916 Botnet Detection Live Streaming 110+ zombies detected)

Monday, September 15, 2025

Botnet Statistics [2025-09-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 20549
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19385
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	221	154004
2	9422	101845
3	5900	91561
4	1122	74867
5	4455	61786
6	51265	41669
7	57495	41580
8	5901	30256
9	6007	26846
10	23	26152

Rank	Network	# of suspected botnet IPs
1	MSFT	1451
2	AL-3	1331
3	GOOGLE-CLOUD	1030
4	PAN-22	933
5	ASEPL-SG	875
6	CMNET	547
7	ALISOFT	541
8	VOLCANO-ENGINE	492
9	UCLOUD-HK	434
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7938
2	China	4620
3	Singapore	1283
4	Hong Kong	623
5	South Korea	468
6	Indonesia	390
7	United Kingdom	345
8	Russian Federation	328
9	Viet Nam	286
10	Germany	271

20250915 Botnet Detection Live Streaming 240+ zombies detected)

Sunday, September 14, 2025

Botnet Statistics [2025-09-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 20322
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19180
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	9422	103754
2	1122	99819
3	5900	97139
4	5901	46812
5	220	37774
6	5902	34073
7	22	25499
8	20220	20458
9	9122	18476
10	8022	16399

Rank	Network	# of suspected botnet IPs
1	MSFT	1439
2	AL-3	1341
3	GOOGLE-CLOUD	1031
4	PAN-22	933
5	ASEPL-SG	872
6	CMNET	556
7	ALISOFT	521
8	VOLCANO-ENGINE	483
9	UCLOUD-HK	433
10	CENSY	394

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7623
2	China	4573
3	Singapore	1250
4	Hong Kong	621
5	South Korea	480
6	Indonesia	413
7	Russian Federation	342
8	United Kingdom	331
9	Viet Nam	300
10	India	295

20250914 Botnet Detection Live Streaming 120+ zombies detected)

Saturday, September 13, 2025

Botnet Statistics [2025-09-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 20621
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19415
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	98927
2	220	90758
3	9422	85167
4	5900	73215
5	5901	47822
6	3333	35533
7	5902	34288
8	20220	20451
9	222	19040
10	23	18853

Rank	Network	# of suspected botnet IPs
1	MSFT	1527
2	AL-3	1330
3	GOOGLE-CLOUD	1018
4	PAN-22	934
5	ASEPL-SG	840
6	CMNET	579
7	ALISOFT	523
8	VOLCANO-ENGINE	483
9	UCLOUD-HK	431
10	CENSY	387

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7473
2	China	4698
3	Singapore	1112
4	Hong Kong	622
5	Indonesia	555
6	South Korea	473
7	European Union	383
8	Russian Federation	357
9	India	326
10	United Kingdom	326

20250913 Botnet Detection Live Streaming 130+ zombies detected)

Friday, September 12, 2025

Botnet Statistics [2025-09-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 21582
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20402
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	100530
2	5900	67088
3	6011	65944
4	220	53457
5	3333	52377
6	5901	49836
7	5902	34255
8	5522	28468
9	22	25204
10	3334	24055

Rank	Network	# of suspected botnet IPs
1	MSFT	1540
2	AL-3	1327
3	GOOGLE-CLOUD	1022
4	PAN-22	935
5	ASEPL-SG	850
6	CMNET	666
7	ALISOFT	532
8	VOLCANO-ENGINE	477
9	UCLOUD-HK	446
10	CENSY	424

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8059
2	China	4855
3	Singapore	1155
4	Hong Kong	639
5	Indonesia	522
6	South Korea	481
7	Russian Federation	348
8	India	347
9	United Kingdom	340
10	European Union	330

20250912 Botnet Detection Live Streaming 150+ zombies detected)

Thursday, September 11, 2025

Botnet Statistics [2025-09-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 21156
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19899
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	101519
2	3333	63863
3	5900	59128
4	6011	58711
5	5901	42061
6	5522	35992
7	3334	35039
8	7722	33698
9	4444	31519
10	1111	27010

Rank	Network	# of suspected botnet IPs
1	MSFT	1524
2	AL-3	1354
3	GOOGLE-CLOUD	1007
4	PAN-22	933
5	ASEPL-SG	853
6	CMNET	710
7	ALISOFT	559
8	VOLCANO-ENGINE	466
9	UCLOUD-HK	437
10	CENSY	391

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7243
2	China	4746
3	Singapore	1136
4	Indonesia	801
5	Hong Kong	640
6	South Korea	497
7	Russian Federation	378
8	United Kingdom	345
9	India	343
10	European Union	337

20250911 Botnet Detection Live Streaming 200+ zombies detected)

Wednesday, September 10, 2025

Botnet Statistics [2025-09-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 22216
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20960
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	99739
2	3333	65946
3	2028	55427
4	5901	37508
5	3334	37065
6	2020	36330
7	7722	35607
8	5900	34795
9	22	29574
10	222	19985

Rank	Network	# of suspected botnet IPs
1	MSFT	1533
2	AL-3	1389
3	GOOGLE-CLOUD	1011
4	PAN-22	935
5	ASEPL-SG	902
6	CMNET	724
7	ALISOFT	592
8	VOLCANO-ENGINE	484
9	UCLOUD-HK	450
10	CENSY	397

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7870
2	China	4764
3	Singapore	1231
4	Indonesia	870
5	Hong Kong	670
6	South Korea	541
7	Russian Federation	389
8	India	378
9	Germany	371
10	United Kingdom	349

20250910 Botnet Detection Live Streaming 370+ zombies detected)

Tuesday, September 9, 2025

Botnet Statistics [2025-09-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 23125
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21721
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	101251
2	14226	52097
3	5901	39373
4	3333	31914
5	4444	31540
6	5900	28498
7	22	26986
8	2020	23981
9	23	21571
10	9922	21291

Rank	Network	# of suspected botnet IPs
1	MSFT	1535
2	AL-3	1399
3	GOOGLE-CLOUD	1007
4	PAN-22	930
5	ASEPL-SG	903
6	CMNET	766
7	ALISOFT	689
8	VOLCANO-ENGINE	562
9	UCLOUD-HK	452
10	CENSY	393

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7802
2	China	5445
3	Singapore	1255
4	Indonesia	864
5	Hong Kong	682
6	South Korea	516
7	Russian Federation	430
8	Germany	427
9	United Kingdom	370
10	India	354

20250909 Botnet Detection Live Streaming 180+ zombies detected)

Monday, September 8, 2025

Botnet Statistics [2025-09-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 19398
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18378
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	100828
2	4444	92463
3	1931	60617
4	8000	42539
5	10000	42395
6	5901	40696
7	5903	29167
8	32122	28763
9	5900	28523
10	22	27185

Rank	Network	# of suspected botnet IPs
1	MSFT	1486
2	AL-3	1230
3	GOOGLE-CLOUD	1012
4	PAN-22	936
5	ASEPL-SG	823
6	CMNET	639
7	VOLCANO-ENGINE	452
8	UCLOUD-HK	435
9	ALISOFT	402
10	CENSY	396

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7533
2	China	4338
3	Singapore	1089
4	Hong Kong	650
5	South Korea	464
6	Indonesia	463
7	European Union	320
8	United Kingdom	317
9	Viet Nam	293
10	Russian Federation	283

20250908 Botnet Detection Live Streaming 140+ zombies detected)

Sunday, September 7, 2025

Botnet Statistics [2025-09-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 19821
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18813
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	102712
2	3333	56122
3	9622	53582
4	32122	47346
5	5903	43367
6	7000	42401
7	5901	38966
8	5900	27932
9	22	24698
10	11541	22967

Rank	Network	# of suspected botnet IPs
1	MSFT	1513
2	AL-3	1244
3	GOOGLE-CLOUD	1008
4	PAN-22	935
5	ASEPL-SG	828
6	CMNET	640
7	ACEVILLEPTELTD-SG	610
8	VOLCANO-ENGINE	465
9	UCLOUD-HK	437
10	ALISOFT	430

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7093
2	China	4245
3	Singapore	1596
4	Hong Kong	670
5	South Korea	496
6	Indonesia	435
7	European Union	319
8	United Kingdom	313
9	Russian Federation	296
10	Viet Nam	276

20250907 Botnet Detection Live Streaming 190+ zombies detected)

Saturday, September 6, 2025

Botnet Statistics [2025-09-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 19655
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18655
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3389	267070
2	6000	117817
3	1122	100422
4	3333	56165
5	32122	47339
6	5903	43669
7	5901	38719
8	6001	34055
9	9522	30416
10	6002	29094

Rank	Network	# of suspected botnet IPs
1	MSFT	1486
2	AL-3	1240
3	GOOGLE-CLOUD	1008
4	PAN-22	938
5	ASEPL-SG	829
6	CMNET	645
7	ACEVILLEPTELTD-SG	595
8	VOLCANO-ENGINE	448
9	UCLOUD-HK	418
10	ALISOFT	418

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6892
2	China	4426
3	Singapore	1563
4	Hong Kong	634
5	South Korea	495
6	Indonesia	438
7	European Union	325
8	United Kingdom	310
9	Russian Federation	307
10	Germany	299

20250906 Botnet Detection Live Streaming 170+ zombies detected)

Friday, September 5, 2025

Botnet Statistics [2025-09-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2025. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2025-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20466
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19285
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1122	102944
2	6000	80806
3	3333	56468
4	32122	47295
5	5903	44150
6	3389	43645
7	11022	40886
8	5901	40828
9	6001	34030
10	5900	28062

Rank	Network	# of suspected botnet IPs
1	MSFT	1511
2	AL-3	1237
3	GOOGLE-CLOUD	1026
4	PAN-22	941
5	ASEPL-SG	841
6	CMNET	640
7	VOLCANO-ENGINE	443
8	UCLOUD-HK	425
9	ALISOFT	412
10	CENSY	398

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7854
2	China	4248
3	Singapore	1071
4	Hong Kong	613
5	South Korea	529
6	Indonesia	388
7	European Union	347
8	Russian Federation	340
9	United Kingdom	326
10	Germany	324

20250905 Botnet Detection Live Streaming 130+ zombies detected)

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5869)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (61)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2025 (345)
  • December (5)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	134552
2	1122	105614
3	3333	56773
4	5901	50480
5	9422	48644
6	32122	47321
7	5903	43979
8	33333	34585
9	60000	34438
10	5902	31827