Daily Botnet Statistics

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21845
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20388
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1568
2	AL-3	1145
3	GOOGLE-CLOUD	1003
4	PAN-22	949
5	ASEPL-SG	730
6	VOLCANO-ENGINE	542
7	CMNET	519
8	UCLOUD-HK	424
9	ALISOFT	403
10	CENSY	383

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7852
2	China	4950
3	Singapore	943
4	Hong Kong	607
5	India	486
6	Russian Federation	393
7	Indonesia	393
8	United Kingdom	390
9	France	382
10	Germany	322

Daily Zombie Lists for November 2025（2025年11月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for November 2025 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2025年11月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

11/01: download link 下載網址; MD5sum: 8848d306d13871bef685189997920701

11/02: download link 下載網址; MD5sum: 420b60063a10995934af5616a754804c

11/03: download link 下載網址; MD5sum: d8544a41e42f111e2522e74c8992307e

11/04: download link 下載網址; MD5sum: 2ce0ca973f72190aa018e23e92a07d47

11/05: download link 下載網址; MD5sum: 1384bada5a626068d509caca715307dd

11/06: download link 下載網址; MD5sum: afc83dfc4285d0552e73ab4cd26fe4a8

11/07: download link 下載網址; MD5sum: f2763c15296bf52d9bb13535aa7edff1

11/08: download link 下載網址; MD5sum: dfdf602614fe9e65f0087bc752619f29

11/09: download link 下載網址; MD5sum: 66e593a280b4919028c153328c5b2c14

11/10: download link 下載網址; MD5sum: 3fd6c2866ee22b5e00dced58b982b9d2

11/11: download link 下載網址; MD5sum: 7583e167c60a7fb68ab5e4a820bd7c17

11/12: download link 下載網址; MD5sum: 720588649b2831a6c676fc049c439558

11/13: download link 下載網址; MD5sum: a82a1c8e22015cf1701ba8ccb0cce2e5

11/14: download link 下載網址; MD5sum: 395cfe0b547b1b4191025cc11d818028

11/15: download link 下載網址; MD5sum: f0a14ba09616e0796c8e983fff47afe2

11/16: download link 下載網址; MD5sum: 0596684d381fd14f1a489403a362a1e3

11/17: download link 下載網址; MD5sum: fe9a91e00fa0b01e6160816188ff4c3c

11/18: download link 下載網址; MD5sum: 5489cd716cb71c32e3201f7b524760f8

11/19: download link 下載網址; MD5sum: 7906a64a03149ccf3f32137c35cbbc88

11/20: download link 下載網址; MD5sum: a46932c297f8268dddb255fdbe3fe177

11/21: download link 下載網址; MD5sum: 5ac750175f5b5bb9199f4df6ef569d8c

11/22: download link 下載網址; MD5sum: 07bbc0f3da2d6c683de549d8f1712505

11/23: download link 下載網址; MD5sum: 23723415facea966fab8b27dccc12bf6

11/24: download link 下載網址; MD5sum: 783dbced6ff031039af01c439d717ff8

11/25: download link 下載網址; MD5sum: ecdc9b16df2075e75fde6179acfc2d70

11/26: download link 下載網址; MD5sum: 58752fd01825cecc4ac3a70c401cafc8

11/27: download link 下載網址; MD5sum: d85b5bd1943d62bfbee7c810516d6307

11/28: download link 下載網址; MD5sum: fcaeeb276c304ed01600c34702ca8315

11/29: download link 下載網址; MD5sum: 702fc7f720e09bed088ca7a5ff432545

11/30: download link 下載網址; MD5sum: 559bf53e6bc5f583f8320e8604b913b4

Saturday, November 1, 2025

Botnet Statistics [2025-10-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for October 2025.
detection period: 2025-10-31 00:00-23:59 UTC
total number of suspected botnet IPs: 21119
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19698
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	313267
2	6622	113246
3	56874	67800
4	8010	33050
5	9999	24390
6	22	24114
7	2226	16505
8	1433	14170
9	23	13246
10	5901	12415

Rank	Network	# of suspected botnet IPs
1	MSFT	1570
2	AL-3	1148
3	GOOGLE-CLOUD	1005
4	PAN-22	950
5	ASEPL-SG	737
6	VOLCANO-ENGINE	532
7	CMNET	519
8	UCLOUD-HK	426
9	CENSY	382
10	ALISOFT	381