Custom Search

Tuesday, December 2, 2025

Daily Zombie Lists for December 2025（2025年12月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；
Column 2: Zombie IP;
第2欄：該殭屍電腦的IP位址；
Column 3: TCP destination port number scanned by the zombie.
第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for December 2025 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2025年12月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

12/01: download link 下載網址; MD5sum: a62aa3bc64f4ca2fda43c2b23b86d6a5
12/02: download link 下載網址; MD5sum: f507907e2059fc68a42e0b04defbf1bb
12/03: download link 下載網址; MD5sum: d3b04a11f4e6475d6d7894d165fb109d
12/04: download link 下載網址; MD5sum: 75165b2a399b40bc734e19febbf62d3f
12/05: download link 下載網址; MD5sum: 92ad12bd974f793ca44febdbb5e34d52
12/06: download link 下載網址; MD5sum: 89f5090f4a2ee8ba18080282e25986be
12/07: download link 下載網址; MD5sum: bc57a02d6ead4904af57bc05989945e5
12/08: download link 下載網址; MD5sum: 93b78ee982bfa30d024e222906ef4640
12/09: download link 下載網址; MD5sum: 8109f1d49488f5ad56ebcc61173f14d4
12/10: download link 下載網址; MD5sum: 527f5ba95f852d5393507965d3d57b18
12/11: download link 下載網址; MD5sum: 3a77b104189cbb008bc00c34bd4b1a69
12/12: download link 下載網址; MD5sum: ae393866f570f7b33002eb462bb8fc60
12/13: download link 下載網址; MD5sum: 9e6c247b210ee8992ffb8d849ab8fd6c
12/14: download link 下載網址; MD5sum: df31d9eb0d2869f2b2df39a6a65a7ceb
12/15: download link 下載網址; MD5sum: 8dcbcd79709e17340cc268358f480abd
12/16: download link 下載網址; MD5sum: c52380eaab6541686f93c62e83ecf91b
12/17: download link 下載網址; MD5sum: 0bb6cd15caa4c8e6b353d503a6b29661
12/18: download link 下載網址; MD5sum: 117128173849aaed5b0ed3a6580766c4
12/19: download link 下載網址; MD5sum: 38d516d2f86749b1b747a6a1a18781b6
12/20: download link 下載網址; MD5sum: b3de77f222b6dfd2aae529cd9efb01e1
12/21: download link 下載網址; MD5sum: be8bf1f9ae66b0119cbd381268c5921e
12/22: download link 下載網址; MD5sum: 218d89afcddb4ab22c3be0876b820946
12/23: download link 下載網址; MD5sum: 68148bdfb7599c345f1c6d414d8e8691
12/24: download link 下載網址; MD5sum: d87f6e31ae4c90912d778a349dcb0932
12/25: download link 下載網址; MD5sum: fc819cebc2511bf92055e9157f493755
12/26: download link 下載網址; MD5sum: 577bdb5b9d6cabfeea253603a312960f
12/27: download link 下載網址; MD5sum: 5526de1e82cf0f71b81c44724975587e
12/28: download link 下載網址; MD5sum: 50a1ccad0388fd74e36463efc6350fa9
12/29: download link 下載網址; MD5sum: db87923994946a65e3dc2c4e889b597f
12/30: download link 下載網址; MD5sum: e59d5b17674a9eb34b9bfb6ef111d33c
12/31: download link 下載網址; MD5sum: 83754a3a8463601f2c1b4f0e10ca1c9a
Labels:
Posted by at No comments:

Monday, December 1, 2025

Botnet Statistics [2025-11-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 21261
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19954
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1506
2AL-31109
3GOOGLE-CLOUD1005
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG698
7VOLCANO-ENGINE560
8ALISOFT425
9CENSY381
10LINODE-US312


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8657
2China3851
3Singapore1723
4Hong Kong458
5United Kingdom396
6India371
7South Korea349
8Netherlands327
9Brazil297
10Germany296
Labels:
Posted by at No comments:

Sunday, November 30, 2025

Botnet Statistics [2025-11-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2025.
detection period: 2025-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21538
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20163
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900116451
26262112280
3555591305
42256366
5333540168
65522238131
7558826862
8200224947
9590123184
10777720818
RankNetwork# of suspected botnet IPs
1MSFT1511
2AL-31102
3GOOGLE-CLOUD1006
4PAN-22949
5BYTEPLUS-SG752
6ASEPL-SG697
7VOLCANO-ENGINE554
8ALISOFT414
9CENSY382
10CMNET329


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7933
2China4072
3Singapore1608
4India545
5Hong Kong510
6South Korea441
7Russian Federation388
8United Kingdom375
9Brazil347
10Indonesia327
Labels:
Posted by at No comments:
Subscribe to: Posts (Atom)
RankTCP port number# of connection attempts received
15900110487
25555108141
3832290717
4626289494
52243964
6777731824
7662225925
8590120892
91333320171
10558819412