Custom Search

Thursday, April 2, 2026

Daily Zombie Lists for April 2026（2026年04月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；
Column 2: Zombie IP;
第2欄：該殭屍電腦的IP位址；
Column 3: TCP destination port number scanned by the zombie.
第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for April 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年04月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

04/01: download link 下載網址; MD5sum: 9c741e33e224c4aa90559ca99b0bfa5c
Labels:
Posted by at No comments:

Wednesday, April 1, 2026

Botnet Statistics [2026-03-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 18882
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17943
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1AL-31433
2MSFT1372
3GOOGLE-CLOUD1008
4PAN-22951
5ASEPL-SG936
6FR-ONYPHE-20191111400
7VOLCANO-ENGINE399
8CENSY384
9cloud307
10ALISOFT305


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8782
2China3662
3Singapore1410
4France479
5Hong Kong366
6Indonesia341
7Netherlands306
8United Kingdom252
9India251
10Germany230
Labels:
Posted by at No comments:

Tuesday, March 31, 2026

Botnet Statistics [2026-03-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 18014
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17075
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900296031
2888150718
37777123334
4901195558
5220591224
6200089413
75100585457
8800079299
9229870834
10535766204
RankNetwork# of suspected botnet IPs
1AL-31568
2MSFT1333
3GOOGLE-CLOUD1000
4ASEPL-SG962
5PAN-22950
6VOLCANO-ENGINE404
7FR-ONYPHE-20191111400
8CENSY379
9cloud328
10ALISOFT303


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8259
2China3612
3Singapore1315
4France466
5Hong Kong363
6Indonesia336
7Netherlands278
8South Korea243
9United Kingdom232
10India229
Labels:
Posted by at No comments:
Subscribe to: Comments (Atom)
RankTCP port number# of connection attempts received
15900320107
22254101987
3220598719
4502591756
5772274956
6666646098
7990145918
8552241546
9777737622
10590236633