Custom Search

Saturday, May 2, 2026

Daily Zombie Lists for May 2026（2026年05月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；
Column 2: Zombie IP;
第2欄：該殭屍電腦的IP位址；
Column 3: TCP destination port number scanned by the zombie.
第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for May 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年05月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

05/01: download link 下載網址; MD5sum: b5c91d5b9d5abfaad8916d4dca40e513
Labels:
Posted by at No comments:

Friday, May 1, 2026

Botnet Statistics [2026-04-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 23468
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22016
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1AL-31544
2MSFT1517
3GOOGLE-CLOUD1050
4PAN-22955
5ASEPL-SG481
6FR-ONYPHE-20191111400
7CENSY381
8INFRAWATCH332
9VOLCANO-ENGINE319
10cloud289


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States10258
2China3500
3United Kingdom1032
4Singapore871
5Germany692
6India564
7Netherlands558
8France533
9Indonesia435
10Brazil391
Labels:
Posted by at No comments:

Thursday, April 30, 2026

Botnet Statistics [2026-04-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 19977
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18792
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900520702
223362870
3110116158
4901163360
5225251291
6808838545
72231388
8808228084
9801527449
10112225417
RankNetwork# of suspected botnet IPs
1AL-31560
2MSFT1465
3GOOGLE-CLOUD1051
4PAN-22953
5ASEPL-SG523
6FR-ONYPHE-20191111400
7CENSY379
8INFRAWATCH332
9cloud330
10VOLCANO-ENGINE317


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8622
2China3445
3United Kingdom916
4Singapore743
5Germany575
6Netherlands489
7France484
8Indonesia390
9India375
10Hong Kong336
Labels:
Posted by at No comments:
Subscribe to: Posts (Atom)
RankTCP port number# of connection attempts received
15900539172
2110233153
38088218874
48082103115
5878767816
6225244781
7801544585
8543236567
9220836335
10222233452