Botnet Statistics [2024-12-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 27151
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25418
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1098
2	HINET-NET	1077
3	GOOGLE-CLOUD	1046
4	ALISOFT	1041
5	PAN-22	967
6	MSFT	924
7	BSNLNET	835
8	ASEPL-SG	720
9	UK-MICROSOFT-20000324	630
10	CMNET	448

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7270
2	China	6560
3	India	1802
4	Taiwan	1248
5	United Kingdom	1038
6	Singapore	930
7	South Korea	712
8	Brazil	605
9	Russian Federation	542
10	Hong Kong	534

Rank	TCP port number	# of connection attempts received
1	21	94976
2	6000	88705
3	2220	75158
4	35432	51253
5	22	49747
6	7110	44990
7	2223	35127
8	9022	34347
9	222	24467
10	23	20618

20241219 Botnet Detection Live Streaming 50+ zombies detected)

Botnet Statistics [2024-12-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 27948
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26254
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1239
2	HINET-NET	1152
3	GOOGLE-CLOUD	981
4	ALISOFT	964
5	PAN-22	930
6	MSFT	926
7	BSNLNET	789
8	ASEPL-SG	772
9	UK-MICROSOFT-20000324	629
10	CMNET	481

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7715
2	China	6585
3	India	1723
4	Taiwan	1338
5	United Kingdom	1124
6	Singapore	989
7	South Korea	664
8	Brazil	656
9	Hong Kong	601
10	Indonesia	585

Rank	TCP port number	# of connection attempts received
1	6000	85723
2	22	47524
3	2214	31069
4	222	23293
5	123	22570
6	23	20195
7	2222	20080
8	2022	16908
9	445	16902
10	1922	15934

20241218 Botnet Detection Live Streaming 50+ zombies detected)

Botnet Statistics [2024-12-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 28050
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26256
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1281
2	AL-3	1083
3	GOOGLE-CLOUD	1053
4	PAN-22	967
5	ALISOFT	949
6	MSFT	927
7	ASEPL-SG	727
8	BSNLNET	675
9	UK-MICROSOFT-20000324	632
10	CMNET	460

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7409
2	China	6536
3	India	1671
4	Taiwan	1482
5	United Kingdom	1033
6	Singapore	972
7	South Korea	768
8	Russian Federation	643
9	Brazil	634
10	Indonesia	601

Rank	TCP port number	# of connection attempts received
1	6000	82675
2	22	55068
3	6666	35972
4	222	27034
5	2219	21869
6	23	20385
7	22222	20095
8	9022	20008
9	29722	19993
10	20022	19231

20241217 Botnet Detection Live Streaming 50+ zombies detected)

Botnet Statistics [2024-12-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 26529
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24906
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	1251
2	AL-3	1147
3	GOOGLE-CLOUD	1042
4	ALISOFT	984
5	PAN-22	967
6	MSFT	905
7	ASEPL-SG	740
8	BSNLNET	673
9	UK-MICROSOFT-20000324	627
10	KORNET-KR	514

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7643
2	China	6357
3	Taiwan	1466
4	India	1337
5	United Kingdom	1056
6	Singapore	945
7	South Korea	873
8	Hong Kong	561
9	Russian Federation	521
10	Brazil	490

Rank	TCP port number	# of connection attempts received
1	6000	81517
2	2233	62047
3	22	53778
4	23	41587
5	9022	38209
6	222	36052
7	2221	19519
8	20122	18152
9	4422	13126
10	622	13124

20241216 Botnet Detection Live Streaming 40+ zombies detected)

Botnet Statistics [2024-12-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 25483
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23863
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1046
2	PAN-22	968
3	AL-3	915
4	MSFT	904
5	ALISOFT	821
6	HINET-NET	785
7	BSNLNET	707
8	UK-MICROSOFT-20000324	622
9	CMNET	599
10	KORNET-KR	581

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7391
2	China	6177
3	India	1475
4	United Kingdom	1048
5	Taiwan	978
6	South Korea	968
7	Singapore	743
8	Hong Kong	558
9	Russian Federation	519
10	Brazil	438

Rank	TCP port number	# of connection attempts received
1	2269	89718
2	22067	63070
3	22942	62717
4	7622	59023
5	22	52547
6	22858	48175
7	30022	47894
8	22568	44911
9	24622	43396
10	24382	41967

20241215 Botnet Detection Live Streaming 70+ zombies detected)

Botnet Statistics [2024-12-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 23028
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21533
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1045
2	PAN-22	968
3	MSFT	898
4	BSNLNET	683
5	UK-MICROSOFT-20000324	633
6	CMNET	594
7	KORNET-KR	575
8	HINET-NET	471
9	AL-3	462
10	CHINANET-HB	357

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6500
2	China	5686
3	India	1451
4	United Kingdom	1010
5	South Korea	934
6	Taiwan	581
7	Hong Kong	559
8	Russian Federation	553
9	Brazil	405
10	Indonesia	399

Rank	TCP port number	# of connection attempts received
1	2269	198932
2	22942	156390
3	29522	120981
4	23592	120537
5	29272	108920
6	2102	98748
7	22242	98534
8	22240	93796
9	22568	92321
10	2203	91793

20241214 Botnet Detection Live Streaming 70+ zombies detected)

Botnet Statistics [2024-12-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 22309
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20831
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1051
2	PAN-22	968
3	MSFT	880
4	BSNLNET	716
5	UK-MICROSOFT-20000324	618
6	CMNET	598
7	AL-3	515
8	HINET-NET	486
9	CHINANET-JS	359
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6484
2	China	5403
3	India	1505
4	United Kingdom	974
5	South Korea	607
6	Taiwan	593
7	Russian Federation	550
8	Hong Kong	545
9	Singapore	410
10	Indonesia	408

Rank	TCP port number	# of connection attempts received
1	2269	211644
2	22942	156116
3	23592	155724
4	2102	131437
5	29122	128923
6	22242	113787
7	7622	111350
8	29272	108857
9	6000	100255
10	22568	96340

20241213 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 22344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20888
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1038
2	PAN-22	967
3	MSFT	887
4	BSNLNET	736
5	UK-MICROSOFT-20000324	622
6	CMNET	616
7	HINET-NET	494
8	AL-3	420
9	HURRICANE-4	348
10	CHINANET-JS	322

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6375
2	China	5220
3	India	1518
4	United Kingdom	999
5	South Korea	896
6	Taiwan	623
7	Russian Federation	573
8	Hong Kong	516
9	Singapore	436
10	Brazil	374

Rank	TCP port number	# of connection attempts received
1	2269	244994
2	2102	203640
3	26792	171768
4	22942	167595
5	23592	164732
6	24382	124112
7	22240	122034
8	29122	103567
9	52922	103277
10	22469	100860

20241212 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 22083
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20644
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1006
2	PAN-22	957
3	MSFT	901
4	BSNLNET	656
5	UK-MICROSOFT-20000324	637
6	CMNET	523
7	AL-3	480
8	HINET-NET	471
9	HURRICANE-4	347
10	Xpeed	332

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6747
2	China	4928
3	India	1356
4	United Kingdom	1026
5	South Korea	908
6	Taiwan	562
7	Russian Federation	556
8	Hong Kong	530
9	Singapore	423
10	Brazil	379

Rank	TCP port number	# of connection attempts received
1	2269	213649
2	26792	170552
3	3389	155248
4	2102	154652
5	6000	135856
6	7622	125950
7	21762	124239
8	23592	123950
9	22240	111610
10	22942	110885

20241211 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-09 00:00-23:59 UTC
total number of suspected botnet IPs: 21046
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19650
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1039
2	PAN-22	969
3	MSFT	893
4	UK-MICROSOFT-20000324	638
5	BSNLNET	590
6	AL-3	508
7	HINET-NET	465
8	CMNET	425
9	Xpeed	356
10	HURRICANE-4	350

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6597
2	China	4586
3	India	1201
4	United Kingdom	1083
5	South Korea	820
6	Taiwan	553
7	Russian Federation	522
8	Hong Kong	464
9	Singapore	442
10	Indonesia	370

Rank	TCP port number	# of connection attempts received
1	2269	225012
2	26792	172327
3	7622	161216
4	29802	147414
5	1922	133908
6	33022	129740
7	6000	122929
8	21762	120654
9	22240	120559
10	22942	117043

20241210 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-08 00:00-23:59 UTC
total number of suspected botnet IPs: 20764
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19393
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1036
2	PAN-22	968
3	MSFT	909
4	UK-MICROSOFT-20000324	640
5	BSNLNET	558
6	AL-3	496
7	HINET-NET	467
8	CMNET	446
9	Xpeed	394
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6606
2	China	4663
3	India	1092
4	United Kingdom	1028
5	South Korea	861
6	Taiwan	558
7	Russian Federation	475
8	Hong Kong	473
9	Singapore	440
10	Brazil	339

Rank	TCP port number	# of connection attempts received
1	2269	212389
2	26792	161248
3	22240	140292
4	7622	135900
5	6000	119904
6	33022	106564
7	2342	104233
8	2102	96388
9	3389	96209
10	2212	94738

20241209 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-12-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20703
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19365
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1037
2	PAN-22	969
3	MSFT	911
4	UK-MICROSOFT-20000324	640
5	BSNLNET	606
6	HINET-NET	478
7	AL-3	457
8	CMNET	434
9	Xpeed	415
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6515
2	China	4587
3	India	1220
4	United Kingdom	996
5	South Korea	882
6	Taiwan	571
7	Hong Kong	503
8	Russian Federation	460
9	Singapore	421
10	European Union	328

Rank	TCP port number	# of connection attempts received
1	2269	184759
2	22240	150156
3	26792	145115
4	5322	124678
5	7622	124539
6	22697	115057
7	6000	114335
8	26142	112400
9	22469	106158
10	2102	100449

20241208 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-06 00:00-23:59 UTC
total number of suspected botnet IPs: 21037
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19614
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1043
2	PAN-22	968
3	MSFT	924
4	UK-MICROSOFT-20000324	639
5	BSNLNET	548
6	AL-3	484
7	HINET-NET	442
8	CMNET	422
9	HURRICANE-4	349
10	Xpeed	345

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6978
2	China	4424
3	India	1189
4	United Kingdom	996
5	South Korea	802
6	Taiwan	536
7	Hong Kong	512
8	Russian Federation	507
9	Singapore	426
10	Indonesia	396

Rank	TCP port number	# of connection attempts received
1	2269	159986
2	26792	144328
3	7622	133265
4	6000	130745
5	22240	122145
6	2342	114198
7	24382	111772
8	2267	106721
9	9922	105295
10	2732	97787

20241207 Botnet Detection Live Streaming 60+ zombies detected)

Botnet Statistics [2024-12-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-05 00:00-23:59 UTC
total number of suspected botnet IPs: 20427
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18983
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1054
2	PAN-22	968
3	MSFT	914
4	UK-MICROSOFT-20000324	646
5	BSNLNET	498
6	HINET-NET	490
7	CMNET	449
8	AL-3	440
9	HURRICANE-4	348
10	CENSY	303

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6558
2	China	4400
3	India	1116
4	United Kingdom	984
5	South Korea	757
6	Taiwan	595
7	Russian Federation	543
8	Hong Kong	510
9	Indonesia	376
10	Singapore	352

Rank	TCP port number	# of connection attempts received
1	26792	172828
2	2269	155102
3	8122	148824
4	6000	136831
5	2342	116723
6	7622	115943
7	22942	114523
8	22067	113284
9	22920	110519
10	22240	108890

20241206 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-04 00:00-23:59 UTC
total number of suspected botnet IPs: 19907
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18562
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1036
2	PAN-22	968
3	MSFT	903
4	UK-MICROSOFT-20000324	638
5	CMNET	512
6	HINET-NET	480
7	AL-3	442
8	BSNLNET	428
9	HURRICANE-4	348
10	CENSY	301

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6557
2	China	4221
3	India	1055
4	United Kingdom	983
5	South Korea	683
6	Taiwan	567
7	Russian Federation	483
8	Hong Kong	465
9	Singapore	375
10	Indonesia	357

Rank	TCP port number	# of connection attempts received
1	22469	155393
2	2269	140010
3	22920	116484
4	6000	115886
5	22171	115796
6	22240	113716
7	36522	112730
8	9922	111587
9	2342	107247
10	4322	103584

20241205 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20346
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18992
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1009
2	PAN-22	956
3	MSFT	907
4	UK-MICROSOFT-20000324	643
5	HINET-NET	494
6	AL-3	481
7	BSNLNET	476
8	CMNET	468
9	HURRICANE-4	348
10	CENSY	304

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6401
2	China	4542
3	India	1140
4	United Kingdom	1009
5	Taiwan	600
6	Russian Federation	513
7	South Korea	503
8	Hong Kong	487
9	Indonesia	474
10	Singapore	446

Rank	TCP port number	# of connection attempts received
1	21762	169861
2	27082	159317
3	2269	135997
4	2342	133734
5	22469	129984
6	22171	129423
7	6000	127352
8	9922	118095
9	24112	112301
10	2732	109943

20241204 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-02 00:00-23:59 UTC
total number of suspected botnet IPs: 20672
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19252
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1035
2	PAN-22	964
3	MSFT	917
4	UK-MICROSOFT-20000324	641
5	BSNLNET	541
6	CMNET	483
7	HINET-NET	480
8	AL-3	446
9	HURRICANE-4	350
10	CHINANET-JS	299

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	6243
2	China	5063
3	India	1216
4	United Kingdom	982
5	Taiwan	575
6	Russian Federation	529
7	South Korea	467
8	Hong Kong	467
9	Indonesia	382
10	Singapore	371

Rank	TCP port number	# of connection attempts received
1	21762	156009
2	9122	146215
3	2269	137619
4	2342	132173
5	22694	131037
6	22240	122069
7	2233	116606
8	22171	112729
9	22470	109604
10	22299	108883

20241203 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-12-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for December 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-12-01 00:00-23:59 UTC
total number of suspected botnet IPs: 23825
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22336
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1198
2	GOOGLE-CLOUD	1046
3	ALISOFT	1024
4	PAN-22	968
5	MSFT	945
6	ASEPL-SG	812
7	UK-MICROSOFT-20000324	639
8	CMNET	576
9	BSNLNET	510
10	HINET-NET	476

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7293
2	China	6328
3	India	1106
4	Singapore	1012
5	United Kingdom	997
6	Taiwan	579
7	Russian Federation	526
8	Hong Kong	515
9	South Korea	492
10	Brazil	380

Rank	TCP port number	# of connection attempts received
1	2269	167416
2	27812	161905
3	6000	130981
4	22697	126602
5	21762	123088
6	22470	116303
7	2342	114950
8	22067	114054
9	27082	113975
10	29802	112662

20241202 Botnet Detection Live Streaming 100+ zombies detected)

Daily Zombie Lists for December 2024 （2024年12月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for December 2024 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2024年12月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

12/01: download link 下載網址; MD5sum: 204145ef1f6af5d66381c63c50b5e89d

12/02: download link 下載網址; MD5sum: b0f9ee73d0f03e71efd4addc371d87d3

12/03: download link 下載網址; MD5sum: 6c78731ce6e07252df963c1b88e1b44d

12/04: download link 下載網址; MD5sum: 113231703e19926fde0be2bdf94334c1

12/05: download link 下載網址; MD5sum: 9190984b9e61e86d3457cd36eb76ef19

12/06: download link 下載網址; MD5sum: 8f77423755e03dd03423b0ca6a4e9b92

12/07: download link 下載網址; MD5sum: 3353706361c0f1cdcad634a0f186c464

12/08: download link 下載網址; MD5sum: 9a30942ca6c1769d41c60040123aca31

12/09: download link 下載網址; MD5sum: 8ae230008e3a788931f922842698b6c0

12/10: download link 下載網址; MD5sum: a3265cd5154b2cebd64d578fd865f54f

12/11: download link 下載網址; MD5sum: cad5f5f52786acc283301960768f1f64

12/12: download link 下載網址; MD5sum: e561560f6674ab724e7161345bbe7416

12/13: download link 下載網址; MD5sum: cc3fec42a7adbb4c86ce4f6993ad2918

12/14: download link 下載網址; MD5sum: f8867b1f0bd95bb184e4dac582bf8eb8

12/15: download link 下載網址; MD5sum: 12e27647c5a449793c4b4cfef0b7fb52

12/16: download link 下載網址; MD5sum: 73454b5a848c3d073cdcd6036c0dafdd

12/17: download link 下載網址; MD5sum: 8ad8291ce9f6de4c0731d28bd35f97aa

12/18: download link 下載網址; MD5sum: ee59ca1a8e3064a8946309378a7acaf1

Botnet Statistics [2024-11-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-30 00:00-23:59 UTC
total number of suspected botnet IPs: 24285
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22703
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1113
2	ALISOFT	1044
3	GOOGLE-CLOUD	1041
4	PAN-22	968
5	MSFT	942
6	ASEPL-SG	749
7	UK-MICROSOFT-20000324	643
8	CMNET	596
9	HINET-NET	514
10	BSNLNET	511

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7205
2	China	6238
3	India	1268
4	United Kingdom	1037
5	Singapore	924
6	Taiwan	616
7	Russian Federation	562
8	Hong Kong	531
9	South Korea	507
10	Indonesia	435

Rank	TCP port number	# of connection attempts received
1	2342	204559
2	6000	146524
3	2269	113666
4	22697	113467
5	22568	111615
6	2210	105213
7	2233	96893
8	22470	89884
9	2872	84965
10	9922	83809

20241201 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-11-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-29 00:00-23:59 UTC
total number of suspected botnet IPs: 25794
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24140
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1256
2	ALISOFT	1236
3	GOOGLE-CLOUD	1044
4	PAN-22	968
5	MSFT	959
6	ASEPL-SG	925
7	UK-MICROSOFT-20000324	646
8	BSNLNET	542
9	HINET-NET	526
10	LINODE-US	416

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8044
2	China	6194
3	India	1366
4	Singapore	1117
5	United Kingdom	1043
6	Taiwan	640
7	Russian Federation	571
8	Indonesia	534
9	Hong Kong	530
10	South Korea	490

Rank	TCP port number	# of connection attempts received
1	2342	300196
2	22568	146725
3	6000	129404
4	2210	122776
5	28232	115053
6	8822	109903
7	2872	105751
8	4222	101196
9	9922	98391
10	2233	96022

20241130 Botnet Detection Live Streaming 300+ zombies detected)

Botnet Statistics [2024-11-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-28 00:00-23:59 UTC
total number of suspected botnet IPs: 24531
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22885
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1059
2	GOOGLE-CLOUD	1055
3	AL-3	1036
4	PAN-22	967
5	MSFT	961
6	ASEPL-SG	665
7	UK-MICROSOFT-20000324	649
8	BSNLNET	630
9	HINET-NET	545
10	CMNET	364

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7445
2	China	5942
3	India	1439
4	United Kingdom	1023
5	Singapore	867
6	Taiwan	651
7	Russian Federation	544
8	Hong Kong	541
9	South Korea	498
10	Indonesia	485

Rank	TCP port number	# of connection attempts received
1	2342	296371
2	21642	178584
3	6000	139820
4	22568	138736
5	2210	125280
6	2233	112883
7	36522	112414
8	9922	100227
9	2872	94993
10	8822	94588

20241129 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-11-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-27 00:00-23:59 UTC
total number of suspected botnet IPs: 25339
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23696
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1322
2	ALISOFT	1273
3	GOOGLE-CLOUD	1040
4	ASEPL-SG	999
5	PAN-22	967
6	MSFT	957
7	UK-MICROSOFT-20000324	644
8	BSNLNET	615
9	HINET-NET	533
10	HURRICANE-4	349

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7618
2	China	6087
3	India	1436
4	Singapore	1198
5	United Kingdom	1017
6	Taiwan	641
7	Russian Federation	566
8	Hong Kong	531
9	South Korea	514
10	Brazil	433

Rank	TCP port number	# of connection attempts received
1	2233	148122
2	6000	133333
3	2210	125552
4	21642	110795
5	8822	104408
6	2342	103691
7	9922	99110
8	36522	89287
9	28232	84494
10	22568	83693

20241128 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-11-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-26 00:00-23:59 UTC
total number of suspected botnet IPs: 25135
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23472
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1105
2	AL-3	1081
3	GOOGLE-CLOUD	1011
4	PAN-22	952
5	MSFT	952
6	ASEPL-SG	681
7	UK-MICROSOFT-20000324	647
8	BSNLNET	613
9	HINET-NET	582
10	LINODE-US	432

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7648
2	China	6102
3	India	1420
4	United Kingdom	1023
5	Singapore	884
6	Taiwan	684
7	Indonesia	593
8	Russian Federation	554
9	Hong Kong	527
10	South Korea	506

Rank	TCP port number	# of connection attempts received
1	2342	183318
2	36522	147245
3	6000	137551
4	2210	125765
5	8822	109492
6	2233	102108
7	12022	99279
8	9922	99103
9	22	85972
10	21	63185

20241127 Botnet Detection Live Streaming 400+ zombies detected)

Botnet Statistics [2024-11-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-25 00:00-23:59 UTC
total number of suspected botnet IPs: 26236
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24527
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	1392
2	AL-3	1232
3	GOOGLE-CLOUD	1053
4	PAN-22	967
5	MSFT	961
6	ASEPL-SG	876
7	UK-MICROSOFT-20000324	648
8	BSNLNET	610
9	HINET-NET	590
10	CMNET	398

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7474
2	China	6570
3	India	1411
4	Singapore	1118
5	United Kingdom	1025
6	Taiwan	714
7	Russian Federation	637
8	South Korea	613
9	Indonesia	582
10	Hong Kong	531

Rank	TCP port number	# of connection attempts received
1	6000	126038
2	2210	125943
3	11122	124311
4	8822	116848
5	9922	100022
6	22	85890
7	2267	74122
8	10023	71676
9	12022	68846
10	21	65042

20241126 Botnet Detection Live Streaming 300+ zombies detected)

Botnet Statistics [2024-11-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for November 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-11-24 00:00-23:59 UTC
total number of suspected botnet IPs: 23670
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22120
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1136
2	GOOGLE-CLOUD	1045
3	ALISOFT	1042
4	PAN-22	967
5	MSFT	938
6	ASEPL-SG	778
7	UK-MICROSOFT-20000324	647
8	HINET-NET	550
9	BSNLNET	509
10	KORNET-KR	357

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7410
2	China	5562
3	India	1088
4	United Kingdom	1014
5	Singapore	990
6	Taiwan	664
7	South Korea	652
8	Russian Federation	575
9	Hong Kong	516
10	Brazil	404

Rank	TCP port number	# of connection attempts received
1	24112	282638
2	2267	195763
3	27812	143046
4	3222	138095
5	6000	128360
6	2210	126009
7	18322	114619
8	8822	114424
9	22769	102968
10	22572	99531

20241125 Botnet Detection Live Streaming 400+ zombies detected)