Botnet Statistics [2024-09-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 27202
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23292
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2195
2	ASEPL-SG	1143
3	GOOGLE-CLOUD	1088
4	AL-3	1006
5	PAN-22	973
6	MSFT	947
7	BSNLNET	780
8	UK-MICROSOFT-20000324	657
9	CMNET	429
10	HURRICANE-4	348

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7608
2	China	7007
3	India	1525
4	Singapore	1467
5	United Kingdom	1241
6	Russian Federation	666
7	South Korea	573
8	Hong Kong	536
9	Brazil	530
10	Indonesia	382

Rank	TCP port number	# of connection attempts received
1	6000	91830
2	7000	83322
3	6001	83227
4	8000	82755
5	8003	81524
6	9876	79621
7	2221	79418
8	2220	79410
9	1337	78792
10	7003	76619

20240916 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-09-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 27442
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23606
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2240
2	GOOGLE-CLOUD	1088
3	ASEPL-SG	1079
4	AL-3	980
5	PAN-22	975
6	MSFT	952
7	BSNLNET	822
8	UK-MICROSOFT-20000324	656
9	CMNET	451
10	HURRICANE-4	350

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7787
2	China	6893
3	India	1739
4	Singapore	1387
5	United Kingdom	1283
6	Russian Federation	666
7	South Korea	580
8	Brazil	527
9	Hong Kong	516
10	Indonesia	374

Rank	TCP port number	# of connection attempts received
1	225	123671
2	8004	91956
3	6000	88834
4	9876	87872
5	7000	85748
6	2221	84435
7	8005	84003
8	2220	83266
9	402	78090
10	6001	76020

20240915 Botnet Detection Live Streaming 300+ zombies detected)

Botnet Statistics [2024-09-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 28602
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24680
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2205
2	ASEPL-SG	1092
3	GOOGLE-CLOUD	1085
4	PAN-22	979
5	AL-3	954
6	BSNLNET	939
7	MSFT	671
8	UK-MICROSOFT-20000324	472
9	CMNET	438
10	HURRICANE-4	351

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7791
2	China	7173
3	India	1917
4	Singapore	1481
5	United Kingdom	1024
6	Russian Federation	773
7	Brazil	660
8	South Korea	602
9	Hong Kong	532
10	Indonesia	468

Rank	TCP port number	# of connection attempts received
1	1337	88726
2	6000	85716
3	2221	85437
4	2220	83661
5	6005	82899
6	6001	81842
7	8003	80314
8	8005	80232
9	9876	79908
10	7003	78027

20240914 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-09-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 29276
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 26153
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2311
2	GOOGLE-CLOUD	1088
3	AL-3	989
4	PAN-22	978
5	ASEPL-SG	972
6	BSNLNET	852
7	MSFT	754
8	UK-MICROSOFT-20000324	510
9	CMNET	446
10	KORNET-KR	354

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7938
2	China	7150
3	India	1974
4	Singapore	1399
5	United Kingdom	1068
6	Russian Federation	759
7	Brazil	649
8	South Korea	583
9	Hong Kong	543
10	Indonesia	532

Rank	TCP port number	# of connection attempts received
1	9876	112446
2	2220	109917
3	6005	108502
4	8005	105715
5	8004	103053
6	2221	102634
7	6000	100696
8	6001	100311
9	8002	98275
10	7000	95179

20240913 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-09-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 26497
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23563
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2204
2	GOOGLE-CLOUD	1065
3	PAN-22	978
4	ASEPL-SG	926
5	AL-3	878
6	BSNLNET	838
7	MSFT	817
8	UK-MICROSOFT-20000324	576
9	CMNET	430
10	HURRICANE-4	345

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7293
2	China	6490
3	India	1813
4	Singapore	1275
5	United Kingdom	1133
6	Russian Federation	635
7	South Korea	542
8	Hong Kong	519
9	Brazil	506
10	Indonesia	480

Rank	TCP port number	# of connection attempts received
1	5511	69233
2	220	48869
3	23	39237
4	22000	32715
5	22	30877
6	2233	25813
7	5261	25679
8	8568	23233
9	8022	22139
10	57143	20195

20240912 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 27502
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24318
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2272
2	GOOGLE-CLOUD	1037
3	AL-3	1015
4	ASEPL-SG	998
5	MSFT	992
6	PAN-22	965
7	BSNLNET	793
8	UK-MICROSOFT-20000324	682
9	CMNET	456
10	AFRINIC-042005	366

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7488
2	China	6744
3	India	1767
4	Singapore	1348
5	United Kingdom	1286
6	Russian Federation	633
7	South Korea	553
8	Hong Kong	533
9	Brazil	530
10	Indonesia	518

Rank	TCP port number	# of connection attempts received
1	1337	113879
2	6000	112327
3	6001	107830
4	8002	105160
5	9876	101032
6	7001	100257
7	7003	100026
8	8005	98947
9	7002	98840
10	7004	97953

20240911 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 27967
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 24655
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2228
2	GOOGLE-CLOUD	1041
3	AL-3	996
4	MSFT	987
5	ASEPL-SG	978
6	PAN-22	963
7	BSNLNET	814
8	UK-MICROSOFT-20000324	679
9	AFRINIC-042005	568
10	CMNET	435

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7472
2	China	7214
3	India	1794
4	Singapore	1329
5	United Kingdom	1263
6	Russian Federation	662
7	Mauritius	569
8	Brazil	520
9	South Korea	519
10	Hong Kong	512

Rank	TCP port number	# of connection attempts received
1	6000	110917
2	8002	104320
3	7000	103871
4	6001	103334
5	1337	103257
6	8005	97288
7	9876	96441
8	7001	91839
9	8004	90374
10	2221	89933

20240910 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 26907
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23516
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2222
2	AL-3	1105
3	ASEPL-SG	1060
4	GOOGLE-CLOUD	1057
5	MSFT	986
6	PAN-22	966
7	UK-MICROSOFT-20000324	674
8	AFRINIC-042005	620
9	BSNLNET	600
10	CMNET	451

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7800
2	China	6890
3	Singapore	1394
4	United Kingdom	1261
5	India	1232
6	Mauritius	622
7	Russian Federation	547
8	Hong Kong	533
9	South Korea	510
10	Brazil	484

Rank	TCP port number	# of connection attempts received
1	6001	135026
2	1337	121174
3	8002	117095
4	7002	113174
5	6000	113015
6	8003	111689
7	7000	111522
8	2221	111177
9	7004	108826
10	8005	107073

20240909 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-09-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 26941
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23603
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2256
2	GOOGLE-CLOUD	1055
3	AL-3	1046
4	MSFT	1004
5	PAN-22	968
6	ASEPL-SG	941
7	AFRINIC-042005	704
8	UK-MICROSOFT-20000324	677
9	BSNLNET	573
10	CMNET	421

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7608
2	China	6868
3	India	1302
4	United Kingdom	1302
5	Singapore	1286
6	Mauritius	705
7	Russian Federation	595
8	South Korea	564
9	Hong Kong	535
10	Brazil	472

Rank	TCP port number	# of connection attempts received
1	2122	173100
2	8003	114139
3	6001	112798
4	8005	112092
5	6000	110286
6	1337	109072
7	8002	108800
8	7002	104828
9	9876	104152
10	8000	96348

20240908 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-06 00:00-23:59 UTC
total number of suspected botnet IPs: 27193
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23629
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2227
2	GOOGLE-CLOUD	1057
3	AL-3	1052
4	ASEPL-SG	1037
5	MSFT	1003
6	PAN-22	975
7	AFRINIC-042005	736
8	UK-MICROSOFT-20000324	676
9	BSNLNET	439
10	CMNET	413

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7371
2	China	6822
3	Singapore	1387
4	United Kingdom	1276
5	India	1241
6	Mauritius	738
7	Russian Federation	681
8	South Korea	607
9	Hong Kong	530
10	Brazil	474

Rank	TCP port number	# of connection attempts received
1	2122	226002
2	8002	122120
3	6001	121727
4	8003	120776
5	6000	120466
6	6005	114048
7	7000	112005
8	2220	111725
9	9876	111258
10	1337	109709

20240907 Botnet Detection Live Streaming 300+ zombies detected)

Botnet Statistics [2024-09-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 27076
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22658
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2185
2	GOOGLE-CLOUD	1067
3	MSFT	1016
4	AL-3	1000
5	PAN-22	975
6	ASEPL-SG	901
7	AFRINIC-042005	798
8	UK-MICROSOFT-20000324	679
9	BSNLNET	405
10	CMNET	403

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7408
2	China	6791
3	Singapore	1259
4	United Kingdom	1249
5	India	1194
6	Mauritius	799
7	Russian Federation	692
8	South Korea	545
9	Hong Kong	545
10	Brazil	506

Rank	TCP port number	# of connection attempts received
1	2122	203578
2	8002	127390
3	6000	126745
4	8003	126381
5	6001	125416
6	7000	122801
7	2221	118185
8	2220	115005
9	402	114296
10	8004	114085

20240906 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 27552
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23004
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2214
2	AL-3	1059
3	GOOGLE-CLOUD	1054
4	ASEPL-SG	1021
5	MSFT	980
6	PAN-22	968
7	AFRINIC-042005	770
8	UK-MICROSOFT-20000324	652
9	CMNET	427
10	BSNLNET	358

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7816
2	China	7051
3	Singapore	1400
4	United Kingdom	1239
5	India	1125
6	Mauritius	771
7	Russian Federation	740
8	South Korea	541
9	Hong Kong	525
10	Indonesia	494

Rank	TCP port number	# of connection attempts received
1	2122	217849
2	8002	165064
3	6001	150019
4	2220	145090
5	6000	142449
6	6005	141526
7	2221	140404
8	8003	138674
9	7001	138346
10	8000	135134

20240905 Botnet Detection Live Streaming 100+ zombies detected)

Botnet Statistics [2024-09-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-03 00:00-23:59 UTC
total number of suspected botnet IPs: 27432
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23008
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2237
2	GOOGLE-CLOUD	1034
3	MSFT	987
4	PAN-22	951
5	AL-3	949
6	ASEPL-SG	903
7	AFRINIC-042005	826
8	UK-MICROSOFT-20000324	656
9	CMNET	417
10	BSNLNET	394

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7238
2	China	7026
3	Singapore	1265
4	India	1265
5	United Kingdom	1256
6	Mauritius	827
7	Russian Federation	718
8	Indonesia	559
9	South Korea	535
10	Hong Kong	533

Rank	TCP port number	# of connection attempts received
1	2122	366311
2	6001	196922
3	6000	169428
4	2221	166545
5	402	158183
6	6005	152794
7	2220	146276
8	7001	145001
9	4722	140430
10	8002	138836

20240904 Botnet Detection Live Streaming 200+ zombies detected)

Botnet Statistics [2024-09-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 28615
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23883
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2411
2	AL-3	1123
3	ASEPL-SG	1085
4	GOOGLE-CLOUD	1061
5	MSFT	984
6	PAN-22	968
7	AFRINIC-042005	866
8	UK-MICROSOFT-20000324	666
9	BSNLNET	377
10	CMNET	375

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7687
2	China	7223
3	Singapore	1460
4	United Kingdom	1278
5	India	1251
6	Mauritius	867
7	Russian Federation	719
8	South Korea	592
9	Hong Kong	548
10	Indonesia	529

Rank	TCP port number	# of connection attempts received
1	2122	285311
2	6001	131669
3	6000	128511
4	54322	125181
5	8003	119422
6	9876	114226
7	6005	111328
8	2220	111053
9	2221	107646
10	7000	105601

20240903 Botnet Detection Live Streaming 300+ zombies detected)

Botnet Statistics [2024-09-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 24468
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20824
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2405
2	GOOGLE-CLOUD	1057
3	PAN-22	970
4	MSFT	964
5	ASEPL-SG	809
6	AL-3	693
7	UK-MICROSOFT-20000324	665
8	AFRINIC-042005	651
9	CMNET	368
10	HURRICANE-4	351

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7040
2	China	6778
3	United Kingdom	1248
4	Singapore	1137
5	India	805
6	Mauritius	651
7	South Korea	561
8	Russian Federation	518
9	Hong Kong	485
10	Brazil	338

Rank	TCP port number	# of connection attempts received
1	2122	292190
2	54322	256393
3	6001	175682
4	2221	159101
5	6005	158071
6	9876	155328
7	6000	154474
8	7000	152132
9	7004	144936
10	8003	144122

20240902 Botnet Detection Live Streaming 200+ zombies detected)

Daily Zombie Lists for September 2024 （2024年09月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for September 2024 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2024年09月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

09/01: download link 下載網址; MD5sum: 6ce7eceac9a8c229e33a1732c2bc79cd

09/02: download link 下載網址; MD5sum: 0f36d03040f54fa1d40c77aa9a51d0a8

09/03: download link 下載網址; MD5sum: 91d63dd2344e2250c8d32b5cff1bfab7

09/04: download link 下載網址; MD5sum: a6c6fbb9e84e68feb1810d91f8f007ee

09/05: download link 下載網址; MD5sum: 3c462f8cb410ae5b0ecc3c74ce1e2374

09/06: download link 下載網址; MD5sum: 63023822203b08057b1fc770275ed45d

09/07: download link 下載網址; MD5sum: e0944cbeda67320e2a20da2d0a3c9d06

09/08: download link 下載網址; MD5sum: 9595295464ba4a858678fe11a0104e9f

09/09: download link 下載網址; MD5sum: b9792efcc55c2a5353f1f95151f527c8

09/10: download link 下載網址; MD5sum: 86c050e06e4ab3e703db83553e1964ba

09/11: download link 下載網址; MD5sum: 9a80548fdcecf37ffe74330b050450fc

09/12: download link 下載網址; MD5sum: 91f8edf738a0e1e57adfea875fd32afa

09/13: download link 下載網址; MD5sum: a2187355ca4fad496666466b94df2ac2

09/14: download link 下載網址; MD5sum: 2ffd75b8b80e5c01e6fe6cff5f27e7cc

09/15: download link 下載網址; MD5sum: 603a293de86348531a2735299d329e66

Botnet Statistics [2024-08-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2024. To get an idea of what IP is scanning the Internet currently, please watch: Daily Botnet Detection Live Streaming.)
detection period: 2024-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 25977
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21999
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	ALISOFT	2401
2	GOOGLE-CLOUD	1055
3	ASEPL-SG	988
4	PAN-22	967
5	MSFT	962
6	AL-3	836
7	AFRINIC-042005	713
8	UK-MICROSOFT-20000324	669
9	UCLOUD-HK	474
10	CMNET	378

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7400
2	China	6830
3	Singapore	1332
4	United Kingdom	1282
5	India	1014
6	Hong Kong	805
7	Mauritius	714
8	South Korea	567
9	Russian Federation	538
10	Brazil	405

Rank	TCP port number	# of connection attempts received
1	2122	141906
2	6001	140289
3	8003	120231
4	7004	118717
5	7002	116303
6	6005	113632
7	9876	111800
8	2220	111772
9	8002	111294
10	6000	109982

20240901 Botnet Detection Live Streaming 300+ zombies detected)