Daily Zombie IP Lists for February 2021 （2021年02月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Here are the download links of the daily zombie IP lists for February 2021:

以下是2021年02月的每日殭屍電腦IP清單的下載網址：

02/01: download link 下載網址; MD5sum: 44b65c20b11f13798c3544d45a0c30a1

02/02: download link 下載網址; MD5sum: e5d24aae328a6b517dc7124f175df4b2

02/03: download link 下載網址; MD5sum: 776126c637ba18621c2be3ce2797e40a

02/04: download link 下載網址; MD5sum: 99f1e5bab9f3796da8cc67688f0217b2

02/05: download link 下載網址; MD5sum: a05502760e7366cf33ec61acb6a38e6b

02/06: download link 下載網址; MD5sum: 007e808ee5e03bc03b1c4ee0ff0ed8e3

02/07: download link 下載網址; MD5sum: 45c9b7e7326e9f012d9e71f4ea5eb136

02/08: download link 下載網址; MD5sum: 1c9d5e302a4f0fbcf125ac7805e83332

02/09: download link 下載網址; MD5sum: bd1cf9028fee02ed874578e8fef4bb52

02/10: download link 下載網址; MD5sum: 39fdb3f4388119646aab5d008a9dcb3e

02/11: download link 下載網址; MD5sum: 4c5ca572f024cfa5773703e4a7fe0f30

02/12: download link 下載網址; MD5sum: 7355ade9d40c36565b5302f80676c7db

02/13: download link 下載網址; MD5sum: d36a0bc3e4e4c1ceae9fe6772ee9087a

02/14: download link 下載網址; MD5sum: 589e87211b76cf6d4f77101774ccaea8

02/15: download link 下載網址; MD5sum: d8c472010bfd46df62873dc467a44a0c

02/16: download link 下載網址; MD5sum: dc4bda041dafbcd235d8df7d7cd3d81c

02/17: download link 下載網址; MD5sum: 79759729d60a954e54cc8e8fbfda24d0

02/18: download link 下載網址; MD5sum: 39a39f81c98e08dbcafeb1f5c35e9c78

02/19: download link 下載網址; MD5sum: 3ac1e2a6a82d9afa64d1d55878573652

02/20: download link 下載網址; MD5sum: 5b8ada23b2369df3a8a7fed74ab165de

02/21: download link 下載網址; MD5sum: 3ce276f8721ce1aced78772cecdbb9ca

02/22: download link 下載網址; MD5sum: 680b3684fc936a473d2ba6e7f597615f

02/23: download link 下載網址; MD5sum: 0fa121776b4b9651f95bc4addbec2a2d

02/24: download link 下載網址; MD5sum: 9d1b7ef002c3c2cb08831c1abbbf5e9d

02/25: download link 下載網址; MD5sum: 10c17ba76b071c714e3f10f9ebdd2dbb

02/26: download link 下載網址; MD5sum: ebee946ebdaa1e33f9dc27703df1d224

02/27: download link 下載網址; MD5sum: da553329870deadedd8cb04c77adc096

02/28: download link 下載網址; MD5sum: 3f5bd8a6b3c41ce4020077ec68538028

Botnet Statistics [2021-02-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2021.)
detection period: 2021-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 43792
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 40615
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1942
2	VNPT-VN	1008
3	HINET-NET	966
4	TENCENT-CN	800
5	VIETTEL-VN	741
6	KORNET	661
7	DIGITALOCEAN-192-241-128-0	647
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	581
9	VE-CSVE-LACNIC	563
10	ALISOFT	553

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	9350
2	United States	5172
3	India	2708
4	Russian Federation	2463
5	Viet Nam	2449
6	Brazil	2002
7	Indonesia	1360
8	Taiwan	1330
9	Hong Kong	1095
10	South Korea	1050

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1221	756426
2	445	317412
3	3689	92014
4	22	83681
5	20	79841
6	1112	63705
7	2345	57105
8	1433	35983
9	23	31118
10	1324	28439

Botnet Statistics [2021-01-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2021.)
detection period: 2021-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 36849
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 34214
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	TencentCloud	1687
2	HINET-NET	794
3	TENCENT-CN	711
4	DIGITALOCEAN-192-241-128-0	663
5	KORNET	641
6	VNPT-VN	584
7	ALISOFT	536
8	NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK	516
9	NETVIGATOR	516
10	VIETTEL-VN	490

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

Rank	Country/Region	# of suspected botnet IPs
1	China	8344
2	United States	5119
3	Russian Federation	2082
4	India	1613
5	Viet Nam	1592
6	Brazil	1469
7	Taiwan	1130
8	Hong Kong	1121
9	South Korea	1083
10	Indonesia	830

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	170352
2	2245	110299
3	22	87838
4	1112	62579
5	227	36537
6	1433	33212
7	37	32566
8	3389	30069
9	23	29358
10	30008	28767