I was in spectator on my server and flew up about the bedrock and found a load of Zombie had spawned up there.  There are more out of render distance, at least 30 when I ran the kill command.

Bedrock hasn't been broken and there are no other spawnable spot up there.