Custom Search

Friday, February 13, 2026

Botnet Statistics [2026-02-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-12 00:00-23:59 UTC
total number of suspected botnet IPs: 20986
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19908
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1431
2AL-31333
3GOOGLE-CLOUD1012
4PAN-22950
5VOLCANO-ENGINE468
6FR-ONYPHE-20191111448
7ASEPL-SG410
8CENSY378
9ALISOFT351
10cloud327


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9678
2China4119
3Singapore738
4France548
5India466
6Netherlands457
7Hong Kong409
8South Korea322
9United Kingdom322
10Russian Federation299

Thursday, February 12, 2026

Botnet Statistics [2026-02-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-11 00:00-23:59 UTC
total number of suspected botnet IPs: 21406
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20279
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900298236
2224386179
3276281493
4667369262
52253580
6780253435
7615450799
8317447654
9330144356
10464642780
RankNetwork# of suspected botnet IPs
1MSFT1449
2AL-31312
3GOOGLE-CLOUD996
4PAN-22946
5VOLCANO-ENGINE474
6FR-ONYPHE-20191111448
7ASEPL-SG400
8CENSY372
9ALISOFT337
10cloud318


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9302
2China4914
3Singapore757
4France550
5Netherlands445
6India441
7Hong Kong416
8Russian Federation352
9United Kingdom328
10South Korea323

Wednesday, February 11, 2026

Botnet Statistics [2026-02-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-10 00:00-23:59 UTC
total number of suspected botnet IPs: 22206
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21105
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900345718
2224395529
32294850
4222087804
51214054685
6801553111
7317845829
8306939976
9222239922
1088839061
RankNetwork# of suspected botnet IPs
1MSFT1428
2AL-31328
3GOOGLE-CLOUD1004
4PAN-22949
5VOLCANO-ENGINE469
6FR-ONYPHE-20191111448
7ASEPL-SG415
8CENSY377
9ALISOFT323
10cloud306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9587
2China5187
3Singapore799
4Netherlands575
5France553
6India446
7Hong Kong426
8South Korea336
9Russian Federation322
10Indonesia291

Tuesday, February 10, 2026

Botnet Statistics [2026-02-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-09 00:00-23:59 UTC
total number of suspected botnet IPs: 19768
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18651
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900212173
2222087018
3224374710
42263348
5800052144
61400049007
71200545580
8222234265
9222430189
1088830136
RankNetwork# of suspected botnet IPs
1MSFT1374
2AL-31076
3GOOGLE-CLOUD998
4PAN-22948
5VOLCANO-ENGINE462
6FR-ONYPHE-20191111448
7ASEPL-SG421
8CENSY377
9ALISOFT329
10cloud288


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8720
2China3832
3Singapore816
4France549
5Netherlands489
6India447
7Hong Kong402
8Russian Federation319
9South Korea295
10Indonesia287

Monday, February 9, 2026

Botnet Statistics [2026-02-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-08 00:00-23:59 UTC
total number of suspected botnet IPs: 19917
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18878
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900353667
27722112252
3222087723
42275840
5671043962
6222140571
7716035364
8220131564
9222425646
10222325437
RankNetwork# of suspected botnet IPs
1MSFT1387
2AL-31007
3GOOGLE-CLOUD1006
4PAN-22950
5VOLCANO-ENGINE460
6FR-ONYPHE-20191111448
7ASEPL-SG403
8CENSY376
9DO-13324
10ALISOFT323


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9268
2China3873
3Singapore773
4France533
5Netherlands418
6South Korea383
7Hong Kong370
8India369
9Russian Federation286
10Indonesia246

Sunday, February 8, 2026

Botnet Statistics [2026-02-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20230
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18595
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900464534
222105229
3222094081
4220142233
5800034714
688834295
75432132149
8207830480
9808228812
10222228478
RankNetwork# of suspected botnet IPs
1MSFT1385
2AL-31354
3GOOGLE-CLOUD1008
4PAN-22949
5VOLCANO-ENGINE466
6FR-ONYPHE-20191111448
7ASEPL-SG418
8CENSY373
9ALISOFT317
10CMNET301


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8601
2China4115
3Singapore759
4France531
5South Korea450
6India439
7Hong Kong416
8Netherlands326
9Russian Federation287
10Germany260

Saturday, February 7, 2026

Botnet Statistics [2026-02-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-06 00:00-23:59 UTC
total number of suspected botnet IPs: 20188
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18654
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900467384
2222087167
32268197
4224259541
5220145891
6590232852
75432130025
8222227410
9911925477
10222324977
RankNetwork# of suspected botnet IPs
1MSFT1353
2AL-31348
3GOOGLE-CLOUD1012
4PAN-22950
5VOLCANO-ENGINE474
6FR-ONYPHE-20191111448
7ASEPL-SG422
8CENSY371
9ALISOFT331
10CMNET294


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8523
2China3976
3Singapore746
4France540
5South Korea456
6India451
7Hong Kong402
8Netherlands332
9Russian Federation329
10Indonesia295

Friday, February 6, 2026

Botnet Statistics [2026-02-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-05 00:00-23:59 UTC
total number of suspected botnet IPs: 20291
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18608
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900394014
2222084493
32266329
4224266157
5220149511
6668840487
75432131929
8590228780
9812224493
10805524462
RankNetwork# of suspected botnet IPs
1MSFT1343
2AL-31272
3GOOGLE-CLOUD1017
4PAN-22950
5VOLCANO-ENGINE512
6FR-ONYPHE-20191111416
7ASEPL-SG399
8CENSY373
9ALISOFT341
10CMNET276


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8907
2China3866
3Singapore709
4France519
5India435
6Netherlands421
7Hong Kong420
8Russian Federation339
9South Korea335
10Indonesia312

Thursday, February 5, 2026

Botnet Statistics [2026-02-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20257
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18629
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900436033
2432181266
3224259566
42258974
5563054430
6852053024
7220150183
8555539484
9222533147
10999932817
RankNetwork# of suspected botnet IPs
1MSFT1368
2AL-31223
3GOOGLE-CLOUD1007
4PAN-22946
5VOLCANO-ENGINE509
6FR-ONYPHE-20191111416
7ASEPL-SG410
8ALISOFT395
9CENSY378
10CMNET278


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8594
2China3986
3Singapore718
4France512
5India473
6Hong Kong411
7Netherlands385
8South Korea362
9Russian Federation334
10Indonesia314

Wednesday, February 4, 2026

Botnet Statistics [2026-02-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20461
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18797
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900523518
24321132757
35555101992
4563098833
5224273282
6416073045
7765472788
82269435
9225564631
10802459068
RankNetwork# of suspected botnet IPs
1MSFT1417
2AL-31262
3GOOGLE-CLOUD1006
4PAN-22950
5VOLCANO-ENGINE512
6FR-ONYPHE-20191111416
7ASEPL-SG416
8CENSY371
9ALISOFT337
10CMNET278


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8863
2China3868
3Singapore728
4India500
5France500
6Hong Kong419
7Netherlands378
8Russian Federation363
9Indonesia348
10South Korea331

Tuesday, February 3, 2026

Botnet Statistics [2026-02-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-02 00:00-23:59 UTC
total number of suspected botnet IPs: 19984
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18231
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900467798
24160104056
3555588359
4224281005
5765480991
6225570652
7220163428
8221959252
9999952248
102245236
RankNetwork# of suspected botnet IPs
1MSFT1385
2GOOGLE-CLOUD1008
3AL-3999
4PAN-22948
5VOLCANO-ENGINE548
6ASEPL-SG434
7FR-ONYPHE-20191111416
8ALISOFT377
9CENSY374
10CMNET291


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7835
2China4145
3Singapore745
4France530
5India473
6Hong Kong419
7South Korea356
8Netherlands347
9Russian Federation345
10Indonesia338

Monday, February 2, 2026

Botnet Statistics [2026-02-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-02-01 00:00-23:59 UTC
total number of suspected botnet IPs: 20367
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18711
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900400198
2416091420
3765469023
4999960808
5224260027
6221958486
72255565
8225545358
9814144515
10220140446
RankNetwork# of suspected botnet IPs
1MSFT1421
2GOOGLE-CLOUD1007
3PAN-22950
4AL-3948
5VOLCANO-ENGINE470
6ASEPL-SG423
7FR-ONYPHE-20191111416
8ALISOFT380
9CENSY377
10CMNET316


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8438
2China4315
3Singapore813
4France492
5India440
6Hong Kong407
7South Korea383
8Russian Federation338
9Netherlands319
10Indonesia244

Daily Zombie Lists for February 2026(2026年02月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for February 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年02月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

02/01: download link 下載網址; MD5sum: 9f749a9f2d0576255a8320dd97ecc47c
02/02: download link 下載網址; MD5sum: 0adab9f64b7464624697328031f73a55
02/03: download link 下載網址; MD5sum: 54b2e51236711b6ce6be45c61a1cb298
02/04: download link 下載網址; MD5sum: 160939ad1604aeb953c6bd07d10aabab
02/05: download link 下載網址; MD5sum: 560b67dfd3006f08e8b81a4fb5a21ab4
02/06: download link 下載網址; MD5sum: a8e1313baa1c5a009f9c86d2d40f4fd6
02/07: download link 下載網址; MD5sum: 181634a5645a5d8e0b723d49c6abb7a4
02/08: download link 下載網址; MD5sum: 4f44a99c158ceeb50e28822ab579fbe9
02/09: download link 下載網址; MD5sum: e58d0028bdd8968252364b7a87011629
02/10: download link 下載網址; MD5sum: e35f60d727509be2823ea0cb8e5e83ab
02/11: download link 下載網址; MD5sum: 5b6a7ee85fef408ad33c0789de214a7b
02/12: download link 下載網址; MD5sum: a36ca7f483f723e6a5ce46c38dc4306c

Sunday, February 1, 2026

Botnet Statistics [2026-01-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-31 00:00-23:59 UTC
total number of suspected botnet IPs: 20087
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18362
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900463685
22268871
3224268145
4666667381
5999950722
6600038353
7202630386
8600129335
9222228310
10590226415
RankNetwork# of suspected botnet IPs
1MSFT1453
2GOOGLE-CLOUD1008
3PAN-22950
4AL-3906
5BYTEPLUS-SG811
6VOLCANO-ENGINE472
7ASEPL-SG429
8ALISOFT387
9CENSY378
10FR-ONYPHE-20191111368


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7786
2China4015
3Singapore1428
4India481
5France415
6Hong Kong407
7South Korea379
8Russian Federation351
9Netherlands295
10Brazil265

Saturday, January 31, 2026

Botnet Statistics [2026-01-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-30 00:00-23:59 UTC
total number of suspected botnet IPs: 20733
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18946
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900394726
2666686334
3881167494
4333262051
5123455386
6600049485
72248413
8999946757
92200136715
10202233951
RankNetwork# of suspected botnet IPs
1MSFT1414
2GOOGLE-CLOUD1006
3PAN-22950
4AL-3911
5BYTEPLUS-SG854
6VOLCANO-ENGINE481
7ASEPL-SG438
8ALISOFT403
9CENSY381
10FR-ONYPHE-20191111368


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7889
2China4313
3Singapore1494
4India473
5Hong Kong429
6France416
7Russian Federation357
8South Korea351
9Indonesia304
10Netherlands275

Friday, January 30, 2026

Botnet Statistics [2026-01-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-29 00:00-23:59 UTC
total number of suspected botnet IPs: 21546
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19773
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900380608
22271112459
3666688689
4123454629
52200138417
6590232158
7600031965
8102229482
92227113
10222224221
RankNetwork# of suspected botnet IPs
1MSFT1428
2GOOGLE-CLOUD1006
3PAN-22950
4BYTEPLUS-SG849
5AL-3796
6VOLCANO-ENGINE489
7ASEPL-SG435
8ALISOFT378
9CENSY373
10FR-ONYPHE-20191111368


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8272
2China4579
3Singapore1506
4India497
5France429
6Hong Kong423
7Russian Federation365
8South Korea356
9Netherlands341
10Brazil313

Thursday, January 29, 2026

Botnet Statistics [2026-01-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-28 00:00-23:59 UTC
total number of suspected botnet IPs: 20830
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19100
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900387974
2341289909
3202680846
4224180316
5902678153
6424271007
7666659417
8227154139
9123452756
10800845686
RankNetwork# of suspected botnet IPs
1MSFT1324
2GOOGLE-CLOUD1008
3PAN-22948
4BYTEPLUS-SG846
5AL-3819
6VOLCANO-ENGINE498
7ASEPL-SG429
8CENSY381
9ALISOFT372
10FR-ONYPHE-20191111368


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7690
2China4421
3Singapore1472
4India494
5Hong Kong435
6France429
7Russian Federation367
8South Korea343
9Netherlands342
10Indonesia313

Wednesday, January 28, 2026

Botnet Statistics [2026-01-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-27 00:00-23:59 UTC
total number of suspected botnet IPs: 22290
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20508
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900237211
28008115662
32241103206
4480877200
5202658159
6123445877
72236542
8902630734
9590228964
10202226746
RankNetwork# of suspected botnet IPs
1MSFT1350
2GOOGLE-CLOUD1002
3PAN-22948
4BYTEPLUS-SG846
5AL-3810
6VOLCANO-ENGINE488
7ASEPL-SG438
8ALISOFT412
9CENSY380
10FR-ONYPHE-20191111374


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8633
2China4362
3Singapore1511
4India512
5France506
6Netherlands489
7Hong Kong446
8Russian Federation376
9South Korea354
10Indonesia310

Tuesday, January 27, 2026

Botnet Statistics [2026-01-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-26 00:00-23:59 UTC
total number of suspected botnet IPs: 22882
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20946
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900184297
2224191898
32248187
42252234001
5732230507
6590228246
7302225896
8480821354
9224820535
10222220215
RankNetwork# of suspected botnet IPs
1MSFT1373
2GOOGLE-CLOUD1000
3PAN-22944
4BYTEPLUS-SG848
5AL-3825
6VOLCANO-ENGINE483
7ASEPL-SG440
8FR-ONYPHE-20191111416
9ALISOFT396
10CENSY376


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8466
2China4786
3Singapore1490
4Netherlands550
5France521
6India473
7Hong Kong455
8South Korea398
9Russian Federation397
10Indonesia346

Monday, January 26, 2026

Botnet Statistics [2026-01-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-25 00:00-23:59 UTC
total number of suspected botnet IPs: 22326
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20560
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900175631
22294877
3172283755
4480852562
5448846370
6224844817
71234534091
8182229388
9590228441
101372224939
RankNetwork# of suspected botnet IPs
1MSFT1376
2GOOGLE-CLOUD1003
3PAN-22949
4BYTEPLUS-SG847
5AL-3799
6VOLCANO-ENGINE484
7ASEPL-SG449
8FR-ONYPHE-20191111415
9ALISOFT399
10CENSY373


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8636
2China4547
3Singapore1496
4Netherlands535
5France514
6India470
7Hong Kong445
8Russian Federation375
9South Korea373
10Brazil324

Sunday, January 25, 2026

Botnet Statistics [2026-01-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-24 00:00-23:59 UTC
total number of suspected botnet IPs: 22232
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20425
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900151706
22298078
3172271567
4800451775
5666631815
6590231177
723425215
8222221840
9612221000
10224819764
RankNetwork# of suspected botnet IPs
1MSFT1367
2GOOGLE-CLOUD1008
3PAN-22950
4BYTEPLUS-SG848
5AL-3811
6VOLCANO-ENGINE495
7ALISOFT457
8ASEPL-SG449
9FR-ONYPHE-20191111416
10CENSY378


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7818
2China5078
3Singapore1485
4India546
5France521
6Netherlands468
7Hong Kong444
8Russian Federation376
9South Korea365
10Brazil330

Saturday, January 24, 2026

Botnet Statistics [2026-01-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-23 00:00-23:59 UTC
total number of suspected botnet IPs: 23103
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21251
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900178792
2666673647
3224069644
4800465554
52262860
6172259311
723456088
8886551896
95413836832
10590232344
RankNetwork# of suspected botnet IPs
1MSFT1367
2GOOGLE-CLOUD1004
3PAN-22950
4BYTEPLUS-SG847
5AL-3823
6VOLCANO-ENGINE500
7ASEPL-SG463
8FR-ONYPHE-20191111416
9ALISOFT393
10CMNET389


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7927
2China5729
3Singapore1513
4India534
5France521
6Hong Kong461
7Russian Federation394
8Netherlands389
9Indonesia373
10South Korea372

Friday, January 23, 2026

Botnet Statistics [2026-01-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-22 00:00-23:59 UTC
total number of suspected botnet IPs: 24223
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22300
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900173775
2666683388
3224070894
42250793
5992239819
6932237976
7590234127
8252228934
9922226669
10800424733
RankNetwork# of suspected botnet IPs
1MSFT1385
2GOOGLE-CLOUD999
3PAN-22950
4BYTEPLUS-SG848
5AL-3824
6VOLCANO-ENGINE494
7ASEPL-SG450
8FR-ONYPHE-20191111416
9ALISOFT389
10CENSY375


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8662
2China5632
3Singapore1533
4India570
5France527
6Netherlands431
7Russian Federation428
8Hong Kong415
9South Korea390
10Indonesia383

Thursday, January 22, 2026

Botnet Statistics [2026-01-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-21 00:00-23:59 UTC
total number of suspected botnet IPs: 23444
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21479
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900168361
2666680152
3224069381
42252613
5972230633
6590227578
7212227351
8922225832
944423784
10402223413
RankNetwork# of suspected botnet IPs
1MSFT1345
2GOOGLE-CLOUD1007
3PAN-22946
4BYTEPLUS-SG881
5AL-3820
6VOLCANO-ENGINE563
7ASEPL-SG448
8FR-ONYPHE-20191111416
9ALISOFT411
10CENSY372


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8027
2China5526
3Singapore1536
4India590
5France537
6Hong Kong444
7Indonesia421
8Russian Federation415
9Brazil381
10South Korea376

Wednesday, January 21, 2026

Botnet Statistics [2026-01-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-20 00:00-23:59 UTC
total number of suspected botnet IPs: 23818
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22065
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900178236
2972273921
377765772
4224058217
5666655777
6800343017
75822238860
8222238630
92237449
10662234245
RankNetwork# of suspected botnet IPs
1MSFT1356
2GOOGLE-CLOUD1003
3PAN-22949
4BYTEPLUS-SG881
5AL-3818
6VOLCANO-ENGINE472
7ASEPL-SG449
8FR-ONYPHE-20191111416
9CENSY379
10ALISOFT357


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8716
2China6018
3Singapore1515
4India527
5France487
6Netherlands449
7Hong Kong405
8Russian Federation390
9Indonesia344
10Germany335

Tuesday, January 20, 2026

Botnet Statistics [2026-01-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-19 00:00-23:59 UTC
total number of suspected botnet IPs: 23119
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21353
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900195087
277796851
3972281787
42277169
5228858709
6800354959
7233241804
8145330043
91000029127
10590224737
RankNetwork# of suspected botnet IPs
1MSFT1381
2GOOGLE-CLOUD1002
3PAN-22939
4BYTEPLUS-SG878
5AL-3837
6VOLCANO-ENGINE475
7ASEPL-SG446
8FR-ONYPHE-20191111416
9CENSY374
10CMNET367


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8361
2China5139
3Singapore1538
4India544
5France494
6Russian Federation435
7Hong Kong428
8Netherlands395
9Brazil395
10South Korea373

Monday, January 19, 2026

Botnet Statistics [2026-01-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-18 00:00-23:59 UTC
total number of suspected botnet IPs: 25554
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23513
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900265222
22291312
3228864910
4800349701
577728333
6972224931
7922223987
8590223747
9342221539
1052221429
RankNetwork# of suspected botnet IPs
1MSFT1390
2GOOGLE-CLOUD1007
3PAN-22948
4BYTEPLUS-SG878
5AL-3850
6VOLCANO-ENGINE470
7ASEPL-SG453
8FR-ONYPHE-20191111416
9ALISOFT402
10CENSY378


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9243
2China5264
3Singapore1491
4Brazil743
5India560
6France509
7Netherlands467
8Russian Federation455
9Hong Kong433
10Indonesia338

Sunday, January 18, 2026

Botnet Statistics [2026-01-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-17 00:00-23:59 UTC
total number of suspected botnet IPs: 28197
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25308
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900340285
222104299
3732293655
4228864989
51322238289
62872237229
7202235187
8862232481
933329302
10590226051
RankNetwork# of suspected botnet IPs
1MSFT1390
2GOOGLE-CLOUD1007
3PAN-22949
4BYTEPLUS-SG878
5AL-3834
6VOLCANO-ENGINE465
7ASEPL-SG457
8FR-ONYPHE-20191111416
9CENSY377
10ALISOFT372


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8663
2China5852
3Singapore1497
4Brazil1194
5India777
6Russian Federation567
7France537
8Indonesia414
9Hong Kong411
10Netherlands389

Saturday, January 17, 2026

Botnet Statistics [2026-01-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for January 2026.
detection period: 2026-01-16 00:00-23:59 UTC
total number of suspected botnet IPs: 28660
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 25826
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900358756
22268250
3982267430
4228864978
5225543940
6707040435
75502236592
8822236232
9732233534
10202229650
RankNetwork# of suspected botnet IPs
1MSFT1407
2GOOGLE-CLOUD1002
3PAN-22949
4BYTEPLUS-SG878
5AL-3851
6VOLCANO-ENGINE478
7ASEPL-SG462
8FR-ONYPHE-20191111416
9ALISOFT391
10CENSY381


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8808
2China6088
3Singapore1504
4Brazil1082
5India811
6Russian Federation592
7France539
8Hong Kong436
9South Korea430
10Indonesia395
RankTCP port number# of connection attempts received
15900324098
2707099031
3467569937
411769780
5886369760
6822268907
7228864432
8982263434
9225554470
10221247459