Custom Search

Thursday, July 9, 2026

Botnet Statistics [2026-07-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-08 00:00-23:59 UTC
total number of suspected botnet IPs: 21151
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20135
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1426
2AL-31408
3GOOGLE-CLOUD1081
4INFRAWATCH1049
5PAN-22959
6ASEPL-SG563
7VOLCANO-ENGINE511
8FR-ONYPHE-20191111448
9CENSY375
10cloud285


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8639
2China3819
3United Kingdom1081
4Germany918
5Singapore823
6Netherlands605
7France465
8India365
9Indonesia356
10South Korea303

Wednesday, July 8, 2026

Botnet Statistics [2026-07-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-07 00:00-23:59 UTC
total number of suspected botnet IPs: 20182
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19066
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900125382
2852240731
3902239822
4102238945
542237915
662237821
7652236408
8152235988
992235769
1082235611
RankNetwork# of suspected botnet IPs
1AL-31522
2MSFT1364
3GOOGLE-CLOUD1064
4PAN-22961
5INFRAWATCH858
6ASEPL-SG548
7VOLCANO-ENGINE463
8FR-ONYPHE-20191111448
9CENSY381
10DE-ALPHA372


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8803
2China3625
3United Kingdom1107
4Singapore777
5Germany761
6Netherlands563
7France492
8Hong Kong295
9Indonesia265
10India254

Tuesday, July 7, 2026

Botnet Statistics [2026-07-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-06 00:00-23:59 UTC
total number of suspected botnet IPs: 19961
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19126
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900139753
2222239736
32232992
442231711
592230515
6652229887
7852228399
8192227800
9102226968
10112226542
RankNetwork# of suspected botnet IPs
1AL-31494
2MSFT1418
3INFRAWATCH1112
4GOOGLE-CLOUD1074
5PAN-22965
6ASEPL-SG537
7VOLCANO-ENGINE459
8FR-ONYPHE-20191111448
9CENSY371
10DE-ALPHA363


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8547
2China3790
3United Kingdom1142
4Germany990
5Singapore788
6Netherlands544
7France468
8Hong Kong285
9Indonesia278
10India237

Monday, July 6, 2026

Botnet Statistics [2026-07-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-05 00:00-23:59 UTC
total number of suspected botnet IPs: 20664
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19810
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590059051
22238301
3143331366
4212227636
53322219656
6600116676
72314625
8590213386
91000013150
103001111361
RankNetwork# of suspected botnet IPs
1AL-31446
2MSFT1394
3GOOGLE-CLOUD1047
4PAN-22962
5INFRAWATCH806
6ASEPL-SG559
7VOLCANO-ENGINE464
8FR-ONYPHE-20191111448
9cloud323
10DE-ALPHA322


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9080
2China4103
3Germany889
4Singapore807
5United Kingdom711
6Netherlands535
7France470
8South Korea316
9India305
10Hong Kong304

Sunday, July 5, 2026

Botnet Statistics [2026-07-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20500
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19650
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590066244
2801553588
32253003
488837213
5207837029
6222234335
7143333030
8212232299
9901129873
10808229182
RankNetwork# of suspected botnet IPs
1AL-31408
2MSFT1367
3INFRAWATCH1133
4GOOGLE-CLOUD1055
5PAN-22963
6ASEPL-SG571
7VOLCANO-ENGINE473
8FR-ONYPHE-20191111448
9cloud325
10DE-ALPHA322


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8241
2China4042
3United Kingdom1097
4Germany948
5Singapore830
6Netherlands557
7France478
8India352
9South Korea316
10Hong Kong308

Saturday, July 4, 2026

Botnet Statistics [2026-07-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-03 00:00-23:59 UTC
total number of suspected botnet IPs: 21313
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20398
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16371117601
2590071036
3564062819
4691161271
5734859257
6929455041
7268454438
8801554177
91417751657
101138248021
RankNetwork# of suspected botnet IPs
1AL-31540
2MSFT1417
3INFRAWATCH1116
4GOOGLE-CLOUD1079
5PAN-22965
6ASEPL-SG510
7VOLCANO-ENGINE466
8FR-ONYPHE-20191111448
9CENSY373
10cloud293


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9255
2China3924
3United Kingdom1113
4Germany815
5Singapore770
6Netherlands568
7France476
8Hong Kong341
9South Korea312
10India300

Friday, July 3, 2026

Botnet Statistics [2026-07-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-02 00:00-23:59 UTC
total number of suspected botnet IPs: 24479
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 23604
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
16879133373
2966596327
3477169795
4468369551
5590065386
688865376
7801557532
81200750323
9207848866
101349042977
RankNetwork# of suspected botnet IPs
1AL-31435
2MSFT1379
3INFRAWATCH1075
4GOOGLE-CLOUD1064
5PAN-22964
6ASEPL-SG551
7VOLCANO-ENGINE470
8FR-ONYPHE-20191111448
9CENSY379
10UNICOM359


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9045
2China7734
3United Kingdom849
4Singapore808
5Germany786
6Netherlands572
7France492
8South Korea331
9Hong Kong328
10India312

Thursday, July 2, 2026

Botnet Statistics [2026-07-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-01 00:00-23:59 UTC
total number of suspected botnet IPs: 20929
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19851
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1228284318
288874481
3590060973
4801560432
5207853679
6990149198
7212247310
8222244780
9808840596
10777733791
RankNetwork# of suspected botnet IPs
1AL-31438
2MSFT1423
3INFRAWATCH1075
4GOOGLE-CLOUD1044
5PAN-22961
6ASEPL-SG575
7VOLCANO-ENGINE475
8FR-ONYPHE-20191111448
9CENSY382
10DE-ALPHA278


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8460
2China3980
3United Kingdom994
4Germany867
5Singapore803
6France561
7Netherlands554
8India358
9South Korea349
10Hong Kong337

Daily Zombie Lists for July 2026(2026年07月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for July 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年07月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

07/01: download link 下載網址; MD5sum: b3e4c8ad8df9432cac685a646a872449
07/02: download link 下載網址; MD5sum: e3bb8592a0312dd8432ad656b2f4b5ed
07/03: download link 下載網址; MD5sum: b189b6fcb8806442a7c8cbd7d28aa071
07/04: download link 下載網址; MD5sum: ab4d1f3035f7cbcc47f546844e416058
07/05: download link 下載網址; MD5sum: 8481e0d41e122c844b8d5bb4b3edae30
07/06: download link 下載網址; MD5sum: 1921299c39822aca61f0ad11f06a6f2a
07/07: download link 下載網址; MD5sum: 5abab387b2d0bc4d65f010a1c54d6fbf
07/08: download link 下載網址; MD5sum: 3c56031ec051f885013db9ee34807ead

Wednesday, July 1, 2026

Botnet Statistics [2026-06-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-30 00:00-23:59 UTC
total number of suspected botnet IPs: 21522
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20549
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1228284415
288874806
3944360425
4212251959
5590050633
6801550594
7207849555
8808845554
9222244750
102534357
RankNetwork# of suspected botnet IPs
1AL-31436
2MSFT1399
3INFRAWATCH1137
4GOOGLE-CLOUD1045
5PAN-22960
6ASEPL-SG574
7VOLCANO-ENGINE479
8FR-ONYPHE-20191111448
9CENSY378
10DE-ALPHA323


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8933
2China3915
3United Kingdom1075
4Germany965
5Singapore813
6Netherlands581
7France563
8South Korea365
9India362
10Hong Kong336

Tuesday, June 30, 2026

Botnet Statistics [2026-06-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-29 00:00-23:59 UTC
total number of suspected botnet IPs: 20945
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19767
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1228265544
288863247
3944351779
4330648689
5590048407
6212243054
7801542059
8808841619
9207831909
10222231282
RankNetwork# of suspected botnet IPs
1AL-31436
2MSFT1429
3GOOGLE-CLOUD1066
4PAN-22962
5INFRAWATCH840
6ASEPL-SG559
7VOLCANO-ENGINE489
8FR-ONYPHE-20191111400
9CENSY378
10DE-ALPHA345


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8736
2China3947
3Singapore831
4United Kingdom741
5Germany629
6France602
7Netherlands574
8India375
9Hong Kong340
10Indonesia337

Monday, June 29, 2026

Botnet Statistics [2026-06-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-28 00:00-23:59 UTC
total number of suspected botnet IPs: 19580
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18790
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590051248
2446437941
31240928770
4944324264
5330623752
6719422506
788820608
8871220517
92319756
10801519539
RankNetwork# of suspected botnet IPs
1AL-31455
2MSFT1433
3GOOGLE-CLOUD1048
4PAN-22963
5INFRAWATCH779
6ASEPL-SG592
7VOLCANO-ENGINE454
8FR-ONYPHE-20191111400
9CENSY377
10DE-ALPHA320


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8961
2China3797
3Singapore785
4Germany632
5United Kingdom622
6Netherlands574
7France554
8Hong Kong313
9South Korea296
10India277

Sunday, June 28, 2026

Botnet Statistics [2026-06-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-27 00:00-23:59 UTC
total number of suspected botnet IPs: 18615
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17843
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
11406991356
2417980079
3535775610
4777775211
5590072396
6330665641
71359358091
8944351496
9808847721
10209546742
RankNetwork# of suspected botnet IPs
1AL-31419
2MSFT1400
3GOOGLE-CLOUD1049
4PAN-22958
5INFRAWATCH868
6ASEPL-SG592
7VOLCANO-ENGINE452
8FR-ONYPHE-20191111411
9CENSY378
10cloud339


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8036
2China3829
3Singapore768
4United Kingdom636
5Germany607
6Netherlands572
7France511
8South Korea327
9Hong Kong307
10India281

Saturday, June 27, 2026

Botnet Statistics [2026-06-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-26 00:00-23:59 UTC
total number of suspected botnet IPs: 19271
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18487
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
12272117114
27777114462
3590092461
4535766704
5112256442
6209553989
7330653801
8944350604
9801548316
105860347563
RankNetwork# of suspected botnet IPs
1MSFT1391
2AL-31366
3INFRAWATCH1063
4GOOGLE-CLOUD1039
5PAN-22962
6ASEPL-SG546
7VOLCANO-ENGINE457
8FR-ONYPHE-20191111448
9CENSY375
10DE-ALPHA341


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8322
2China3779
3Germany804
4United Kingdom755
5Singapore748
6Netherlands526
7France497
8South Korea331
9Hong Kong325
10India299

Friday, June 26, 2026

Botnet Statistics [2026-06-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-25 00:00-23:59 UTC
total number of suspected botnet IPs: 19970
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18962
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17777128151
22272104552
35900102871
4209583713
5808281573
6535774107
7801572875
8944369773
9808564968
10112264886
RankNetwork# of suspected botnet IPs
1AL-31454
2MSFT1384
3GOOGLE-CLOUD1044
4INFRAWATCH1034
5PAN-22964
6ASEPL-SG522
7VOLCANO-ENGINE467
8FR-ONYPHE-20191111447
9CENSY378
10DE-ALPHA332


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8602
2China3920
3Germany795
4United Kingdom758
5Singapore711
6Netherlands564
7France480
8South Korea356
9India328
10Hong Kong309

Thursday, June 25, 2026

Botnet Statistics [2026-06-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-24 00:00-23:59 UTC
total number of suspected botnet IPs: 19527
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18559
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1777799033
2590090155
3112262022
4808259665
5209556383
6535754497
7944352349
8801552218
9902247100
10808543389
RankNetwork# of suspected botnet IPs
1AL-31421
2MSFT1416
3GOOGLE-CLOUD1065
4PAN-22960
5INFRAWATCH925
6ASEPL-SG551
7VOLCANO-ENGINE467
8FR-ONYPHE-20191111448
9CENSY384
10cloud307


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8353
2China3869
3Singapore798
4Germany741
5United Kingdom609
6Netherlands552
7France504
8South Korea365
9India351
10Hong Kong322

Wednesday, June 24, 2026

Botnet Statistics [2026-06-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-23 00:00-23:59 UTC
total number of suspected botnet IPs: 19711
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18526
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590083029
2777773793
3112259518
4902249357
5200047578
6808247297
7535742620
8944339687
9222234618
10801534582
RankNetwork# of suspected botnet IPs
1AL-31402
2MSFT1400
3GOOGLE-CLOUD1054
4PAN-22962
5INFRAWATCH914
6ASEPL-SG541
7VOLCANO-ENGINE460
8FR-ONYPHE-20191111448
9CENSY377
10CMNET287


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8622
2China3871
3Singapore773
4United Kingdom620
5Netherlands588
6Germany545
7France492
8India348
9South Korea329
10Hong Kong298

Tuesday, June 23, 2026

Botnet Statistics [2026-06-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-22 00:00-23:59 UTC
total number of suspected botnet IPs: 19048
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18179
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
12271110876
25900104585
3112261547
4902244642
5777743423
6808235227
7880730786
8882529441
9801528337
10535727850
RankNetwork# of suspected botnet IPs
1AL-31433
2MSFT1411
3INFRAWATCH1079
4GOOGLE-CLOUD1070
5PAN-22959
6ASEPL-SG564
7VOLCANO-ENGINE464
8FR-ONYPHE-20191111448
9CENSY381
10cloud310


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8142
2China3807
3Singapore816
4United Kingdom738
5Netherlands584
6Germany505
7France489
8South Korea348
9India328
10Hong Kong303

Monday, June 22, 2026

Botnet Statistics [2026-06-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-21 00:00-23:59 UTC
total number of suspected botnet IPs: 19768
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18656
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900134822
2227190948
3112256538
4902242276
5880729895
6882529208
7888828339
82228216
9881226317
10590124110
RankNetwork# of suspected botnet IPs
1AL-31448
2MSFT1421
3GOOGLE-CLOUD1050
4PAN-22961
5INFRAWATCH833
6ASEPL-SG536
7VOLCANO-ENGINE464
8FR-ONYPHE-20191111448
9CENSY381
10cloud284


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8799
2China3853
3Singapore840
4United Kingdom816
5Netherlands598
6France485
7Hong Kong325
8South Korea320
9India295
10Indonesia251

Sunday, June 21, 2026

Botnet Statistics [2026-06-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-20 00:00-23:59 UTC
total number of suspected botnet IPs: 18934
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18137
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900146520
2112261176
3944357381
4801551003
5808250468
6535746367
7902246020
8209541051
9200040767
10808538776
RankNetwork# of suspected botnet IPs
1AL-31542
2MSFT1412
3INFRAWATCH1054
4GOOGLE-CLOUD1046
5PAN-22959
6ASEPL-SG547
7VOLCANO-ENGINE466
8FR-ONYPHE-20191111448
9CENSY382
10cloud311


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8216
2China3915
3Singapore809
4United Kingdom739
5Netherlands586
6Germany495
7France476
8Hong Kong320
9India306
10South Korea290

Saturday, June 20, 2026

Botnet Statistics [2026-06-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19490
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18645
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900156924
2112260377
3944356968
4808248390
55432144269
6801542805
7535742044
8777741110
9901139450
10808539300
RankNetwork# of suspected botnet IPs
1AL-31505
2MSFT1412
3GOOGLE-CLOUD1071
4INFRAWATCH1034
5PAN-22960
6ASEPL-SG651
7VOLCANO-ENGINE473
8FR-ONYPHE-20191111448
9CENSY380
10cloud335


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8342
2China3923
3Singapore901
4United Kingdom726
5Germany658
6Netherlands584
7France471
8South Korea327
9India323
10Hong Kong312

Friday, June 19, 2026

Botnet Statistics [2026-06-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-18 00:00-23:59 UTC
total number of suspected botnet IPs: 20464
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19585
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900159405
2112260632
32350374
4944346875
55432144757
6882241718
7808240112
8801537124
9590134529
10535733549
RankNetwork# of suspected botnet IPs
1AL-31454
2MSFT1426
3GOOGLE-CLOUD1057
4PAN-22961
5INFRAWATCH945
6ASEPL-SG572
7VOLCANO-ENGINE481
8FR-ONYPHE-20191111447
9CENSY379
10cloud311


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9091
2China4008
3Singapore869
4United Kingdom705
5Netherlands592
6Germany589
7France480
8India342
9Hong Kong316
10South Korea314

Thursday, June 18, 2026

Botnet Statistics [2026-06-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21723
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20610
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900128572
22380692
3112258216
45432143085
5944336325
6882234399
7590133363
8808228957
91000028817
102228428
RankNetwork# of suspected botnet IPs
1MSFT1492
2AL-31450
3INFRAWATCH1113
4GOOGLE-CLOUD1090
5PAN-22960
6ASEPL-SG522
7VOLCANO-ENGINE484
8FR-ONYPHE-20191111446
9CENSY381
10cloud316


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9266
2China4367
3United Kingdom846
4Singapore783
5Netherlands625
6Germany551
7France485
8Hong Kong412
9South Korea376
10India357

Wednesday, June 17, 2026

Botnet Statistics [2026-06-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-16 00:00-23:59 UTC
total number of suspected botnet IPs: 23475
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22304
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900150199
22389925
3112259024
45432145443
5999942221
6944331161
7882228306
82228231
91000026311
10801521060
RankNetwork# of suspected botnet IPs
1MSFT1527
2AL-31492
3GOOGLE-CLOUD1096
4INFRAWATCH964
5PAN-22963
6ASEPL-SG550
7VOLCANO-ENGINE499
8FR-ONYPHE-20191111448
9CENSY380
10cloud362


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States10427
2China4346
3Singapore928
4United Kingdom775
5Netherlands613
6Germany591
7France507
8Hong Kong489
9India411
10South Korea353

Tuesday, June 16, 2026

Botnet Statistics [2026-06-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-15 00:00-23:59 UTC
total number of suspected botnet IPs: 19413
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18318
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900152697
223126642
3112258718
4123450749
55432146520
620242106
72234324
8882228332
9872826110
101000025315
RankNetwork# of suspected botnet IPs
1AL-31467
2MSFT1391
3INFRAWATCH1126
4GOOGLE-CLOUD1049
5PAN-22962
6ASEPL-SG677
7VOLCANO-ENGINE481
8FR-ONYPHE-20191111448
9CENSY382
10FR-ONYPHE-20221109240


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8031
2China3653
3Singapore1002
4United Kingdom815
5Netherlands562
6Germany533
7France502
8Hong Kong316
9Indonesia308
10South Korea297

Monday, June 15, 2026

Botnet Statistics [2026-06-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-14 00:00-23:59 UTC
total number of suspected botnet IPs: 19869
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19015
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900130462
2226965759
320254479
4112251505
55432138104
62202535695
72229688
8882227665
9872827140
102312224674
RankNetwork# of suspected botnet IPs
1MSFT1479
2AL-31468
3INFRAWATCH1083
4GOOGLE-CLOUD1038
5PAN-22959
6ASEPL-SG560
7VOLCANO-ENGINE495
8FR-ONYPHE-20191111448
9CENSY375
10cloud352


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8892
2China4123
3Singapore863
4United Kingdom817
5Netherlands579
6Germany547
7France492
8Hong Kong298
9Indonesia297
10South Korea237

Sunday, June 14, 2026

Botnet Statistics [2026-06-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-13 00:00-23:59 UTC
total number of suspected botnet IPs: 20063
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18852
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900164419
212975108732
31266176379
41340565538
5226963931
620253074
71295150430
81439143214
91396841703
102202540725
RankNetwork# of suspected botnet IPs
1AL-31443
2MSFT1432
3GOOGLE-CLOUD1051
4PAN-22960
5INFRAWATCH868
6ASEPL-SG577
7VOLCANO-ENGINE485
8FR-ONYPHE-20191111448
9CENSY375
10cloud306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8377
2China4088
3Singapore901
4United Kingdom836
5Netherlands597
6France529
7Indonesia317
8Hong Kong312
9Germany303
10South Korea284

Saturday, June 13, 2026

Botnet Statistics [2026-06-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-12 00:00-23:59 UTC
total number of suspected botnet IPs: 21417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20368
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900159577
2226964363
3602362971
41326544055
5966336786
6670736465
7485535755
8882233319
9349530284
10643528385
RankNetwork# of suspected botnet IPs
1AL-31448
2MSFT1427
3INFRAWATCH1063
4GOOGLE-CLOUD1047
5PAN-22962
6ASEPL-SG566
7VOLCANO-ENGINE523
8FR-ONYPHE-20191111447
9CENSY375
10cloud313


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8667
2China4190
3Singapore898
4United Kingdom791
5Germany619
6Netherlands609
7France528
8Indonesia412
9India402
10South Korea365

Friday, June 12, 2026

Botnet Statistics [2026-06-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-11 00:00-23:59 UTC
total number of suspected botnet IPs: 20970
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20061
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900134871
2590130442
32229950
4600223966
522219318
6220318331
71387018197
8226917354
9222217352
1088816743
RankNetwork# of suspected botnet IPs
1AL-31542
2MSFT1409
3INFRAWATCH1068
4GOOGLE-CLOUD1061
5PAN-22962
6ASEPL-SG612
7VOLCANO-ENGINE497
8FR-ONYPHE-20191111448
9CENSY381
10cloud339


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9185
2China4127
3Singapore838
4United Kingdom779
5Netherlands579
6Germany566
7France477
8India366
9South Korea347
10Hong Kong335

Thursday, June 11, 2026

Botnet Statistics [2026-06-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-10 00:00-23:59 UTC
total number of suspected botnet IPs: 20071
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19048
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590098645
2590138857
3901135656
42228199
522222048
62321122
7940220572
8222220358
988819551
10801519195
RankNetwork# of suspected botnet IPs
1AL-31575
2MSFT1487
3GOOGLE-CLOUD1052
4PAN-22961
5INFRAWATCH865
6ASEPL-SG606
7VOLCANO-ENGINE499
8FR-ONYPHE-20191111447
9CENSY374
10cloud337


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8837
2China3772
3Singapore832
4Germany620
5Netherlands560
6United Kingdom553
7France487
8India367
9Hong Kong331
10South Korea326
RankTCP port number# of connection attempts received
15900143577
2225580252
3444447236
4602245981
5590138281
62202436814
73031613
82229419
9822228735
10940226308