Custom Search

Thursday, April 16, 2026

Botnet Statistics [2026-04-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 16139
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15135
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1386
2GOOGLE-CLOUD1003
3PAN-22950
4AL-3891
5FR-ONYPHE-20191111448
6CENSY372
7VOLCANO-ENGINE355
8cloud332
9ASEPL-SG267
10UCLOUD-HK250


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7677
2China3003
3France587
4Singapore491
5Hong Kong357
6Netherlands343
7Indonesia280
8India260
9Viet Nam238
10United Kingdom235

Wednesday, April 15, 2026

Botnet Statistics [2026-04-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 17455
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16757
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17777411683
28015330945
35900298423
49443297709
52095246598
62222171490
75357115521
8800086595
9808583589
10223278208
RankNetwork# of suspected botnet IPs
1MSFT1379
2GOOGLE-CLOUD1002
3PAN-22950
4AL-3925
5FR-ONYPHE-20191111448
6CENSY377
7VOLCANO-ENGINE351
8ASEPL-SG292
9cloud290
10UCLOUD-HK256


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8225
2China3397
3France552
4Singapore506
5Hong Kong372
6Netherlands360
7Germany307
8Indonesia293
9United Kingdom268
10Viet Nam254

Tuesday, April 14, 2026

Botnet Statistics [2026-04-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 17557
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16838
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17777489497
25900305280
39443238549
48015238146
52095191655
62222116843
78082105349
825102724
9800079587
10223276403
RankNetwork# of suspected botnet IPs
1MSFT1391
2AL-31148
3GOOGLE-CLOUD1004
4PAN-22950
5FR-ONYPHE-20191111448
6CENSY379
7VOLCANO-ENGINE360
8cloud340
9ASEPL-SG313
10UCLOUD-HK258


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7884
2China3904
3Singapore640
4France550
5Hong Kong361
6Netherlands338
7Indonesia301
8India288
9Russian Federation258
10United Kingdom246

Monday, April 13, 2026

Botnet Statistics [2026-04-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 17959
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16880
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900346775
27777157905
32095142649
49443106940
5590168145
6228862980
7220662242
8222258353
9432256679
10223255898
RankNetwork# of suspected botnet IPs
1MSFT1392
2AL-31315
3GOOGLE-CLOUD1007
4PAN-22949
5ASEPL-SG450
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE365
9UCLOUD-HK253
10AT-88-Z247


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8754
2China3627
3Singapore678
4France553
5Germany380
6Netherlands378
7Hong Kong352
8Indonesia226
9United Kingdom214
10South Korea211

Sunday, April 12, 2026

Botnet Statistics [2026-04-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 16854
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15984
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900403081
251005189328
32078153670
4209582307
5777776612
6222274474
7228864073
8801562307
9220662013
10602261801
RankNetwork# of suspected botnet IPs
1MSFT1366
2AL-31282
3GOOGLE-CLOUD1004
4PAN-22950
5ASEPL-SG479
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE375
8CENSY375
9cloud327
10UCLOUD-HK259


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7855
2China3567
3Singapore831
4France542
5Germany375
6Hong Kong354
7Netherlands348
8Indonesia249
9United Kingdom226
10South Korea217

Saturday, April 11, 2026

Botnet Statistics [2026-04-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 17575
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16680
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900424324
2888306750
351005208858
48088137190
52078118368
6535793142
7228863120
8777761224
9220661191
10222252601
RankNetwork# of suspected botnet IPs
1MSFT1393
2AL-31388
3GOOGLE-CLOUD1000
4PAN-22950
5ASEPL-SG480
6FR-ONYPHE-20191111448
7CENSY380
8VOLCANO-ENGINE370
9cloud338
10UCLOUD-HK268


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8231
2China3793
3Singapore804
4France544
5Hong Kong372
6Netherlands361
7Germany275
8Indonesia255
9United Kingdom249
10India216

Friday, April 10, 2026

Botnet Statistics [2026-04-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 16893
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15969
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900517780
2888192702
34222106156
451005105279
5808889904
6207866807
7808566538
8228863358
9223161086
10535760994
RankNetwork# of suspected botnet IPs
1MSFT1355
2GOOGLE-CLOUD1008
3PAN-22950
4AL-3927
5FR-ONYPHE-20191111448
6CENSY377
7VOLCANO-ENGINE371
8ASEPL-SG368
9cloud308
10UCLOUD-HK262


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8125
2China3126
3Singapore649
4France562
5Netherlands413
6Hong Kong362
7Indonesia269
8South Korea240
9India231
10United Kingdom230

Thursday, April 9, 2026

Botnet Statistics [2026-04-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 16994
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16140
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900535292
25357151774
3888112720
44222106771
58088100730
6808572132
7944369783
8207861845
9800059818
10223159327
RankNetwork# of suspected botnet IPs
1MSFT1387
2AL-31251
3GOOGLE-CLOUD1005
4PAN-22950
5ASEPL-SG514
6FR-ONYPHE-20191111448
7CENSY378
8VOLCANO-ENGINE377
9cloud322
10UCLOUD-HK263


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7707
2China3716
3Singapore762
4France555
5Netherlands371
6Hong Kong360
7Indonesia281
8South Korea227
9United Kingdom224
10India211

Wednesday, April 8, 2026

Botnet Statistics [2026-04-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 18149
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17239
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900496622
28088148239
34222110715
4535776138
5209568995
6207867603
75100557728
8808556508
9223155837
10902244702
RankNetwork# of suspected botnet IPs
1MSFT1361
2AL-31304
3GOOGLE-CLOUD1034
4PAN-22950
5ASEPL-SG547
6FR-ONYPHE-20191111447
7CENSY376
8VOLCANO-ENGINE370
9cloud331
10LINODE-US274


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8807
2China3311
3Singapore939
4France572
5Netherlands390
6Hong Kong364
7Indonesia288
8India243
9United Kingdom226
10South Korea224

Tuesday, April 7, 2026

Botnet Statistics [2026-04-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 17243
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16206
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900473362
24222124464
325104550
4227196650
5220561562
6223154311
7046447
85860345142
9222239907
10808834455
RankNetwork# of suspected botnet IPs
1MSFT1346
2AL-31255
3GOOGLE-CLOUD1011
4PAN-22950
5FR-ONYPHE-20191111448
6ASEPL-SG429
7CENSY375
8VOLCANO-ENGINE374
9cloud270
10UCLOUD-HK260


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7884
2China3404
3Singapore771
4France560
5Hong Kong369
6Netherlands332
7Indonesia274
8India251
9Germany238
10South Korea227

Monday, April 6, 2026

Botnet Statistics [2026-04-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 17759
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16846
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900376942
225195262
34222106780
40104984
5227199310
65860398417
7209592856
8220591534
9222272345
10777762709
RankNetwork# of suspected botnet IPs
1MSFT1351
2AL-31351
3GOOGLE-CLOUD1005
4PAN-22951
5ASEPL-SG547
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE370
9cloud321
10FR-ONYPHE-20221109240


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8631
2China3370
3Singapore927
4France555
5Netherlands368
6Hong Kong344
7United Kingdom257
8Germany244
9Indonesia231
10South Korea220

Sunday, April 5, 2026

Botnet Statistics [2026-04-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 17286
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16167
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900425806
225157491
358603114872
42095106440
52205102238
6777792993
7944379257
8800069799
9808865344
10101260520
RankNetwork# of suspected botnet IPs
1MSFT1375
2AL-31274
3GOOGLE-CLOUD1002
4PAN-22950
5ASEPL-SG534
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE385
8CENSY379
9UCLOUD-HK259
10FR-ONYPHE-20221109239


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7992
2China3348
3Singapore856
4France563
5Hong Kong367
6Netherlands356
7Indonesia270
8United Kingdom257
9South Korea213
10Germany207

Saturday, April 4, 2026

Botnet Statistics [2026-04-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 17544
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16616
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900452983
22205104790
388873035
4800064207
5777762753
62562302
7808551000
8808850717
9944350012
10535749846
RankNetwork# of suspected botnet IPs
1MSFT1356
2AL-31304
3GOOGLE-CLOUD1012
4PAN-22950
5ASEPL-SG506
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE370
9cloud327
10UCLOUD-HK265


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8385
2China3174
3Singapore820
4France553
5Hong Kong366
6Netherlands331
7Germany252
8United Kingdom251
9Indonesia249
10South Korea232

Friday, April 3, 2026

Botnet Statistics [2026-04-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-02 00:00-23:59 UTC
total number of suspected botnet IPs: 18339
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17393
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900448419
2888299465
32222165406
48000143359
57777109951
6225697351
7223894542
8220593336
9200089980
102581697
RankNetwork# of suspected botnet IPs
1MSFT1382
2AL-31316
3GOOGLE-CLOUD1013
4PAN-22950
5ASEPL-SG542
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE402
8CENSY383
9cloud324
10UCLOUD-HK261


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9068
2China3369
3Singapore923
4France549
5Netherlands375
6Hong Kong371
7Indonesia311
8United Kingdom255
9South Korea227
10India226

Thursday, April 2, 2026

Botnet Statistics [2026-04-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-01 00:00-23:59 UTC
total number of suspected botnet IPs: 18154
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17161
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900390007
27777191896
38000178771
48015111911
525104287
688899236
7223894483
8220589895
9225681641
10222275326
RankNetwork# of suspected botnet IPs
1MSFT1360
2AL-31341
3GOOGLE-CLOUD1005
4PAN-22950
5ASEPL-SG658
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE412
8CENSY379
9cloud289
10UCLOUD-HK262


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8352
2China3612
3Singapore1007
4France538
5Hong Kong376
6Netherlands318
7Indonesia293
8Germany277
9India237
10United Kingdom235

Daily Zombie Lists for April 2026(2026年04月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for April 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年04月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

04/01: download link 下載網址; MD5sum: 9c741e33e224c4aa90559ca99b0bfa5c
04/02: download link 下載網址; MD5sum: b10181c543be6c6f70816f73cfa083f1
04/03: download link 下載網址; MD5sum: b1ec6f8358168bd5dec14005ef53a504
04/04: download link 下載網址; MD5sum: 952e4fb63533040a19e393bccc7783ca
04/05: download link 下載網址; MD5sum: 71d54fec2bbc9d8678dba2c7732a83c9
04/06: download link 下載網址; MD5sum: 32e461467c78ce13e97efc15e520fd70
04/07: download link 下載網址; MD5sum: 77fb6cad7129fe6d4aeefa064ffc3b09
04/08: download link 下載網址; MD5sum: 1d2e3974b7a4b0546903d82716c9d1fb
04/09: download link 下載網址; MD5sum: 54b9728d195e1e209178cd4b3fb0baae
04/10: download link 下載網址; MD5sum: 0a8442cc7ba8ad721b1aec6fcd7a8262
04/11: download link 下載網址; MD5sum: 1ee5233235790bbf93d09681f9685a27
04/12: download link 下載網址; MD5sum: 4c61c8ccdaca36f83fa0bd416b089bf4
04/13: download link 下載網址; MD5sum: 63b58f45fd92e66c5ea82a02d125fabb
04/14: download link 下載網址; MD5sum: 930b481c8d7976797d00569341e9b3d6
04/15: download link 下載網址; MD5sum: 2660dad2921ec4cb0d1a4da431c3799c

Wednesday, April 1, 2026

Botnet Statistics [2026-03-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 18882
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17943
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900407272
2888311121
37777265530
451005184929
58000168306
625168240
72000156083
88015139461
95357131503
10220592308
RankNetwork# of suspected botnet IPs
1AL-31433
2MSFT1372
3GOOGLE-CLOUD1008
4PAN-22951
5ASEPL-SG936
6FR-ONYPHE-20191111400
7VOLCANO-ENGINE399
8CENSY384
9cloud307
10ALISOFT305


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8782
2China3662
3Singapore1410
4France479
5Hong Kong366
6Indonesia341
7Netherlands306
8United Kingdom252
9India251
10Germany230

Tuesday, March 31, 2026

Botnet Statistics [2026-03-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-30 00:00-23:59 UTC
total number of suspected botnet IPs: 18014
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17075
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900296031
2888150718
37777123334
4901195558
5220591224
6200089413
75100585457
8800079299
9229870834
10535766204
RankNetwork# of suspected botnet IPs
1AL-31568
2MSFT1333
3GOOGLE-CLOUD1000
4ASEPL-SG962
5PAN-22950
6VOLCANO-ENGINE404
7FR-ONYPHE-20191111400
8CENSY379
9cloud328
10ALISOFT303


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8259
2China3612
3Singapore1315
4France466
5Hong Kong363
6Indonesia336
7Netherlands278
8South Korea243
9United Kingdom232
10India229

Monday, March 30, 2026

Botnet Statistics [2026-03-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-29 00:00-23:59 UTC
total number of suspected botnet IPs: 19154
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18111
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900320107
22254101987
3220598719
4502591756
5772274956
6666646098
7990145918
8552241546
9777737622
10590236633
RankNetwork# of suspected botnet IPs
1AL-31917
2MSFT1334
3GOOGLE-CLOUD1005
4PAN-22951
5ASEPL-SG818
6VOLCANO-ENGINE401
7FR-ONYPHE-20191111400
8CENSY357
9ALISOFT310
10cloud292


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9480
2China3482
3Singapore1290
4France466
5Hong Kong357
6Indonesia320
7Netherlands308
8South Korea258
9United Kingdom235
10India216

Sunday, March 29, 2026

Botnet Statistics [2026-03-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-28 00:00-23:59 UTC
total number of suspected botnet IPs: 18437
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17515
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900363825
2662299014
3225483769
4666674683
5600551827
65762248945
7552244017
8590238020
9535736421
10772236328
RankNetwork# of suspected botnet IPs
1AL-31720
2MSFT1337
3GOOGLE-CLOUD1001
4PAN-22946
5ASEPL-SG900
6FR-ONYPHE-20191111400
7CENSY367
8VOLCANO-ENGINE361
9cloud320
10ALISOFT302


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8522
2China3562
3Singapore1361
4France471
5Hong Kong368
6Indonesia335
7Netherlands323
8India279
9Germany234
10South Korea227

Saturday, March 28, 2026

Botnet Statistics [2026-03-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-27 00:00-23:59 UTC
total number of suspected botnet IPs: 19056
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17909
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900364311
2535790539
3662279226
4666675269
5207865142
6229960987
7944355634
8222252667
9808252300
105100551784
RankNetwork# of suspected botnet IPs
1AL-31865
2MSFT1341
3GOOGLE-CLOUD1002
4ASEPL-SG975
5PAN-22950
6FR-ONYPHE-20191111410
7VOLCANO-ENGINE369
8CENSY364
9ALISOFT297
10UCLOUD-HK263


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8447
2China3817
3Singapore1298
4France483
5Hong Kong374
6Indonesia361
7Netherlands333
8India292
9South Korea271
10United Kingdom221

Friday, March 27, 2026

Botnet Statistics [2026-03-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-26 00:00-23:59 UTC
total number of suspected botnet IPs: 19503
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18529
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900405824
22078101370
3220489787
4801588288
5808274027
6222273805
7800071101
8944365225
9229960553
10225560228
RankNetwork# of suspected botnet IPs
1AL-31863
2MSFT1350
3ASEPL-SG980
4GOOGLE-CLOUD926
5PAN-22910
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE366
8CENSY365
9cloud328
10ALISOFT295


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8985
2China3457
3Singapore1445
4France566
5Indonesia387
6Netherlands361
7Hong Kong356
8India298
9South Korea273
10United Kingdom259

Thursday, March 26, 2026

Botnet Statistics [2026-03-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-25 00:00-23:59 UTC
total number of suspected botnet IPs: 19122
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18113
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900445878
22078177923
32204105101
4800085372
588885247
6535780880
755479532
8200076415
9600074702
10772270084
RankNetwork# of suspected botnet IPs
1AL-31622
2MSFT1335
3GOOGLE-CLOUD996
4PAN-22950
5ASEPL-SG947
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE392
8CENSY364
9cloud328
10ALISOFT317


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8429
2China3568
3Singapore1412
4France581
5Indonesia423
6Hong Kong342
7India335
8Netherlands334
9South Korea279
10Brazil262

Wednesday, March 25, 2026

Botnet Statistics [2026-03-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-24 00:00-23:59 UTC
total number of suspected botnet IPs: 16994
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16145
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900402659
22078276937
37777230821
455555185628
52000128770
6888116717
78082113813
82204108775
98000100149
102095100036
RankNetwork# of suspected botnet IPs
1MSFT1341
2AL-31094
3GOOGLE-CLOUD999
4PAN-22948
5ASEPL-SG684
6FR-ONYPHE-20191111447
7VOLCANO-ENGINE373
8CENSY363
9cloud299
10ALISOFT286


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8182
2China3333
3Singapore896
4France530
5Netherlands350
6Hong Kong313
7India258
8Indonesia244
9South Korea236
10United Kingdom204

Tuesday, March 24, 2026

Botnet Statistics [2026-03-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 16822
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15994
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900325892
27777225890
32078162527
48082125279
52222110311
62204107384
75555587882
8681780000
9200079605
10800068854
RankNetwork# of suspected botnet IPs
1MSFT1309
2AL-31110
3GOOGLE-CLOUD1001
4PAN-22949
5ASEPL-SG730
6CENSY533
7FR-ONYPHE-20191111448
8VOLCANO-ENGINE371
9cloud314
10ALISOFT306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8077
2China3264
3Singapore959
4France527
5Hong Kong329
6Netherlands305
7India252
8Indonesia240
9South Korea229
10United Kingdom214

Monday, March 23, 2026

Botnet Statistics [2026-03-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 17301
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16451
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900228545
22204103521
3777790208
4207870279
5600065574
6229959908
7222252375
8808247402
9590247017
10590141145
RankNetwork# of suspected botnet IPs
1MSFT1357
2AL-31157
3GOOGLE-CLOUD1006
4PAN-22951
5ASEPL-SG802
6CENSY560
7FR-ONYPHE-20191111448
8VOLCANO-ENGINE381
9cloud312
10ALISOFT289


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8495
2China3271
3Singapore1031
4France535
5Netherlands342
6Hong Kong325
7South Korea261
8Indonesia234
9United Kingdom231
10India225

Sunday, March 22, 2026

Botnet Statistics [2026-03-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 17275
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16176
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900210450
22078131716
37777123125
4220495001
5808280270
6222271126
7801570568
8229961060
95555560433
1088858150
RankNetwork# of suspected botnet IPs
1MSFT1335
2AL-31134
3GOOGLE-CLOUD1003
4PAN-22949
5ASEPL-SG702
6CENSY480
7FR-ONYPHE-20191111448
8VOLCANO-ENGINE391
9ALISOFT301
10cloud270


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8096
2China3472
3Singapore1042
4France541
5Hong Kong320
6Netherlands310
7South Korea233
8Indonesia232
9United Kingdom222
10India210

Saturday, March 21, 2026

Botnet Statistics [2026-03-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17231
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16313
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
12078136306
25900122566
3888116557
42204101920
5777798347
6801596970
7944391723
8808281701
9800065285
10229960765
RankNetwork# of suspected botnet IPs
1MSFT1349
2AL-31183
3GOOGLE-CLOUD1007
4PAN-22949
5ASEPL-SG817
6CENSY472
7FR-ONYPHE-20191111448
8VOLCANO-ENGINE405
9cloud315
10ALISOFT298


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8043
2China3376
3Singapore1044
4France540
5Hong Kong340
6Netherlands315
7South Korea263
8Indonesia242
9India232
10United Kingdom219

Friday, March 20, 2026

Botnet Statistics [2026-03-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 18432
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17396
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900151055
28015113877
3202694678
488888035
5207884926
6220480614
7330672306
8222271066
9944364745
10777763793
RankNetwork# of suspected botnet IPs
1MSFT1350
2AL-31179
3GOOGLE-CLOUD1019
4PAN-22950
5ASEPL-SG792
6FR-ONYPHE-20191111448
7CENSY423
8VOLCANO-ENGINE401
9CHINANET-SC329
10ALISOFT306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8597
2China3706
3Singapore1057
4France552
5Netherlands394
6Hong Kong362
7India244
8Indonesia242
9South Korea238
10Germany212
RankTCP port number# of connection attempts received
15900193181
2888125492
37777100654
4801590994
5222289132
6200088824
7330676224
8111170036
9944362010
10202659792