Custom Search

Thursday, June 18, 2026

Botnet Statistics [2026-06-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21723
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20610
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1MSFT1492
2AL-31450
3INFRAWATCH1113
4GOOGLE-CLOUD1090
5PAN-22960
6ASEPL-SG522
7VOLCANO-ENGINE484
8FR-ONYPHE-20191111446
9CENSY381
10cloud316


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9266
2China4367
3United Kingdom846
4Singapore783
5Netherlands625
6Germany551
7France485
8Hong Kong412
9South Korea376
10India357

Wednesday, June 17, 2026

Botnet Statistics [2026-06-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-16 00:00-23:59 UTC
total number of suspected botnet IPs: 23475
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22304
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900150199
22389925
3112259024
45432145443
5999942221
6944331161
7882228306
82228231
91000026311
10801521060
RankNetwork# of suspected botnet IPs
1MSFT1527
2AL-31492
3GOOGLE-CLOUD1096
4INFRAWATCH964
5PAN-22963
6ASEPL-SG550
7VOLCANO-ENGINE499
8FR-ONYPHE-20191111448
9CENSY380
10cloud362


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States10427
2China4346
3Singapore928
4United Kingdom775
5Netherlands613
6Germany591
7France507
8Hong Kong489
9India411
10South Korea353

Tuesday, June 16, 2026

Botnet Statistics [2026-06-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-15 00:00-23:59 UTC
total number of suspected botnet IPs: 19413
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18318
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900152697
223126642
3112258718
4123450749
55432146520
620242106
72234324
8882228332
9872826110
101000025315
RankNetwork# of suspected botnet IPs
1AL-31467
2MSFT1391
3INFRAWATCH1126
4GOOGLE-CLOUD1049
5PAN-22962
6ASEPL-SG677
7VOLCANO-ENGINE481
8FR-ONYPHE-20191111448
9CENSY382
10FR-ONYPHE-20221109240


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8031
2China3653
3Singapore1002
4United Kingdom815
5Netherlands562
6Germany533
7France502
8Hong Kong316
9Indonesia308
10South Korea297

Monday, June 15, 2026

Botnet Statistics [2026-06-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-14 00:00-23:59 UTC
total number of suspected botnet IPs: 19869
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19015
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900130462
2226965759
320254479
4112251505
55432138104
62202535695
72229688
8882227665
9872827140
102312224674
RankNetwork# of suspected botnet IPs
1MSFT1479
2AL-31468
3INFRAWATCH1083
4GOOGLE-CLOUD1038
5PAN-22959
6ASEPL-SG560
7VOLCANO-ENGINE495
8FR-ONYPHE-20191111448
9CENSY375
10cloud352


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8892
2China4123
3Singapore863
4United Kingdom817
5Netherlands579
6Germany547
7France492
8Hong Kong298
9Indonesia297
10South Korea237

Sunday, June 14, 2026

Botnet Statistics [2026-06-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-13 00:00-23:59 UTC
total number of suspected botnet IPs: 20063
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18852
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900164419
212975108732
31266176379
41340565538
5226963931
620253074
71295150430
81439143214
91396841703
102202540725
RankNetwork# of suspected botnet IPs
1AL-31443
2MSFT1432
3GOOGLE-CLOUD1051
4PAN-22960
5INFRAWATCH868
6ASEPL-SG577
7VOLCANO-ENGINE485
8FR-ONYPHE-20191111448
9CENSY375
10cloud306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8377
2China4088
3Singapore901
4United Kingdom836
5Netherlands597
6France529
7Indonesia317
8Hong Kong312
9Germany303
10South Korea284

Saturday, June 13, 2026

Botnet Statistics [2026-06-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-12 00:00-23:59 UTC
total number of suspected botnet IPs: 21417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20368
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900159577
2226964363
3602362971
41326544055
5966336786
6670736465
7485535755
8882233319
9349530284
10643528385
RankNetwork# of suspected botnet IPs
1AL-31448
2MSFT1427
3INFRAWATCH1063
4GOOGLE-CLOUD1047
5PAN-22962
6ASEPL-SG566
7VOLCANO-ENGINE523
8FR-ONYPHE-20191111447
9CENSY375
10cloud313


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8667
2China4190
3Singapore898
4United Kingdom791
5Germany619
6Netherlands609
7France528
8Indonesia412
9India402
10South Korea365

Friday, June 12, 2026

Botnet Statistics [2026-06-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-11 00:00-23:59 UTC
total number of suspected botnet IPs: 20970
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20061
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900134871
2590130442
32229950
4600223966
522219318
6220318331
71387018197
8226917354
9222217352
1088816743
RankNetwork# of suspected botnet IPs
1AL-31542
2MSFT1409
3INFRAWATCH1068
4GOOGLE-CLOUD1061
5PAN-22962
6ASEPL-SG612
7VOLCANO-ENGINE497
8FR-ONYPHE-20191111448
9CENSY381
10cloud339


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9185
2China4127
3Singapore838
4United Kingdom779
5Netherlands579
6Germany566
7France477
8India366
9South Korea347
10Hong Kong335

Thursday, June 11, 2026

Botnet Statistics [2026-06-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-10 00:00-23:59 UTC
total number of suspected botnet IPs: 20071
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19048
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
1590098645
2590138857
3901135656
42228199
522222048
62321122
7940220572
8222220358
988819551
10801519195
RankNetwork# of suspected botnet IPs
1AL-31575
2MSFT1487
3GOOGLE-CLOUD1052
4PAN-22961
5INFRAWATCH865
6ASEPL-SG606
7VOLCANO-ENGINE499
8FR-ONYPHE-20191111447
9CENSY374
10cloud337


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8837
2China3772
3Singapore832
4Germany620
5Netherlands560
6United Kingdom553
7France487
8India367
9Hong Kong331
10South Korea326

Wednesday, June 10, 2026

Botnet Statistics [2026-06-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-09 00:00-23:59 UTC
total number of suspected botnet IPs: 20830
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19715
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900143577
2225580252
3444447236
4602245981
5590138281
62202436814
73031613
82229419
9822228735
10940226308
RankNetwork# of suspected botnet IPs
1AL-31637
2MSFT1438
3GOOGLE-CLOUD1051
4INFRAWATCH1022
5PAN-22962
6ASEPL-SG533
7VOLCANO-ENGINE501
8FR-ONYPHE-20191111448
9CENSY375
10cloud301


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9588
2China3442
3United Kingdom782
4Singapore746
5Germany640
6Netherlands620
7France497
8South Korea366
9India345
10Hong Kong340

Tuesday, June 9, 2026

Botnet Statistics [2026-06-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-08 00:00-23:59 UTC
total number of suspected botnet IPs: 19079
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18078
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900201432
2225587254
3602260980
4111153654
5600037039
62202436631
782232430
8822230678
92227487
10940226952
RankNetwork# of suspected botnet IPs
1AL-31618
2MSFT1436
3INFRAWATCH1147
4GOOGLE-CLOUD1067
5PAN-22961
6ASEPL-SG612
7VOLCANO-ENGINE518
8FR-ONYPHE-20191111447
9CENSY363
10cloud346


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8843
2China3326
3Singapore846
4United Kingdom815
5Germany573
6Netherlands542
7France470
8Hong Kong306
9Indonesia289
10South Korea258

Monday, June 8, 2026

Botnet Statistics [2026-06-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-07 00:00-23:59 UTC
total number of suspected botnet IPs: 19683
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18572
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900221610
2225587184
3602259477
4600047377
5111141975
6901140740
72231614
8822228723
9742227004
10772225945
RankNetwork# of suspected botnet IPs
1AL-31653
2MSFT1422
3GOOGLE-CLOUD1038
4PAN-22961
5INFRAWATCH879
6ASEPL-SG607
7VOLCANO-ENGINE505
8FR-ONYPHE-20191111448
9CENSY351
10AT-88-Z319


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9432
2China3383
3Singapore891
4United Kingdom875
5Netherlands604
6France483
7Hong Kong313
8Indonesia265
9Germany265
10South Korea255

Sunday, June 7, 2026

Botnet Statistics [2026-06-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-06 00:00-23:59 UTC
total number of suspected botnet IPs: 18561
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17609
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900234607
2602293011
3901144181
4212239090
55552237583
6888836337
792232367
82231710
9822228327
10500127420
RankNetwork# of suspected botnet IPs
1AL-31630
2MSFT1385
3GOOGLE-CLOUD1043
4PAN-22960
5INFRAWATCH920
6ASEPL-SG699
7VOLCANO-ENGINE516
8FR-ONYPHE-20191111447
9CENSY356
10AT-88-Z312


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8371
2China3523
3Singapore955
4United Kingdom908
5Netherlands589
6France478
7Hong Kong314
8Germany307
9Indonesia272
10South Korea245

Botnet Statistics [2026-06-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-05 00:00-23:59 UTC
total number of suspected botnet IPs: 18328
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17129
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900206900
26022125517
3212253629
45552242164
5432138616
692238303
7500130075
8202429142
92228408
10802227403
RankNetwork# of suspected botnet IPs
1AL-31626
2MSFT1354
3GOOGLE-CLOUD1061
4PAN-22964
5INFRAWATCH705
6ASEPL-SG577
7VOLCANO-ENGINE507
8FR-ONYPHE-20191111448
9CENSY351
10AT-88-Z282


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8258
2China3294
3Singapore946
4United Kingdom680
5Netherlands589
6France483
7Germany325
8Hong Kong307
9Indonesia290
10South Korea227

Saturday, June 6, 2026

Botnet Statistics [2026-06-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-02 00:00-23:59 UTC
total number of suspected botnet IPs: 22111
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21092
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900183213
26022109163
3212255302
4432138636
55552236980
62228364
71222227958
8202425145
9500124348
10802223909
RankNetwork# of suspected botnet IPs
1AL-31868
2MSFT1725
3INFRAWATCH1152
4GOOGLE-CLOUD1040
5PAN-22971
6ASEPL-SG746
7cloud544
8VOLCANO-ENGINE528
9FR-ONYPHE-20191111447
10CENSY380


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States10331
2China3923
3Singapore1049
4United Kingdom914
5Germany648
6Netherlands630
7France484
8Indonesia359
9Hong Kong356
10South Korea285

Tuesday, June 2, 2026

Botnet Statistics [2026-06-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21372
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20157
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900175020
2226574270
3602250576
4592237761
5202325325
62323781
7471422727
8500122448
9470822161
10132221484
RankNetwork# of suspected botnet IPs
1AL-31869
2MSFT1495
3INFRAWATCH1169
4GOOGLE-CLOUD1060
5PAN-22963
6ASEPL-SG667
7VOLCANO-ENGINE534
8FR-ONYPHE-20191111448
9CENSY372
10cloud309


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8982
2China3874
3Singapore1193
4United Kingdom912
5Netherlands602
6Germany597
7France501
8Hong Kong379
9Indonesia364
10Brazil284

Daily Zombie Lists for June 2026(2026年06月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for June 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年06月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

06/01: download link 下載網址; MD5sum: 30edaccd225a11593a57c6fa4a0502a1
06/02: download link 下載網址; MD5sum: 670e2644b66d3bf8e2c2ce1c9d84e843
06/05: download link 下載網址; MD5sum: ee2e6d874dc9f9eb1f2963f7cd9889de
06/06: download link 下載網址; MD5sum: 8b990173b7602f1676a33f6f8782a1a8
06/07: download link 下載網址; MD5sum: 4df2b94f38c64360f2c2d5ba34b59add
06/08: download link 下載網址; MD5sum: c98e108b937957da470721886ac6ce11
06/09: download link 下載網址; MD5sum: f803e6a1fe8ba935873ab68ba920bed1
06/10: download link 下載網址; MD5sum: 2fc5caeb065d69218f549098192c0ff4
06/11: download link 下載網址; MD5sum: c568e3cb6e5c812d48678fe923927bec
06/12: download link 下載網址; MD5sum: 5387354f1a779fda44b3544f5de5c775
06/13: download link 下載網址; MD5sum: 44ae5144ad2c659c686a3fcf2fd65aaa
06/14: download link 下載網址; MD5sum: 55a77ba51cd595297da634c2417fe552
06/15: download link 下載網址; MD5sum: b27583606837119654b785dafb4d8564
06/16: download link 下載網址; MD5sum: 18236cc43059e1c3e7884749e533cbdb
06/17: download link 下載網址; MD5sum: 565159d6689218ecb129c5f33d479701

Monday, June 1, 2026

Botnet Statistics [2026-05-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-31 00:00-23:59 UTC
total number of suspected botnet IPs: 20074
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19129
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900174834
2226574413
3202339898
4500124762
5602223738
6889922903
7471422482
8470821873
9710520908
10742220675
RankNetwork# of suspected botnet IPs
1AL-31703
2MSFT1406
3INFRAWATCH1092
4GOOGLE-CLOUD1046
5PAN-22961
6ASEPL-SG603
7VOLCANO-ENGINE510
8FR-ONYPHE-20191111400
9CENSY375
10cloud319


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9295
2China3719
3Singapore1014
4United Kingdom814
5Netherlands599
6Germany552
7France467
8Hong Kong334
9Indonesia288
10South Korea232

Sunday, May 31, 2026

Botnet Statistics [2026-05-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-30 00:00-23:59 UTC
total number of suspected botnet IPs: 19491
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18394
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900162450
2226574268
3202336396
4500130224
5200026118
6801525356
7222222467
8471422401
9802221781
10470821573
RankNetwork# of suspected botnet IPs
1AL-31795
2MSFT1393
3INFRAWATCH1178
4GOOGLE-CLOUD1050
5PAN-22962
6ASEPL-SG656
7VOLCANO-ENGINE506
8FR-ONYPHE-20191111400
9CENSY375
10CMNET228


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8637
2China3623
3Singapore996
4United Kingdom834
5Netherlands598
6Germany590
7France466
8Hong Kong358
9Indonesia306
10South Korea261

Saturday, May 30, 2026

Botnet Statistics [2026-05-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-29 00:00-23:59 UTC
total number of suspected botnet IPs: 20203
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19259
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900158896
2226546664
3202341857
4500130243
5777729149
6801026878
72324062
8801523027
9471422404
10802222393
RankNetwork# of suspected botnet IPs
1AL-31810
2MSFT1412
3INFRAWATCH1162
4GOOGLE-CLOUD1045
5PAN-22962
6ASEPL-SG701
7VOLCANO-ENGINE505
8FR-ONYPHE-20191111400
9CENSY377
10cloud310


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9006
2China3643
3Singapore1061
4United Kingdom940
5Netherlands641
6Germany634
7France486
8Hong Kong376
9Indonesia299
10South Korea256

Friday, May 29, 2026

Botnet Statistics [2026-05-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-28 00:00-23:59 UTC
total number of suspected botnet IPs: 20943
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19657
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900140809
2412241589
3202338686
4221134595
5899933538
6801032303
7777727193
8500126801
92324526
10801524095
RankNetwork# of suspected botnet IPs
1AL-31841
2MSFT1435
3GOOGLE-CLOUD1062
4PAN-22961
5INFRAWATCH720
6ASEPL-SG717
7VOLCANO-ENGINE509
8FR-ONYPHE-20191111400
9CENSY371
10cloud296


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9599
2China3799
3Singapore1091
4United Kingdom660
5Netherlands638
6France480
7Germany392
8Hong Kong369
9Indonesia320
10South Korea266

Thursday, May 28, 2026

Botnet Statistics [2026-05-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-27 00:00-23:59 UTC
total number of suspected botnet IPs: 19090
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18117
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900237800
2221142385
3412238191
4899935428
5801035346
6172232980
7777730440
8800129488
9801529427
10500127858
RankNetwork# of suspected botnet IPs
1AL-31735
2MSFT1428
3GOOGLE-CLOUD1051
4PAN-22966
5ASEPL-SG636
6VOLCANO-ENGINE506
7FR-ONYPHE-20191111407
8CENSY375
9cloud302
10CMNET244


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8889
2China3801
3Singapore1023
4France479
5Hong Kong368
6Germany340
7Netherlands323
8Indonesia293
9South Korea286
10Viet Nam240

Wednesday, May 27, 2026

Botnet Statistics [2026-05-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-26 00:00-23:59 UTC
total number of suspected botnet IPs: 19527
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18527
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900251056
2999942802
3221141367
4801038113
5899937991
6800133328
7172232473
8710229321
9800729163
10471428711
RankNetwork# of suspected botnet IPs
1AL-31623
2MSFT1450
3GOOGLE-CLOUD1050
4PAN-22960
5ASEPL-SG611
6VOLCANO-ENGINE485
7FR-ONYPHE-20191111448
8CENSY378
9cloud302
10CMNET243


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9406
2China3529
3Singapore1013
4France475
5Hong Kong372
6Netherlands357
7Indonesia332
8Germany319
9United Kingdom287
10South Korea280

Botnet Statistics [2026-05-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-25 00:00-23:59 UTC
total number of suspected botnet IPs: 20142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19019
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900284039
22238857
3202137951
4899937602
5800137458
6801035949
7221135024
8702232795
9801530048
10471429463
RankNetwork# of suspected botnet IPs
1AL-31777
2MSFT1438
3GOOGLE-CLOUD1050
4PAN-22960
5ASEPL-SG618
6INFRAWATCH568
7VOLCANO-ENGINE495
8FR-ONYPHE-20191111448
9CENSY378
10cloud306


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9045
2China3750
3Singapore978
4Netherlands613
5Germany590
6France489
7Hong Kong357
8Indonesia333
9Brazil318
10United Kingdom284

Monday, May 25, 2026

Botnet Statistics [2026-05-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-24 00:00-23:59 UTC
total number of suspected botnet IPs: 21668
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20415
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900349840
2202167295
3221148795
42202131604
5471430318
62326905
7500526714
8112226150
9172224936
102223273
RankNetwork# of suspected botnet IPs
1AL-31534
2MSFT1418
3INFRAWATCH1178
4GOOGLE-CLOUD1038
5PAN-22963
6ASEPL-SG517
7VOLCANO-ENGINE465
8FR-ONYPHE-20191111448
9CENSY378
10cloud281


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9561
2China3557
3Singapore909
4United Kingdom859
5Germany655
6Netherlands592
7France473
8Hong Kong397
9Brazil394
10Indonesia351

Sunday, May 24, 2026

Botnet Statistics [2026-05-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-23 00:00-23:59 UTC
total number of suspected botnet IPs: 21349
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20084
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900403543
2552590877
3202169188
4221153511
5812250314
62202149690
720048444
82342538
9202637828
1040037447
RankNetwork# of suspected botnet IPs
1AL-31610
2MSFT1462
3INFRAWATCH1139
4GOOGLE-CLOUD1027
5PAN-22962
6CLOUDFLARENET734
7ASEPL-SG551
8VOLCANO-ENGINE452
9FR-ONYPHE-20191111448
10CENSY378


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9474
2China3629
3Singapore862
4United Kingdom814
5Netherlands605
6Germany601
7France488
8Brazil396
9Hong Kong392
10Indonesia318

Saturday, May 23, 2026

Botnet Statistics [2026-05-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-22 00:00-23:59 UTC
total number of suspected botnet IPs: 20244
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18953
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900366970
2202169023
330058543
44932250916
54922245777
64942245491
74912245097
82202139203
92339042
1010033042
RankNetwork# of suspected botnet IPs
1AL-31626
2MSFT1444
3INFRAWATCH1135
4GOOGLE-CLOUD1045
5PAN-22960
6ASEPL-SG559
7VOLCANO-ENGINE457
8FR-ONYPHE-20191111448
9CENSY374
10UCLOUD-HK246


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8663
2China3422
3Singapore918
4United Kingdom883
5Netherlands597
6Germany545
7France511
8Hong Kong370
9Indonesia342
10Brazil339

Friday, May 22, 2026

Botnet Statistics [2026-05-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-21 00:00-23:59 UTC
total number of suspected botnet IPs: 22032
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20728
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900270234
2202162929
32341170
4172235376
5112232407
61022231622
7471430123
8500529576
9590229204
1022227495
RankNetwork# of suspected botnet IPs
1AL-31709
2MSFT1430
3GOOGLE-CLOUD1054
4INFRAWATCH1030
5PAN-22960
6ASEPL-SG594
7VOLCANO-ENGINE460
8FR-ONYPHE-20191111448
9CENSY381
10cloud325


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9798
2China3577
3Singapore1008
4United Kingdom757
5Netherlands625
6Germany557
7France519
8Brazil414
9Indonesia396
10Hong Kong379

Thursday, May 21, 2026

Botnet Statistics [2026-05-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-20 00:00-23:59 UTC
total number of suspected botnet IPs: 20047
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18879
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900258342
2202161526
3172246487
42341389
5112240310
6471429708
7782227701
8590226355
9500526343
10471725845
RankNetwork# of suspected botnet IPs
1AL-31595
2MSFT1443
3GOOGLE-CLOUD1056
4PAN-22962
5INFRAWATCH859
6ACEVILLEPTELTD-SG728
7ASEPL-SG569
8FR-ONYPHE-20191111448
9VOLCANO-ENGINE424
10CENSY372


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8764
2China3720
3Singapore1380
4United Kingdom842
5Netherlands606
6France458
7Hong Kong358
8Indonesia284
9Germany282
10South Korea273

Wednesday, May 20, 2026

Botnet Statistics [2026-05-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-19 00:00-23:59 UTC
total number of suspected botnet IPs: 22775
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21784
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900296862
2226166170
3172247385
42202034436
5233233821
6112230719
7471430085
882227570
9471726741
10590225766
RankNetwork# of suspected botnet IPs
1AL-31709
2MSFT1435
3INFRAWATCH1076
4GOOGLE-CLOUD1051
5PAN-22961
6ACEVILLEPTELTD-SG822
7ASEPL-SG583
8FR-ONYPHE-20191111448
9VOLCANO-ENGINE426
10CENSY375


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9887
2China4735
3Singapore1473
4United Kingdom973
5Germany591
6Netherlands567
7France485
8Hong Kong356
9Indonesia283
10India264
RankTCP port number# of connection attempts received
15900182235
2226185221
3233280879
4172247916
52202033974
62330682
7471430468
8112227464
9471726648
10590225273