Custom Search

Thursday, May 7, 2026

Botnet Statistics [2026-05-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-06 00:00-23:59 UTC
total number of suspected botnet IPs: 21048
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19533
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1AL-31481
2MSFT1417
3GOOGLE-CLOUD1027
4INFRAWATCH1014
5PAN-22953
6ASEPL-SG499
7FR-ONYPHE-20191111448
8CENSY375
9VOLCANO-ENGINE306
10FR-ONYPHE-20221109240


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8436
2China3595
3United Kingdom876
4Singapore800
5Netherlands569
6France567
7Germany564
8India442
9Brazil388
10Hong Kong367

Wednesday, May 6, 2026

Botnet Statistics [2026-05-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-05 00:00-23:59 UTC
total number of suspected botnet IPs: 22165
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20932
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900413872
2222243769
3223143023
42242153
5220941936
6112240901
72336120
862231420
9191929777
103027165
RankNetwork# of suspected botnet IPs
1AL-31570
2MSFT1455
3INFRAWATCH1015
4GOOGLE-CLOUD1014
5PAN-22954
6ASEPL-SG546
7FR-ONYPHE-20191111448
8CENSY377
9cloud321
10VOLCANO-ENGINE314


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9586
2China3688
3Singapore873
4United Kingdom867
5Netherlands616
6Germany587
7France583
8India411
9Brazil388
10Hong Kong358

Tuesday, May 5, 2026

Botnet Statistics [2026-05-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-04 00:00-23:59 UTC
total number of suspected botnet IPs: 21411
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19960
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900459548
2220953517
3301438860
42337450
5112236217
62236165
7222234731
8470928937
9762227438
10262224403
RankNetwork# of suspected botnet IPs
1AL-31579
2MSFT1454
3GOOGLE-CLOUD1023
4PAN-22954
5INFRAWATCH748
6ASEPL-SG541
7FR-ONYPHE-20191111448
8CENSY381
9VOLCANO-ENGINE308
10cloud303


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9010
2China3761
3Singapore880
4United Kingdom854
5Netherlands585
6France564
7Brazil455
8India376
9Indonesia348
10Hong Kong331

Monday, May 4, 2026

Botnet Statistics [2026-05-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-03 00:00-23:59 UTC
total number of suspected botnet IPs: 21773
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20593
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900419293
2220954126
32343051
445038936
5301436566
6228035091
7882132022
8222229268
92228994
10112227074
RankNetwork# of suspected botnet IPs
1AL-31545
2MSFT1463
3GOOGLE-CLOUD1041
4INFRAWATCH1001
5PAN-22952
6ASEPL-SG545
7FR-ONYPHE-20191111448
8CENSY375
9cloud335
10VOLCANO-ENGINE310


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9713
2China3490
3Singapore925
4United Kingdom908
5Netherlands593
6France571
7Germany565
8Brazil484
9India357
10Hong Kong330

Sunday, May 3, 2026

Botnet Statistics [2026-05-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-02 00:00-23:59 UTC
total number of suspected botnet IPs: 21303
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20049
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900474450
27777147065
358603135049
42387962
5882172995
6330672862
745063842
8535758961
9220954121
10225251267
RankNetwork# of suspected botnet IPs
1MSFT1490
2AL-31451
3INFRAWATCH1035
4GOOGLE-CLOUD1033
5PAN-22954
6ASEPL-SG523
7FR-ONYPHE-20191111448
8CENSY379
9cloud337
10VOLCANO-ENGINE321


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8832
2China3555
3Singapore877
4United Kingdom871
5Germany646
6Netherlands591
7France577
8Brazil510
9India459
10Hong Kong334

Saturday, May 2, 2026

Botnet Statistics [2026-05-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-01 00:00-23:59 UTC
total number of suspected botnet IPs: 22256
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20879
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900487709
223142035
37777125922
45860380778
5808862554
6225251265
7808240174
85100537866
91136136255
10220935092
RankNetwork# of suspected botnet IPs
1AL-31519
2MSFT1453
3GOOGLE-CLOUD1042
4INFRAWATCH1004
5PAN-22952
6ASEPL-SG516
7FR-ONYPHE-20191111448
8CENSY382
9cloud316
10VOLCANO-ENGINE312


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9335
2China3328
3United Kingdom914
4Singapore876
5Netherlands644
6Germany630
7France620
8India535
9Brazil500
10Indonesia365

Daily Zombie Lists for May 2026(2026年05月,每日殭屍電腦IP清單)

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:
為協助資安方面的研究,我將每日釋出CSV格式的殭屍電腦IP清單,供任何有興趣的人下載。資料欄位定義如下:

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;
第1欄:該殭屍電腦最後一次被偵測到企圖連線的日期、時間,時區為UTC;
Column 2: Zombie IP;
第2欄:該殭屍電腦的IP位址;
Column 3: TCP destination port number scanned by the zombie.
第3欄:該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.
想在第一時間取得資料下載網址?請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for May 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):
以下是2026年05月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP):

05/01: download link 下載網址; MD5sum: b5c91d5b9d5abfaad8916d4dca40e513
05/02: download link 下載網址; MD5sum: 3f90f43a49a1237f31d70928f550657b
05/03: download link 下載網址; MD5sum: be255f5cc7e639f4e2dfc47d9a316d0b
05/04: download link 下載網址; MD5sum: d74330fbc22a11ab01e404ced57517e4
05/05: download link 下載網址; MD5sum: e180e5d4af90c746608c5de74a825747
05/06: download link 下載網址; MD5sum: 50f2a61d0edf5ff9b17043817c09beb2

Friday, May 1, 2026

Botnet Statistics [2026-04-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-30 00:00-23:59 UTC
total number of suspected botnet IPs: 23468
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22016
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900457650
223314304
38088116313
4859471640
5777762648
6225251004
7227849064
82235287
9210829040
10112225791
RankNetwork# of suspected botnet IPs
1AL-31544
2MSFT1517
3GOOGLE-CLOUD1050
4PAN-22955
5ASEPL-SG481
6FR-ONYPHE-20191111400
7CENSY381
8INFRAWATCH332
9VOLCANO-ENGINE319
10cloud289


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States10258
2China3500
3United Kingdom1032
4Singapore871
5Germany692
6India564
7Netherlands558
8France533
9Indonesia435
10Brazil391

Thursday, April 30, 2026

Botnet Statistics [2026-04-29]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-29 00:00-23:59 UTC
total number of suspected botnet IPs: 19977
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18792
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900520702
223362870
3110116158
4901163360
5225251291
6808838545
72231388
8808228084
9801527449
10112225417
RankNetwork# of suspected botnet IPs
1AL-31560
2MSFT1465
3GOOGLE-CLOUD1051
4PAN-22953
5ASEPL-SG523
6FR-ONYPHE-20191111400
7CENSY379
8INFRAWATCH332
9cloud330
10VOLCANO-ENGINE317


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8622
2China3445
3United Kingdom916
4Singapore743
5Germany575
6Netherlands489
7France484
8Indonesia390
9India375
10Hong Kong336

Wednesday, April 29, 2026

Botnet Statistics [2026-04-28]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-28 00:00-23:59 UTC
total number of suspected botnet IPs: 20862
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19562
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900539172
2110233153
38088218874
48082103115
5878767816
6225244781
7801544585
8543236567
9220836335
10222233452
RankNetwork# of suspected botnet IPs
1AL-31529
2MSFT1438
3GOOGLE-CLOUD1031
4PAN-22955
5ASEPL-SG492
6FR-ONYPHE-20191111400
7CENSY382
8VOLCANO-ENGINE332
9INFRAWATCH331
10UCLOUD-HK266


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9090
2China3687
3United Kingdom1022
4Singapore712
5Germany532
6France518
7Netherlands502
8Brazil412
9Hong Kong369
10Indonesia343

Tuesday, April 28, 2026

Botnet Statistics [2026-04-27]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-27 00:00-23:59 UTC
total number of suspected botnet IPs: 19945
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18873
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900523212
222176914
3220841100
4808836821
52232698
6112225098
711023259
8808222095
9350319768
10570018120
RankNetwork# of suspected botnet IPs
1AL-31558
2MSFT1470
3GOOGLE-CLOUD1046
4PAN-22950
5ASEPL-SG516
6FR-ONYPHE-20191111408
7CENSY377
8INFRAWATCH341
9VOLCANO-ENGINE328
10cloud328


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8461
2China3613
3United Kingdom1004
4Singapore849
5France542
6Germany497
7Netherlands457
8Indonesia398
9Brazil381
10Hong Kong378

Botnet Statistics [2026-04-26]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-26 00:00-23:59 UTC
total number of suspected botnet IPs: 20234
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19208
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900427329
2747358093
3535747430
4916446909
5220841718
6492239986
7802038776
8189038355
9944333069
102230496
RankNetwork# of suspected botnet IPs
1AL-31484
2MSFT1453
3GOOGLE-CLOUD1032
4PAN-22953
5ASEPL-SG504
6FR-ONYPHE-20191111448
7CENSY379
8INFRAWATCH342
9VOLCANO-ENGINE332
10cloud326


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9131
2China3547
3United Kingdom1019
4Singapore729
5France579
6Germany552
7Netherlands497
8Hong Kong388
9Brazil376
10Indonesia308

Sunday, April 26, 2026

Botnet Statistics [2026-04-25]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-25 00:00-23:59 UTC
total number of suspected botnet IPs: 19902
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18894
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
174731090355
29164883850
35900425771
48153368941
57787315747
64092250802
74030188501
89559185525
91871171476
105357151475
RankNetwork# of suspected botnet IPs
1AL-31516
2MSFT1461
3GOOGLE-CLOUD1007
4PAN-22953
5CLOUDFLARENET727
6ASEPL-SG528
7FR-ONYPHE-20191111448
8CENSY375
9VOLCANO-ENGINE314
10cloud310


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8995
2China3557
3United Kingdom1013
4Singapore837
5France569
6Netherlands448
7Hong Kong371
8Indonesia347
9India296
10Brazil271

Saturday, April 25, 2026

Botnet Statistics [2026-04-24]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-24 00:00-23:59 UTC
total number of suspected botnet IPs: 18506
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17478
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900358994
27473283595
34092275193
49164210557
525900189419
68153188548
71871186305
86689186070
91890160476
105356144340
RankNetwork# of suspected botnet IPs
1AL-31459
2MSFT1449
3GOOGLE-CLOUD1033
4PAN-22956
5ASEPL-SG514
6FR-ONYPHE-20191111448
7CENSY382
8cloud330
9VOLCANO-ENGINE317
10UCLOUD-HK268


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8157
2China3372
3Singapore856
4United Kingdom614
5France558
6Hong Kong379
7Netherlands373
8Indonesia366
9India311
10Russian Federation261

Friday, April 24, 2026

Botnet Statistics [2026-04-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-23 00:00-23:59 UTC
total number of suspected botnet IPs: 18755
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17701
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900330385
2223270215
3801556029
4535755925
5808852429
6540845098
7800035728
8631834615
9727729787
10207829153
RankNetwork# of suspected botnet IPs
1AL-31412
2MSFT1316
3GOOGLE-CLOUD1042
4PAN-22948
5ASEPL-SG489
6FR-ONYPHE-20191111448
7CENSY379
8cloud323
9VOLCANO-ENGINE318
10UCLOUD-HK276


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8781
2China3330
3Singapore841
4France580
5Indonesia393
6Hong Kong379
7Netherlands375
8India302
9Russian Federation281
10United Kingdom266

Thursday, April 23, 2026

Botnet Statistics [2026-04-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-22 00:00-23:59 UTC
total number of suspected botnet IPs: 18829
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17676
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900345085
2159983037
3800076103
4223269911
5312865979
6808265939
7777762047
8540856980
9562751494
102129344442
RankNetwork# of suspected botnet IPs
1AL-31461
2MSFT1341
3GOOGLE-CLOUD1016
4PAN-22950
5ASEPL-SG464
6FR-ONYPHE-20191111448
7CENSY380
8VOLCANO-ENGINE323
9cloud304
10UCLOUD-HK272


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8366
2China3459
3Singapore779
4France596
5Indonesia427
6Hong Kong398
7Netherlands381
8India329
9Germany321
10Russian Federation298

Wednesday, April 22, 2026

Botnet Statistics [2026-04-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 20123
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18939
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900280551
2223269873
3905165654
4777749464
5808248367
6800046453
7808828007
8210925745
9808125081
10251124240
RankNetwork# of suspected botnet IPs
1AL-31592
2MSFT1406
3GOOGLE-CLOUD1009
4PAN-22950
5ASEPL-SG561
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE393
8CENSY366
9cloud331
10UCLOUD-HK273


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States9327
2China3396
3Singapore859
4France613
5Indonesia483
6Netherlands451
7Hong Kong405
8India389
9Germany335
10Russian Federation308

Tuesday, April 21, 2026

Botnet Statistics [2026-04-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17161
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15971
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900373637
2223275172
3415752271
4228850693
5309843832
6905137750
7800036095
8777733120
9808232861
10250930024
RankNetwork# of suspected botnet IPs
1AL-31480
2MSFT1375
3GOOGLE-CLOUD1018
4PAN-22950
5ASEPL-SG469
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE352
9UCLOUD-HK268
10FR-ONYPHE-20221109240


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8030
2China3028
3Singapore747
4France559
5Netherlands410
6Hong Kong362
7India299
8Indonesia290
9United Kingdom242
10Russian Federation240

Monday, April 20, 2026

Botnet Statistics [2026-04-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 17119
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16137
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900324826
28473105547
3608596090
4510679927
5769778305
6223275409
7309872963
82500269242
966765996
10228862137
RankNetwork# of suspected botnet IPs
1AL-31463
2MSFT1376
3GOOGLE-CLOUD1002
4PAN-22950
5ASEPL-SG489
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE345
9cloud310
10UCLOUD-HK256


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8533
2China2896
3Singapore800
4France590
5Netherlands385
6Hong Kong345
7Germany253
8United Kingdom250
9India233
10Russian Federation217

Sunday, April 19, 2026

Botnet Statistics [2026-04-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 16828
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15826
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900249425
225002103579
3223272918
4222271187
5602265771
6209565198
7202062177
8944361318
9208361264
10228860761
RankNetwork# of suspected botnet IPs
1AL-31509
2MSFT1403
3GOOGLE-CLOUD1017
4PAN-22950
5ASEPL-SG490
6FR-ONYPHE-20191111447
7CENSY379
8VOLCANO-ENGINE344
9cloud320
10UCLOUD-HK251


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8149
2China3009
3Singapore781
4France556
5Netherlands388
6Hong Kong346
7Germany290
8India254
9Indonesia246
10United Kingdom227

Saturday, April 18, 2026

Botnet Statistics [2026-04-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 17754
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16748
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900259718
22095172823
32222134768
425002104111
5223275862
6602267848
7202065393
8228862816
9208361961
10908855199
RankNetwork# of suspected botnet IPs
1AL-31514
2MSFT1391
3GOOGLE-CLOUD998
4PAN-22950
5ASEPL-SG485
6FR-ONYPHE-20191111448
7CENSY371
8VOLCANO-ENGINE350
9cloud287
10UCLOUD-HK264


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8071
2China3888
3Singapore783
4France545
5Netherlands380
6Hong Kong363
7Indonesia272
8India270
9Russian Federation256
10United Kingdom235

Friday, April 17, 2026

Botnet Statistics [2026-04-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 19067
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18077
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900323673
22500286046
3223281004
4602266146
51001765188
6228862914
7222262611
8218561707
9202060505
10147058828
RankNetwork# of suspected botnet IPs
1MSFT1368
2AL-31367
3GOOGLE-CLOUD1009
4PAN-22951
5FR-ONYPHE-20191111448
6ASEPL-SG428
7CENSY367
8VOLCANO-ENGINE343
9cloud328
10UCLOUD-HK252


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8485
2China4678
3Singapore763
4France603
5Netherlands360
6Hong Kong351
7Indonesia279
8India276
9Russian Federation251
10Germany251

Thursday, April 16, 2026

Botnet Statistics [2026-04-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 16139
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15135
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900355592
22222115091
37777106000
4808594842
5911086223
6223281571
72340168250
8228863004
999257187
10543154939
RankNetwork# of suspected botnet IPs
1MSFT1386
2GOOGLE-CLOUD1003
3PAN-22950
4AL-3891
5FR-ONYPHE-20191111448
6CENSY372
7VOLCANO-ENGINE355
8cloud332
9ASEPL-SG267
10UCLOUD-HK250


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7677
2China3003
3France587
4Singapore491
5Hong Kong357
6Netherlands343
7Indonesia280
8India260
9Viet Nam238
10United Kingdom235

Wednesday, April 15, 2026

Botnet Statistics [2026-04-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 17455
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16757
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17777411683
28015330945
35900298423
49443297709
52095246598
62222171490
75357115521
8800086595
9808583589
10223278208
RankNetwork# of suspected botnet IPs
1MSFT1379
2GOOGLE-CLOUD1002
3PAN-22950
4AL-3925
5FR-ONYPHE-20191111448
6CENSY377
7VOLCANO-ENGINE351
8ASEPL-SG292
9cloud290
10UCLOUD-HK256


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8225
2China3397
3France552
4Singapore506
5Hong Kong372
6Netherlands360
7Germany307
8Indonesia293
9United Kingdom268
10Viet Nam254

Tuesday, April 14, 2026

Botnet Statistics [2026-04-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 17557
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16838
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
17777489497
25900305280
39443238549
48015238146
52095191655
62222116843
78082105349
825102724
9800079587
10223276403
RankNetwork# of suspected botnet IPs
1MSFT1391
2AL-31148
3GOOGLE-CLOUD1004
4PAN-22950
5FR-ONYPHE-20191111448
6CENSY379
7VOLCANO-ENGINE360
8cloud340
9ASEPL-SG313
10UCLOUD-HK258


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7884
2China3904
3Singapore640
4France550
5Hong Kong361
6Netherlands338
7Indonesia301
8India288
9Russian Federation258
10United Kingdom246

Monday, April 13, 2026

Botnet Statistics [2026-04-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 17959
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16880
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900346775
27777157905
32095142649
49443106940
5590168145
6228862980
7220662242
8222258353
9432256679
10223255898
RankNetwork# of suspected botnet IPs
1MSFT1392
2AL-31315
3GOOGLE-CLOUD1007
4PAN-22949
5ASEPL-SG450
6FR-ONYPHE-20191111448
7CENSY381
8VOLCANO-ENGINE365
9UCLOUD-HK253
10AT-88-Z247


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8754
2China3627
3Singapore678
4France553
5Germany380
6Netherlands378
7Hong Kong352
8Indonesia226
9United Kingdom214
10South Korea211

Sunday, April 12, 2026

Botnet Statistics [2026-04-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 16854
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15984
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900403081
251005189328
32078153670
4209582307
5777776612
6222274474
7228864073
8801562307
9220662013
10602261801
RankNetwork# of suspected botnet IPs
1MSFT1366
2AL-31282
3GOOGLE-CLOUD1004
4PAN-22950
5ASEPL-SG479
6FR-ONYPHE-20191111448
7VOLCANO-ENGINE375
8CENSY375
9cloud327
10UCLOUD-HK259


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7855
2China3567
3Singapore831
4France542
5Germany375
6Hong Kong354
7Netherlands348
8Indonesia249
9United Kingdom226
10South Korea217

Saturday, April 11, 2026

Botnet Statistics [2026-04-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 17575
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16680
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900424324
2888306750
351005208858
48088137190
52078118368
6535793142
7228863120
8777761224
9220661191
10222252601
RankNetwork# of suspected botnet IPs
1MSFT1393
2AL-31388
3GOOGLE-CLOUD1000
4PAN-22950
5ASEPL-SG480
6FR-ONYPHE-20191111448
7CENSY380
8VOLCANO-ENGINE370
9cloud338
10UCLOUD-HK268


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8231
2China3793
3Singapore804
4France544
5Hong Kong372
6Netherlands361
7Germany275
8Indonesia255
9United Kingdom249
10India216

Friday, April 10, 2026

Botnet Statistics [2026-04-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 16893
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15969
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900517780
2888192702
34222106156
451005105279
5808889904
6207866807
7808566538
8228863358
9223161086
10535760994
RankNetwork# of suspected botnet IPs
1MSFT1355
2GOOGLE-CLOUD1008
3PAN-22950
4AL-3927
5FR-ONYPHE-20191111448
6CENSY377
7VOLCANO-ENGINE371
8ASEPL-SG368
9cloud308
10UCLOUD-HK262


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States8125
2China3126
3Singapore649
4France562
5Netherlands413
6Hong Kong362
7Indonesia269
8South Korea240
9India231
10United Kingdom230

Thursday, April 9, 2026

Botnet Statistics [2026-04-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 16994
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16140
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

RankTCP port number# of connection attempts received
15900535292
25357151774
3888112720
44222106771
58088100730
6808572132
7944369783
8207861845
9800059818
10223159327
RankNetwork# of suspected botnet IPs
1MSFT1387
2AL-31251
3GOOGLE-CLOUD1005
4PAN-22950
5ASEPL-SG514
6FR-ONYPHE-20191111448
7CENSY378
8VOLCANO-ENGINE377
9cloud322
10UCLOUD-HK263


The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:


The top 10 TCP ports, ordered by the number of connection attempts received are:

RankCountry/Region# of suspected botnet IPs
1United States7707
2China3716
3Singapore762
4France555
5Netherlands371
6Hong Kong360
7Indonesia281
8South Korea227
9United Kingdom224
10India211
RankTCP port number# of connection attempts received
15900496622
28088148239
34222110715
4535776138
5209568995
6207867603
75100557728
8808556508
9223155837
10902244702