Botnet Statistics [2026-03-23]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-23 00:00-23:59 UTC
total number of suspected botnet IPs: 16822
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15994
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1309
2	AL-3	1110
3	GOOGLE-CLOUD	1001
4	PAN-22	949
5	ASEPL-SG	730
6	CENSY	533
7	FR-ONYPHE-20191111	448
8	VOLCANO-ENGINE	371
9	cloud	314
10	ALISOFT	306

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8077
2	China	3264
3	Singapore	959
4	France	527
5	Hong Kong	329
6	Netherlands	305
7	India	252
8	Indonesia	240
9	South Korea	229
10	United Kingdom	214

Monday, March 23, 2026

Botnet Statistics [2026-03-22]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-22 00:00-23:59 UTC
total number of suspected botnet IPs: 17301
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16451
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	228545
2	2204	103521
3	7777	90208
4	2078	70279
5	6000	65574
6	2299	59908
7	2222	52375
8	8082	47402
9	5902	47017
10	5901	41145

Rank	Network	# of suspected botnet IPs
1	MSFT	1357
2	AL-3	1157
3	GOOGLE-CLOUD	1006
4	PAN-22	951
5	ASEPL-SG	802
6	CENSY	560
7	FR-ONYPHE-20191111	448
8	VOLCANO-ENGINE	381
9	cloud	312
10	ALISOFT	289

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8495
2	China	3271
3	Singapore	1031
4	France	535
5	Netherlands	342
6	Hong Kong	325
7	South Korea	261
8	Indonesia	234
9	United Kingdom	231
10	India	225

Sunday, March 22, 2026

Botnet Statistics [2026-03-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-21 00:00-23:59 UTC
total number of suspected botnet IPs: 17275
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16176
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	210450
2	2078	131716
3	7777	123125
4	2204	95001
5	8082	80270
6	2222	71126
7	8015	70568
8	2299	61060
9	55555	60433
10	888	58150

Rank	Network	# of suspected botnet IPs
1	MSFT	1335
2	AL-3	1134
3	GOOGLE-CLOUD	1003
4	PAN-22	949
5	ASEPL-SG	702
6	CENSY	480
7	FR-ONYPHE-20191111	448
8	VOLCANO-ENGINE	391
9	ALISOFT	301
10	cloud	270

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8096
2	China	3472
3	Singapore	1042
4	France	541
5	Hong Kong	320
6	Netherlands	310
7	South Korea	233
8	Indonesia	232
9	United Kingdom	222
10	India	210

Saturday, March 21, 2026

Botnet Statistics [2026-03-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17231
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16313
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	2078	136306
2	5900	122566
3	888	116557
4	2204	101920
5	7777	98347
6	8015	96970
7	9443	91723
8	8082	81701
9	8000	65285
10	2299	60765

Rank	Network	# of suspected botnet IPs
1	MSFT	1349
2	AL-3	1183
3	GOOGLE-CLOUD	1007
4	PAN-22	949
5	ASEPL-SG	817
6	CENSY	472
7	FR-ONYPHE-20191111	448
8	VOLCANO-ENGINE	405
9	cloud	315
10	ALISOFT	298

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8043
2	China	3376
3	Singapore	1044
4	France	540
5	Hong Kong	340
6	Netherlands	315
7	South Korea	263
8	Indonesia	242
9	India	232
10	United Kingdom	219

Friday, March 20, 2026

Botnet Statistics [2026-03-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-19 00:00-23:59 UTC
total number of suspected botnet IPs: 18432
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17396
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	151055
2	8015	113877
3	2026	94678
4	888	88035
5	2078	84926
6	2204	80614
7	3306	72306
8	2222	71066
9	9443	64745
10	7777	63793

Rank	Network	# of suspected botnet IPs
1	MSFT	1350
2	AL-3	1179
3	GOOGLE-CLOUD	1019
4	PAN-22	950
5	ASEPL-SG	792
6	FR-ONYPHE-20191111	448
7	CENSY	423
8	VOLCANO-ENGINE	401
9	CHINANET-SC	329
10	ALISOFT	306

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8597
2	China	3706
3	Singapore	1057
4	France	552
5	Netherlands	394
6	Hong Kong	362
7	India	244
8	Indonesia	242
9	South Korea	238
10	Germany	212

Thursday, March 19, 2026

Botnet Statistics [2026-03-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-18 00:00-23:59 UTC
total number of suspected botnet IPs: 18074
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17198
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	193181
2	888	125492
3	7777	100654
4	8015	90994
5	2222	89132
6	2000	88824
7	3306	76224
8	1111	70036
9	9443	62010
10	2026	59792

Rank	Network	# of suspected botnet IPs
1	MSFT	1346
2	AL-3	1223
3	GOOGLE-CLOUD	1002
4	PAN-22	948
5	ASEPL-SG	851
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	385
8	CENSY	377
9	CHINANET-SC	356
10	cloud	324

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8228
2	China	3793
3	Singapore	1065
4	France	541
5	Hong Kong	387
6	Netherlands	341
7	Indonesia	291
8	India	244
9	Viet Nam	230
10	United Kingdom	223

Wednesday, March 18, 2026

Botnet Statistics [2026-03-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-17 00:00-23:59 UTC
total number of suspected botnet IPs: 18621
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17717
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	191121
2	888	94500
3	7777	89452
4	1111	80518
5	2000	51372
6	2222	49585
7	8015	46703
8	22	43363
9	5902	40873
10	9443	38823

Rank	Network	# of suspected botnet IPs
1	MSFT	1350
2	AL-3	1211
3	GOOGLE-CLOUD	1014
4	PAN-22	949
5	ASEPL-SG	817
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	385
8	CENSY	377
9	cloud	335
10	ALISOFT	325

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8755
2	China	3677
3	Singapore	1033
4	France	540
5	Hong Kong	394
6	Netherlands	363
7	Indonesia	294
8	Germany	289
9	India	255
10	United Kingdom	254

Tuesday, March 17, 2026

Botnet Statistics [2026-03-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-16 00:00-23:59 UTC
total number of suspected botnet IPs: 18108
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17122
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	123216
2	1111	62544
3	888	62358
4	2222	60991
5	2203	56599
6	2000	47135
7	9443	41721
8	5902	38477
9	8085	34392
10	22	34341

Rank	Network	# of suspected botnet IPs
1	MSFT	1320
2	AL-3	1220
3	GOOGLE-CLOUD	995
4	PAN-22	944
5	ASEPL-SG	809
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	390
8	CENSY	379
9	cloud	303
10	ALISOFT	301

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8361
2	China	3620
3	Singapore	1033
4	France	540
5	Hong Kong	405
6	Netherlands	326
7	Indonesia	310
8	United Kingdom	239
9	South Korea	238
10	India	232

Monday, March 16, 2026

Botnet Statistics [2026-03-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-15 00:00-23:59 UTC
total number of suspected botnet IPs: 18489
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17632
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	179135
2	18422	88879
3	9011	83845
4	2203	71078
5	2251	45327
6	5902	38958
7	22010	33333
8	22	33123
9	888	32377
10	2222	32214

Rank	Network	# of suspected botnet IPs
1	MSFT	1344
2	AL-3	1234
3	GOOGLE-CLOUD	1000
4	PAN-22	949
5	ASEPL-SG	863
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	398
8	CENSY	369
9	cloud	323
10	ALISOFT	310

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9028
2	China	3534
3	Singapore	1029
4	France	551
5	Hong Kong	385
6	Netherlands	364
7	Indonesia	265
8	United Kingdom	255
9	India	238
10	South Korea	234

Sunday, March 15, 2026

Botnet Statistics [2026-03-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-14 00:00-23:59 UTC
total number of suspected botnet IPs: 17464
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16626
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	245717
2	2251	107133
3	888	101247
4	2000	83445
5	8085	80053
6	2203	74434
7	789	70518
8	9011	67616
9	2222	59226
10	9443	51349

Rank	Network	# of suspected botnet IPs
1	MSFT	1336
2	AL-3	1237
3	GOOGLE-CLOUD	1003
4	PAN-22	950
5	ASEPL-SG	845
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	388
8	CENSY	377
9	cloud	305
10	ALISOFT	305

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8438
2	China	3170
3	Singapore	1048
4	France	540
5	Hong Kong	396
6	Netherlands	387
7	Indonesia	280
8	South Korea	261
9	United Kingdom	237
10	India	235

Saturday, March 14, 2026

Botnet Statistics [2026-03-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-13 00:00-23:59 UTC
total number of suspected botnet IPs: 18571
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17468
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	228863
2	8085	119056
3	888	109951
4	2203	83761
5	8088	71092
6	3306	68909
7	2000	65245
8	5357	62961
9	5322	52940
10	2251	48186

Rank	Network	# of suspected botnet IPs
1	AL-3	1282
2	MSFT	1276
3	GOOGLE-CLOUD	1057
4	PAN-22	949
5	ASEPL-SG	804
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	396
8	CENSY	378
9	ALISOFT	319
10	UCLOUD-HK	279

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8656
2	China	2943
3	Singapore	1016
4	France	581
5	Hong Kong	422
6	Netherlands	383
7	South Korea	375
8	India	363
9	Indonesia	317
10	Russian Federation	266

Friday, March 13, 2026

Botnet Statistics [2026-03-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-12 00:00-23:59 UTC
total number of suspected botnet IPs: 18968
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18095
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	222722
2	888	124014
3	2203	85492
4	8085	77915
5	6451	68899
6	22	56465
7	3306	51440
8	8088	50139
9	5357	41764
10	2000	41409

Rank	Network	# of suspected botnet IPs
1	MSFT	1248
2	AL-3	1220
3	GOOGLE-CLOUD	1024
4	PAN-22	950
5	ASEPL-SG	887
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	390
8	CENSY	375
9	ALISOFT	312
10	UCLOUD-HK	279

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8959
2	China	3661
3	Singapore	1140
4	France	562
5	Netherlands	429
6	Hong Kong	402
7	Indonesia	335
8	South Korea	263
9	Germany	244
10	United Kingdom	229

Thursday, March 12, 2026

Botnet Statistics [2026-03-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-11 00:00-23:59 UTC
total number of suspected botnet IPs: 18307
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17208
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	249120
2	56491	133044
3	2203	79074
4	888	57731
5	57277	53205
6	8085	44622
7	1188	42430
8	3838	39536
9	22	37877
10	697	34858

Rank	Network	# of suspected botnet IPs
1	AL-3	1241
2	MSFT	1234
3	GOOGLE-CLOUD	1029
4	PAN-22	946
5	ASEPL-SG	890
6	FR-ONYPHE-20191111	447
7	VOLCANO-ENGINE	396
8	CENSY	366
9	ALISOFT	308
10	UCLOUD-HK	265

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8313
2	China	3533
3	Singapore	1111
4	France	552
5	Netherlands	409
6	Hong Kong	383
7	Indonesia	337
8	South Korea	266
9	United Kingdom	246
10	India	240

Wednesday, March 11, 2026

Botnet Statistics [2026-03-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-10 00:00-23:59 UTC
total number of suspected botnet IPs: 19344
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18465
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	198375
2	2203	86306
3	57496	71590
4	54034	63587
5	5155	63168
6	1196	50063
7	22	46145
8	55698	45791
9	6244	44852
10	36903	44089

Rank	Network	# of suspected botnet IPs
1	AL-3	1276
2	MSFT	1237
3	GOOGLE-CLOUD	1033
4	PAN-22	950
5	ASEPL-SG	914
6	FR-ONYPHE-20191111	447
7	VOLCANO-ENGINE	393
8	CENSY	365
9	ALISOFT	320
10	UCLOUD-HK	278

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9279
2	China	3540
3	Singapore	1232
4	France	554
5	Hong Kong	398
6	Netherlands	393
7	Indonesia	329
8	Germany	264
9	United Kingdom	255
10	India	241

Tuesday, March 10, 2026

Botnet Statistics [2026-03-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-09 00:00-23:59 UTC
total number of suspected botnet IPs: 18911
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17972
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	188055
2	5866	122660
3	51868	120517
4	3736	92491
5	7146	82777
6	2271	68795
7	8601	65964
8	2345	65733
9	33316	56406
10	50303	48879

Rank	Network	# of suspected botnet IPs
1	MSFT	1242
2	AL-3	1196
3	GOOGLE-CLOUD	996
4	PAN-22	944
5	ASEPL-SG	868
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	403
8	CENSY	376
9	ALISOFT	298
10	cloud	280

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8415
2	China	3734
3	Singapore	1179
4	France	559
5	Netherlands	367
6	Indonesia	342
7	India	330
8	Hong Kong	328
9	South Korea	308
10	Russian Federation	241

Monday, March 9, 2026

Botnet Statistics [2026-03-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-08 00:00-23:59 UTC
total number of suspected botnet IPs: 19700
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18742
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	194830
2	2271	117983
3	1221	85942
4	22	51030
5	58208	49467
6	7906	46502
7	1922	43040
8	5435	40418
9	2628	39804
10	2250	34874

Rank	Network	# of suspected botnet IPs
1	MSFT	1256
2	AL-3	1088
3	GOOGLE-CLOUD	1014
4	PAN-22	949
5	ASEPL-SG	758
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	399
8	CENSY	368
9	ALISOFT	303
10	cloud	255

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8512
2	China	4079
3	Singapore	1095
4	France	570
5	Netherlands	404
6	India	366
7	Hong Kong	350
8	South Korea	340
9	Indonesia	319
10	Russian Federation	265

Sunday, March 8, 2026

Botnet Statistics [2026-03-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-07 00:00-23:59 UTC
total number of suspected botnet IPs: 19585
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18668
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	223139
2	4974	98774
3	2271	86890
4	52173	78581
5	1221	65650
6	9722	65434
7	8466	64850
8	54030	61286
9	5122	55843
10	50586	54802

Rank	Network	# of suspected botnet IPs
1	MSFT	1240
2	AL-3	1134
3	GOOGLE-CLOUD	1007
4	PAN-22	950
5	ASEPL-SG	743
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	402
8	CENSY	376
9	ALISOFT	289
10	cloud	251

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8111
2	China	4303
3	Singapore	1070
4	France	571
5	India	375
6	South Korea	363
7	Hong Kong	354
8	Netherlands	349
9	Indonesia	309
10	Russian Federation	264

Saturday, March 7, 2026

Botnet Statistics [2026-03-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-06 00:00-23:59 UTC
total number of suspected botnet IPs: 19917
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18960
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	211667
2	2201	51949
3	601	44545
4	3007	43804
5	22	43542
6	1926	40843
7	801	40252
8	301	33699
9	6022	32749
10	2222	32702

Rank	Network	# of suspected botnet IPs
1	MSFT	1250
2	AL-3	1171
3	GOOGLE-CLOUD	1016
4	PAN-22	950
5	ASEPL-SG	801
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	408
8	CENSY	379
9	ALISOFT	303
10	cloud	262

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8144
2	China	4405
3	Singapore	1076
4	France	572
5	India	415
6	Netherlands	388
7	Hong Kong	347
8	South Korea	343
9	Indonesia	330
10	Russian Federation	284

Friday, March 6, 2026

Botnet Statistics [2026-03-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-05 00:00-23:59 UTC
total number of suspected botnet IPs: 19671
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18542
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	178029
2	8880	72623
3	9998	70633
4	3018	53244
5	2247	52473
6	7722	43459
7	22	35929
8	4722	34283
9	3222	32924
10	8622	31906

Rank	Network	# of suspected botnet IPs
1	MSFT	1231
2	AL-3	1132
3	GOOGLE-CLOUD	1019
4	PAN-22	950
5	ASEPL-SG	686
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	424
8	CENSY	375
9	ALISOFT	308
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8537
2	China	3912
3	Singapore	975
4	France	577
5	Netherlands	421
6	South Korea	378
7	India	376
8	Hong Kong	357
9	Indonesia	309
10	Russian Federation	283

Thursday, March 5, 2026

Botnet Statistics [2026-03-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-04 00:00-23:59 UTC
total number of suspected botnet IPs: 19636
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18641
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	194767
2	2247	124684
3	4488	70458
4	3822	67364
5	8522	63925
6	2249	48561
7	22	47307
8	3222	43809
9	6022	34508
10	7722	34018

Rank	Network	# of suspected botnet IPs
1	MSFT	1190
2	AL-3	1163
3	GOOGLE-CLOUD	1008
4	PAN-22	948
5	ASEPL-SG	640
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	441
8	CENSY	380
9	ALISOFT	313
10	cloud	267

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8427
2	China	3908
3	Singapore	1003
4	France	574
5	India	414
6	Netherlands	387
7	South Korea	361
8	Indonesia	335
9	Hong Kong	322
10	Russian Federation	299

Wednesday, March 4, 2026

Botnet Statistics [2026-03-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20699
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19442
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	103701
2	8522	82634
3	2249	76913
4	2225	76626
5	9998	71100
6	3822	68243
7	7722	66266
8	22	62588
9	2247	58163
10	7777	51448

Rank	Network	# of suspected botnet IPs
1	AL-3	1323
2	MSFT	1243
3	GOOGLE-CLOUD	1020
4	PAN-22	950
5	ASEPL-SG	640
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	440
8	CENSY	376
9	ALISOFT	316
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9130
2	China	3961
3	Singapore	1023
4	France	568
5	Netherlands	421
6	India	403
7	South Korea	376
8	Hong Kong	336
9	Indonesia	319
10	Germany	299

Tuesday, March 3, 2026

Botnet Statistics [2026-03-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-02 00:00-23:59 UTC
total number of suspected botnet IPs: 20833
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19830
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	7777	119342
2	5900	117226
3	2225	86519
4	22	84742
5	6022	74403
6	2249	69425
7	2255	58083
8	7722	53331
9	8822	46951
10	3333	38970

Rank	Network	# of suspected botnet IPs
1	AL-3	1278
2	MSFT	1248
3	GOOGLE-CLOUD	1003
4	PAN-22	940
5	ASEPL-SG	633
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	442
8	CENSY	380
9	ALISOFT	325
10	cloud	264

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9322
2	China	3880
3	Singapore	1027
4	France	570
5	India	443
6	Hong Kong	404
7	Netherlands	400
8	South Korea	383
9	Indonesia	337
10	Russian Federation	297

Monday, March 2, 2026

Botnet Statistics [2026-03-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for February 2026.
detection period: 2026-03-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21184
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20214
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	22	145019
2	5900	142485
3	2246	85628
4	6022	83549
5	7722	68788
6	2255	68150
7	2225	54167
8	8822	43071
9	8622	42313
10	7777	41219

Rank	Network	# of suspected botnet IPs
1	AL-3	1292
2	MSFT	1249
3	GOOGLE-CLOUD	1008
4	PAN-22	950
5	ASEPL-SG	599
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	434
8	CENSY	373
9	ALISOFT	322
10	DO-13	306

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9597
2	China	4021
3	Singapore	1002
4	France	565
5	Hong Kong	420
6	India	415
7	Netherlands	388
8	South Korea	388
9	Indonesia	366
10	Russian Federation	288

Daily Zombie Lists for March 2026（2026年03月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for March 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年03月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

03/01: download link 下載網址; MD5sum: b6d1ec0d400ef200cba94a68a13f74a3

03/02: download link 下載網址; MD5sum: 3fb44f881632fc9522fe05ac42e74992

03/03: download link 下載網址; MD5sum: 5ef710d2223689023fb53c629992f846

03/04: download link 下載網址; MD5sum: 3f8877266bb529e210d3cac157366931

03/05: download link 下載網址; MD5sum: 44a4c74208195469f9ea6c9010bfea98

03/06: download link 下載網址; MD5sum: 93c1e1888b9f02632824e1f018e84551

03/07: download link 下載網址; MD5sum: 8ac5a0cba75943dab9f3cb7809e52466

03/08: download link 下載網址; MD5sum: 4bbcd4cc75708356efbe5ac622ff189f

03/09: download link 下載網址; MD5sum: 6ff0de13bc14a0c2865738d43c8d201f

03/10: download link 下載網址; MD5sum: 88ae7eda459610dfacbde6466e6b254d

03/11: download link 下載網址; MD5sum: e8cbd4fa52dcb9aa4f3759efa4a950a0

03/12: download link 下載網址; MD5sum: 71b455919d3ccc192ad3fa6b499d403e

03/13: download link 下載網址; MD5sum: 1f51a65adb1e60a278d6e6a160be3519

03/14: download link 下載網址; MD5sum: 5e0237e2c438664a4be69926092b6c65

03/15: download link 下載網址; MD5sum: c1cfe0c95bfc335f301fa993c0b4e469

03/16: download link 下載網址; MD5sum: b6484a567647589fef955b3bd769af10

03/17: download link 下載網址; MD5sum: e0a7f63e1befd945d8e63bf03ec2ec8c

03/18: download link 下載網址; MD5sum: d13993ae222856c22ab7d5c727a50f37

03/19: download link 下載網址; MD5sum: a548d48b7d98a022938fb973a6a57104

03/20: download link 下載網址; MD5sum: 9837119e1492d532e9ad4ff03a426fe2

03/21: download link 下載網址; MD5sum: 1bc0860dc643b708fb7d31d5f939f225

03/22: download link 下載網址; MD5sum: 4225a6b84fe6a237cd60667b7a6da9ae

03/23: download link 下載網址; MD5sum: c4f10992a71662a9238bdcf78519b1b3

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (5975)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (64)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (83)
  • March (24)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	141662
2	22	141239
3	7722	139845
4	2246	121078
5	8622	110953
6	6022	82480
7	9922	74941
8	9011	48391
9	8822	43430
10	22005	37408