Botnet Statistics [2026-04-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-21 00:00-23:59 UTC
total number of suspected botnet IPs: 20123
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18939
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1592
2	MSFT	1406
3	GOOGLE-CLOUD	1009
4	PAN-22	950
5	ASEPL-SG	561
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	393
8	CENSY	366
9	cloud	331
10	UCLOUD-HK	273

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9327
2	China	3396
3	Singapore	859
4	France	613
5	Indonesia	483
6	Netherlands	451
7	Hong Kong	405
8	India	389
9	Germany	335
10	Russian Federation	308

Tuesday, April 21, 2026

Botnet Statistics [2026-04-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17161
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15971
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	373637
2	2232	75172
3	4157	52271
4	2288	50693
5	3098	43832
6	9051	37750
7	8000	36095
8	7777	33120
9	8082	32861
10	2509	30024

Rank	Network	# of suspected botnet IPs
1	AL-3	1480
2	MSFT	1375
3	GOOGLE-CLOUD	1018
4	PAN-22	950
5	ASEPL-SG	469
6	FR-ONYPHE-20191111	448
7	CENSY	381
8	VOLCANO-ENGINE	352
9	UCLOUD-HK	268
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8030
2	China	3028
3	Singapore	747
4	France	559
5	Netherlands	410
6	Hong Kong	362
7	India	299
8	Indonesia	290
9	United Kingdom	242
10	Russian Federation	240

Monday, April 20, 2026

Botnet Statistics [2026-04-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-19 00:00-23:59 UTC
total number of suspected botnet IPs: 17119
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16137
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	324826
2	8473	105547
3	6085	96090
4	5106	79927
5	7697	78305
6	2232	75409
7	3098	72963
8	25002	69242
9	667	65996
10	2288	62137

Rank	Network	# of suspected botnet IPs
1	AL-3	1463
2	MSFT	1376
3	GOOGLE-CLOUD	1002
4	PAN-22	950
5	ASEPL-SG	489
6	FR-ONYPHE-20191111	448
7	CENSY	381
8	VOLCANO-ENGINE	345
9	cloud	310
10	UCLOUD-HK	256

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8533
2	China	2896
3	Singapore	800
4	France	590
5	Netherlands	385
6	Hong Kong	345
7	Germany	253
8	United Kingdom	250
9	India	233
10	Russian Federation	217

Sunday, April 19, 2026

Botnet Statistics [2026-04-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-18 00:00-23:59 UTC
total number of suspected botnet IPs: 16828
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15826
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	249425
2	25002	103579
3	2232	72918
4	2222	71187
5	6022	65771
6	2095	65198
7	2020	62177
8	9443	61318
9	2083	61264
10	2288	60761

Rank	Network	# of suspected botnet IPs
1	AL-3	1509
2	MSFT	1403
3	GOOGLE-CLOUD	1017
4	PAN-22	950
5	ASEPL-SG	490
6	FR-ONYPHE-20191111	447
7	CENSY	379
8	VOLCANO-ENGINE	344
9	cloud	320
10	UCLOUD-HK	251

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8149
2	China	3009
3	Singapore	781
4	France	556
5	Netherlands	388
6	Hong Kong	346
7	Germany	290
8	India	254
9	Indonesia	246
10	United Kingdom	227

Saturday, April 18, 2026

Botnet Statistics [2026-04-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-17 00:00-23:59 UTC
total number of suspected botnet IPs: 17754
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16748
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	259718
2	2095	172823
3	2222	134768
4	25002	104111
5	2232	75862
6	6022	67848
7	2020	65393
8	2288	62816
9	2083	61961
10	9088	55199

Rank	Network	# of suspected botnet IPs
1	AL-3	1514
2	MSFT	1391
3	GOOGLE-CLOUD	998
4	PAN-22	950
5	ASEPL-SG	485
6	FR-ONYPHE-20191111	448
7	CENSY	371
8	VOLCANO-ENGINE	350
9	cloud	287
10	UCLOUD-HK	264

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8071
2	China	3888
3	Singapore	783
4	France	545
5	Netherlands	380
6	Hong Kong	363
7	Indonesia	272
8	India	270
9	Russian Federation	256
10	United Kingdom	235

Friday, April 17, 2026

Botnet Statistics [2026-04-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-16 00:00-23:59 UTC
total number of suspected botnet IPs: 19067
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18077
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	323673
2	25002	86046
3	2232	81004
4	6022	66146
5	10017	65188
6	2288	62914
7	2222	62611
8	2185	61707
9	2020	60505
10	1470	58828

Rank	Network	# of suspected botnet IPs
1	MSFT	1368
2	AL-3	1367
3	GOOGLE-CLOUD	1009
4	PAN-22	951
5	FR-ONYPHE-20191111	448
6	ASEPL-SG	428
7	CENSY	367
8	VOLCANO-ENGINE	343
9	cloud	328
10	UCLOUD-HK	252

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8485
2	China	4678
3	Singapore	763
4	France	603
5	Netherlands	360
6	Hong Kong	351
7	Indonesia	279
8	India	276
9	Russian Federation	251
10	Germany	251

Thursday, April 16, 2026

Botnet Statistics [2026-04-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-15 00:00-23:59 UTC
total number of suspected botnet IPs: 16139
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15135
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	355592
2	2222	115091
3	7777	106000
4	8085	94842
5	9110	86223
6	2232	81571
7	23401	68250
8	2288	63004
9	992	57187
10	5431	54939

Rank	Network	# of suspected botnet IPs
1	MSFT	1386
2	GOOGLE-CLOUD	1003
3	PAN-22	950
4	AL-3	891
5	FR-ONYPHE-20191111	448
6	CENSY	372
7	VOLCANO-ENGINE	355
8	cloud	332
9	ASEPL-SG	267
10	UCLOUD-HK	250

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7677
2	China	3003
3	France	587
4	Singapore	491
5	Hong Kong	357
6	Netherlands	343
7	Indonesia	280
8	India	260
9	Viet Nam	238
10	United Kingdom	235

Wednesday, April 15, 2026

Botnet Statistics [2026-04-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-14 00:00-23:59 UTC
total number of suspected botnet IPs: 17455
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16757
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	7777	411683
2	8015	330945
3	5900	298423
4	9443	297709
5	2095	246598
6	2222	171490
7	5357	115521
8	8000	86595
9	8085	83589
10	2232	78208

Rank	Network	# of suspected botnet IPs
1	MSFT	1379
2	GOOGLE-CLOUD	1002
3	PAN-22	950
4	AL-3	925
5	FR-ONYPHE-20191111	448
6	CENSY	377
7	VOLCANO-ENGINE	351
8	ASEPL-SG	292
9	cloud	290
10	UCLOUD-HK	256

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8225
2	China	3397
3	France	552
4	Singapore	506
5	Hong Kong	372
6	Netherlands	360
7	Germany	307
8	Indonesia	293
9	United Kingdom	268
10	Viet Nam	254

Tuesday, April 14, 2026

Botnet Statistics [2026-04-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-13 00:00-23:59 UTC
total number of suspected botnet IPs: 17557
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16838
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	7777	489497
2	5900	305280
3	9443	238549
4	8015	238146
5	2095	191655
6	2222	116843
7	8082	105349
8	25	102724
9	8000	79587
10	2232	76403

Rank	Network	# of suspected botnet IPs
1	MSFT	1391
2	AL-3	1148
3	GOOGLE-CLOUD	1004
4	PAN-22	950
5	FR-ONYPHE-20191111	448
6	CENSY	379
7	VOLCANO-ENGINE	360
8	cloud	340
9	ASEPL-SG	313
10	UCLOUD-HK	258

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7884
2	China	3904
3	Singapore	640
4	France	550
5	Hong Kong	361
6	Netherlands	338
7	Indonesia	301
8	India	288
9	Russian Federation	258
10	United Kingdom	246

Monday, April 13, 2026

Botnet Statistics [2026-04-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-12 00:00-23:59 UTC
total number of suspected botnet IPs: 17959
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16880
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	346775
2	7777	157905
3	2095	142649
4	9443	106940
5	5901	68145
6	2288	62980
7	2206	62242
8	2222	58353
9	4322	56679
10	2232	55898

Rank	Network	# of suspected botnet IPs
1	MSFT	1392
2	AL-3	1315
3	GOOGLE-CLOUD	1007
4	PAN-22	949
5	ASEPL-SG	450
6	FR-ONYPHE-20191111	448
7	CENSY	381
8	VOLCANO-ENGINE	365
9	UCLOUD-HK	253
10	AT-88-Z	247

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8754
2	China	3627
3	Singapore	678
4	France	553
5	Germany	380
6	Netherlands	378
7	Hong Kong	352
8	Indonesia	226
9	United Kingdom	214
10	South Korea	211

Sunday, April 12, 2026

Botnet Statistics [2026-04-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-11 00:00-23:59 UTC
total number of suspected botnet IPs: 16854
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15984
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	403081
2	51005	189328
3	2078	153670
4	2095	82307
5	7777	76612
6	2222	74474
7	2288	64073
8	8015	62307
9	2206	62013
10	6022	61801

Rank	Network	# of suspected botnet IPs
1	MSFT	1366
2	AL-3	1282
3	GOOGLE-CLOUD	1004
4	PAN-22	950
5	ASEPL-SG	479
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	375
8	CENSY	375
9	cloud	327
10	UCLOUD-HK	259

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7855
2	China	3567
3	Singapore	831
4	France	542
5	Germany	375
6	Hong Kong	354
7	Netherlands	348
8	Indonesia	249
9	United Kingdom	226
10	South Korea	217

Saturday, April 11, 2026

Botnet Statistics [2026-04-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-10 00:00-23:59 UTC
total number of suspected botnet IPs: 17575
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16680
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	424324
2	888	306750
3	51005	208858
4	8088	137190
5	2078	118368
6	5357	93142
7	2288	63120
8	7777	61224
9	2206	61191
10	2222	52601

Rank	Network	# of suspected botnet IPs
1	MSFT	1393
2	AL-3	1388
3	GOOGLE-CLOUD	1000
4	PAN-22	950
5	ASEPL-SG	480
6	FR-ONYPHE-20191111	448
7	CENSY	380
8	VOLCANO-ENGINE	370
9	cloud	338
10	UCLOUD-HK	268

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8231
2	China	3793
3	Singapore	804
4	France	544
5	Hong Kong	372
6	Netherlands	361
7	Germany	275
8	Indonesia	255
9	United Kingdom	249
10	India	216

Friday, April 10, 2026

Botnet Statistics [2026-04-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-09 00:00-23:59 UTC
total number of suspected botnet IPs: 16893
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15969
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	517780
2	888	192702
3	4222	106156
4	51005	105279
5	8088	89904
6	2078	66807
7	8085	66538
8	2288	63358
9	2231	61086
10	5357	60994

Rank	Network	# of suspected botnet IPs
1	MSFT	1355
2	GOOGLE-CLOUD	1008
3	PAN-22	950
4	AL-3	927
5	FR-ONYPHE-20191111	448
6	CENSY	377
7	VOLCANO-ENGINE	371
8	ASEPL-SG	368
9	cloud	308
10	UCLOUD-HK	262

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8125
2	China	3126
3	Singapore	649
4	France	562
5	Netherlands	413
6	Hong Kong	362
7	Indonesia	269
8	South Korea	240
9	India	231
10	United Kingdom	230

Thursday, April 9, 2026

Botnet Statistics [2026-04-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-08 00:00-23:59 UTC
total number of suspected botnet IPs: 16994
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16140
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	535292
2	5357	151774
3	888	112720
4	4222	106771
5	8088	100730
6	8085	72132
7	9443	69783
8	2078	61845
9	8000	59818
10	2231	59327

Rank	Network	# of suspected botnet IPs
1	MSFT	1387
2	AL-3	1251
3	GOOGLE-CLOUD	1005
4	PAN-22	950
5	ASEPL-SG	514
6	FR-ONYPHE-20191111	448
7	CENSY	378
8	VOLCANO-ENGINE	377
9	cloud	322
10	UCLOUD-HK	263

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7707
2	China	3716
3	Singapore	762
4	France	555
5	Netherlands	371
6	Hong Kong	360
7	Indonesia	281
8	South Korea	227
9	United Kingdom	224
10	India	211

Wednesday, April 8, 2026

Botnet Statistics [2026-04-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-07 00:00-23:59 UTC
total number of suspected botnet IPs: 18149
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17239
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	496622
2	8088	148239
3	4222	110715
4	5357	76138
5	2095	68995
6	2078	67603
7	51005	57728
8	8085	56508
9	2231	55837
10	9022	44702

Rank	Network	# of suspected botnet IPs
1	MSFT	1361
2	AL-3	1304
3	GOOGLE-CLOUD	1034
4	PAN-22	950
5	ASEPL-SG	547
6	FR-ONYPHE-20191111	447
7	CENSY	376
8	VOLCANO-ENGINE	370
9	cloud	331
10	LINODE-US	274

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8807
2	China	3311
3	Singapore	939
4	France	572
5	Netherlands	390
6	Hong Kong	364
7	Indonesia	288
8	India	243
9	United Kingdom	226
10	South Korea	224

Tuesday, April 7, 2026

Botnet Statistics [2026-04-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-06 00:00-23:59 UTC
total number of suspected botnet IPs: 17243
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16206
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	473362
2	4222	124464
3	25	104550
4	2271	96650
5	2205	61562
6	2231	54311
7	0	46447
8	58603	45142
9	2222	39907
10	8088	34455

Rank	Network	# of suspected botnet IPs
1	MSFT	1346
2	AL-3	1255
3	GOOGLE-CLOUD	1011
4	PAN-22	950
5	FR-ONYPHE-20191111	448
6	ASEPL-SG	429
7	CENSY	375
8	VOLCANO-ENGINE	374
9	cloud	270
10	UCLOUD-HK	260

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7884
2	China	3404
3	Singapore	771
4	France	560
5	Hong Kong	369
6	Netherlands	332
7	Indonesia	274
8	India	251
9	Germany	238
10	South Korea	227

Monday, April 6, 2026

Botnet Statistics [2026-04-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-05 00:00-23:59 UTC
total number of suspected botnet IPs: 17759
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16846
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	376942
2	25	195262
3	4222	106780
4	0	104984
5	2271	99310
6	58603	98417
7	2095	92856
8	2205	91534
9	2222	72345
10	7777	62709

Rank	Network	# of suspected botnet IPs
1	MSFT	1351
2	AL-3	1351
3	GOOGLE-CLOUD	1005
4	PAN-22	951
5	ASEPL-SG	547
6	FR-ONYPHE-20191111	448
7	CENSY	381
8	VOLCANO-ENGINE	370
9	cloud	321
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8631
2	China	3370
3	Singapore	927
4	France	555
5	Netherlands	368
6	Hong Kong	344
7	United Kingdom	257
8	Germany	244
9	Indonesia	231
10	South Korea	220

Sunday, April 5, 2026

Botnet Statistics [2026-04-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-04 00:00-23:59 UTC
total number of suspected botnet IPs: 17286
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16167
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	425806
2	25	157491
3	58603	114872
4	2095	106440
5	2205	102238
6	7777	92993
7	9443	79257
8	8000	69799
9	8088	65344
10	1012	60520

Rank	Network	# of suspected botnet IPs
1	MSFT	1375
2	AL-3	1274
3	GOOGLE-CLOUD	1002
4	PAN-22	950
5	ASEPL-SG	534
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	385
8	CENSY	379
9	UCLOUD-HK	259
10	FR-ONYPHE-20221109	239

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7992
2	China	3348
3	Singapore	856
4	France	563
5	Hong Kong	367
6	Netherlands	356
7	Indonesia	270
8	United Kingdom	257
9	South Korea	213
10	Germany	207

Saturday, April 4, 2026

Botnet Statistics [2026-04-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-03 00:00-23:59 UTC
total number of suspected botnet IPs: 17544
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16616
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	452983
2	2205	104790
3	888	73035
4	8000	64207
5	7777	62753
6	25	62302
7	8085	51000
8	8088	50717
9	9443	50012
10	5357	49846

Rank	Network	# of suspected botnet IPs
1	MSFT	1356
2	AL-3	1304
3	GOOGLE-CLOUD	1012
4	PAN-22	950
5	ASEPL-SG	506
6	FR-ONYPHE-20191111	448
7	CENSY	381
8	VOLCANO-ENGINE	370
9	cloud	327
10	UCLOUD-HK	265

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8385
2	China	3174
3	Singapore	820
4	France	553
5	Hong Kong	366
6	Netherlands	331
7	Germany	252
8	United Kingdom	251
9	Indonesia	249
10	South Korea	232

Friday, April 3, 2026

Botnet Statistics [2026-04-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-02 00:00-23:59 UTC
total number of suspected botnet IPs: 18339
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17393
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	448419
2	888	299465
3	2222	165406
4	8000	143359
5	7777	109951
6	2256	97351
7	2238	94542
8	2205	93336
9	2000	89980
10	25	81697

Rank	Network	# of suspected botnet IPs
1	MSFT	1382
2	AL-3	1316
3	GOOGLE-CLOUD	1013
4	PAN-22	950
5	ASEPL-SG	542
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	402
8	CENSY	383
9	cloud	324
10	UCLOUD-HK	261

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9068
2	China	3369
3	Singapore	923
4	France	549
5	Netherlands	375
6	Hong Kong	371
7	Indonesia	311
8	United Kingdom	255
9	South Korea	227
10	India	226

Thursday, April 2, 2026

Botnet Statistics [2026-04-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for April 2026.
detection period: 2026-04-01 00:00-23:59 UTC
total number of suspected botnet IPs: 18154
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17161
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	390007
2	7777	191896
3	8000	178771
4	8015	111911
5	25	104287
6	888	99236
7	2238	94483
8	2205	89895
9	2256	81641
10	2222	75326

Rank	Network	# of suspected botnet IPs
1	MSFT	1360
2	AL-3	1341
3	GOOGLE-CLOUD	1005
4	PAN-22	950
5	ASEPL-SG	658
6	FR-ONYPHE-20191111	448
7	VOLCANO-ENGINE	412
8	CENSY	379
9	cloud	289
10	UCLOUD-HK	262

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8352
2	China	3612
3	Singapore	1007
4	France	538
5	Hong Kong	376
6	Netherlands	318
7	Indonesia	293
8	Germany	277
9	India	237
10	United Kingdom	235

Daily Zombie Lists for April 2026（2026年04月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for April 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年04月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

04/01: download link 下載網址; MD5sum: 9c741e33e224c4aa90559ca99b0bfa5c

04/02: download link 下載網址; MD5sum: b10181c543be6c6f70816f73cfa083f1

04/03: download link 下載網址; MD5sum: b1ec6f8358168bd5dec14005ef53a504

04/04: download link 下載網址; MD5sum: 952e4fb63533040a19e393bccc7783ca

04/05: download link 下載網址; MD5sum: 71d54fec2bbc9d8678dba2c7732a83c9

04/06: download link 下載網址; MD5sum: 32e461467c78ce13e97efc15e520fd70

04/07: download link 下載網址; MD5sum: 77fb6cad7129fe6d4aeefa064ffc3b09

04/08: download link 下載網址; MD5sum: 1d2e3974b7a4b0546903d82716c9d1fb

04/09: download link 下載網址; MD5sum: 54b9728d195e1e209178cd4b3fb0baae

04/10: download link 下載網址; MD5sum: 0a8442cc7ba8ad721b1aec6fcd7a8262

04/11: download link 下載網址; MD5sum: 1ee5233235790bbf93d09681f9685a27

04/12: download link 下載網址; MD5sum: 4c61c8ccdaca36f83fa0bd416b089bf4

04/13: download link 下載網址; MD5sum: 63b58f45fd92e66c5ea82a02d125fabb

04/14: download link 下載網址; MD5sum: 930b481c8d7976797d00569341e9b3d6

04/15: download link 下載網址; MD5sum: 2660dad2921ec4cb0d1a4da431c3799c

04/16: download link 下載網址; MD5sum: 4ae2cc1be3024d84090ccbe985666472

04/17: download link 下載網址; MD5sum: 2537383dc0361e13f11979ac58e8b4cd

04/18: download link 下載網址; MD5sum: 7b6f5d364125354829aefec0860fa258

04/19: download link 下載網址; MD5sum: 4283641a4702128ab57587326a37621a

04/20: download link 下載網址; MD5sum: 7bc7b4dc8d020bab18430f7e6acfcf06

04/21: download link 下載網址; MD5sum: e4ce5ee9b789dd50143fd17f8ec7a784

Wednesday, April 1, 2026

Botnet Statistics [2026-03-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for March 2026.
detection period: 2026-03-31 00:00-23:59 UTC
total number of suspected botnet IPs: 18882
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17943
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	407272
2	888	311121
3	7777	265530
4	51005	184929
5	8000	168306
6	25	168240
7	2000	156083
8	8015	139461
9	5357	131503
10	2205	92308

Rank	Network	# of suspected botnet IPs
1	AL-3	1433
2	MSFT	1372
3	GOOGLE-CLOUD	1008
4	PAN-22	951
5	ASEPL-SG	936
6	FR-ONYPHE-20191111	400
7	VOLCANO-ENGINE	399
8	CENSY	384
9	cloud	307
10	ALISOFT	305

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8782
2	China	3662
3	Singapore	1410
4	France	479
5	Hong Kong	366
6	Indonesia	341
7	Netherlands	306
8	United Kingdom	252
9	India	251
10	Germany	230

Subscribe to: Comments (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (6004)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (65)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (113)
  • April (23)
  • March (31)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	296031
2	888	150718
3	7777	123334
4	9011	95558
5	2205	91224
6	2000	89413
7	51005	85457
8	8000	79299
9	2298	70834
10	5357	66204