Botnet Statistics [2026-06-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-20 00:00-23:59 UTC
total number of suspected botnet IPs: 18934
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18137
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	AL-3	1542
2	MSFT	1412
3	INFRAWATCH	1054
4	GOOGLE-CLOUD	1046
5	PAN-22	959
6	ASEPL-SG	547
7	VOLCANO-ENGINE	466
8	FR-ONYPHE-20191111	448
9	CENSY	382
10	cloud	311

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8216
2	China	3915
3	Singapore	809
4	United Kingdom	739
5	Netherlands	586
6	Germany	495
7	France	476
8	Hong Kong	320
9	India	306
10	South Korea	290

Saturday, June 20, 2026

Botnet Statistics [2026-06-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19490
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18645
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	156924
2	1122	60377
3	9443	56968
4	8082	48390
5	54321	44269
6	8015	42805
7	5357	42044
8	7777	41110
9	9011	39450
10	8085	39300

Rank	Network	# of suspected botnet IPs
1	AL-3	1505
2	MSFT	1412
3	GOOGLE-CLOUD	1071
4	INFRAWATCH	1034
5	PAN-22	960
6	ASEPL-SG	651
7	VOLCANO-ENGINE	473
8	FR-ONYPHE-20191111	448
9	CENSY	380
10	cloud	335

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8342
2	China	3923
3	Singapore	901
4	United Kingdom	726
5	Germany	658
6	Netherlands	584
7	France	471
8	South Korea	327
9	India	323
10	Hong Kong	312

Friday, June 19, 2026

Botnet Statistics [2026-06-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-18 00:00-23:59 UTC
total number of suspected botnet IPs: 20464
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19585
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	159405
2	1122	60632
3	23	50374
4	9443	46875
5	54321	44757
6	8822	41718
7	8082	40112
8	8015	37124
9	5901	34529
10	5357	33549

Rank	Network	# of suspected botnet IPs
1	AL-3	1454
2	MSFT	1426
3	GOOGLE-CLOUD	1057
4	PAN-22	961
5	INFRAWATCH	945
6	ASEPL-SG	572
7	VOLCANO-ENGINE	481
8	FR-ONYPHE-20191111	447
9	CENSY	379
10	cloud	311

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9091
2	China	4008
3	Singapore	869
4	United Kingdom	705
5	Netherlands	592
6	Germany	589
7	France	480
8	India	342
9	Hong Kong	316
10	South Korea	314

Thursday, June 18, 2026

Botnet Statistics [2026-06-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-17 00:00-23:59 UTC
total number of suspected botnet IPs: 21723
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20610
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	128572
2	23	80692
3	1122	58216
4	54321	43085
5	9443	36325
6	8822	34399
7	5901	33363
8	8082	28957
9	10000	28817
10	22	28428

Rank	Network	# of suspected botnet IPs
1	MSFT	1492
2	AL-3	1450
3	INFRAWATCH	1113
4	GOOGLE-CLOUD	1090
5	PAN-22	960
6	ASEPL-SG	522
7	VOLCANO-ENGINE	484
8	FR-ONYPHE-20191111	446
9	CENSY	381
10	cloud	316

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9266
2	China	4367
3	United Kingdom	846
4	Singapore	783
5	Netherlands	625
6	Germany	551
7	France	485
8	Hong Kong	412
9	South Korea	376
10	India	357

Wednesday, June 17, 2026

Botnet Statistics [2026-06-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-16 00:00-23:59 UTC
total number of suspected botnet IPs: 23475
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 22304
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	150199
2	23	89925
3	1122	59024
4	54321	45443
5	9999	42221
6	9443	31161
7	8822	28306
8	22	28231
9	10000	26311
10	8015	21060

Rank	Network	# of suspected botnet IPs
1	MSFT	1527
2	AL-3	1492
3	GOOGLE-CLOUD	1096
4	INFRAWATCH	964
5	PAN-22	963
6	ASEPL-SG	550
7	VOLCANO-ENGINE	499
8	FR-ONYPHE-20191111	448
9	CENSY	380
10	cloud	362

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	10427
2	China	4346
3	Singapore	928
4	United Kingdom	775
5	Netherlands	613
6	Germany	591
7	France	507
8	Hong Kong	489
9	India	411
10	South Korea	353

Tuesday, June 16, 2026

Botnet Statistics [2026-06-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-15 00:00-23:59 UTC
total number of suspected botnet IPs: 19413
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18318
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	152697
2	23	126642
3	1122	58718
4	1234	50749
5	54321	46520
6	202	42106
7	22	34324
8	8822	28332
9	8728	26110
10	10000	25315

Rank	Network	# of suspected botnet IPs
1	AL-3	1467
2	MSFT	1391
3	INFRAWATCH	1126
4	GOOGLE-CLOUD	1049
5	PAN-22	962
6	ASEPL-SG	677
7	VOLCANO-ENGINE	481
8	FR-ONYPHE-20191111	448
9	CENSY	382
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8031
2	China	3653
3	Singapore	1002
4	United Kingdom	815
5	Netherlands	562
6	Germany	533
7	France	502
8	Hong Kong	316
9	Indonesia	308
10	South Korea	297

Monday, June 15, 2026

Botnet Statistics [2026-06-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-14 00:00-23:59 UTC
total number of suspected botnet IPs: 19869
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19015
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	130462
2	2269	65759
3	202	54479
4	1122	51505
5	54321	38104
6	22025	35695
7	22	29688
8	8822	27665
9	8728	27140
10	23122	24674

Rank	Network	# of suspected botnet IPs
1	MSFT	1479
2	AL-3	1468
3	INFRAWATCH	1083
4	GOOGLE-CLOUD	1038
5	PAN-22	959
6	ASEPL-SG	560
7	VOLCANO-ENGINE	495
8	FR-ONYPHE-20191111	448
9	CENSY	375
10	cloud	352

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8892
2	China	4123
3	Singapore	863
4	United Kingdom	817
5	Netherlands	579
6	Germany	547
7	France	492
8	Hong Kong	298
9	Indonesia	297
10	South Korea	237

Sunday, June 14, 2026

Botnet Statistics [2026-06-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-13 00:00-23:59 UTC
total number of suspected botnet IPs: 20063
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18852
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	164419
2	12975	108732
3	12661	76379
4	13405	65538
5	2269	63931
6	202	53074
7	12951	50430
8	14391	43214
9	13968	41703
10	22025	40725

Rank	Network	# of suspected botnet IPs
1	AL-3	1443
2	MSFT	1432
3	GOOGLE-CLOUD	1051
4	PAN-22	960
5	INFRAWATCH	868
6	ASEPL-SG	577
7	VOLCANO-ENGINE	485
8	FR-ONYPHE-20191111	448
9	CENSY	375
10	cloud	306

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8377
2	China	4088
3	Singapore	901
4	United Kingdom	836
5	Netherlands	597
6	France	529
7	Indonesia	317
8	Hong Kong	312
9	Germany	303
10	South Korea	284

Saturday, June 13, 2026

Botnet Statistics [2026-06-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-12 00:00-23:59 UTC
total number of suspected botnet IPs: 21417
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20368
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	159577
2	2269	64363
3	6023	62971
4	13265	44055
5	9663	36786
6	6707	36465
7	4855	35755
8	8822	33319
9	3495	30284
10	6435	28385

Rank	Network	# of suspected botnet IPs
1	AL-3	1448
2	MSFT	1427
3	INFRAWATCH	1063
4	GOOGLE-CLOUD	1047
5	PAN-22	962
6	ASEPL-SG	566
7	VOLCANO-ENGINE	523
8	FR-ONYPHE-20191111	447
9	CENSY	375
10	cloud	313

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8667
2	China	4190
3	Singapore	898
4	United Kingdom	791
5	Germany	619
6	Netherlands	609
7	France	528
8	Indonesia	412
9	India	402
10	South Korea	365

Friday, June 12, 2026

Botnet Statistics [2026-06-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-11 00:00-23:59 UTC
total number of suspected botnet IPs: 20970
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20061
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	134871
2	5901	30442
3	22	29950
4	6002	23966
5	222	19318
6	2203	18331
7	13870	18197
8	2269	17354
9	2222	17352
10	888	16743

Rank	Network	# of suspected botnet IPs
1	AL-3	1542
2	MSFT	1409
3	INFRAWATCH	1068
4	GOOGLE-CLOUD	1061
5	PAN-22	962
6	ASEPL-SG	612
7	VOLCANO-ENGINE	497
8	FR-ONYPHE-20191111	448
9	CENSY	381
10	cloud	339

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9185
2	China	4127
3	Singapore	838
4	United Kingdom	779
5	Netherlands	579
6	Germany	566
7	France	477
8	India	366
9	South Korea	347
10	Hong Kong	335

Thursday, June 11, 2026

Botnet Statistics [2026-06-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-10 00:00-23:59 UTC
total number of suspected botnet IPs: 20071
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19048
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	98645
2	5901	38857
3	9011	35656
4	22	28199
5	222	22048
6	23	21122
7	9402	20572
8	2222	20358
9	888	19551
10	8015	19195

Rank	Network	# of suspected botnet IPs
1	AL-3	1575
2	MSFT	1487
3	GOOGLE-CLOUD	1052
4	PAN-22	961
5	INFRAWATCH	865
6	ASEPL-SG	606
7	VOLCANO-ENGINE	499
8	FR-ONYPHE-20191111	447
9	CENSY	374
10	cloud	337

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8837
2	China	3772
3	Singapore	832
4	Germany	620
5	Netherlands	560
6	United Kingdom	553
7	France	487
8	India	367
9	Hong Kong	331
10	South Korea	326

Wednesday, June 10, 2026

Botnet Statistics [2026-06-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-09 00:00-23:59 UTC
total number of suspected botnet IPs: 20830
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19715
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	143577
2	2255	80252
3	4444	47236
4	6022	45981
5	5901	38281
6	22024	36814
7	30	31613
8	22	29419
9	8222	28735
10	9402	26308

Rank	Network	# of suspected botnet IPs
1	AL-3	1637
2	MSFT	1438
3	GOOGLE-CLOUD	1051
4	INFRAWATCH	1022
5	PAN-22	962
6	ASEPL-SG	533
7	VOLCANO-ENGINE	501
8	FR-ONYPHE-20191111	448
9	CENSY	375
10	cloud	301

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9588
2	China	3442
3	United Kingdom	782
4	Singapore	746
5	Germany	640
6	Netherlands	620
7	France	497
8	South Korea	366
9	India	345
10	Hong Kong	340

Tuesday, June 9, 2026

Botnet Statistics [2026-06-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-08 00:00-23:59 UTC
total number of suspected botnet IPs: 19079
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18078
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	201432
2	2255	87254
3	6022	60980
4	1111	53654
5	6000	37039
6	22024	36631
7	822	32430
8	8222	30678
9	22	27487
10	9402	26952

Rank	Network	# of suspected botnet IPs
1	AL-3	1618
2	MSFT	1436
3	INFRAWATCH	1147
4	GOOGLE-CLOUD	1067
5	PAN-22	961
6	ASEPL-SG	612
7	VOLCANO-ENGINE	518
8	FR-ONYPHE-20191111	447
9	CENSY	363
10	cloud	346

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8843
2	China	3326
3	Singapore	846
4	United Kingdom	815
5	Germany	573
6	Netherlands	542
7	France	470
8	Hong Kong	306
9	Indonesia	289
10	South Korea	258

Monday, June 8, 2026

Botnet Statistics [2026-06-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-07 00:00-23:59 UTC
total number of suspected botnet IPs: 19683
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18572
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	221610
2	2255	87184
3	6022	59477
4	6000	47377
5	1111	41975
6	9011	40740
7	22	31614
8	8222	28723
9	7422	27004
10	7722	25945

Rank	Network	# of suspected botnet IPs
1	AL-3	1653
2	MSFT	1422
3	GOOGLE-CLOUD	1038
4	PAN-22	961
5	INFRAWATCH	879
6	ASEPL-SG	607
7	VOLCANO-ENGINE	505
8	FR-ONYPHE-20191111	448
9	CENSY	351
10	AT-88-Z	319

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9432
2	China	3383
3	Singapore	891
4	United Kingdom	875
5	Netherlands	604
6	France	483
7	Hong Kong	313
8	Indonesia	265
9	Germany	265
10	South Korea	255

Sunday, June 7, 2026

Botnet Statistics [2026-06-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-06 00:00-23:59 UTC
total number of suspected botnet IPs: 18561
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17609
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	234607
2	6022	93011
3	9011	44181
4	2122	39090
5	55522	37583
6	8888	36337
7	922	32367
8	22	31710
9	8222	28327
10	5001	27420

Rank	Network	# of suspected botnet IPs
1	AL-3	1630
2	MSFT	1385
3	GOOGLE-CLOUD	1043
4	PAN-22	960
5	INFRAWATCH	920
6	ASEPL-SG	699
7	VOLCANO-ENGINE	516
8	FR-ONYPHE-20191111	447
9	CENSY	356
10	AT-88-Z	312

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8371
2	China	3523
3	Singapore	955
4	United Kingdom	908
5	Netherlands	589
6	France	478
7	Hong Kong	314
8	Germany	307
9	Indonesia	272
10	South Korea	245

Botnet Statistics [2026-06-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-05 00:00-23:59 UTC
total number of suspected botnet IPs: 18328
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17129
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	206900
2	6022	125517
3	2122	53629
4	55522	42164
5	4321	38616
6	922	38303
7	5001	30075
8	2024	29142
9	22	28408
10	8022	27403

Rank	Network	# of suspected botnet IPs
1	AL-3	1626
2	MSFT	1354
3	GOOGLE-CLOUD	1061
4	PAN-22	964
5	INFRAWATCH	705
6	ASEPL-SG	577
7	VOLCANO-ENGINE	507
8	FR-ONYPHE-20191111	448
9	CENSY	351
10	AT-88-Z	282

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8258
2	China	3294
3	Singapore	946
4	United Kingdom	680
5	Netherlands	589
6	France	483
7	Germany	325
8	Hong Kong	307
9	Indonesia	290
10	South Korea	227

Saturday, June 6, 2026

Botnet Statistics [2026-06-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-02 00:00-23:59 UTC
total number of suspected botnet IPs: 22111
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21092
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	183213
2	6022	109163
3	2122	55302
4	4321	38636
5	55522	36980
6	22	28364
7	12222	27958
8	2024	25145
9	5001	24348
10	8022	23909

Rank	Network	# of suspected botnet IPs
1	AL-3	1868
2	MSFT	1725
3	INFRAWATCH	1152
4	GOOGLE-CLOUD	1040
5	PAN-22	971
6	ASEPL-SG	746
7	cloud	544
8	VOLCANO-ENGINE	528
9	FR-ONYPHE-20191111	447
10	CENSY	380

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	10331
2	China	3923
3	Singapore	1049
4	United Kingdom	914
5	Germany	648
6	Netherlands	630
7	France	484
8	Indonesia	359
9	Hong Kong	356
10	South Korea	285

Tuesday, June 2, 2026

Botnet Statistics [2026-06-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for June 2026.
detection period: 2026-06-01 00:00-23:59 UTC
total number of suspected botnet IPs: 21372
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20157
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	175020
2	2265	74270
3	6022	50576
4	5922	37761
5	2023	25325
6	23	23781
7	4714	22727
8	5001	22448
9	4708	22161
10	1322	21484

Rank	Network	# of suspected botnet IPs
1	AL-3	1869
2	MSFT	1495
3	INFRAWATCH	1169
4	GOOGLE-CLOUD	1060
5	PAN-22	963
6	ASEPL-SG	667
7	VOLCANO-ENGINE	534
8	FR-ONYPHE-20191111	448
9	CENSY	372
10	cloud	309

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8982
2	China	3874
3	Singapore	1193
4	United Kingdom	912
5	Netherlands	602
6	Germany	597
7	France	501
8	Hong Kong	379
9	Indonesia	364
10	Brazil	284

Daily Zombie Lists for June 2026（2026年06月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for June 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年06月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

06/01: download link 下載網址; MD5sum: 30edaccd225a11593a57c6fa4a0502a1

06/02: download link 下載網址; MD5sum: 670e2644b66d3bf8e2c2ce1c9d84e843

06/05: download link 下載網址; MD5sum: ee2e6d874dc9f9eb1f2963f7cd9889de

06/06: download link 下載網址; MD5sum: 8b990173b7602f1676a33f6f8782a1a8

06/07: download link 下載網址; MD5sum: 4df2b94f38c64360f2c2d5ba34b59add

06/08: download link 下載網址; MD5sum: c98e108b937957da470721886ac6ce11

06/09: download link 下載網址; MD5sum: f803e6a1fe8ba935873ab68ba920bed1

06/10: download link 下載網址; MD5sum: 2fc5caeb065d69218f549098192c0ff4

06/11: download link 下載網址; MD5sum: c568e3cb6e5c812d48678fe923927bec

06/12: download link 下載網址; MD5sum: 5387354f1a779fda44b3544f5de5c775

06/13: download link 下載網址; MD5sum: 44ae5144ad2c659c686a3fcf2fd65aaa

06/14: download link 下載網址; MD5sum: 55a77ba51cd595297da634c2417fe552

06/15: download link 下載網址; MD5sum: b27583606837119654b785dafb4d8564

06/16: download link 下載網址; MD5sum: 18236cc43059e1c3e7884749e533cbdb

06/17: download link 下載網址; MD5sum: 565159d6689218ecb129c5f33d479701

06/18: download link 下載網址; MD5sum: c05ff0965a3282f71c09c4555b6acecb

06/19: download link 下載網址; MD5sum: 766fcf017b96e1cc529ebd65f6458d3c

06/20: download link 下載網址; MD5sum: f388ae4988fa2fcc2a587aa825ee9880

Monday, June 1, 2026

Botnet Statistics [2026-05-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for May 2026.
detection period: 2026-05-31 00:00-23:59 UTC
total number of suspected botnet IPs: 20074
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19129
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	174834
2	2265	74413
3	2023	39898
4	5001	24762
5	6022	23738
6	8899	22903
7	4714	22482
8	4708	21873
9	7105	20908
10	7422	20675

Rank	Network	# of suspected botnet IPs
1	AL-3	1703
2	MSFT	1406
3	INFRAWATCH	1092
4	GOOGLE-CLOUD	1046
5	PAN-22	961
6	ASEPL-SG	603
7	VOLCANO-ENGINE	510
8	FR-ONYPHE-20191111	400
9	CENSY	375
10	cloud	319

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9295
2	China	3719
3	Singapore	1014
4	United Kingdom	814
5	Netherlands	599
6	Germany	552
7	France	467
8	Hong Kong	334
9	Indonesia	288
10	South Korea	232

Subscribe to: Posts (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (6061)
• botnet chart4 (1)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (67)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (173)
  • June (20)
  • May (32)
  • April (31)
  • March (31)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	162450
2	2265	74268
3	2023	36396
4	5001	30224
5	2000	26118
6	8015	25356
7	2222	22467
8	4714	22401
9	8022	21781
10	4708	21573