Botnet Statistics [2026-08-21]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-21 00:00-23:59 UTC
total number of suspected botnet IPs: 17519
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16558
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1057
2	GOOGLE-CLOUD	1039
3	AL-3	1008
4	MSFT	981
5	PAN-22	960
6	FR-ONYPHE-20191111	480
7	CENSY	377
8	ASEPL-SG	347
9	UCLOUD-US	264
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7391
2	China	3165
3	United Kingdom	920
4	Germany	604
5	France	550
6	Netherlands	539
7	Singapore	525
8	Hong Kong	340
9	Russian Federation	276
10	Brazil	242

Friday, August 21, 2026

Botnet Statistics [2026-08-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17745
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16833
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	119830
2	2025	48878
3	2224	36540
4	1217	31601
5	52200	27836
6	2165	27091
7	9022	26274
8	9389	25454
9	2923	24539
10	9762	23301

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1093
2	GOOGLE-CLOUD	1053
3	AL-3	996
4	MSFT	983
5	PAN-22	962
6	FR-ONYPHE-20191111	480
7	CENSY	378
8	ASEPL-SG	369
9	UCLOUD-US	245
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7916
2	China	3106
3	United Kingdom	719
4	Germany	672
5	Singapore	623
6	Netherlands	550
7	France	527
8	Hong Kong	297
9	Russian Federation	280
10	India	230

Thursday, August 20, 2026

Botnet Statistics [2026-08-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-19 00:00-23:59 UTC
total number of suspected botnet IPs: 17065
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16114
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	205964
2	5242	100558
3	6143	91050
4	2022	87083
5	1573	85324
6	1293	82643
7	2025	69494
8	6509	63754
9	8401	61724
10	1494	60149

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1159
2	AL-3	1058
3	GOOGLE-CLOUD	1038
4	MSFT	1005
5	PAN-22	962
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	388
8	CENSY	378
9	DE-ALPHA	262
10	UCLOUD-US	252

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7538
2	China	2698
3	United Kingdom	765
4	Germany	703
5	Singapore	602
6	Netherlands	573
7	France	543
8	Hong Kong	311
9	Russian Federation	263
10	India	229

Wednesday, August 19, 2026

Botnet Statistics [2026-08-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-18 00:00-23:59 UTC
total number of suspected botnet IPs: 18087
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17010
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	213882
2	2025	74829
3	9022	48198
4	2221	46605
5	5450	37413
6	1146	36545
7	5150	28944
8	4664	27098
9	2022	27052
10	5683	24581

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1162
2	AL-3	1125
3	GOOGLE-CLOUD	1030
4	MSFT	974
5	PAN-22	962
6	ASEPL-SG	486
7	FR-ONYPHE-20191111	480
8	CENSY	378
9	UCLOUD-US	257
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8123
2	China	2824
3	United Kingdom	827
4	Germany	682
5	Singapore	595
6	France	566
7	Netherlands	548
8	Hong Kong	299
9	Russian Federation	237
10	Argentina	233

Tuesday, August 18, 2026

Botnet Statistics [2026-08-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-17 00:00-23:59 UTC
total number of suspected botnet IPs: 17699
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16748
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	218648
2	2025	67307
3	8888	55699
4	7022	54448
5	2221	46640
6	1222	37396
7	1841	27056
8	2022	26963
9	3921	24387
10	2880	23081

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1135
2	AL-3	1061
3	GOOGLE-CLOUD	1033
4	MSFT	982
5	PAN-22	960
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	382
8	CENSY	375
9	UCLOUD-US	254
10	DE-ALPHA	247

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7687
2	China	2944
3	Germany	824
4	United Kingdom	784
5	France	568
6	Netherlands	549
7	Singapore	493
8	Hong Kong	322
9	Argentina	301
10	Russian Federation	262

Monday, August 17, 2026

Botnet Statistics [2026-08-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-16 00:00-23:59 UTC
total number of suspected botnet IPs: 17976
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16774
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	203278
2	8888	68083
3	7022	54726
4	433	47219
5	1222	35721
6	2221	35241
7	6017	33662
8	4137	29951
9	12322	29675
10	3333	28639

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1041
2	AL-3	1027
3	MSFT	1024
4	PAN-22	961
5	INFRAWATCH	921
6	FR-ONYPHE-20191111	480
7	CENSY	377
8	ASEPL-SG	359
9	UCLOUD-US	241
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8129
2	China	2975
3	United Kingdom	815
4	Netherlands	577
5	France	566
6	Germany	473
7	Singapore	455
8	Hong Kong	286
9	Argentina	276
10	India	238

Sunday, August 16, 2026

Botnet Statistics [2026-08-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-15 00:00-23:59 UTC
total number of suspected botnet IPs: 17374
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16448
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	181177
2	5555	50591
3	1652	41137
4	12322	36152
5	1111	35891
6	2000	34227
7	4137	32513
8	3333	31190
9	8888	31088
10	2959	30386

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1126
2	GOOGLE-CLOUD	1044
3	AL-3	1025
4	MSFT	1017
5	PAN-22	962
6	FR-ONYPHE-20191111	480
7	CENSY	377
8	ASEPL-SG	370
9	UCLOUD-US	263
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7348
2	China	3055
3	Germany	795
4	United Kingdom	739
5	France	564
6	Netherlands	559
7	Singapore	480
8	Argentina	329
9	Hong Kong	303
10	Russian Federation	242

Saturday, August 15, 2026

Botnet Statistics [2026-08-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-14 00:00-23:59 UTC
total number of suspected botnet IPs: 18072
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17080
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	225538
2	9999	75803
3	8090	66212
4	5555	51544
5	7777	46530
6	12322	44302
7	1797	42855
8	2567	39298
9	6699	39220
10	4120	36647

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1163
2	AL-3	1089
3	GOOGLE-CLOUD	1033
4	MSFT	972
5	PAN-22	962
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	451
8	CENSY	377
9	CMNET	258
10	UCLOUD-US	245

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7518
2	China	3207
3	United Kingdom	807
4	Germany	696
5	Netherlands	571
6	France	570
7	Singapore	548
8	Argentina	311
9	Hong Kong	310
10	Russian Federation	277

Friday, August 14, 2026

Botnet Statistics [2026-08-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-13 00:00-23:59 UTC
total number of suspected botnet IPs: 18440
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17447
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	226167
2	9999	72776
3	8090	67695
4	7777	52356
5	1797	47401
6	2567	46389
7	5322	43759
8	6699	40304
9	4120	38491
10	1287	38463

Rank	Network	# of suspected botnet IPs
1	GOOGLE-CLOUD	1048
2	INFRAWATCH	1046
3	AL-3	1019
4	PAN-22	960
5	MSFT	878
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	397
8	CENSY	375
9	CMNET	249
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7979
2	China	3148
3	Germany	718
4	United Kingdom	660
5	Netherlands	589
6	France	581
7	Singapore	466
8	Ukraine	340
9	Argentina	308
10	Hong Kong	294

Thursday, August 13, 2026

Botnet Statistics [2026-08-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-12 00:00-23:59 UTC
total number of suspected botnet IPs: 17905
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16966
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	217707
2	8090	71650
3	444	69999
4	22951	64522
5	9999	62262
6	20010	62255
7	27999	54477
8	7777	50085
9	1797	48531
10	2567	46172

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1171
2	GOOGLE-CLOUD	1047
3	AL-3	1014
4	MSFT	966
5	PAN-22	960
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	379
8	CENSY	376
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7582
2	China	2899
3	United Kingdom	817
4	Germany	773
5	Netherlands	582
6	France	568
7	Singapore	455
8	Ukraine	420
9	Russian Federation	299
10	Hong Kong	273

Wednesday, August 12, 2026

Botnet Statistics [2026-08-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-11 00:00-23:59 UTC
total number of suspected botnet IPs: 18359
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17445
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	247732
2	8090	78041
3	444	69972
4	9999	64985
5	22951	63353
6	20010	62569
7	27999	52650
8	6007	51376
9	1797	48161
10	3005	48019

Rank	Network	# of suspected botnet IPs
1	INFRAWATCH	1161
2	MSFT	1111
3	GOOGLE-CLOUD	1033
4	PAN-22	962
5	AL-3	892
6	FR-ONYPHE-20191111	480
7	CENSY	371
8	ASEPL-SG	351
9	cloud	253
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8354
2	China	2762
3	United Kingdom	800
4	Germany	772
5	Netherlands	581
6	France	579
7	Singapore	461
8	Russian Federation	310
9	Hong Kong	296
10	Ukraine	287

Tuesday, August 11, 2026

Botnet Statistics [2026-08-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-10 00:00-23:59 UTC
total number of suspected botnet IPs: 17561
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16443
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	78296
2	8111	73261
3	9999	67303
4	6006	43734
5	8011	43039
6	12322	38928
7	19922	37557
8	8090	28985
9	2578	28641
10	6007	28089

Rank	Network	# of suspected botnet IPs
1	MSFT	1302
2	INFRAWATCH	1057
3	GOOGLE-CLOUD	1042
4	AL-3	1021
5	PAN-22	963
6	FR-ONYPHE-20191111	448
7	CENSY	375
8	ASEPL-SG	346
9	FR-ONYPHE-20221109	240
10	DE-ALPHA	235

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7612
2	China	2666
3	Germany	712
4	United Kingdom	705
5	France	531
6	Netherlands	515
7	Singapore	469
8	Hong Kong	305
9	Ukraine	303
10	Russian Federation	297

Monday, August 10, 2026

Botnet Statistics [2026-08-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-09 00:00-23:59 UTC
total number of suspected botnet IPs: 18735
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17842
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	72442
2	8123	59315
3	6006	41539
4	8011	33420
5	9999	26429
6	22	20024
7	8822	19573
8	23	19366
9	8322	15866
10	389	15098

Rank	Network	# of suspected botnet IPs
1	MSFT	1323
2	INFRAWATCH	1060
3	GOOGLE-CLOUD	1035
4	AL-3	1021
5	PAN-22	961
6	FR-ONYPHE-20191111	448
7	ASEPL-SG	406
8	CENSY	373
9	cloud	289
10	DE-ALPHA	243

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8518
2	China	3075
3	United Kingdom	750
4	Germany	736
5	Netherlands	550
6	Singapore	528
7	France	495
8	Ukraine	479
9	Russian Federation	318
10	Hong Kong	276

Sunday, August 9, 2026

Botnet Statistics [2026-08-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-08 00:00-23:59 UTC
total number of suspected botnet IPs: 17805
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16672
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	127577
2	8090	44161
3	22	23918
4	8822	20055
5	1133	17360
6	23	17141
7	1100	17036
8	389	16176
9	9999	13486
10	153	13455

Rank	Network	# of suspected botnet IPs
1	MSFT	1331
2	GOOGLE-CLOUD	1032
3	AL-3	1025
4	PAN-22	961
5	INFRAWATCH	769
6	FR-ONYPHE-20191111	448
7	CENSY	378
8	ASEPL-SG	357
9	cloud	269
10	DE-ALPHA	258

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7498
2	China	3819
3	United Kingdom	654
4	Germany	545
5	Netherlands	513
6	France	487
7	Singapore	461
8	Ukraine	347
9	Russian Federation	291
10	Hong Kong	255

Saturday, August 8, 2026

Botnet Statistics [2026-08-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-07 00:00-23:59 UTC
total number of suspected botnet IPs: 18679
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17776
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	150106
2	5357	45447
3	7777	31453
4	888	31326
5	9443	28079
6	22	27022
7	8085	25553
8	2095	23452
9	8088	19807
10	1133	17933

Rank	Network	# of suspected botnet IPs
1	MSFT	1351
2	INFRAWATCH	1060
3	GOOGLE-CLOUD	1045
4	AL-3	1008
5	PAN-22	962
6	FR-ONYPHE-20191111	448
7	CENSY	374
8	ASEPL-SG	354
9	cloud	317
10	DE-ALPHA	241

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7607
2	China	3386
3	Germany	1631
4	United Kingdom	737
5	Netherlands	503
6	France	483
7	Singapore	480
8	Ukraine	446
9	Russian Federation	307
10	Hong Kong	258

Friday, August 7, 2026

Botnet Statistics [2026-08-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-06 00:00-23:59 UTC
total number of suspected botnet IPs: 18668
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17750
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	157780
2	22	26542
3	1133	18062
4	23	17921
5	1100	17736
6	888	16841
7	153	16805
8	8822	15872
9	389	15541
10	363	15320

Rank	Network	# of suspected botnet IPs
1	MSFT	1363
2	INFRAWATCH	1126
3	GOOGLE-CLOUD	1052
4	AL-3	1033
5	PAN-22	958
6	FR-ONYPHE-20191111	448
7	ASEPL-SG	415
8	CENSY	376
9	cloud	289
10	DE-ALPHA	252

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8349
2	China	2661
3	Germany	1068
4	United Kingdom	913
5	Singapore	543
6	Netherlands	506
7	France	490
8	Ukraine	398
9	Russian Federation	336
10	Hong Kong	266

Thursday, August 6, 2026

Botnet Statistics [2026-08-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-05 00:00-23:59 UTC
total number of suspected botnet IPs: 17947
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17039
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	90689
2	7777	78231
3	22012	32539
4	22	25258
5	1100	23637
6	9022	22877
7	153	22489
8	173	21973
9	888	20989
10	200	20726

Rank	Network	# of suspected botnet IPs
1	MSFT	1325
2	INFRAWATCH	1101
3	GOOGLE-CLOUD	1047
4	AL-3	999
5	PAN-22	963
6	FR-ONYPHE-20191111	448
7	CENSY	376
8	ASEPL-SG	343
9	cloud	282
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7775
2	China	2546
3	United Kingdom	1067
4	Germany	711
5	Netherlands	531
6	Ukraine	502
7	France	480
8	Singapore	455
9	Russian Federation	323
10	Brazil	276

Wednesday, August 5, 2026

Botnet Statistics [2026-08-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-04 00:00-23:59 UTC
total number of suspected botnet IPs: 18560
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17574
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	7777	105477
2	5900	101561
3	666	89840
4	22012	31438
5	888	30636
6	200	25578
7	22	24669
8	9022	22706
9	3222	22705
10	153	22623

Rank	Network	# of suspected botnet IPs
1	MSFT	1399
2	INFRAWATCH	1107
3	GOOGLE-CLOUD	1035
4	AL-3	969
5	PAN-22	961
6	FR-ONYPHE-20191111	448
7	CENSY	375
8	ASEPL-SG	370
9	cloud	275
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8203
2	China	2539
3	United Kingdom	1092
4	Germany	736
5	Ukraine	669
6	Netherlands	540
7	France	488
8	Singapore	462
9	Russian Federation	419
10	Brazil	281

Tuesday, August 4, 2026

Botnet Statistics [2026-08-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-03 00:00-23:59 UTC
total number of suspected botnet IPs: 17597
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16682
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	182839
2	7777	107461
3	2271	97074
4	666	94437
5	888	33910
6	8122	30275
7	22	28129
8	3222	25901
9	200	23275
10	173	22740

Rank	Network	# of suspected botnet IPs
1	MSFT	1333
2	INFRAWATCH	1085
3	AL-3	1084
4	GOOGLE-CLOUD	1034
5	PAN-22	962
6	FR-ONYPHE-20191111	448
7	CENSY	376
8	ASEPL-SG	373
9	cloud	299
10	DE-ALPHA	246

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7908
2	China	2515
3	United Kingdom	1159
4	Germany	737
5	Netherlands	531
6	France	515
7	Singapore	468
8	Ukraine	326
9	Russian Federation	313
10	Hong Kong	278

Monday, August 3, 2026

Botnet Statistics [2026-08-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-02 00:00-23:59 UTC
total number of suspected botnet IPs: 18027
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17048
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	173385
2	2271	104960
3	666	62973
4	7777	45022
5	6022	39384
6	3222	26601
7	22	24954
8	200	23426
9	9022	22117
10	173	21904

Rank	Network	# of suspected botnet IPs
1	MSFT	1374
2	AL-3	1129
3	INFRAWATCH	1099
4	GOOGLE-CLOUD	1031
5	PAN-22	959
6	FR-ONYPHE-20191111	448
7	CENSY	395
8	ASEPL-SG	363
9	FR-ONYPHE-20221109	240
10	HURRICANE-4	228

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8516
2	China	2763
3	United Kingdom	1095
4	Germany	691
5	Netherlands	530
6	Singapore	513
7	France	494
8	Hong Kong	290
9	Russian Federation	221
10	European Union	192

Sunday, August 2, 2026

Botnet Statistics [2026-08-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-01 00:00-23:59 UTC
total number of suspected botnet IPs: 17319
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16488
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	134738
2	2271	75433
3	8015	73845
4	4000	41091
5	888	39708
6	6022	35721
7	10000	30958
8	3306	28003
9	22	26833
10	3222	24137

Rank	Network	# of suspected botnet IPs
1	MSFT	1360
2	INFRAWATCH	1108
3	GOOGLE-CLOUD	1046
4	AL-3	1041
5	PAN-22	958
6	FR-ONYPHE-20191111	448
7	CENSY	373
8	ASEPL-SG	373
9	cloud	301
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7801
2	China	2752
3	United Kingdom	1107
4	Germany	708
5	Netherlands	567
6	France	502
7	Singapore	495
8	Hong Kong	303
9	Russian Federation	225
10	European Union	195

Daily Zombie Lists for August 2026（2026年08月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for August 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年08月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

08/01: download link 下載網址; MD5sum: ee622407dc8ddb6fe0ed29bfb9ad4de0

08/02: download link 下載網址; MD5sum: 37abcbc4f1b31aed3bfc0ee714e44732

08/03: download link 下載網址; MD5sum: c24847e944753f0403a39b656120cea2

08/04: download link 下載網址; MD5sum: b45b8ff7faf47e8ffa9898cca74191da

08/05: download link 下載網址; MD5sum: 98021ed0075a5ec9ee9b8986e54c84d6

08/06: download link 下載網址; MD5sum: ff68d621bc43bb7a3ba80c11eff26c74

08/07: download link 下載網址; MD5sum: 467b8268ae48e0758e920138942c4956

08/08: download link 下載網址; MD5sum: 03fd9bb80a7877130f306dcaa4659098

08/09: download link 下載網址; MD5sum: 1aa4a6a7f9cd2cf86b924b01351fd9e4

08/10: download link 下載網址; MD5sum: 2fae67840b70e7a8427afe8e152c778e

08/11: download link 下載網址; MD5sum: 66047f00c62c992c48b4af9577b566b7

08/12: download link 下載網址; MD5sum: 4e5835831f5df4d8dfab215f93178396

08/13: download link 下載網址; MD5sum: b85d20a860744a60a7beeb495e2c812b

08/14: download link 下載網址; MD5sum: e7e48aea94a4ada4969b48bb49ee4fab

08/15: download link 下載網址; MD5sum: fed795dfbfe62bb0d3274563fd3dc98e

08/16: download link 下載網址; MD5sum: 6ca4c0766521a507d7ffdba070a515de

08/17: download link 下載網址; MD5sum: 116c49768995ec431bed9e92b46cac67

08/18: download link 下載網址; MD5sum: e5b1dd534111cd5542cfca0f33e7875a

08/19: download link 下載網址; MD5sum: c8cf1de32a7cf3e57e3bec6aa3fcdc55

08/20: download link 下載網址; MD5sum: 2148775a1f631f3112f5821d92606a7d

08/21: download link 下載網址; MD5sum: 6e075b9520533f587c9cf92ba11c930e

Saturday, August 1, 2026

Botnet Statistics [2026-07-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for July 2026.
detection period: 2026-07-31 00:00-23:59 UTC
total number of suspected botnet IPs: 17713
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16619
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	6005	71490
2	8015	65342
3	8888	64052
4	5900	59536
5	888	38360
6	22	27117
7	3306	25441
8	9000	25420
9	9022	24056
10	3222	23796

Rank	Network	# of suspected botnet IPs
1	MSFT	1345
2	AL-3	1071
3	GOOGLE-CLOUD	1035
4	PAN-22	962
5	INFRAWATCH	863
6	FR-ONYPHE-20191111	448
7	ASEPL-SG	446
8	CENSY	386
9	cloud	251
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7927
2	China	2943
3	United Kingdom	1120
4	Singapore	543
5	Netherlands	542
6	Germany	478
7	France	477
8	Hong Kong	267
9	Russian Federation	265
10	South Korea	206

Subscribe to: Posts (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (6124)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (69)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (237)
  • August (23)
  • July (32)
  • June (29)
  • May (32)
  • April (31)
  • March (31)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	8015	87411
2	5555	76451
3	8888	66005
4	888	40767
5	5000	33905
6	3306	29413
7	8122	29021
8	23	27418
9	22	26733
10	8088	24978