Botnet Statistics [2026-09-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-20 00:00-23:59 UTC
total number of suspected botnet IPs: 17453
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16547
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1368
2	AL-3	1335
3	GOOGLE-CLOUD	1042
4	PAN-22	895
5	ASEPL-SG	486
6	FR-ONYPHE-20191111	480
7	CENSY	376
8	DE-ALPHA	342
9	INFRAWATCH	328
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8615
2	China	2085
3	Germany	747
4	United Kingdom	712
5	Singapore	646
6	France	576
7	Hong Kong	335
8	Netherlands	278
9	Russian Federation	257
10	Indonesia	210

Sunday, September 20, 2026

Botnet Statistics [2026-09-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-19 00:00-23:59 UTC
total number of suspected botnet IPs: 17125
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16111
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	1704	138208
2	99	120162
3	2500	118156
4	9801	110120
5	4711	100694
6	5359	90638
7	7648	89715
8	18012	87277
9	4460	85493
10	3009	84807

Rank	Network	# of suspected botnet IPs
1	MSFT	1401
2	AL-3	1370
3	GOOGLE-CLOUD	1056
4	PAN-22	946
5	INFRAWATCH	697
6	ASEPL-SG	497
7	FR-ONYPHE-20191111	480
8	CENSY	373
9	DE-ALPHA	326
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7927
2	China	2192
3	Germany	803
4	Singapore	693
5	United Kingdom	634
6	France	597
7	Hong Kong	335
8	Netherlands	305
9	Russian Federation	252
10	Indonesia	238

Saturday, September 19, 2026

Botnet Statistics [2026-09-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-18 00:00-23:59 UTC
total number of suspected botnet IPs: 17330
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16344
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	99	174693
2	2222	128794
3	1797	109025
4	14936	102758
5	54984	94125
6	2500	91089
7	36505	87589
8	1700	83663
9	2525	75101
10	3452	70358

Rank	Network	# of suspected botnet IPs
1	MSFT	1380
2	AL-3	1335
3	GOOGLE-CLOUD	1044
4	PAN-22	956
5	ASEPL-SG	526
6	FR-ONYPHE-20191111	480
7	INFRAWATCH	469
8	CENSY	377
9	DE-ALPHA	330
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8042
2	China	2265
3	Singapore	757
4	Germany	686
5	France	595
6	United Kingdom	454
7	Hong Kong	353
8	Netherlands	316
9	Indonesia	276
10	Russian Federation	272

Friday, September 18, 2026

Botnet Statistics [2026-09-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-17 00:00-23:59 UTC
total number of suspected botnet IPs: 17142
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16156
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	99	184664
2	2500	158485
3	8085	131337
4	2343	131113
5	1704	128389
6	4711	127759
7	3452	127661
8	14936	123771
9	1797	118603
10	2222	117937

Rank	Network	# of suspected botnet IPs
1	AL-3	1332
2	MSFT	1329
3	GOOGLE-CLOUD	1044
4	PAN-22	959
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	475
7	CENSY	366
8	INFRAWATCH	330
9	DE-ALPHA	293
10	CMNET	255

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8749
2	China	2254
3	Singapore	626
4	France	557
5	United Kingdom	507
6	Germany	487
7	Hong Kong	309
8	Netherlands	293
9	Indonesia	224
10	Russian Federation	222

Thursday, September 17, 2026

Botnet Statistics [2026-09-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-16 00:00-23:59 UTC
total number of suspected botnet IPs: 15991
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15102
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	62151
2	6022	45763
3	2722	19680
4	2322	19599
5	1222	19529
6	7122	18776
7	4444	18537
8	3522	18374
9	1000	18081
10	2000	18061

Rank	Network	# of suspected botnet IPs
1	MSFT	1480
2	AL-3	1302
3	GOOGLE-CLOUD	1043
4	PAN-22	953
5	ASEPL-SG	489
6	FR-ONYPHE-20191111	480
7	INFRAWATCH	467
8	CENSY	369
9	DE-ALPHA	291
10	cloud	245

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8132
2	China	2017
3	Singapore	632
4	Germany	616
5	France	543
6	United Kingdom	434
7	Netherlands	293
8	Russian Federation	243
9	Hong Kong	217
10	India	210

Wednesday, September 16, 2026

Botnet Statistics [2026-09-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-15 00:00-23:59 UTC
total number of suspected botnet IPs: 18495
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17655
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	68878
2	20102	30794
3	6022	29729
4	2277	26363
5	8083	24394
6	5312	23595
7	2796	22654
8	1638	21911
9	444	21495
10	2337	19811

Rank	Network	# of suspected botnet IPs
1	MSFT	1511
2	AL-3	1414
3	GOOGLE-CLOUD	1043
4	PAN-22	953
5	ASEPL-SG	486
6	FR-ONYPHE-20191111	480
7	INFRAWATCH	478
8	CENSY	370
9	DE-ALPHA	333
10	cloud	257

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9072
2	China	3334
3	Germany	660
4	Singapore	628
5	France	551
6	United Kingdom	476
7	Netherlands	291
8	Hong Kong	254
9	Russian Federation	230
10	Indonesia	209

Tuesday, September 15, 2026

Botnet Statistics [2026-09-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-14 00:00-23:59 UTC
total number of suspected botnet IPs: 18065
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17148
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	137014
2	444	43351
3	2122	38464
4	3122	37830
5	333	29032
6	2254	25158
7	20102	24043
8	2796	23910
9	1111	23347
10	7870	23320

Rank	Network	# of suspected botnet IPs
1	MSFT	1489
2	AL-3	1329
3	INFRAWATCH	1134
4	GOOGLE-CLOUD	1047
5	PAN-22	954
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	473
8	CENSY	365
9	DE-ALPHA	319
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8220
2	China	2706
3	Germany	825
4	United Kingdom	773
5	Singapore	645
6	France	573
7	Netherlands	536
8	Hong Kong	323
9	Russian Federation	246
10	Indonesia	226

Monday, September 14, 2026

Botnet Statistics [2026-09-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-13 00:00-23:59 UTC
total number of suspected botnet IPs: 18776
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17909
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	168439
2	10001	157389
3	444	49991
4	3122	43074
5	2122	42952
6	333	32520
7	8008	29499
8	1111	26296
9	2254	26025
10	122	24867

Rank	Network	# of suspected botnet IPs
1	MSFT	1375
2	AL-3	1364
3	INFRAWATCH	1151
4	GOOGLE-CLOUD	1049
5	PAN-22	957
6	ASEPL-SG	491
7	FR-ONYPHE-20191111	480
8	CENSY	373
9	DE-ALPHA	346
10	cloud	254

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8914
2	China	3043
3	Germany	856
4	United Kingdom	777
5	Singapore	651
6	France	541
7	Netherlands	532
8	Hong Kong	315
9	Russian Federation	245
10	South Korea	184

Sunday, September 13, 2026

Botnet Statistics [2026-09-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-12 00:00-23:59 UTC
total number of suspected botnet IPs: 18128
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17188
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	251929
2	3736	59175
3	2636	50745
4	5055	47751
5	2883	46572
6	8007	42802
7	4010	42219
8	1723	40746
9	5637	40742
10	144	39876

Rank	Network	# of suspected botnet IPs
1	MSFT	1381
2	AL-3	1317
3	GOOGLE-CLOUD	1046
4	INFRAWATCH	1027
5	PAN-22	953
6	ASEPL-SG	505
7	FR-ONYPHE-20191111	480
8	CENSY	372
9	DE-ALPHA	316
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7930
2	China	2933
3	Germany	830
4	United Kingdom	670
5	Singapore	651
6	France	565
7	Netherlands	524
8	Hong Kong	352
9	Russian Federation	315
10	India	237

Saturday, September 12, 2026

Botnet Statistics [2026-09-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-11 00:00-23:59 UTC
total number of suspected botnet IPs: 18165
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17156
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	263270
2	2299	100984
3	20088	68763
4	522	60654
5	58888	59506
6	9374	58980
7	3137	48402
8	2095	47735
9	444	44355
10	1136	43407

Rank	Network	# of suspected botnet IPs
1	MSFT	1376
2	AL-3	1284
3	INFRAWATCH	1137
4	GOOGLE-CLOUD	1040
5	PAN-22	960
6	ASEPL-SG	580
7	FR-ONYPHE-20191111	480
8	CENSY	374
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7912
2	China	3151
3	United Kingdom	774
4	Germany	760
5	Singapore	699
6	France	558
7	Netherlands	556
8	Hong Kong	342
9	Russian Federation	248
10	India	225

Friday, September 11, 2026

Botnet Statistics [2026-09-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-10 00:00-23:59 UTC
total number of suspected botnet IPs: 19769
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18833
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	224995
2	7981	83695
3	2299	81115
4	2987	63781
5	3137	63563
6	58888	59695
7	8443	59632
8	20088	55585
9	3455	45739
10	2095	43100

Rank	Network	# of suspected botnet IPs
1	MSFT	1371
2	INFRAWATCH	1125
3	GOOGLE-CLOUD	1042
4	AL-3	1000
5	PAN-22	956
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	395
8	CENSY	383
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8597
2	China	4001
3	United Kingdom	785
4	Germany	772
5	Singapore	568
6	France	563
7	Netherlands	552
8	Hong Kong	373
9	Russian Federation	259
10	India	236

Thursday, September 10, 2026

Botnet Statistics [2026-09-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-09 00:00-23:59 UTC
total number of suspected botnet IPs: 19958
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18714
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	3137	164834
2	2299	103632
3	5900	101830
4	58888	78749
5	20088	71963
6	2095	61837
7	4302	56164
8	20054	47846
9	7981	31673
10	3222	30907

Rank	Network	# of suspected botnet IPs
1	MSFT	1376
2	AL-3	1176
3	GOOGLE-CLOUD	1044
4	PAN-22	957
5	INFRAWATCH	593
6	ASEPL-SG	494
7	FR-ONYPHE-20191111	480
8	CENSY	376
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8266
2	China	3857
3	United Kingdom	676
4	Singapore	671
5	France	581
6	Germany	557
7	Netherlands	496
8	Hong Kong	338
9	Russian Federation	314
10	India	290

Wednesday, September 9, 2026

Botnet Statistics [2026-09-08]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-08 00:00-23:59 UTC
total number of suspected botnet IPs: 18672
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17719
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	120598
2	8000	53170
3	2229	52982
4	5409	46874
5	8001	43807
6	3011	42660
7	9612	36613
8	9922	35921
9	3033	33251
10	2718	32702

Rank	Network	# of suspected botnet IPs
1	MSFT	1344
2	AL-3	1322
3	GOOGLE-CLOUD	1048
4	PAN-22	956
5	INFRAWATCH	903
6	ASEPL-SG	511
7	FR-ONYPHE-20191111	480
8	CENSY	366
9	DE-ALPHA	276
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8707
2	China	2935
3	Germany	788
4	Singapore	680
5	United Kingdom	629
6	France	551
7	Netherlands	537
8	Hong Kong	316
9	Russian Federation	238
10	Indonesia	208

Tuesday, September 8, 2026

Botnet Statistics [2026-09-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-07 00:00-23:59 UTC
total number of suspected botnet IPs: 17942
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16981
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	168301
2	2229	118617
3	2222	64973
4	515	61176
5	2337	57438
6	22323	55888
7	2252	52641
8	3011	43121
9	8000	38587
10	9922	38254

Rank	Network	# of suspected botnet IPs
1	MSFT	1403
2	AL-3	1315
3	GOOGLE-CLOUD	1047
4	INFRAWATCH	986
5	PAN-22	955
6	ASEPL-SG	497
7	FR-ONYPHE-20191111	480
8	CENSY	359
9	DE-ALPHA	305
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8173
2	China	2688
3	Germany	816
4	Singapore	655
5	United Kingdom	647
6	France	551
7	Netherlands	533
8	Hong Kong	313
9	Russian Federation	273
10	Indonesia	226

Sunday, September 6, 2026

Botnet Statistics [2026-09-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-05 00:00-23:59 UTC
total number of suspected botnet IPs: 19676
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18604
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	136972
2	2222	36594
3	2254	22637
4	9922	22626
5	2229	21952
6	7822	20292
7	318	19462
8	1322	18313
9	22	18255
10	278	17736

Rank	Network	# of suspected botnet IPs
1	AL-3	1429
2	MSFT	1367
3	GOOGLE-CLOUD	1052
4	INFRAWATCH	1010
5	PAN-22	956
6	ASEPL-SG	512
7	FR-ONYPHE-20191111	480
8	CENSY	359
9	DE-ALPHA	306
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8396
2	China	2554
3	United Kingdom	1049
4	Germany	833
5	Singapore	692
6	France	570
7	Netherlands	537
8	Hong Kong	376
9	Russian Federation	345
10	India	284

Saturday, September 5, 2026

Botnet Statistics [2026-09-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-04 00:00-23:59 UTC
total number of suspected botnet IPs: 19782
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18732
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	200388
2	1963	68661
3	2222	63626
4	2463	56269
5	1311	50328
6	2562	46803
7	2225	44978
8	7999	44280
9	6379	42226
10	3338	41937

Rank	Network	# of suspected botnet IPs
1	AL-3	1295
2	MSFT	1238
3	INFRAWATCH	1096
4	GOOGLE-CLOUD	1055
5	PAN-22	953
6	ASEPL-SG	539
7	FR-ONYPHE-20191111	480
8	CENSY	365
9	UCLOUD-US	258
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8154
2	China	2769
3	United Kingdom	1007
4	Singapore	805
5	Germany	761
6	France	582
7	Netherlands	564
8	Hong Kong	412
9	Russian Federation	377
10	India	292

Friday, September 4, 2026

Botnet Statistics [2026-09-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-03 00:00-23:59 UTC
total number of suspected botnet IPs: 20669
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19578
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	213463
2	6379	83340
3	1963	80379
4	7018	58021
5	1991	57564
6	1311	57251
7	2222	44852
8	8082	43995
9	1226	39587
10	6123	37365

Rank	Network	# of suspected botnet IPs
1	MSFT	1379
2	AL-3	1321
3	INFRAWATCH	1117
4	GOOGLE-CLOUD	1057
5	PAN-22	955
6	ASEPL-SG	505
7	FR-ONYPHE-20191111	480
8	CENSY	371
9	DE-ALPHA	251
10	UCLOUD-US	247

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9026
2	China	2946
3	United Kingdom	1094
4	Singapore	817
5	Germany	783
6	Netherlands	597
7	France	577
8	Hong Kong	382
9	Russian Federation	308
10	India	294

Thursday, September 3, 2026

Botnet Statistics [2026-09-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-02 00:00-23:59 UTC
total number of suspected botnet IPs: 20833
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19790
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	147882
2	1963	73833
3	1208	69939
4	1311	56418
5	6379	50873
6	3338	47654
7	2178	45846
8	9011	42006
9	8082	41259
10	1443	40181

Rank	Network	# of suspected botnet IPs
1	AL-3	1426
2	MSFT	1365
3	INFRAWATCH	1145
4	GOOGLE-CLOUD	1049
5	PAN-22	956
6	ASEPL-SG	526
7	FR-ONYPHE-20191111	480
8	CENSY	376
9	DE-ALPHA	300
10	UCLOUD-US	255

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8502
2	China	3190
3	United Kingdom	1302
4	Singapore	840
5	Germany	810
6	Netherlands	608
7	France	590
8	Hong Kong	384
9	Russian Federation	303
10	India	303

Wednesday, September 2, 2026

Botnet Statistics [2026-09-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-01 00:00-23:59 UTC
total number of suspected botnet IPs: 23107
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 21687
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	117646
2	8843	36116
3	1212	34701
4	6379	29383
5	3520	27469
6	5721	26717
7	4444	24334
8	6018	23129
9	3338	21385
10	808	21183

Rank	Network	# of suspected botnet IPs
1	MSFT	1536
2	AL-3	1395
3	GOOGLE-CLOUD	1022
4	PAN-22	955
5	INFRAWATCH	920
6	ASEPL-SG	580
7	FR-ONYPHE-20191111	480
8	CENSY	366
9	CMNET	318
10	DE-ALPHA	299

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9348
2	China	4091
3	United Kingdom	1309
4	Singapore	895
5	Germany	820
6	France	585
7	Netherlands	580
8	Hong Kong	416
9	India	348
10	European Union	342

Daily Zombie Lists for September 2026（2026年09月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for September 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年09月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

09/01: download link 下載網址; MD5sum: 0d3372ce48c42f4a36cce4173969dd91

09/02: download link 下載網址; MD5sum: d27bc38145680f35ee0d15b1e5a92d6f

09/03: download link 下載網址; MD5sum: 8aefb0d4ae98df003e5480cfd8b64eda

09/04: download link 下載網址; MD5sum: 61a37de9f9c9d00bb4dbf609667dd6c0

09/05: download link 下載網址; MD5sum: f1558f655f73e861acd16eac05869f2c

09/07: download link 下載網址; MD5sum: 5672d364c00ef0d30f4d9538f9395adc

09/08: download link 下載網址; MD5sum: e5c1b54a3167ee2430021edea31fa239

09/09: download link 下載網址; MD5sum: e4d4a3bfccd7f1ffcff2874fbd546f25

09/10: download link 下載網址; MD5sum: ee02a604c5b25c0985c19f2c72f2ab84

09/11: download link 下載網址; MD5sum: a078b697988111a17e1f1d2a2ec91033

09/12: download link 下載網址; MD5sum: 0831737aff898a76a00289daadc96ef9

09/13: download link 下載網址; MD5sum: af07853e195ca848455286d7df905dfa

09/14: download link 下載網址; MD5sum: a350c457c20c681a5c2b7f4f68281588

09/15: download link 下載網址; MD5sum: b5f371b874e8ce463ddb5378da6e532d

09/16: download link 下載網址; MD5sum: 780a0f04b03bf25dab4a0ddd454e23b9

09/17: download link 下載網址; MD5sum: 32642e86243e27e75b813d9d1f3a6e5b

09/18: download link 下載網址; MD5sum: 30e30ce7a9a61d794de8f311414e7951

09/19: download link 下載網址; MD5sum: 5393214e04cafac12a2c1e88c94549b0

09/20: download link 下載網址; MD5sum: b7455aefa16464b27ae282af27a5209d

09/21: download link 下載網址; MD5sum: 97be7022425e8e5a6238f7fbd78c68eb

Tuesday, September 1, 2026

Botnet Statistics [2026-08-31]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for August 2026.
detection period: 2026-08-31 00:00-23:59 UTC
total number of suspected botnet IPs: 21741
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 20675
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	165084
2	5721	29855
3	3001	28426
4	4172	28206
5	8786	26218
6	1234	25691
7	3913	24683
8	7236	23997
9	3242	22297
10	6018	21807

Rank	Network	# of suspected botnet IPs
1	AL-3	1373
2	MSFT	1366
3	INFRAWATCH	1177
4	GOOGLE-CLOUD	1058
5	PAN-22	952
6	ASEPL-SG	535
7	FR-ONYPHE-20191111	480
8	CENSY	375
9	UCLOUD-US	247
10	Stella-IT-KRF	242

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8704
2	China	3837
3	United Kingdom	1285
4	Germany	933
5	Singapore	828
6	Netherlands	580
7	France	566
8	Hong Kong	403
9	India	309
10	Russian Federation	302

Subscribe to: Posts (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (6153)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (70)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (267)
  • September (21)
  • August (32)
  • July (32)
  • June (29)
  • May (32)
  • April (31)
  • March (31)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	171801
2	3030	52924
3	1111	46587
4	3740	40595
5	4704	38627
6	2758	34956
7	3990	31476
8	3493	30289
9	3302	30157
10	1022	29610