Botnet Statistics [2026-10-20]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-20 00:00-23:59 UTC
total number of suspected botnet IPs: 19928
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18270
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	MSFT	1500
2	AL-3	1446
3	GOOGLE-CLOUD	1067
4	PAN-22	909
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	480
7	CENSY	374
8	ALISOFT	279
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9693
2	China	2836
3	Singapore	744
4	France	633
5	United Kingdom	586
6	Hong Kong	397
7	Netherlands	370
8	South Korea	302
9	Brazil	281
10	Indonesia	264

Tuesday, October 20, 2026

Botnet Statistics [2026-10-19]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-19 00:00-23:59 UTC
total number of suspected botnet IPs: 19804
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18055
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	456985
2	212	67435
3	9204	48163
4	8000	42350
5	2095	41164
6	9922	39189
7	9443	37373
8	5357	34109
9	9201	33449
10	29	30904

Rank	Network	# of suspected botnet IPs
1	MSFT	1546
2	AL-3	1503
3	GOOGLE-CLOUD	1060
4	PAN-22	910
5	ASEPL-SG	515
6	FR-ONYPHE-20191111	480
7	CENSY	359
8	ALISOFT	270
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9176
2	China	2902
3	Singapore	790
4	France	627
5	United Kingdom	550
6	Hong Kong	399
7	Netherlands	380
8	South Korea	297
9	Indonesia	274
10	Brazil	274

Monday, October 19, 2026

Botnet Statistics [2026-10-18]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-18 00:00-23:59 UTC
total number of suspected botnet IPs: 18430
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16920
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	394207
2	9204	44480
3	9443	43258
4	9922	38726
5	2095	38478
6	555	38059
7	10	33843
8	5357	33804
9	29	33766
10	9201	31871

Rank	Network	# of suspected botnet IPs
1	MSFT	1471
2	AL-3	1298
3	GOOGLE-CLOUD	1055
4	PAN-22	909
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	462
7	CENSY	362
8	FR-ONYPHE-20221220	240
9	FR-ONYPHE-20221109	240
10	HURRICANE-4	224

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9385
2	China	2760
3	Singapore	650
4	France	571
5	United Kingdom	504
6	Netherlands	370
7	South Korea	276
8	Hong Kong	265
9	Russian Federation	210
10	Brazil	192

Sunday, October 18, 2026

Botnet Statistics [2026-10-17]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-17 00:00-23:59 UTC
total number of suspected botnet IPs: 16569
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15159
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	360442
2	6000	76765
3	4	70413
4	9	67998
5	3	65526
6	5	64553
7	8	62819
8	1	62432
9	10	57622
10	2	56744

Rank	Network	# of suspected botnet IPs
1	MSFT	1376
2	AL-3	1211
3	GOOGLE-CLOUD	1059
4	PAN-22	911
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	436
7	CENSY	359
8	INFRAWATCH	341
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7857
2	China	2521
3	United Kingdom	733
4	Singapore	611
5	France	554
6	Netherlands	349
7	Hong Kong	306
8	Germany	199
9	South Korea	197
10	India	195

Saturday, October 17, 2026

Botnet Statistics [2026-10-16]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-16 00:00-23:59 UTC
total number of suspected botnet IPs: 16646
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15281
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	243886
2	9204	46773
3	6000	44808
4	9202	39478
5	9201	39025
6	522	37991
7	2020	36775
8	12222	33684
9	888	31816
10	9206	31334

Rank	Network	# of suspected botnet IPs
1	MSFT	1416
2	AL-3	1250
3	GOOGLE-CLOUD	1061
4	PAN-22	909
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	401
7	CENSY	354
8	FR-ONYPHE-20221220	240
9	FR-ONYPHE-20221109	240
10	CAVISAR-NET1	234

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8158
2	China	2350
3	Singapore	607
4	France	556
5	United Kingdom	537
6	Netherlands	311
7	Hong Kong	290
8	Honduras	242
9	India	196
10	Russian Federation	195

Friday, October 16, 2026

Botnet Statistics [2026-10-15]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-15 00:00-23:59 UTC
total number of suspected botnet IPs: 17971
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16604
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	305589
2	5471	59823
3	9204	54607
4	4117	49692
5	9201	48410
6	9220	46102
7	1159	43612
8	3382	43206
9	9202	41814
10	9210	38867

Rank	Network	# of suspected botnet IPs
1	MSFT	1419
2	AL-3	1302
3	GOOGLE-CLOUD	1065
4	PAN-22	909
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	450
7	CENSY	359
8	INFRAWATCH	283
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8985
2	China	2713
3	United Kingdom	743
4	Singapore	659
5	France	543
6	Netherlands	357
7	Hong Kong	351
8	Russian Federation	206
9	India	206
10	South Korea	189

Thursday, October 15, 2026

Botnet Statistics [2026-10-14]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-14 00:00-23:59 UTC
total number of suspected botnet IPs: 18178
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16844
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	380487
2	27	41954
3	2020	37004
4	9922	33922
5	12222	32461
6	9204	31341
7	2095	30063
8	444	28950
9	1463	28715
10	55555	28642

Rank	Network	# of suspected botnet IPs
1	MSFT	1411
2	AL-3	1263
3	GOOGLE-CLOUD	1051
4	PAN-22	911
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	463
7	CENSY	366
8	INFRAWATCH	263
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8365
2	China	3388
3	United Kingdom	687
4	Singapore	679
5	France	542
6	Netherlands	368
7	Hong Kong	343
8	South Korea	253
9	Russian Federation	212
10	India	211

Wednesday, October 14, 2026

Botnet Statistics [2026-10-13]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-13 00:00-23:59 UTC
total number of suspected botnet IPs: 18669
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17339
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	456806
2	27	58550
3	2095	52961
4	444	39862
5	2020	37179
6	1463	33493
7	12222	31096
8	7777	28660
9	8088	26310
10	4117	25105

Rank	Network	# of suspected botnet IPs
1	MSFT	1384
2	AL-3	1214
3	GOOGLE-CLOUD	1055
4	PAN-22	915
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	443
7	CENSY	372
8	FR-ONYPHE-20221220	240
9	FR-ONYPHE-20221109	240
10	CMNET	227

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8922
2	China	3464
3	Singapore	667
4	France	563
5	United Kingdom	508
6	Hong Kong	361
7	Netherlands	323
8	South Korea	273
9	Russian Federation	233
10	India	223

Tuesday, October 13, 2026

Botnet Statistics [2026-10-12]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-12 00:00-23:59 UTC
total number of suspected botnet IPs: 17911
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16567
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	471329
2	2095	56966
3	26	44508
4	444	39665
5	2020	36112
6	1463	32657
7	12222	30629
8	7777	27204
9	9011	25262
10	27	23665

Rank	Network	# of suspected botnet IPs
1	MSFT	1489
2	AL-3	1301
3	GOOGLE-CLOUD	1049
4	PAN-22	924
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	422
7	CENSY	372
8	FR-ONYPHE-20221220	240
9	FR-ONYPHE-20221109	240
10	CMNET	230

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8648
2	China	2811
3	Singapore	637
4	United Kingdom	611
5	France	568
6	Netherlands	367
7	Hong Kong	345
8	South Korea	279
9	India	263
10	Russian Federation	258

Monday, October 12, 2026

Botnet Statistics [2026-10-11]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-11 00:00-23:59 UTC
total number of suspected botnet IPs: 17651
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16372
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	402614
2	26	72812
3	2095	57855
4	444	40775
5	2020	35939
6	1463	31395
7	7777	23030
8	8088	21914
9	22	18720
10	4117	18165

Rank	Network	# of suspected botnet IPs
1	MSFT	1393
2	AL-3	1236
3	GOOGLE-CLOUD	1067
4	PAN-22	923
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	454
7	CENSY	366
8	FR-ONYPHE-20221220	240
9	FR-ONYPHE-20221109	240
10	CMNET	229

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8700
2	China	2732
3	Singapore	672
4	United Kingdom	652
5	France	563
6	Hong Kong	328
7	Netherlands	303
8	South Korea	289
9	India	205
10	Russian Federation	198

Sunday, October 11, 2026

Botnet Statistics [2026-10-10]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-10 00:00-23:59 UTC
total number of suspected botnet IPs: 16871
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15563
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	388560
2	1463	74120
3	2095	63009
4	4034	44938
5	4117	43611
6	2020	42012
7	1824	37873
8	12022	34184
9	2482	33072
10	8088	30638

Rank	Network	# of suspected botnet IPs
1	MSFT	1390
2	AL-3	1243
3	GOOGLE-CLOUD	1068
4	PAN-22	929
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	437
7	CENSY	372
8	CMNET	261
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7841
2	China	2800
3	Singapore	663
4	United Kingdom	612
5	France	562
6	Hong Kong	361
7	Netherlands	316
8	South Korea	258
9	Russian Federation	213
10	India	196

Saturday, October 10, 2026

Botnet Statistics [2026-10-09]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-09 00:00-23:59 UTC
total number of suspected botnet IPs: 17079
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 15724
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	273818
2	1463	71695
3	2095	63567
4	2104	50030
5	4034	44142
6	2020	42273
7	4117	41734
8	12022	39384
9	1824	36866
10	2482	32817

Rank	Network	# of suspected botnet IPs
1	MSFT	1400
2	AL-3	1243
3	GOOGLE-CLOUD	1061
4	PAN-22	921
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	402
7	CENSY	362
8	CMNET	245
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8017
2	China	2821
3	United Kingdom	701
4	Singapore	632
5	France	560
6	Hong Kong	349
7	Netherlands	296
8	South Korea	225
9	India	221
10	Russian Federation	220

Thursday, October 8, 2026

Botnet Statistics [2026-10-07]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-07 00:00-23:59 UTC
total number of suspected botnet IPs: 18294
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16884
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	234929
2	55555	124538
3	2095	104570
4	1463	68593
5	2104	48123
6	2020	41782
7	4034	41563
8	4117	39967
9	12022	39482
10	8088	38782

Rank	Network	# of suspected botnet IPs
1	MSFT	1477
2	AL-3	1262
3	GOOGLE-CLOUD	1047
4	PAN-22	932
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	454
7	INFRAWATCH	448
8	CENSY	414
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8321
2	China	3336
3	United Kingdom	744
4	Singapore	633
5	France	574
6	Netherlands	374
7	Hong Kong	305
8	Germany	268
9	Russian Federation	249
10	India	213

Wednesday, October 7, 2026

Botnet Statistics [2026-10-06]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-06 00:00-23:59 UTC
total number of suspected botnet IPs: 20769
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 19415
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	188432
2	1463	67460
3	4117	63017
4	2095	59139
5	1024	50690
6	2104	48131
7	4025	44826
8	4034	41555
9	6701	41114
10	12022	39440

Rank	Network	# of suspected botnet IPs
1	MSFT	1506
2	AL-3	1304
3	GOOGLE-CLOUD	1059
4	PAN-22	934
5	CLOUDFLARENET	785
6	FR-ONYPHE-20191111	480
7	ASEPL-SG	458
8	CENSY	374
9	INFRAWATCH	316
10	CMNET	251

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9598
2	China	4571
3	United Kingdom	692
4	Singapore	667
5	France	550
6	Hong Kong	319
7	Netherlands	303
8	Germany	288
9	Russian Federation	215
10	Indonesia	209

Tuesday, October 6, 2026

Botnet Statistics [2026-10-05]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-05 00:00-23:59 UTC
total number of suspected botnet IPs: 19714
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18338
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	163082
2	2095	84347
3	322	43478
4	12022	39591
5	6924	38338
6	6600	33664
7	23	32945
8	55555	27624
9	9339	26747
10	4117	25448

Rank	Network	# of suspected botnet IPs
1	MSFT	1552
2	AL-3	1274
3	GOOGLE-CLOUD	1070
4	PAN-22	933
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	456
7	CENSY	374
8	INFRAWATCH	321
9	FR-ONYPHE-20221220	240
10	FR-ONYPHE-20221109	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8572
2	China	4060
3	Singapore	692
4	United Kingdom	687
5	France	636
6	Germany	449
7	Netherlands	325
8	Hong Kong	314
9	South Korea	261
10	Indonesia	223

Monday, October 5, 2026

Botnet Statistics [2026-10-04]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-04 00:00-23:59 UTC
total number of suspected botnet IPs: 20010
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18603
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	63937
2	1023	52757
3	12022	39362
4	2095	32176
5	23	32082
6	7093	24697
7	8025	22927
8	8030	22832
9	7094	22468
10	8027	22466

Rank	Network	# of suspected botnet IPs
1	MSFT	1530
2	AL-3	1372
3	GOOGLE-CLOUD	1058
4	PAN-22	940
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	462
7	CENSY	376
8	DE-ALPHA	327
9	INFRAWATCH	312
10	ALISOFT	255

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9093
2	China	3842
3	Germany	705
4	United Kingdom	673
5	Singapore	647
6	France	634
7	Netherlands	332
8	Hong Kong	258
9	South Korea	241
10	Russian Federation	228

Sunday, October 4, 2026

Botnet Statistics [2026-10-03]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-03 00:00-23:59 UTC
total number of suspected botnet IPs: 18422
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17082
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	93307
2	1023	85355
3	2095	55226
4	8020	37130
5	12022	35927
6	2425	33196
7	23	32089
8	7094	31214
9	8030	30084
10	888	28524

Rank	Network	# of suspected botnet IPs
1	MSFT	1504
2	AL-3	1359
3	GOOGLE-CLOUD	1058
4	PAN-22	950
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	467
7	CENSY	376
8	DE-ALPHA	327
9	INFRAWATCH	311
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	7960
2	China	3843
3	United Kingdom	671
4	Singapore	626
5	France	575
6	Germany	574
7	Netherlands	336
8	Hong Kong	231
9	South Korea	216
10	Russian Federation	204

Saturday, October 3, 2026

Botnet Statistics [2026-10-02]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-02 00:00-23:59 UTC
total number of suspected botnet IPs: 19350
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18045
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	149339
2	2095	52657
3	1023	47935
4	8020	34769
5	7094	30565
6	8030	29622
7	888	29549
8	23	28863
9	8025	28577
10	22	28421

Rank	Network	# of suspected botnet IPs
1	MSFT	1486
2	AL-3	1339
3	GOOGLE-CLOUD	1064
4	PAN-22	950
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	461
7	CENSY	376
8	INFRAWATCH	334
9	DE-ALPHA	311
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8518
2	China	3944
3	United Kingdom	698
4	Singapore	622
5	Germany	572
6	France	567
7	Netherlands	337
8	Hong Kong	310
9	South Korea	278
10	Russian Federation	234

Botnet Statistics [2026-10-01]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-10-01 00:00-23:59 UTC
total number of suspected botnet IPs: 20262
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18984
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	145830
2	55555	104578
3	2095	46038
4	2022	35511
5	8020	33233
6	888	31741
7	23	30707
8	7094	30136
9	22	28992
10	8088	28481

Rank	Network	# of suspected botnet IPs
1	MSFT	1512
2	AL-3	1333
3	GOOGLE-CLOUD	1067
4	PAN-22	950
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	459
7	INFRAWATCH	388
8	CENSY	375
9	DE-ALPHA	328
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	9054
2	China	4072
3	United Kingdom	779
4	Singapore	633
5	France	574
6	Germany	566
7	Netherlands	334
8	South Korea	290
9	Hong Kong	287
10	Russian Federation	256

Friday, October 2, 2026

Daily Zombie Lists for October 2026（2026年10月，每日殭屍電腦IP清單）

To facilitate security research, I will release the daily zombie IP lists in CSV format here for anyone interested to download. The data columns are defined as follows:

為協助資安方面的研究，我將每日釋出CSV格式的殭屍電腦IP清單，供任何有興趣的人下載。資料欄位定義如下：

Column 1: The date and time in UTC when the last connection attempt (port scans) from the zombie IP (column 2) was detected;

第1欄：該殭屍電腦最後一次被偵測到企圖連線的日期、時間，時區為UTC；

Column 2: Zombie IP;

第2欄：該殭屍電腦的IP位址；

Column 3: TCP destination port number scanned by the zombie.

第3欄：該殭屍電腦所掃描的TCP埠號。

Join the "Suspected Zombie IP List" Telegram channel to get notified when the latest data are ready for download.

想在第一時間取得資料下載網址？請加入Suspected Zombie IP List的Telegram頻道。

Here are the download links of the daily zombie IP lists for October 2026 (without excluding IP addresses of TOR exits and so-called security researchers' nodes.):

以下是2026年10月的每日殭屍電腦IP清單的下載網址(未濾除TOR exit與所謂“資安研究者”的主機IP)：

10/01: download link 下載網址; MD5sum: 5d358b944bd0b78319ad645fc1e8850e

10/02: download link 下載網址; MD5sum: a06b53bcb61aaadab5de1b9daf419e4e

10/03: download link 下載網址; MD5sum: 11289315c81ea37a5e2c9be66244e844

10/04: download link 下載網址; MD5sum: 165d5387e04a5930d5e441d28141d4c0

10/05: download link 下載網址; MD5sum: d26b2b6c5ab4e7a6910737822f23e074

10/06: download link 下載網址; MD5sum: 0bc58bafe8285e073a95da78175d7615

10/07: download link 下載網址; MD5sum: c30201c280004e224d7a4f830b7633a0

10/08: download link 下載網址; MD5sum: 1b565aa8a3c71b485cfb022c4de1ad4b

10/09: download link 下載網址; MD5sum: d9011af32b451ad960c9fac156c3f841

10/10: download link 下載網址; MD5sum: 75b8cde5f2de114da1e1fb44799d2af4

10/11: download link 下載網址; MD5sum: e20ddad83cd844dd4bcae12615e19338

10/12: download link 下載網址; MD5sum: 67033fcd5e8e9cc329dae0fa3011ba49

10/13: download link 下載網址; MD5sum: 05805ff14fd4f56c8c7aefb0fb3598af

10/14: download link 下載網址; MD5sum: b737a9dcc735b54f30a40a2d1c0c6d35

10/15: download link 下載網址; MD5sum: 7a70a47f0e6f41247d21f4d9954b1a48

10/16: download link 下載網址; MD5sum: 57e638fe291211cf8844f64b74474be6

10/17: download link 下載網址; MD5sum: 07f2e70a35548540e858ed15c8e54b6d

10/18: download link 下載網址; MD5sum: 72dfa23df8db200a011527721028c265

10/19: download link 下載網址; MD5sum: c69a299317005e90475e6f2ddcdf11d9

10/20: download link 下載網址; MD5sum: 90a68e9910202ed1046f747d2ce16c93

Thursday, October 1, 2026

Botnet Statistics [2026-09-30]

(To download the latest zombie ip list, please visit the Daily Zombie IP Lists for September 2026.
detection period: 2026-09-30 00:00-23:59 UTC
total number of suspected botnet IPs: 19015
number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17595
number of spam blocked: 0
recipient count of spam blocked: 0

The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:

Rank	TCP port number	# of connection attempts received
1	5900	202712
2	55555	135917
3	2095	49484
4	8020	31453
5	8027	31287
6	888	31181
7	7100	30217
8	7094	29132
9	8025	29097
10	22	27852

Rank	Network	# of suspected botnet IPs
1	MSFT	1518
2	AL-3	1366
3	GOOGLE-CLOUD	1061
4	PAN-22	928
5	FR-ONYPHE-20191111	480
6	ASEPL-SG	452
7	INFRAWATCH	382
8	CENSY	374
9	DE-ALPHA	277
10	FR-ONYPHE-20221220	240

The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:

The top 10 TCP ports, ordered by the number of connection attempts received are:

Rank	Country/Region	# of suspected botnet IPs
1	United States	8420
2	China	3687
3	United Kingdom	659
4	Singapore	615
5	Germany	582
6	France	575
7	Netherlands	308
8	South Korea	265
9	India	244
10	Hong Kong	243

Subscribe to: Posts (Atom)

Subscribe for Free

Daily Top 10 Botnet Info!

Pages

• Home
• Human Readable Sitemap

Featured Posts

• ZBTrap: a Virtual Appliance for Botnet Detection
• Botnet Statistics for February 2018
• Botnet Statistics for the year of 2017
• Building a botnet detector with Exim and SQLite, a step-by-step procedure wannabe
• How could China cut spam so effectively?
• DISAN: a proposed framework for botnet mitigation
• DDoS attacks make Wikileaks a great botnet detection system

About Botnet Tracker

Chih-Cherng Chin

Taiwan

I submitted a paper titled "Follow the spam: a botnet detection and notification mechanism" (in Chinese) to this year's TANET conference (TANET 2010), and it has been accepted. In that paper, I pointed out the problem with botnet mitigation measures which focus on taking C&C servers offline, described the detection strategy of "follow the spam," and made a general sketch of how I detect and report botnets. So far I have only implemented half of the "follow the spam" strategy. Hope someone else will implement the other half.

My previous work was an open relay detection and notification system (presented at TANET 2006 conference), which was able to uncover more than 1200 open relays (confirmed by ORDB) each month at the time.

View my complete profile

Labels

• bot list (3009)
• botnet chart (6181)
• botnet detection (8)
• botnet mitigation (6)
• cyber security (2)
• daily zombie IP list (70)
• google adsense (1)
• greylisting (3)
• haproxy (2)
• monthly statistics (125)
• open proxy (1)
• port scan (2)
• suspected bots ip (96)
• yearly statistics (8)
• ZBTrap (1)

Blog Archive

• ▼  2026 (296)
  • October (21)
  • September (29)
  • August (32)
  • July (32)
  • June (29)
  • May (32)
  • April (31)
  • March (31)
  • February (29)
  • January (30)

• ►  2025 (371)
  • December (31)
  • November (31)
  • October (32)
  • September (31)
  • August (30)
  • July (31)
  • June (30)
  • May (32)
  • April (30)
  • March (32)
  • February (29)
  • January (32)

• ►  2024 (378)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (32)

• ►  2023 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (31)

• ►  2022 (376)
  • December (32)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (28)
  • January (32)

• ►  2021 (373)
  • December (28)
  • November (31)
  • October (32)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (29)
  • January (32)

• ►  2020 (701)
  • December (33)
  • November (60)
  • October (62)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (60)
  • April (60)
  • March (62)
  • February (58)
  • January (62)

• ►  2019 (738)
  • December (62)
  • November (59)
  • October (65)
  • September (60)
  • August (62)
  • July (62)
  • June (60)
  • May (64)
  • April (58)
  • March (66)
  • February (56)
  • January (64)

• ►  2018 (752)
  • December (62)
  • November (65)
  • October (63)
  • September (62)
  • August (65)
  • July (64)
  • June (61)
  • May (64)
  • April (61)
  • March (64)
  • February (59)
  • January (62)

• ►  2017 (729)
  • December (64)
  • November (62)
  • October (58)
  • September (58)
  • August (64)
  • July (62)
  • June (62)
  • May (58)
  • April (54)
  • March (64)
  • February (58)
  • January (65)

• ►  2016 (757)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (61)
  • May (64)
  • April (62)
  • March (64)
  • February (61)
  • January (65)

• ►  2015 (737)
  • December (64)
  • November (62)
  • October (62)
  • September (61)
  • August (64)
  • July (62)
  • June (60)
  • May (64)
  • April (54)
  • March (64)
  • February (56)
  • January (64)

• ►  2014 (745)
  • December (64)
  • November (60)
  • October (64)
  • September (58)
  • August (60)
  • July (64)
  • June (62)
  • May (64)
  • April (62)
  • March (64)
  • February (58)
  • January (65)

• ►  2013 (750)
  • December (64)
  • November (62)
  • October (64)
  • September (62)
  • August (64)
  • July (64)
  • June (64)
  • May (63)
  • April (61)
  • March (61)
  • February (57)
  • January (64)

• ►  2012 (528)
  • December (63)
  • November (61)
  • October (63)
  • September (61)
  • August (59)
  • July (32)
  • June (31)
  • May (32)
  • April (31)
  • March (32)
  • February (30)
  • January (33)

• ►  2011 (382)
  • December (32)
  • November (31)
  • October (33)
  • September (31)
  • August (32)
  • July (32)
  • June (31)
  • May (33)
  • April (31)
  • March (33)
  • February (29)
  • January (34)

• ►  2010 (387)
  • December (33)
  • November (32)
  • October (32)
  • September (33)
  • August (30)
  • July (32)
  • June (31)
  • May (32)
  • April (40)
  • March (32)
  • February (29)
  • January (31)

• ►  2009 (119)
  • December (31)
  • November (31)
  • October (33)
  • September (24)

Rank	TCP port number	# of connection attempts received
1	5900	212837
2	55555	121801
3	8085	87966
4	2095	76973
5	2078	64104
6	8025	43140
7	9999	42795
8	2222	40318
9	8027	39122
10	7100	34895