tag:blogger.com,1999:blog-67713846313751756792026-08-27T04:50:50.433+01:00Detect botnets from malicious mail, and notify the responsible ISP.Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.comBlogger9440125tag:blogger.com,1999:blog-6771384631375175679.post-32998642287179662222026-08-26T14:05:48.121+01:002026-08-26T14:05:48.121+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-25 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18709<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17833<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1159</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1036</td></tr> <tr><td>3</td><td>MSFT</td><td align=right>1018</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1005</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>370</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>357</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>280</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8148</td></tr> <tr><td>2</td><td>China</td><td align=right>3271</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1028</td></tr> <tr><td>4</td><td>Germany</td><td align=right>695</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>574</td></tr> <tr><td>6</td><td>France</td><td align=right>540</td></tr> <tr><td>7</td><td>Netherlands</td><td align=right>532</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>332</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>287</td></tr> <tr><td>10</td><td>India</td><td align=right>243</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>3764</td><td align=right>122478</td></tr> <tr><td>2</td><td align=right>69</td><td align=right>100518</td></tr> <tr><td>3</td><td align=right>9280</td><td align=right>83766</td></tr> <tr><td>4</td><td align=right>5361</td><td align=right>78810</td></tr> <tr><td>5</td><td align=right>9592</td><td align=right>77746</td></tr> <tr><td>6</td><td align=right>7588</td><td align=right>71325</td></tr> <tr><td>7</td><td align=right>7967</td><td align=right>68873</td></tr> <tr><td>8</td><td align=right>9123</td><td align=right>66482</td></tr> <tr><td>9</td><td align=right>8081</td><td align=right>64586</td></tr> <tr><td>10</td><td align=right>6506</td><td align=right>63401</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-8614278184905382832026-08-25T14:03:05.110+01:002026-08-25T14:03:05.110+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-24 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18571<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17462<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>AL-3</td><td align=right>1045</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1039</td></tr> <tr><td>3</td><td>MSFT</td><td align=right>1033</td></tr> <tr><td>4</td><td>PAN-22</td><td align=right>958</td></tr> <tr><td>5</td><td>INFRAWATCH</td><td align=right>918</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>382</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>374</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>275</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8028</td></tr> <tr><td>2</td><td>China</td><td align=right>3115</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1145</td></tr> <tr><td>4</td><td>Singapore</td><td align=right>610</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>579</td></tr> <tr><td>6</td><td>France</td><td align=right>564</td></tr> <tr><td>7</td><td>Germany</td><td align=right>417</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>306</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>264</td></tr> <tr><td>10</td><td>Ukraine</td><td align=right>220</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>1483</td><td align=right>134405</td></tr> <tr><td>2</td><td align=right>1057</td><td align=right>97325</td></tr> <tr><td>3</td><td align=right>8912</td><td align=right>77749</td></tr> <tr><td>4</td><td align=right>69</td><td align=right>67092</td></tr> <tr><td>5</td><td align=right>5900</td><td align=right>66998</td></tr> <tr><td>6</td><td align=right>9022</td><td align=right>66773</td></tr> <tr><td>7</td><td align=right>3700</td><td align=right>55879</td></tr> <tr><td>8</td><td align=right>9090</td><td align=right>53661</td></tr> <tr><td>9</td><td align=right>3764</td><td align=right>53607</td></tr> <tr><td>10</td><td align=right>8118</td><td align=right>53294</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-79274803072364780212026-08-24T12:50:06.625+01:002026-08-24T12:50:06.625+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-23 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 19325<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 18348<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1159</td></tr> <tr><td>2</td><td>MSFT</td><td align=right>1080</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1048</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>991</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>395</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>367</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>265</td></tr> <tr><td>10</td><td>cloud</td><td align=right>245</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8257</td></tr> <tr><td>2</td><td>China</td><td align=right>3463</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1067</td></tr> <tr><td>4</td><td>Germany</td><td align=right>691</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>624</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>556</td></tr> <tr><td>7</td><td>France</td><td align=right>549</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>340</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>313</td></tr> <tr><td>10</td><td>Ukraine</td><td align=right>230</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>4076</td><td align=right>54791</td></tr> <tr><td>2</td><td align=right>9022</td><td align=right>52641</td></tr> <tr><td>3</td><td align=right>5900</td><td align=right>51710</td></tr> <tr><td>4</td><td align=right>9090</td><td align=right>48890</td></tr> <tr><td>5</td><td align=right>8162</td><td align=right>48128</td></tr> <tr><td>6</td><td align=right>8472</td><td align=right>46338</td></tr> <tr><td>7</td><td align=right>1217</td><td align=right>45358</td></tr> <tr><td>8</td><td align=right>3700</td><td align=right>45019</td></tr> <tr><td>9</td><td align=right>1483</td><td align=right>44940</td></tr> <tr><td>10</td><td align=right>333</td><td align=right>42870</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-28581235263595475642026-08-23T14:58:50.687+01:002026-08-23T14:58:50.688+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-22 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17756<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16790<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1088</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1050</td></tr> <tr><td>3</td><td>MSFT</td><td align=right>1030</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1007</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>375</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>365</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>264</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7388</td></tr> <tr><td>2</td><td>China</td><td align=right>3136</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>962</td></tr> <tr><td>4</td><td>Germany</td><td align=right>600</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>587</td></tr> <tr><td>6</td><td>France</td><td align=right>551</td></tr> <tr><td>7</td><td>Netherlands</td><td align=right>545</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>349</td></tr> <tr><td>9</td><td>India</td><td align=right>249</td></tr> <tr><td>10</td><td>Russian Federation</td><td align=right>243</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>100356</td></tr> <tr><td>2</td><td align=right>1217</td><td align=right>63785</td></tr> <tr><td>3</td><td align=right>9389</td><td align=right>53072</td></tr> <tr><td>4</td><td align=right>6018</td><td align=right>40466</td></tr> <tr><td>5</td><td align=right>2224</td><td align=right>38114</td></tr> <tr><td>6</td><td align=right>9762</td><td align=right>36882</td></tr> <tr><td>7</td><td align=right>9022</td><td align=right>35685</td></tr> <tr><td>8</td><td align=right>2165</td><td align=right>35596</td></tr> <tr><td>9</td><td align=right>9800</td><td align=right>35402</td></tr> <tr><td>10</td><td align=right>8061</td><td align=right>32105</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-90963586738670226572026-08-22T15:52:10.607+01:002026-08-22T15:52:10.607+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-21 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17519<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16558<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1057</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1039</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1008</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>981</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>960</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>377</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>347</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>264</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7391</td></tr> <tr><td>2</td><td>China</td><td align=right>3165</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>920</td></tr> <tr><td>4</td><td>Germany</td><td align=right>604</td></tr> <tr><td>5</td><td>France</td><td align=right>550</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>539</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>525</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>340</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>276</td></tr> <tr><td>10</td><td>Brazil</td><td align=right>242</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>119830</td></tr> <tr><td>2</td><td align=right>2025</td><td align=right>48878</td></tr> <tr><td>3</td><td align=right>2224</td><td align=right>36540</td></tr> <tr><td>4</td><td align=right>1217</td><td align=right>31601</td></tr> <tr><td>5</td><td align=right>52200</td><td align=right>27836</td></tr> <tr><td>6</td><td align=right>2165</td><td align=right>27091</td></tr> <tr><td>7</td><td align=right>9022</td><td align=right>26274</td></tr> <tr><td>8</td><td align=right>9389</td><td align=right>25454</td></tr> <tr><td>9</td><td align=right>2923</td><td align=right>24539</td></tr> <tr><td>10</td><td align=right>9762</td><td align=right>23301</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-3892508496221121462026-08-21T16:25:17.375+01:002026-08-21T16:25:17.375+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-20 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17745<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16833<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1093</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1053</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>996</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>983</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>378</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>369</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>245</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7916</td></tr> <tr><td>2</td><td>China</td><td align=right>3106</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>719</td></tr> <tr><td>4</td><td>Germany</td><td align=right>672</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>623</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>550</td></tr> <tr><td>7</td><td>France</td><td align=right>527</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>297</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>280</td></tr> <tr><td>10</td><td>India</td><td align=right>230</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>205964</td></tr> <tr><td>2</td><td align=right>5242</td><td align=right>100558</td></tr> <tr><td>3</td><td align=right>6143</td><td align=right>91050</td></tr> <tr><td>4</td><td align=right>2022</td><td align=right>87083</td></tr> <tr><td>5</td><td align=right>1573</td><td align=right>85324</td></tr> <tr><td>6</td><td align=right>1293</td><td align=right>82643</td></tr> <tr><td>7</td><td align=right>2025</td><td align=right>69494</td></tr> <tr><td>8</td><td align=right>6509</td><td align=right>63754</td></tr> <tr><td>9</td><td align=right>8401</td><td align=right>61724</td></tr> <tr><td>10</td><td align=right>1494</td><td align=right>60149</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-50006186554265360092026-08-20T15:14:51.924+01:002026-08-20T15:14:51.924+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-19 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17065<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16114<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1159</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1058</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1038</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>1005</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>388</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>378</td></tr> <tr><td>9</td><td>DE-ALPHA</td><td align=right>262</td></tr> <tr><td>10</td><td>UCLOUD-US</td><td align=right>252</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7538</td></tr> <tr><td>2</td><td>China</td><td align=right>2698</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>765</td></tr> <tr><td>4</td><td>Germany</td><td align=right>703</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>602</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>573</td></tr> <tr><td>7</td><td>France</td><td align=right>543</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>311</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>263</td></tr> <tr><td>10</td><td>India</td><td align=right>229</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>213882</td></tr> <tr><td>2</td><td align=right>2025</td><td align=right>74829</td></tr> <tr><td>3</td><td align=right>9022</td><td align=right>48198</td></tr> <tr><td>4</td><td align=right>2221</td><td align=right>46605</td></tr> <tr><td>5</td><td align=right>5450</td><td align=right>37413</td></tr> <tr><td>6</td><td align=right>1146</td><td align=right>36545</td></tr> <tr><td>7</td><td align=right>5150</td><td align=right>28944</td></tr> <tr><td>8</td><td align=right>4664</td><td align=right>27098</td></tr> <tr><td>9</td><td align=right>2022</td><td align=right>27052</td></tr> <tr><td>10</td><td align=right>5683</td><td align=right>24581</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-40531450572000420172026-08-19T15:49:04.459+01:002026-08-19T15:49:04.459+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-18 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18087<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17010<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1162</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1125</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1030</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>974</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>ASEPL-SG</td><td align=right>486</td></tr> <tr><td>7</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>378</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>257</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8123</td></tr> <tr><td>2</td><td>China</td><td align=right>2824</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>827</td></tr> <tr><td>4</td><td>Germany</td><td align=right>682</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>595</td></tr> <tr><td>6</td><td>France</td><td align=right>566</td></tr> <tr><td>7</td><td>Netherlands</td><td align=right>548</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>299</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>237</td></tr> <tr><td>10</td><td>Argentina</td><td align=right>233</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>218648</td></tr> <tr><td>2</td><td align=right>2025</td><td align=right>67307</td></tr> <tr><td>3</td><td align=right>8888</td><td align=right>55699</td></tr> <tr><td>4</td><td align=right>7022</td><td align=right>54448</td></tr> <tr><td>5</td><td align=right>2221</td><td align=right>46640</td></tr> <tr><td>6</td><td align=right>1222</td><td align=right>37396</td></tr> <tr><td>7</td><td align=right>1841</td><td align=right>27056</td></tr> <tr><td>8</td><td align=right>2022</td><td align=right>26963</td></tr> <tr><td>9</td><td align=right>3921</td><td align=right>24387</td></tr> <tr><td>10</td><td align=right>2880</td><td align=right>23081</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-2680394809306114192026-08-18T14:37:26.111+01:002026-08-18T14:37:26.112+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-17 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17699<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16748<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1135</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1061</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1033</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>982</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>960</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>382</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>375</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>254</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>247</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7687</td></tr> <tr><td>2</td><td>China</td><td align=right>2944</td></tr> <tr><td>3</td><td>Germany</td><td align=right>824</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>784</td></tr> <tr><td>5</td><td>France</td><td align=right>568</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>549</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>493</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>322</td></tr> <tr><td>9</td><td>Argentina</td><td align=right>301</td></tr> <tr><td>10</td><td>Russian Federation</td><td align=right>262</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>203278</td></tr> <tr><td>2</td><td align=right>8888</td><td align=right>68083</td></tr> <tr><td>3</td><td align=right>7022</td><td align=right>54726</td></tr> <tr><td>4</td><td align=right>433</td><td align=right>47219</td></tr> <tr><td>5</td><td align=right>1222</td><td align=right>35721</td></tr> <tr><td>6</td><td align=right>2221</td><td align=right>35241</td></tr> <tr><td>7</td><td align=right>6017</td><td align=right>33662</td></tr> <tr><td>8</td><td align=right>4137</td><td align=right>29951</td></tr> <tr><td>9</td><td align=right>12322</td><td align=right>29675</td></tr> <tr><td>10</td><td align=right>3333</td><td align=right>28639</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-13435611089523444632026-08-17T13:52:00.385+01:002026-08-17T13:52:00.385+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-16 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17976<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16774<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>GOOGLE-CLOUD</td><td align=right>1041</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1027</td></tr> <tr><td>3</td><td>MSFT</td><td align=right>1024</td></tr> <tr><td>4</td><td>PAN-22</td><td align=right>961</td></tr> <tr><td>5</td><td>INFRAWATCH</td><td align=right>921</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>377</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>359</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>241</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8129</td></tr> <tr><td>2</td><td>China</td><td align=right>2975</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>815</td></tr> <tr><td>4</td><td>Netherlands</td><td align=right>577</td></tr> <tr><td>5</td><td>France</td><td align=right>566</td></tr> <tr><td>6</td><td>Germany</td><td align=right>473</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>455</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>286</td></tr> <tr><td>9</td><td>Argentina</td><td align=right>276</td></tr> <tr><td>10</td><td>India</td><td align=right>238</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>181177</td></tr> <tr><td>2</td><td align=right>5555</td><td align=right>50591</td></tr> <tr><td>3</td><td align=right>1652</td><td align=right>41137</td></tr> <tr><td>4</td><td align=right>12322</td><td align=right>36152</td></tr> <tr><td>5</td><td align=right>1111</td><td align=right>35891</td></tr> <tr><td>6</td><td align=right>2000</td><td align=right>34227</td></tr> <tr><td>7</td><td align=right>4137</td><td align=right>32513</td></tr> <tr><td>8</td><td align=right>3333</td><td align=right>31190</td></tr> <tr><td>9</td><td align=right>8888</td><td align=right>31088</td></tr> <tr><td>10</td><td align=right>2959</td><td align=right>30386</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-24180323236450318202026-08-16T13:34:44.612+01:002026-08-16T13:34:44.613+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-15 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17374<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16448<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1126</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1044</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1025</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>1017</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>377</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>370</td></tr> <tr><td>9</td><td>UCLOUD-US</td><td align=right>263</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7348</td></tr> <tr><td>2</td><td>China</td><td align=right>3055</td></tr> <tr><td>3</td><td>Germany</td><td align=right>795</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>739</td></tr> <tr><td>5</td><td>France</td><td align=right>564</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>559</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>480</td></tr> <tr><td>8</td><td>Argentina</td><td align=right>329</td></tr> <tr><td>9</td><td>Hong Kong</td><td align=right>303</td></tr> <tr><td>10</td><td>Russian Federation</td><td align=right>242</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>225538</td></tr> <tr><td>2</td><td align=right>9999</td><td align=right>75803</td></tr> <tr><td>3</td><td align=right>8090</td><td align=right>66212</td></tr> <tr><td>4</td><td align=right>5555</td><td align=right>51544</td></tr> <tr><td>5</td><td align=right>7777</td><td align=right>46530</td></tr> <tr><td>6</td><td align=right>12322</td><td align=right>44302</td></tr> <tr><td>7</td><td align=right>1797</td><td align=right>42855</td></tr> <tr><td>8</td><td align=right>2567</td><td align=right>39298</td></tr> <tr><td>9</td><td align=right>6699</td><td align=right>39220</td></tr> <tr><td>10</td><td align=right>4120</td><td align=right>36647</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-69645027145669254402026-08-15T15:43:31.459+01:002026-08-15T15:43:31.459+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-14 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18072<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17080<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1163</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1089</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1033</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>972</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>451</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>377</td></tr> <tr><td>9</td><td>CMNET</td><td align=right>258</td></tr> <tr><td>10</td><td>UCLOUD-US</td><td align=right>245</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7518</td></tr> <tr><td>2</td><td>China</td><td align=right>3207</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>807</td></tr> <tr><td>4</td><td>Germany</td><td align=right>696</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>571</td></tr> <tr><td>6</td><td>France</td><td align=right>570</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>548</td></tr> <tr><td>8</td><td>Argentina</td><td align=right>311</td></tr> <tr><td>9</td><td>Hong Kong</td><td align=right>310</td></tr> <tr><td>10</td><td>Russian Federation</td><td align=right>277</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>226167</td></tr> <tr><td>2</td><td align=right>9999</td><td align=right>72776</td></tr> <tr><td>3</td><td align=right>8090</td><td align=right>67695</td></tr> <tr><td>4</td><td align=right>7777</td><td align=right>52356</td></tr> <tr><td>5</td><td align=right>1797</td><td align=right>47401</td></tr> <tr><td>6</td><td align=right>2567</td><td align=right>46389</td></tr> <tr><td>7</td><td align=right>5322</td><td align=right>43759</td></tr> <tr><td>8</td><td align=right>6699</td><td align=right>40304</td></tr> <tr><td>9</td><td align=right>4120</td><td align=right>38491</td></tr> <tr><td>10</td><td align=right>1287</td><td align=right>38463</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-45653793256152393112026-08-14T13:15:40.513+01:002026-08-14T13:15:40.513+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-13 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18440<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17447<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>GOOGLE-CLOUD</td><td align=right>1048</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1046</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1019</td></tr> <tr><td>4</td><td>PAN-22</td><td align=right>960</td></tr> <tr><td>5</td><td>MSFT</td><td align=right>878</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>397</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>375</td></tr> <tr><td>9</td><td>CMNET</td><td align=right>249</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7979</td></tr> <tr><td>2</td><td>China</td><td align=right>3148</td></tr> <tr><td>3</td><td>Germany</td><td align=right>718</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>660</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>589</td></tr> <tr><td>6</td><td>France</td><td align=right>581</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>466</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>340</td></tr> <tr><td>9</td><td>Argentina</td><td align=right>308</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>294</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>217707</td></tr> <tr><td>2</td><td align=right>8090</td><td align=right>71650</td></tr> <tr><td>3</td><td align=right>444</td><td align=right>69999</td></tr> <tr><td>4</td><td align=right>22951</td><td align=right>64522</td></tr> <tr><td>5</td><td align=right>9999</td><td align=right>62262</td></tr> <tr><td>6</td><td align=right>20010</td><td align=right>62255</td></tr> <tr><td>7</td><td align=right>27999</td><td align=right>54477</td></tr> <tr><td>8</td><td align=right>7777</td><td align=right>50085</td></tr> <tr><td>9</td><td align=right>1797</td><td align=right>48531</td></tr> <tr><td>10</td><td align=right>2567</td><td align=right>46172</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-33119501866794340062026-08-13T13:27:46.199+01:002026-08-13T13:27:46.199+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-12 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17905<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16966<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1171</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1047</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1014</td></tr> <tr><td>4</td><td>MSFT</td><td align=right>966</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>960</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>379</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>376</td></tr> <tr><td>9</td><td>FR-ONYPHE-20221220</td><td align=right>240</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7582</td></tr> <tr><td>2</td><td>China</td><td align=right>2899</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>817</td></tr> <tr><td>4</td><td>Germany</td><td align=right>773</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>582</td></tr> <tr><td>6</td><td>France</td><td align=right>568</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>455</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>420</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>299</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>273</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>247732</td></tr> <tr><td>2</td><td align=right>8090</td><td align=right>78041</td></tr> <tr><td>3</td><td align=right>444</td><td align=right>69972</td></tr> <tr><td>4</td><td align=right>9999</td><td align=right>64985</td></tr> <tr><td>5</td><td align=right>22951</td><td align=right>63353</td></tr> <tr><td>6</td><td align=right>20010</td><td align=right>62569</td></tr> <tr><td>7</td><td align=right>27999</td><td align=right>52650</td></tr> <tr><td>8</td><td align=right>6007</td><td align=right>51376</td></tr> <tr><td>9</td><td align=right>1797</td><td align=right>48161</td></tr> <tr><td>10</td><td align=right>3005</td><td align=right>48019</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-90060257288782790482026-08-12T14:15:41.151+01:002026-08-12T14:15:41.151+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-11 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18359<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17445<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>INFRAWATCH</td><td align=right>1161</td></tr> <tr><td>2</td><td>MSFT</td><td align=right>1111</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1033</td></tr> <tr><td>4</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>5</td><td>AL-3</td><td align=right>892</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>480</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>371</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>351</td></tr> <tr><td>9</td><td>cloud</td><td align=right>253</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8354</td></tr> <tr><td>2</td><td>China</td><td align=right>2762</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>800</td></tr> <tr><td>4</td><td>Germany</td><td align=right>772</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>581</td></tr> <tr><td>6</td><td>France</td><td align=right>579</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>461</td></tr> <tr><td>8</td><td>Russian Federation</td><td align=right>310</td></tr> <tr><td>9</td><td>Hong Kong</td><td align=right>296</td></tr> <tr><td>10</td><td>Ukraine</td><td align=right>287</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>78296</td></tr> <tr><td>2</td><td align=right>8111</td><td align=right>73261</td></tr> <tr><td>3</td><td align=right>9999</td><td align=right>67303</td></tr> <tr><td>4</td><td align=right>6006</td><td align=right>43734</td></tr> <tr><td>5</td><td align=right>8011</td><td align=right>43039</td></tr> <tr><td>6</td><td align=right>12322</td><td align=right>38928</td></tr> <tr><td>7</td><td align=right>19922</td><td align=right>37557</td></tr> <tr><td>8</td><td align=right>8090</td><td align=right>28985</td></tr> <tr><td>9</td><td align=right>2578</td><td align=right>28641</td></tr> <tr><td>10</td><td align=right>6007</td><td align=right>28089</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-76683222234279373582026-08-11T13:40:59.999+01:002026-08-11T13:41:00.000+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-10 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17561<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16443<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1302</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1057</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1042</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1021</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>963</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>375</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>346</td></tr> <tr><td>9</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>235</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7612</td></tr> <tr><td>2</td><td>China</td><td align=right>2666</td></tr> <tr><td>3</td><td>Germany</td><td align=right>712</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>705</td></tr> <tr><td>5</td><td>France</td><td align=right>531</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>515</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>469</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>305</td></tr> <tr><td>9</td><td>Ukraine</td><td align=right>303</td></tr> <tr><td>10</td><td>Russian Federation</td><td align=right>297</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>72442</td></tr> <tr><td>2</td><td align=right>8123</td><td align=right>59315</td></tr> <tr><td>3</td><td align=right>6006</td><td align=right>41539</td></tr> <tr><td>4</td><td align=right>8011</td><td align=right>33420</td></tr> <tr><td>5</td><td align=right>9999</td><td align=right>26429</td></tr> <tr><td>6</td><td align=right>22</td><td align=right>20024</td></tr> <tr><td>7</td><td align=right>8822</td><td align=right>19573</td></tr> <tr><td>8</td><td align=right>23</td><td align=right>19366</td></tr> <tr><td>9</td><td align=right>8322</td><td align=right>15866</td></tr> <tr><td>10</td><td align=right>389</td><td align=right>15098</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-26087936203932272242026-08-10T12:34:03.321+01:002026-08-10T12:34:03.322+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-09 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18735<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17842<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1323</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1060</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1035</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1021</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>961</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>406</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>373</td></tr> <tr><td>9</td><td>cloud</td><td align=right>289</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>243</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8518</td></tr> <tr><td>2</td><td>China</td><td align=right>3075</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>750</td></tr> <tr><td>4</td><td>Germany</td><td align=right>736</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>550</td></tr> <tr><td>6</td><td>Singapore</td><td align=right>528</td></tr> <tr><td>7</td><td>France</td><td align=right>495</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>479</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>318</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>276</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>127577</td></tr> <tr><td>2</td><td align=right>8090</td><td align=right>44161</td></tr> <tr><td>3</td><td align=right>22</td><td align=right>23918</td></tr> <tr><td>4</td><td align=right>8822</td><td align=right>20055</td></tr> <tr><td>5</td><td align=right>1133</td><td align=right>17360</td></tr> <tr><td>6</td><td align=right>23</td><td align=right>17141</td></tr> <tr><td>7</td><td align=right>1100</td><td align=right>17036</td></tr> <tr><td>8</td><td align=right>389</td><td align=right>16176</td></tr> <tr><td>9</td><td align=right>9999</td><td align=right>13486</td></tr> <tr><td>10</td><td align=right>153</td><td align=right>13455</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-38622644886997394152026-08-09T16:16:14.274+01:002026-08-09T16:16:14.274+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-08 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17805<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16672<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1331</td></tr> <tr><td>2</td><td>GOOGLE-CLOUD</td><td align=right>1032</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1025</td></tr> <tr><td>4</td><td>PAN-22</td><td align=right>961</td></tr> <tr><td>5</td><td>INFRAWATCH</td><td align=right>769</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>378</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>357</td></tr> <tr><td>9</td><td>cloud</td><td align=right>269</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>258</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7498</td></tr> <tr><td>2</td><td>China</td><td align=right>3819</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>654</td></tr> <tr><td>4</td><td>Germany</td><td align=right>545</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>513</td></tr> <tr><td>6</td><td>France</td><td align=right>487</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>461</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>347</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>291</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>255</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>150106</td></tr> <tr><td>2</td><td align=right>5357</td><td align=right>45447</td></tr> <tr><td>3</td><td align=right>7777</td><td align=right>31453</td></tr> <tr><td>4</td><td align=right>888</td><td align=right>31326</td></tr> <tr><td>5</td><td align=right>9443</td><td align=right>28079</td></tr> <tr><td>6</td><td align=right>22</td><td align=right>27022</td></tr> <tr><td>7</td><td align=right>8085</td><td align=right>25553</td></tr> <tr><td>8</td><td align=right>2095</td><td align=right>23452</td></tr> <tr><td>9</td><td align=right>8088</td><td align=right>19807</td></tr> <tr><td>10</td><td align=right>1133</td><td align=right>17933</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-12012819522818286722026-08-08T15:19:45.407+01:002026-08-08T15:19:45.407+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-07 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18679<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17776<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1351</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1060</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1045</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1008</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>374</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>354</td></tr> <tr><td>9</td><td>cloud</td><td align=right>317</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>241</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7607</td></tr> <tr><td>2</td><td>China</td><td align=right>3386</td></tr> <tr><td>3</td><td>Germany</td><td align=right>1631</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>737</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>503</td></tr> <tr><td>6</td><td>France</td><td align=right>483</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>480</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>446</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>307</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>258</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>157780</td></tr> <tr><td>2</td><td align=right>22</td><td align=right>26542</td></tr> <tr><td>3</td><td align=right>1133</td><td align=right>18062</td></tr> <tr><td>4</td><td align=right>23</td><td align=right>17921</td></tr> <tr><td>5</td><td align=right>1100</td><td align=right>17736</td></tr> <tr><td>6</td><td align=right>888</td><td align=right>16841</td></tr> <tr><td>7</td><td align=right>153</td><td align=right>16805</td></tr> <tr><td>8</td><td align=right>8822</td><td align=right>15872</td></tr> <tr><td>9</td><td align=right>389</td><td align=right>15541</td></tr> <tr><td>10</td><td align=right>363</td><td align=right>15320</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-42641389050005246272026-08-07T16:46:34.022+01:002026-08-07T16:46:34.022+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-06 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18668<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17750<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1363</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1126</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1052</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1033</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>958</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>ASEPL-SG</td><td align=right>415</td></tr> <tr><td>8</td><td>CENSY</td><td align=right>376</td></tr> <tr><td>9</td><td>cloud</td><td align=right>289</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>252</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8349</td></tr> <tr><td>2</td><td>China</td><td align=right>2661</td></tr> <tr><td>3</td><td>Germany</td><td align=right>1068</td></tr> <tr><td>4</td><td>United Kingdom</td><td align=right>913</td></tr> <tr><td>5</td><td>Singapore</td><td align=right>543</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>506</td></tr> <tr><td>7</td><td>France</td><td align=right>490</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>398</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>336</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>266</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>90689</td></tr> <tr><td>2</td><td align=right>7777</td><td align=right>78231</td></tr> <tr><td>3</td><td align=right>22012</td><td align=right>32539</td></tr> <tr><td>4</td><td align=right>22</td><td align=right>25258</td></tr> <tr><td>5</td><td align=right>1100</td><td align=right>23637</td></tr> <tr><td>6</td><td align=right>9022</td><td align=right>22877</td></tr> <tr><td>7</td><td align=right>153</td><td align=right>22489</td></tr> <tr><td>8</td><td align=right>173</td><td align=right>21973</td></tr> <tr><td>9</td><td align=right>888</td><td align=right>20989</td></tr> <tr><td>10</td><td align=right>200</td><td align=right>20726</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-2692436679499010892026-08-06T17:28:52.087+01:002026-08-06T17:28:52.087+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-05 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17947<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17039<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1325</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1101</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1047</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>999</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>963</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>376</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>343</td></tr> <tr><td>9</td><td>cloud</td><td align=right>282</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7775</td></tr> <tr><td>2</td><td>China</td><td align=right>2546</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1067</td></tr> <tr><td>4</td><td>Germany</td><td align=right>711</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>531</td></tr> <tr><td>6</td><td>Ukraine</td><td align=right>502</td></tr> <tr><td>7</td><td>France</td><td align=right>480</td></tr> <tr><td>8</td><td>Singapore</td><td align=right>455</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>323</td></tr> <tr><td>10</td><td>Brazil</td><td align=right>276</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>7777</td><td align=right>105477</td></tr> <tr><td>2</td><td align=right>5900</td><td align=right>101561</td></tr> <tr><td>3</td><td align=right>666</td><td align=right>89840</td></tr> <tr><td>4</td><td align=right>22012</td><td align=right>31438</td></tr> <tr><td>5</td><td align=right>888</td><td align=right>30636</td></tr> <tr><td>6</td><td align=right>200</td><td align=right>25578</td></tr> <tr><td>7</td><td align=right>22</td><td align=right>24669</td></tr> <tr><td>8</td><td align=right>9022</td><td align=right>22706</td></tr> <tr><td>9</td><td align=right>3222</td><td align=right>22705</td></tr> <tr><td>10</td><td align=right>153</td><td align=right>22623</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-29980596133027810082026-08-05T13:19:11.308+01:002026-08-05T13:19:11.309+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-04 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18560<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17574<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1399</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1107</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1035</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>969</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>961</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>375</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>370</td></tr> <tr><td>9</td><td>cloud</td><td align=right>275</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8203</td></tr> <tr><td>2</td><td>China</td><td align=right>2539</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1092</td></tr> <tr><td>4</td><td>Germany</td><td align=right>736</td></tr> <tr><td>5</td><td>Ukraine</td><td align=right>669</td></tr> <tr><td>6</td><td>Netherlands</td><td align=right>540</td></tr> <tr><td>7</td><td>France</td><td align=right>488</td></tr> <tr><td>8</td><td>Singapore</td><td align=right>462</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>419</td></tr> <tr><td>10</td><td>Brazil</td><td align=right>281</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>182839</td></tr> <tr><td>2</td><td align=right>7777</td><td align=right>107461</td></tr> <tr><td>3</td><td align=right>2271</td><td align=right>97074</td></tr> <tr><td>4</td><td align=right>666</td><td align=right>94437</td></tr> <tr><td>5</td><td align=right>888</td><td align=right>33910</td></tr> <tr><td>6</td><td align=right>8122</td><td align=right>30275</td></tr> <tr><td>7</td><td align=right>22</td><td align=right>28129</td></tr> <tr><td>8</td><td align=right>3222</td><td align=right>25901</td></tr> <tr><td>9</td><td align=right>200</td><td align=right>23275</td></tr> <tr><td>10</td><td align=right>173</td><td align=right>22740</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-72802282191076407592026-08-04T12:59:51.369+01:002026-08-04T12:59:51.370+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-03 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17597<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16682<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1333</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1085</td></tr> <tr><td>3</td><td>AL-3</td><td align=right>1084</td></tr> <tr><td>4</td><td>GOOGLE-CLOUD</td><td align=right>1034</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>962</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>376</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>373</td></tr> <tr><td>9</td><td>cloud</td><td align=right>299</td></tr> <tr><td>10</td><td>DE-ALPHA</td><td align=right>246</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7908</td></tr> <tr><td>2</td><td>China</td><td align=right>2515</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1159</td></tr> <tr><td>4</td><td>Germany</td><td align=right>737</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>531</td></tr> <tr><td>6</td><td>France</td><td align=right>515</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>468</td></tr> <tr><td>8</td><td>Ukraine</td><td align=right>326</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>313</td></tr> <tr><td>10</td><td>Hong Kong</td><td align=right>278</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>173385</td></tr> <tr><td>2</td><td align=right>2271</td><td align=right>104960</td></tr> <tr><td>3</td><td align=right>666</td><td align=right>62973</td></tr> <tr><td>4</td><td align=right>7777</td><td align=right>45022</td></tr> <tr><td>5</td><td align=right>6022</td><td align=right>39384</td></tr> <tr><td>6</td><td align=right>3222</td><td align=right>26601</td></tr> <tr><td>7</td><td align=right>22</td><td align=right>24954</td></tr> <tr><td>8</td><td align=right>200</td><td align=right>23426</td></tr> <tr><td>9</td><td align=right>9022</td><td align=right>22117</td></tr> <tr><td>10</td><td align=right>173</td><td align=right>21904</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-87156024184000172882026-08-03T15:57:30.089+01:002026-08-03T15:57:30.089+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-02 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 18027<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 17048<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1374</td></tr> <tr><td>2</td><td>AL-3</td><td align=right>1129</td></tr> <tr><td>3</td><td>INFRAWATCH</td><td align=right>1099</td></tr> <tr><td>4</td><td>GOOGLE-CLOUD</td><td align=right>1031</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>959</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>395</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>363</td></tr> <tr><td>9</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> <tr><td>10</td><td>HURRICANE-4</td><td align=right>228</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>8516</td></tr> <tr><td>2</td><td>China</td><td align=right>2763</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1095</td></tr> <tr><td>4</td><td>Germany</td><td align=right>691</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>530</td></tr> <tr><td>6</td><td>Singapore</td><td align=right>513</td></tr> <tr><td>7</td><td>France</td><td align=right>494</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>290</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>221</td></tr> <tr><td>10</td><td>European Union</td><td align=right>192</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>5900</td><td align=right>134738</td></tr> <tr><td>2</td><td align=right>2271</td><td align=right>75433</td></tr> <tr><td>3</td><td align=right>8015</td><td align=right>73845</td></tr> <tr><td>4</td><td align=right>4000</td><td align=right>41091</td></tr> <tr><td>5</td><td align=right>888</td><td align=right>39708</td></tr> <tr><td>6</td><td align=right>6022</td><td align=right>35721</td></tr> <tr><td>7</td><td align=right>10000</td><td align=right>30958</td></tr> <tr><td>8</td><td align=right>3306</td><td align=right>28003</td></tr> <tr><td>9</td><td align=right>22</td><td align=right>26833</td></tr> <tr><td>10</td><td align=right>3222</td><td align=right>24137</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0tag:blogger.com,1999:blog-6771384631375175679.post-60071584829656267732026-08-02T13:19:18.700+01:002026-08-02T13:19:18.701+01:00(To download the latest zombie ip list, please visit the <a href="https://botnet-tracker.blogspot.com/2026/08/daily-zombie-lists-for-august.html">Daily Zombie IP Lists for August 2026</a>.<br /> detection period: 2026-08-01 00:00-23:59 UTC<br /> total number of suspected botnet IPs: 17319<br /> number of botnet IPs notified to network operators (best case, if all mail were sent out successfully): 16488<br /> number of spam blocked: 0<br /> recipient count of spam blocked: 0<br /> <br /> The top 10 networks (as found in WHOIS), ordered by the number of suspected botnet IPs are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"><div class="nobrtable"><br /> </div><table border="1"><tbody> <tr><th>Rank</th><th>Network</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>MSFT</td><td align=right>1360</td></tr> <tr><td>2</td><td>INFRAWATCH</td><td align=right>1108</td></tr> <tr><td>3</td><td>GOOGLE-CLOUD</td><td align=right>1046</td></tr> <tr><td>4</td><td>AL-3</td><td align=right>1041</td></tr> <tr><td>5</td><td>PAN-22</td><td align=right>958</td></tr> <tr><td>6</td><td>FR-ONYPHE-20191111</td><td align=right>448</td></tr> <tr><td>7</td><td>CENSY</td><td align=right>373</td></tr> <tr><td>8</td><td>ASEPL-SG</td><td align=right>373</td></tr> <tr><td>9</td><td>cloud</td><td align=right>301</td></tr> <tr><td>10</td><td>FR-ONYPHE-20221109</td><td align=right>240</td></tr> </tbody></table><br /></div><br /> <div class="nobrtable">The top 10 countries (as defined by the 2-character country code), ordered by the number of suspected botnet IPs are:</div><div class="nobrtable"><style type="text/css"> .nobrtable br { display: none } </style><br /><table border="1"><tbody> <tr><th>Rank</th><th>Country/Region</th><th># of suspected botnet IPs</th></tr> <tr><td>1</td><td>United States</td><td align=right>7801</td></tr> <tr><td>2</td><td>China</td><td align=right>2752</td></tr> <tr><td>3</td><td>United Kingdom</td><td align=right>1107</td></tr> <tr><td>4</td><td>Germany</td><td align=right>708</td></tr> <tr><td>5</td><td>Netherlands</td><td align=right>567</td></tr> <tr><td>6</td><td>France</td><td align=right>502</td></tr> <tr><td>7</td><td>Singapore</td><td align=right>495</td></tr> <tr><td>8</td><td>Hong Kong</td><td align=right>303</td></tr> <tr><td>9</td><td>Russian Federation</td><td align=right>225</td></tr> <tr><td>10</td><td>European Union</td><td align=right>195</td></tr> </div> <br /> The top 10 TCP ports, ordered by the number of connection attempts received are:<style type="text/css"> .nobrtable br { display: none } </style><br /> <div class="nobrtable"> <br /> <table border="1"><tbody> <tr><th>Rank</th><th>TCP port number</th><th># of connection attempts received</th></tr> <tr><td>1</td><td align=right>6005</td><td align=right>71490</td></tr> <tr><td>2</td><td align=right>8015</td><td align=right>65342</td></tr> <tr><td>3</td><td align=right>8888</td><td align=right>64052</td></tr> <tr><td>4</td><td align=right>5900</td><td align=right>59536</td></tr> <tr><td>5</td><td align=right>888</td><td align=right>38360</td></tr> <tr><td>6</td><td align=right>22</td><td align=right>27117</td></tr> <tr><td>7</td><td align=right>3306</td><td align=right>25441</td></tr> <tr><td>8</td><td align=right>9000</td><td align=right>25420</td></tr> <tr><td>9</td><td align=right>9022</td><td align=right>24056</td></tr> <tr><td>10</td><td align=right>3222</td><td align=right>23796</td></tr> </div><div class="blogger-post-footer">Copyright © 2009-2010 Chih-Cherng Chin</div>Chih-Cherng Chinhttp://www.blogger.com/profile/06399972457729354819noreply@blogger.com0