Botnet Statistics for September 2019

detection period: 2019-09-01 00:00 - 2019-09-30 23:59 UTC
total number of suspected botnet IPs: 142242

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	19147
2	United States	14348
3	Viet Nam	11013
4	Brazil	9078
5	Russian Federation	8318
6	India	6720
7	Indonesia	6294
8	Taiwan	6179
9	Egypt	3827
10	Turkey	3307
11	Mexico	3284
12	Thailand	3154
13	South Korea	2801
14	France	2788
15	Italy	2353
16	Ukraine	2067
17	Iran	2028
18	Venezuela	1869
19	Germany	1642
20	Hong Kong	1586
21	United Kingdom	1417
22	Argentina	1372
23	Philippines	1206
24	Spain	1196
25	Netherlands	1183

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	5043
2	HINET-NET	5031
3	VIETTEL-VN	2950
4	TELKOMNET	2862
5	02.558.157/0001-62	2602
6	AT-88-Z	1917
7	AFRINIC-042005	1881
8	VE-CSVE-LACNIC	1620
9	KORNET	1581
10	FPTDYNAMICIP-NET	1386
11	MX-USCV4-LACNIC	1355
12	CHINANET-GD	1297
13	DO-13	1211
14	TEDATA-20150319	1112
15	CMNET	1110
16	CHINANET-JS	1102
17	BSNLNET	969
18	TencentCloud	958
19	TENCENT-CN	885
20	MX-TPTE-LACNIC	880
21	TurkTelekom	801
22	AMAZON-2011L	726
23	UNICOM-SD	704
24	Baidu	700
25	40.432.544/0835-06	673

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	646399
2	23	566450
3	22	527315
4	3389	180650
5	5900	176870
6	1433	172748
7	2222	170774
8	222	170553
9	22222	153939
10	674	150645
11	2022	150521
12	8080	149640
13	7070	139908
14	81	139746
15	2200	138828
16	1400	137727
17	2126	130068
18	30000	127548
19	2020	126182
20	9999	126118
21	5000	124665
22	1569	123501
23	149	122574
24	8000	121055
25	7071	120612