Botnet Statistics for October 2019

detection period: 2019-10-01 00:00 - 2019-10-31 23:59 UTC
total number of suspected botnet IPs: 158338

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	24755
2	United States	13685
3	Viet Nam	12900
4	Russian Federation	9951
5	Brazil	9544
6	India	8000
7	Indonesia	7962
8	Taiwan	5671
9	Turkey	3804
10	Thailand	3757
11	Mexico	3151
12	South Korea	3124
13	Egypt	2887
14	Venezuela	2725
15	France	2583
16	Iran	2571
17	Ukraine	2528
18	Italy	2327
19	Hong Kong	1794
20	Germany	1779
21	United Kingdom	1547
22	Philippines	1499
23	Pakistan	1289
24	Argentina	1259
25	Colombia	1186

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	5586
2	HINET-NET	4317
3	TELKOMNET	3792
4	VIETTEL-VN	3523
5	02.558.157/0001-62	2693
6	VE-CSVE-LACNIC	2430
7	AT-88-Z	1844
8	FPTDYNAMICIP-NET	1820
9	KORNET	1752
10	AFRINIC-042005	1742
11	CMNET	1682
12	CHINANET-JS	1661
13	MX-USCV4-LACNIC	1580
14	CHINANET-GD	1578
15	BSNLNET	1276
16	TencentCloud	1219
17	TENCENT-CN	969
18	Baidu	966
19	AMAZON-2011L	898
20	TurkTelekom	885
21	UNICOM-SD	837
22	DO-13	806
23	ORG-AFNC1-AFRINIC-20050414	789
24	BEAMTELE-IN	740
25	FPT-VN	720

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	784045
2	22	540522
3	23	472073
4	2	330593
5	4022	256551
6	3389	206471
7	1433	201715
8	5900	196923
9	9001	189103
10	999	188954
11	9000	166000
12	2706	156806
13	7135	155743
14	2712	155686
15	2709	155634
16	2710	153778
17	2704	153500
18	962	152458
19	222	151891
20	2705	151761
21	2702	150344
22	2700	149649
23	2161	148628
24	964	148065
25	2708	147256