Custom Search

Sunday, October 20, 2019

Botnet Statistics for September 2019

detection period: 2019-09-01 00:00 - 2019-09-30 23:59 UTC
total number of suspected botnet IPs: 142242

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

RankCountry# of suspected botnet IPs
1China19147
2United States14348
3Viet Nam11013
4Brazil9078
5Russian Federation8318
6India6720
7Indonesia6294
8Taiwan6179
9Egypt3827
10Turkey3307
11Mexico3284
12Thailand3154
13South Korea2801
14France2788
15Italy2353
16Ukraine2067
17Iran2028
18Venezuela1869
19Germany1642
20Hong Kong1586
21United Kingdom1417
22Argentina1372
23Philippines1206
24Spain1196
25Netherlands1183

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1VNPT-VN5043
2HINET-NET5031
3VIETTEL-VN2950
4TELKOMNET2862
502.558.157/0001-622602
6AT-88-Z1917
7AFRINIC-0420051881
8VE-CSVE-LACNIC1620
9KORNET1581
10FPTDYNAMICIP-NET1386
11MX-USCV4-LACNIC1355
12CHINANET-GD1297
13DO-131211
14TEDATA-201503191112
15CMNET1110
16CHINANET-JS1102
17BSNLNET969
18TencentCloud958
19TENCENT-CN885
20MX-TPTE-LACNIC880
21TurkTelekom801
22AMAZON-2011L726
23UNICOM-SD704
24Baidu700
2540.432.544/0835-06673

The top 25 TCP ports, ordered by number of connection attempts received are:

RankTCP port number# of connection attempts received
1445646399
223566450
322527315
43389180650
55900176870
61433172748
72222170774
8222170553
922222153939
10674150645
112022150521
128080149640
137070139908
1481139746
152200138828
161400137727
172126130068
1830000127548
192020126182
209999126118
215000124665
221569123501
23149122574
248000121055
257071120612

No comments:

Post a Comment