Botnet Statistics for August 2019

detection period: 2019-08-01 00:00 - 2019-08-31 23:59 UTC
total number of suspected botnet IPs: 128099

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	18451
2	United States	14334
3	Viet Nam	8936
4	Brazil	7439
5	Russian Federation	6849
6	India	6369
7	Taiwan	6291
8	Indonesia	5869
9	Thailand	2713
10	Mexico	2712
11	Turkey	2561
12	South Korea	2556
13	Germany	2493
14	France	2446
15	Egypt	2314
16	Italy	1862
17	Iran	1808
18	Ukraine	1755
19	Venezuela	1686
20	Hong Kong	1609
21	United Kingdom	1301
22	Argentina	1294
23	Philippines	1201
24	Netherlands	1084
25	Canada	1058

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	5409
2	VNPT-VN	4113
3	TELKOMNET	2785
4	VIETTEL-VN	2389
5	02.558.157/0001-62	2271
6	AT-88-Z	1857
7	CHINANET-JS	1675
8	VE-CSVE-LACNIC	1476
9	MX-USCV4-LACNIC	1374
10	KORNET	1342
11	AFRINIC-042005	1337
12	CHINANET-GD	1321
13	DO-13	1169
14	FPTDYNAMICIP-NET	1082
15	TENCENT-CN	1015
16	CMNET	1011
17	TencentCloud	939
18	BSNLNET	876
19	AMAZON-2011L	811
20	Baidu	731
21	UNICOM-SD	689
22	TurkTelekom	634
23	GOOGLE-CLOUD	623
24	BEAMTELE-IN	620
25	ORG-AFNC1-AFRINIC-20050414	593

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	1723	1136867
2	23	641637
3	445	597892
4	22	470046
5	3389	279881
6	664	261327
7	5900	257553
8	1433	256244
9	1569	235477
10	663	235237
11	30000	211823
12	7046	209673
13	674	209485
14	1400	208287
15	9999	205438
16	3390	199255
17	9000	196617
18	3391	181423
19	110	180122
20	81	165178
21	8080	162659
22	2022	153365
23	222	151344
24	2222	149222
25	2020	148437