Botnet Statistics for June 2019

detection period: 2019-06-01 00:00 - 2019-06-30 23:59 UTC
total number of suspected botnet IPs: 111644

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	12699
2	United States	11869
3	Viet Nam	8920
4	Brazil	7486
5	Russian Federation	6661
6	India	6390
7	Taiwan	5460
8	Indonesia	5290
9	Thailand	2767
10	South Korea	2431
11	Mexico	2276
12	France	2185
13	Turkey	1932
14	Venezuela	1808
15	Iran	1805
16	Ukraine	1679
17	Italy	1634
18	Hong Kong	1526
19	Germany	1289
20	United Kingdom	1208
21	Philippines	1188
22	Egypt	1154
23	Colombia	960
24	Canada	941
25	Argentina	932

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	4785
2	VNPT-VN	4330
3	VIETTEL-VN	2348
4	02.558.157/0001-62	2330
5	TELKOMNET	2318
6	VE-CSVE-LACNIC	1592
7	KORNET	1492
8	AT-88-Z	1395
9	MX-USCV4-LACNIC	1045
10	AFRINIC-042005	1015
11	CHINANET-GD	953
12	FPTDYNAMICIP-NET	862
13	BSNLNET	850
14	TENCENT-CN	774
15	CHINANET-JS	759
16	TencentCloud	758
17	AMAZON-2011L	724
18	PSYCHZ-NETWORKS	715
19	CMNET	642
20	DO-13	613
21	BEAMTELE-IN	556
22	NETVIGATOR	533
23	BHARTI-IN	501
24	FPT-VN	487
25	ORG-AFNC1-AFRINIC-20050414	476

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	3389	645423
2	445	626839
3	23	499714
4	5038	363147
5	22	361032
6	21	324474
7	222	320443
8	8000	278218
9	2222	265164
10	22222	259376
11	5000	255489
12	2022	251814
13	227	245055
14	4009	240808
15	4010	237664
16	8080	236076
17	89	235650
18	223	233971
19	53	231273
20	88	225607
21	506	220787
22	507	220640
23	95	215705
24	93	215560
25	2200	215500