Botnet Statistics for May 2019

detection period: 2019-05-01 00:00 - 2019-05-31 23:59 UTC
total number of suspected botnet IPs: 106835

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	11977
2	United States	10669
3	Viet Nam	9740
4	Brazil	7253
5	Russian Federation	6860
6	Indonesia	6186
7	India	6025
8	Taiwan	5321
9	Mexico	2598
10	Thailand	2524
11	France	2074
12	Venezuela	1930
13	South Korea	1929
14	Turkey	1842
15	Ukraine	1686
16	Iran	1416
17	Germany	1342
18	Hong Kong	1309
19	Italy	1263
20	Philippines	1094
21	United Kingdom	1063
22	Egypt	1046
23	Netherlands	918
24	Colombia	897
25	Canada	874

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	4782
2	HINET-NET	4704
3	TELKOMNET	2695
4	VIETTEL-VN	2448
5	02.558.157/0001-62	2244
6	VE-CSVE-LACNIC	1707
7	AT-88-Z	1704
8	MX-USCV4-LACNIC	1312
9	KORNET	1115
10	FPTDYNAMICIP-NET	988
11	CHINANET-GD	932
12	AFRINIC-042005	921
13	AMAZON-2011L	856
14	TENCENT-CN	831
15	BSNLNET	830
16	TencentCloud	729
17	BEAMTELE-IN	658
18	CHINANET-JS	613
19	DO-13	609
20	FPT-VN	535
21	BHARTI-IN	458
22	CMNET	450
23	MX-GDUN-LACNIC	447
24	Baidu	440
25	CHINANET-SC	427

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	3389	894985
2	8000	774530
3	5000	766078
4	3000	622366
5	445	610852
6	88	594753
7	8083	585587
8	6001	553647
9	10000	536022
10	8081	530127
11	8080	529877
12	8087	526838
13	8086	524193
14	222	517864
15	4444	505650
16	2222	505143
17	3002	504435
18	8008	503360
19	3001	502418
20	7071	499452
21	111	498405
22	9009	496791
23	9001	494745
24	666	491897
25	2233	491370