Botnet Statistics for July 2019

detection period: 2019-07-01 00:00 - 2019-07-31 23:59 UTC
total number of suspected botnet IPs: 134081

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	16260
2	United States	15552
3	Viet Nam	10379
4	Brazil	8199
5	Russian Federation	7358
6	India	7322
7	Indonesia	6796
8	Taiwan	5537
9	Thailand	3108
10	Mexico	2892
11	France	2763
12	Turkey	2750
13	South Korea	2603
14	Egypt	2580
15	Iran	2210
16	Germany	2046
17	Venezuela	1986
18	Ukraine	1978
19	Italy	1930
20	Hong Kong	1606
21	United Kingdom	1456
22	Argentina	1208
23	Philippines	1155
24	Netherlands	1127
25	Pakistan	1009

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	VNPT-VN	4950
2	HINET-NET	4707
3	TELKOMNET	3044
4	VIETTEL-VN	2621
5	02.558.157/0001-62	2512
6	VE-CSVE-LACNIC	1752
7	AT-88-Z	1751
8	AFRINIC-042005	1563
9	KORNET	1499
10	MX-USCV4-LACNIC	1359
11	CHINANET-JS	1235
12	PSYCHZ-NETWORKS	1229
13	FPTDYNAMICIP-NET	1219
14	CHINANET-GD	1169
15	TENCENT-CN	1022
16	BSNLNET	993
17	DO-13	910
18	TencentCloud	891
19	AMAZON-2011L	844
20	CMNET	804
21	BEAMTELE-IN	698
22	TEDATA-20150319	639
23	Baidu	634
24	TurkTelekom	613
25	BHARTI-IN	590

The top 25 TCP ports, ordered by number of connection attempts received are:

Rank	TCP port number	# of connection attempts received
1	445	636986
2	23	613434
3	1723	584077
4	5900	421098
5	22	333298
6	2022	320286
7	110	280217
8	3389	279388
9	222	247060
10	5038	237385
11	2023	234745
12	627	234022
13	5000	230777
14	2024	228682
15	7026	225703
16	2021	224893
17	7030	219209
18	623	217734
19	630	217143
20	102	217062
21	103	216426
22	105	216245
23	8000	215568
24	7032	214954
25	625	214039