Custom Search

Saturday, December 31, 2016

Suspected Bot List [2016-12-30]

detection period: 2016-12-30 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2016-12-30]

detection period: 2016-12-30 00:00-23:59 UTC
total number of suspected botnet IPs: 208
number of botnet IPs notified to network operators: 203
number of spam blocked: 5763
recipient count of spam blocked: 9795

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN64
2CHINANET-HB15
3CMNET12
4UNICOM-BJ11
5CHINANET-JS7
6CHINANET-SH6
7CHINANET-GD5
8CHINANET-CQ5
9HINET-NET4
10UNICOM-SD3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China168
2United States7
3Taiwan4
4India4
5Viet Nam3
6Brazil3
7South Africa2
8Russian Federation2
9South Korea2
10Ukraine1

Friday, December 30, 2016

Suspected Bot List [2016-12-29]

detection period: 2016-12-29 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2016-12-29]

detection period: 2016-12-29 00:00-23:59 UTC
total number of suspected botnet IPs: 356
number of botnet IPs notified to network operators: 351
number of spam blocked: 13040
recipient count of spam blocked: 18039

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN210
2CHINANET-HB23
3UNICOM-BJ11
4CMNET9
5UNICOM-SD6
6CHINANET-JS6
7CHINANET-GD4
8CHINANET-CQ4
9VNPT-VNNIC-VN3
10UNICOM-GX3

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China309
2Viet Nam6
3United States6
4Taiwan5
5Romania3
6South Africa2
7Netherlands2
8South Korea2
9Japan2
10Hong Kong2

Thursday, December 29, 2016

Suspected Bot List [2016-12-28]

detection period: 2016-12-28 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2016-12-28]

detection period: 2016-12-28 00:00-23:59 UTC
total number of suspected botnet IPs: 354
number of botnet IPs notified to network operators: 349
number of spam blocked: 13746
recipient count of spam blocked: 21303

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN203
2CHINANET-HB14
3UNICOM-ZJ9
4CMNET9
5UNICOM-BJ8
6CHINANET-JS7
7UNICOM-SD5
8VNPT-VNNIC-VN4
9UNICOM-GX4
10HINET-NET4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China305
2Viet Nam6
3Russian Federation6
4Taiwan4
5United Kingdom4
6United States3
7Ukraine3
8Pakistan2
9Iran2
10Germany2

Wednesday, December 28, 2016

Suspected Bot List [2016-12-27]

detection period: 2016-12-27 00:00-23:59 UTC
number of suspected bots' IPs listed here: 6

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2016-12-27]

detection period: 2016-12-27 00:00-23:59 UTC
total number of suspected botnet IPs: 505
number of botnet IPs notified to network operators: 499
number of spam blocked: 13762
recipient count of spam blocked: 20251

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN183
2UNICOM-ZJ97
3WASU-BB66
4WASU22
5CHINANET-HB18
6CMNET10
7CHINANET-GD8
8VNPT-VNNIC-VN6
9VIETEL-VNNIC-VN4
10UNICOM-SD4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China466
2Viet Nam11
3Taiwan7
4India3
5South Africa2
6Brazil2
7Argentina2
8United States1
9Ukraine1
10Russian Federation1

Tuesday, December 27, 2016

Suspected Bot List [2016-12-26]

detection period: 2016-12-26 00:00-23:59 UTC
number of suspected bots' IPs listed here: 2

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry

List from greylisting:

Botnet Statistics [2016-12-26]

detection period: 2016-12-26 00:00-23:59 UTC
total number of suspected botnet IPs: 389
number of botnet IPs notified to network operators: 387
number of spam blocked: 10595
recipient count of spam blocked: 14465

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN161
2UNICOM-ZJ54
3WASU-BB28
4CHINANET-HB28
5CMNET13
6VNPT-VNNIC-VN9
7WASU7
8UNICOM-BJ7
9UNICOM-SD4
10CHINANET-GD4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China338
2Viet Nam17
3Taiwan6
4Brazil6
5Russian Federation3
6India3
7Germany3
8United States2
9Thailand2
10South Africa1

Monday, December 26, 2016

Suspected Bot List [2016-12-25]

detection period: 2016-12-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 25

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
BD58.147.173.36Bangladesh
BD202.5.37.132Bangladesh
FR193.252.26.9France
GA197.231.141.29Gabon
GT181.209.238.225Guatemala
HT200.113.221.17Haiti
ID118.98.125.58Indonesia
ID203.190.113.186Indonesia
IN59.145.146.94India
IN125.17.80.106India
IN182.75.205.202India
IN182.75.213.102India
NI190.124.32.202Nicaragua
PK110.38.217.63Pakistan
RO89.165.156.233Romania
SC41.86.56.47Seychelles
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-25]

detection period: 2016-12-25 00:00-23:59 UTC
total number of suspected botnet IPs: 506
number of botnet IPs notified to network operators: 481
number of spam blocked: 12335
recipient count of spam blocked: 15075

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN165
2CHINANET-HB30
3CMNET24
4CHINANET-GD11
5CHINANET-YN10
6UNICOM-BJ9
7UNICOM-GD8
8CHINANET-CQ8
9UNICOM-SD7
10UNICOM-JX7

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China352
2India17
3Taiwan11
4Bangladesh9
5Brazil8
6Cambodia7
7South Korea6
8Colombia6
9United States5
10El Salvador5

Sunday, December 25, 2016

Suspected Bot List [2016-12-24]

detection period: 2016-12-24 00:00-23:59 UTC
number of suspected bots' IPs listed here: 16

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
FR193.252.26.9France
GE37.131.224.106Republic Of Georgia
HT200.113.221.17Haiti
IN125.17.80.106India
IN182.75.205.202India
KH103.12.160.149Cambodia
NI190.124.32.202Nicaragua
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.38.217.122Pakistan
RO109.166.146.198Romania
SV179.5.32.182El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador

List from greylisting:

Botnet Statistics [2016-12-24]

detection period: 2016-12-24 00:00-23:59 UTC
total number of suspected botnet IPs: 399
number of botnet IPs notified to network operators: 383
number of spam blocked: 12148
recipient count of spam blocked: 13525

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN158
2CHINANET-HB24
3CMNET17
4CHINANET-GD9
5UNICOM-GD8
6CHINANET-GX7
7UNICOM-JX6
8CHINANET-CQ5
9UNICOM-LN4
10UNICOM-HE4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China309
2India12
3Russian Federation9
4United States7
5Taiwan7
6Cambodia5
7South Korea4
8Brazil4
9Bangladesh4
10El Salvador3

Saturday, December 24, 2016

Suspected Bot List [2016-12-23]

detection period: 2016-12-23 00:00-23:59 UTC
number of suspected bots' IPs listed here: 37

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
BD58.147.173.36Bangladesh
CR181.193.59.118Costa Rica
CR186.32.186.58Costa Rica
ES62.15.75.212Spain
FR62.210.188.153France
FR85.203.80.206France
FR85.203.105.93France
FR193.252.26.9France
GE37.131.224.106Republic Of Georgia
ID203.190.113.186Indonesia
IN27.251.165.130India
IN59.145.146.94India
IN125.17.80.106India
IN182.71.70.178India
IN182.72.100.238India
IN182.75.123.78India
IN182.75.205.202India
KE196.200.18.90Kenya
KZ185.19.195.88Kazakhstan
NI190.124.32.202Nicaragua
PK110.36.20.8Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
RO89.165.156.233Romania
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.33.34El Salvador
SV179.5.33.78El Salvador
SV179.5.33.137El Salvador
SV179.5.33.146El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-23]

detection period: 2016-12-23 00:00-23:59 UTC
total number of suspected botnet IPs: 559
number of botnet IPs notified to network operators: 522
number of spam blocked: 15903
recipient count of spam blocked: 17912

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN157
2CHINANET-HB30
3CMNET29
4CHINANET-YN11
5UNICOM-JX10
6CHINANET-GX10
7UNICOM-SD9
8UNICOM-HE9
9UNICOM-GD9
10SV-CSCV-LACNIC9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China366
2India24
3Russian Federation13
4Taiwan11
5Colombia10
6Brazil10
7El Salvador9
8Bangladesh9
9Cambodia8
10South Korea7

Friday, December 23, 2016

Suspected Bot List [2016-12-22]

detection period: 2016-12-22 00:00-23:59 UTC
number of suspected bots' IPs listed here: 36

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
FR85.203.116.140France
IN182.71.70.178India
IN182.72.100.238India
IN182.75.123.78India
KE196.200.18.90Kenya
KZ185.19.195.88Kazakhstan
PK110.38.217.82Pakistan
SV179.5.33.78El Salvador
SV179.5.33.137El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-12-22]

detection period: 2016-12-22 00:00-23:59 UTC
total number of suspected botnet IPs: 470
number of botnet IPs notified to network operators: 434
number of spam blocked: 11595
recipient count of spam blocked: 12357

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN124
2UNICOM-ZJ40
3CHINANET-HB24
4VNPT-VNNIC-VN18
5CHINANET-GD16
6WASU-BB15
7CMNET14
8UNICOM-SD10
9BHARTI-IN10
10BSNLNET8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China303
2India34
3Viet Nam31
4Taiwan7
5Russian Federation7
6Pakistan7
7Iran6
8Thailand5
9Indonesia5
10Brazil5

Thursday, December 22, 2016

Suspected Bot List [2016-12-21]

detection period: 2016-12-21 00:00-23:59 UTC
number of suspected bots' IPs listed here: 63

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
ID203.190.113.186Indonesia
IN182.71.70.178India
IN182.72.100.238India
IN182.75.123.78India
KE196.200.18.90Kenya
KZ185.19.195.88Kazakhstan
SV179.5.33.78El Salvador
SV179.5.33.137El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-12-21]

detection period: 2016-12-21 00:00-23:59 UTC
total number of suspected botnet IPs: 757
number of botnet IPs notified to network operators: 694
number of spam blocked: 14908
recipient count of spam blocked: 22715

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN172
2UNICOM-ZJ87
3WASU-BB62
4VNPT-VNNIC-VN27
5WASU21
6CHINANET-HB18
7VIETEL-VNNIC-VN10
8CMNET10
9BSNLNET10
10PTCLBB-PK9

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China450
2India66
3Viet Nam64
4Iran22
5Pakistan13
6Colombia9
7Brazil9
8Mexico8
9United States7
10Taiwan7

Wednesday, December 21, 2016

Suspected Bot List [2016-12-20]

detection period: 2016-12-20 00:00-23:59 UTC
number of suspected bots' IPs listed here: 80

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.189.194.93Argentina
BD43.240.102.85Bangladesh
BD116.193.219.166Bangladesh
CO190.90.41.195Colombia
GT181.209.238.53Guatemala
GT190.56.135.9Guatemala
GT190.56.156.73Guatemala
GT190.56.250.81Guatemala
ID203.190.113.186Indonesia
IN182.75.123.78India
KE196.200.18.90Kenya
KZ185.19.195.88Kazakhstan
SV179.5.33.78El Salvador
SV179.5.33.137El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-12-20]

detection period: 2016-12-20 00:00-23:59 UTC
total number of suspected botnet IPs: 811
number of botnet IPs notified to network operators: 731
number of spam blocked: 18005
recipient count of spam blocked: 19547

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN254
2VNPT-VNNIC-VN45
3UNICOM-ZJ34
4CHINANET-HB17
5WASU-BB16
6FPT-VN16
7CMNET15
8BSNLNET12
9CHINANET-JS10
10UNICOM-SD8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China435
2Viet Nam89
3India84
4Iran24
5Indonesia12
6Colombia12
7Bangladesh10
8Taiwan9
9Russian Federation7
10Mexico7

Tuesday, December 20, 2016

Suspected Bot List [2016-12-19]

detection period: 2016-12-19 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.189.194.93Argentina
CO190.90.41.195Colombia
FR193.252.26.9France
GT181.209.238.53Guatemala
GT181.209.238.69Guatemala
GT190.56.135.9Guatemala
GT190.56.154.221Guatemala
GT190.56.156.73Guatemala
GT190.56.250.81Guatemala
ID203.190.113.186Indonesia
IN182.72.146.78India
IN182.72.149.230India
KE196.200.18.90Kenya
KZ185.19.195.88Kazakhstan
SV179.5.33.78El Salvador
SV179.5.33.137El Salvador
SV179.5.33.202El Salvador

List from greylisting:

Botnet Statistics [2016-12-19]

detection period: 2016-12-19 00:00-23:59 UTC
total number of suspected botnet IPs: 599
number of botnet IPs notified to network operators: 550
number of spam blocked: 13982
recipient count of spam blocked: 15054

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN226
2CHINANET-SC34
3CHINANET-HB27
4CMNET12
5CHINANET-JS11
6VNPT-VNNIC-VN10
7UNICOM-SD8
8CHINANET-SH8
9GT-TESA-LACNIC6
10UNICOM-GX5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China401
2India32
3Viet Nam22
4Iran9
5United States8
6Turkey8
7Colombia8
8Mexico7
9Guatemala7
10Brazil7

Monday, December 19, 2016

Suspected Bot List [2016-12-18]

detection period: 2016-12-18 00:00-23:59 UTC
number of suspected bots' IPs listed here: 5

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
FR5.158.242.40France
US68.119.82.199United States

List from greylisting:

Botnet Statistics [2016-12-18]

detection period: 2016-12-18 00:00-23:59 UTC
total number of suspected botnet IPs: 456
number of botnet IPs notified to network operators: 451
number of spam blocked: 11830
recipient count of spam blocked: 12862

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN205
2CHINANET-JS62
3CHINANET-SC55
4CHINANET-HB23
5CHINANET-GD16
6CMNET8
7Chinafic5
8UNICOM-SD4
9HINET-NET4
10CHINANET-SH4

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China421
2United States9
3Taiwan7
4Russian Federation3
5South Korea2
6India2
7France2
8Turkey1
9Netherlands1
10Kenya1

Sunday, December 18, 2016

Suspected Bot List [2016-12-17]

detection period: 2016-12-17 00:00-23:59 UTC
number of suspected bots' IPs listed here: 31

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR181.30.11.71Argentina
BO186.27.126.130Bolivia
FR37.187.162.49France
ID27.124.82.3Indonesia
ID202.159.42.246Indonesia
IN125.16.240.197India
US69.36.65.214United States

List from greylisting:

Botnet Statistics [2016-12-17]

detection period: 2016-12-17 00:00-23:59 UTC
total number of suspected botnet IPs: 528
number of botnet IPs notified to network operators: 498
number of spam blocked: 15603
recipient count of spam blocked: 17927

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN215
2CHINANET-HB20
3CHINANET-SC18
4CMNET13
5VNPT-VNNIC-VN9
6HICHINA7
7CHINANET-JS7
8BHARTI-IN7
9VIETEL-VNNIC-VN6
10VIETEL-VN5

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China339
2India38
3Viet Nam32
4Russian Federation12
5Brazil12
6Iran10
7United States9
8Indonesia5
9Taiwan4
10South Korea4

Saturday, December 17, 2016

Suspected Bot List [2016-12-16]

detection period: 2016-12-16 00:00-23:59 UTC
number of suspected bots' IPs listed here: 75

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR181.30.11.71Argentina
AR190.108.35.2Argentina
BO186.27.126.130Bolivia
FR37.187.162.49France
ID27.123.1.162Indonesia
ID27.124.82.3Indonesia
IN125.16.240.197India
MM103.27.118.146Myanmar
US69.36.65.214United States

List from greylisting:

Botnet Statistics [2016-12-16]

detection period: 2016-12-16 00:00-23:59 UTC
total number of suspected botnet IPs: 748
number of botnet IPs notified to network operators: 673
number of spam blocked: 13344
recipient count of spam blocked: 14398

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN259
2VNPT-VNNIC-VN36
3CHINANET-SC25
4CHINANET-HB21
5BSNLNET16
6BHARTI-IN14
7HICHINA9
8VIETEL-VN8
9PTCLBB-PK8
10CHINANET-SD8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China404
2India87
3Viet Nam66
4Brazil26
5Iran14
6Pakistan11
7Mexico10
8Russian Federation9
9Indonesia9
10United States8

Friday, December 16, 2016

Suspected Bot List [2016-12-15]

detection period: 2016-12-15 00:00-23:59 UTC
number of suspected bots' IPs listed here: 102

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR181.30.11.71Argentina
AR190.108.35.2Argentina
BO186.27.126.130Bolivia
FR37.187.162.49France
ID27.123.1.162Indonesia
ID27.124.82.3Indonesia
IN125.16.240.197India
NO193.150.121.66Norway
US69.36.65.214United States

List from greylisting:

Botnet Statistics [2016-12-15]

detection period: 2016-12-15 00:00-23:59 UTC
total number of suspected botnet IPs: 789
number of botnet IPs notified to network operators: 687
number of spam blocked: 23414
recipient count of spam blocked: 25155

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN233
2UNICOM-JS29
3VNPT-VNNIC-VN27
4CHINANET-HB21
5FPT-VN16
6PTCLBB-PK15
7CMNET11
8BSNLNET10
9BHARTI-IN9
10HICHINA8

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China369
2India73
3Viet Nam71
4Brazil31
5Iran23
6Pakistan22
7United States18
8Mexico14
9Indonesia12
10Italy10

Thursday, December 15, 2016

Suspected Bot List [2016-12-14]

detection period: 2016-12-14 00:00-23:59 UTC
number of suspected bots' IPs listed here: 105

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
CV197.255.143.108Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
FR85.203.120.51France
FR193.252.26.9France
HT200.113.221.17Haiti
IN59.145.146.94India
IN182.71.16.154India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.98.186India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN203.192.221.86India
IN203.192.221.87India
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.33.37Pakistan
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
TR78.187.59.130Turkey

List from greylisting:

Botnet Statistics [2016-12-14]

detection period: 2016-12-14 00:00-23:59 UTC
total number of suspected botnet IPs: 969
number of botnet IPs notified to network operators: 864
number of spam blocked: 21700
recipient count of spam blocked: 25084

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN267
2CHINANET-JS35
3VNPT-VNNIC-VN31
4CHINANET-HB26
5BHARTI-IN26
6CMNET21
7BSNLNET20
8VIETEL-VN17
9UNICOM-JS14
10UNICOM-JX10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China490
2India96
3Viet Nam81
4Russian Federation18
5Iran17
6Colombia15
7Bangladesh13
8Mexico12
9Indonesia12
10Brazil12

Wednesday, December 14, 2016

Suspected Bot List [2016-12-13]

detection period: 2016-12-13 00:00-23:59 UTC
number of suspected bots' IPs listed here: 182

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.195.255.164Argentina
BD43.240.100.199Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD202.5.37.132Bangladesh
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
ES88.28.206.137Spain
ES88.28.209.187Spain
FR80.11.102.142France
FR85.203.114.1France
FR85.203.120.51France
FR85.203.123.53France
FR193.252.26.9France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
HT200.113.196.77Haiti
HT200.113.196.252Haiti
HT200.113.221.17Haiti
HT200.113.221.105Haiti
HT200.113.221.134Haiti
ID118.98.125.58Indonesia
ID202.75.97.154Indonesia
ID203.190.113.186Indonesia
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.36.34India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.217.38India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.123.78India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KH103.239.54.178Cambodia
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.63.25Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
RO89.165.156.233Romania
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
TR78.187.59.130Turkey
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-13]

detection period: 2016-12-13 00:00-23:59 UTC
total number of suspected botnet IPs: 1205
number of botnet IPs notified to network operators: 1023
number of spam blocked: 21618
recipient count of spam blocked: 28827

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN272
2VNPT-VNNIC-VN46
3BHARTI-IN44
4BSNLNET31
5CMNET30
6UNICOM-HE21
7CHINANET-HB21
8CHINANET-JS19
9FPT-VN14
10UNICOM-SD13

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China546
2India136
3Viet Nam94
4Brazil30
5Iran25
6Antigua And Barbuda23
7Pakistan21
8United States19
9Russian Federation18
10Indonesia18

Tuesday, December 13, 2016

Suspected Bot List [2016-12-12]

detection period: 2016-12-12 00:00-23:59 UTC
number of suspected bots' IPs listed here: 145

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AO41.72.57.250Angola
AR190.108.35.2Argentina
BD43.240.100.199Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
BD202.5.37.132Bangladesh
CM41.211.106.148Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
FR82.98.48.220France
FR85.203.80.206France
FR85.203.105.93France
FR85.203.107.46France
FR85.203.120.51France
FR85.203.121.115France
FR109.1.102.56France
FR193.252.26.9France
GA197.231.141.29Gabon
GE37.131.224.106Republic Of Georgia
HT200.113.196.77Haiti
HT200.113.221.17Haiti
HT200.113.221.134Haiti
ID118.98.125.58Indonesia
ID202.75.97.154Indonesia
ID203.190.113.186Indonesia
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.217.38India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.205.202India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KH103.239.54.178Cambodia
KZ2.133.92.26Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.32.105Pakistan
PK110.36.35.128Pakistan
PK110.38.217.63Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
RO89.165.156.233Romania
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
TR88.249.25.2Turkey
TZ41.77.194.182Tanzania
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-12]

detection period: 2016-12-12 00:00-23:59 UTC
total number of suspected botnet IPs: 1093
number of botnet IPs notified to network operators: 948
number of spam blocked: 24731
recipient count of spam blocked: 43980

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN263
2UNICOM-JS44
3BHARTI-IN40
4CMNET29
5CHINANET-HB26
6BSNLNET26
7VNPT-VNNIC-VN23
8UNICOM-HE19
9UNICOM-JX11
10UNICOM-GD11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China549
2India109
3Viet Nam50
4Brazil25
5Russian Federation22
6Pakistan18
7Bangladesh18
8Iran17
9United States16
10Antigua And Barbuda14

Monday, December 12, 2016

Suspected Bots' IP List for November 2016

To encourage cyber security information sharing (as some form of open data) while still giving victims enough time to clean up their computers, the IP list of suspected infected computers will be released here (as shown below). You are free to use them to create more effective defenses, discover latest trends in cyber attacks, etc.

Suspected Bots IP [2016-11-01]
Suspected Bots IP [2016-11-02]
Suspected Bots IP [2016-11-03]
Suspected Bots IP [2016-11-04]
Suspected Bots IP [2016-11-05]
Suspected Bots IP [2016-11-06]
Suspected Bots IP [2016-11-07]
Suspected Bots IP [2016-11-08]
Suspected Bots IP [2016-11-09]
Suspected Bots IP [2016-11-10]
Suspected Bots IP [2016-11-11]
Suspected Bots IP [2016-11-12]
Suspected Bots IP [2016-11-13]
Suspected Bots IP [2016-11-14]
Suspected Bots IP [2016-11-15]
Suspected Bots IP [2016-11-16]
Suspected Bots IP [2016-11-17]
Suspected Bots IP [2016-11-18]
Suspected Bots IP [2016-11-19]
Suspected Bots IP [2016-11-20]
Suspected Bots IP [2016-11-21]
Suspected Bots IP [2016-11-22]
Suspected Bots IP [2016-11-23]
Suspected Bots IP [2016-11-24]
Suspected Bots IP [2016-11-25]
Suspected Bots IP [2016-11-26]
Suspected Bots IP [2016-11-27]
Suspected Bots IP [2016-11-28]
Suspected Bots IP [2016-11-29]
Suspected Bots IP [2016-11-30]

Suspected Bot List [2016-12-11]

detection period: 2016-12-11 00:00-23:59 UTC
number of suspected bots' IPs listed here: 95

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AO41.72.57.250Angola
AR190.108.35.2Argentina
BD43.240.100.199Bangladesh
BD58.147.173.36Bangladesh
BD116.193.219.109Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
BD202.5.37.132Bangladesh
CM41.211.106.148Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
ES88.28.206.137Spain
ES88.28.209.187Spain
FR85.203.105.93France
FR85.203.114.1France
FR85.203.120.51France
FR109.1.102.56France
FR193.252.26.9France
GA197.231.141.29Gabon
GE37.131.224.106Republic Of Georgia
HT200.113.196.77Haiti
HT200.113.196.252Haiti
HT200.113.221.17Haiti
HT200.113.221.134Haiti
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.217.38India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KZ2.133.92.26Kazakhstan
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.63.25Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
SA88.85.228.90Saudi Arabia
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
TR78.187.59.130Turkey
TR88.249.25.2Turkey
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-11]

detection period: 2016-12-11 00:00-23:59 UTC
total number of suspected botnet IPs: 772
number of botnet IPs notified to network operators: 677
number of spam blocked: 25863
recipient count of spam blocked: 36973

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN209
2CMNET29
3BHARTI-IN28
4CHINANET-HB27
5BSNLNET19
6UNICOM-JS18
7UNICOM-HE18
8UNICOM-JX12
9WATEEN-TEL10
10UNICOM-GD10

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China459
2India62
3Antigua And Barbuda18
4Russian Federation15
5Taiwan11
6Pakistan11
7South Korea11
8Colombia11
9Brazil11
10Bangladesh11

Sunday, December 11, 2016

Suspected Bot List [2016-12-10]

detection period: 2016-12-10 00:00-23:59 UTC
number of suspected bots' IPs listed here: 120

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR190.108.35.2Argentina
BD43.240.100.199Bangladesh
BD58.147.173.36Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD202.5.37.132Bangladesh
CM41.211.106.148Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
ES88.28.206.137Spain
ES88.28.209.187Spain
FR85.203.105.93France
FR85.203.111.157France
FR85.203.114.1France
FR85.203.120.51France
FR85.203.123.53France
FR109.1.102.56France
FR193.252.26.9France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
HT200.113.196.77Haiti
HT200.113.196.252Haiti
HT200.113.221.17Haiti
HT200.113.221.105Haiti
HT200.113.221.134Haiti
IN59.145.146.94India
IN125.17.80.106India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.217.38India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.114.174India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.212.52India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.160.149Cambodia
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KZ2.133.92.26Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.35.128Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
SA88.85.228.90Saudi Arabia
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
US69.36.65.214United States
ZM155.0.27.5Zambia

List from greylisting:

Botnet Statistics [2016-12-10]

detection period: 2016-12-10 00:00-23:59 UTC
total number of suspected botnet IPs: 852
number of botnet IPs notified to network operators: 732
number of spam blocked: 22873
recipient count of spam blocked: 29599

The top 10 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

RankNetwork# of suspected botnet IPs
1CHINANET-HN118
2VNPT-VNNIC-VN40
3BHARTI-IN36
4CMNET35
5CHINANET-HB21
6BSNLNET21
7UNICOM-HE18
8UNICOM-JX13
9WATEEN-TEL12
10HINET-NET11

The top 10 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

1China365
2India101
3Viet Nam57
4Antigua And Barbuda21
5Brazil18
6Russian Federation16
7Pakistan16
8Indonesia14
9Colombia14
10Taiwan13

Saturday, December 10, 2016

Suspected Bot List [2016-12-09]

detection period: 2016-12-09 00:00-23:59 UTC
number of suspected bots' IPs listed here: 141

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AO41.72.57.250Angola
AR190.108.35.2Argentina
BD43.240.100.199Bangladesh
BD58.147.173.36Bangladesh
BD103.16.73.207Bangladesh
BD116.193.219.109Bangladesh
BD116.193.219.141Bangladesh
BD116.193.219.163Bangladesh
BD116.193.220.3Bangladesh
BD202.5.37.132Bangladesh
CM41.211.106.148Cameroon
CR186.32.186.58Costa Rica
CV197.255.143.108Cape Verde
CV197.255.143.121Cape Verde
CV197.255.143.122Cape Verde
CV197.255.143.123Cape Verde
ES62.14.160.198Spain
ES62.15.75.212Spain
FR82.98.48.220France
GA197.231.141.29Gabon
GA197.231.143.122Gabon
GE37.131.224.106Republic Of Georgia
HT200.113.196.77Haiti
HT200.113.196.252Haiti
HT200.113.221.17Haiti
HT200.113.221.134Haiti
ID118.98.125.58Indonesia
ID202.75.97.154Indonesia
ID203.190.113.186Indonesia
IN59.145.146.94India
IN125.17.80.106India
IN125.99.255.146India
IN182.71.16.154India
IN182.71.25.62India
IN182.71.119.162India
IN182.72.25.86India
IN182.72.26.130India
IN182.72.36.34India
IN182.72.63.238India
IN182.72.89.138India
IN182.72.98.186India
IN182.72.100.238India
IN182.72.149.230India
IN182.72.158.134India
IN182.73.105.34India
IN182.73.149.126India
IN182.73.193.250India
IN182.73.245.86India
IN182.74.31.134India
IN182.74.50.70India
IN182.74.112.246India
IN182.74.232.178India
IN182.74.247.122India
IN182.75.19.2India
IN182.75.77.50India
IN182.75.107.222India
IN182.75.110.198India
IN182.75.114.174India
IN182.75.119.150India
IN182.75.205.202India
IN182.75.213.102India
IN203.192.221.86India
IN203.192.221.87India
KH103.12.161.70Cambodia
KH103.12.161.187Cambodia
KH103.12.163.67Cambodia
KH103.239.54.178Cambodia
KZ2.133.92.26Kazakhstan
KZ89.218.26.142Kazakhstan
NI190.124.32.202Nicaragua
NL213.34.69.164Netherlands
PK110.36.32.105Pakistan
PK110.36.33.37Pakistan
PK110.36.38.210Pakistan
PK110.36.63.25Pakistan
PK110.38.217.63Pakistan
PK110.38.217.82Pakistan
PK110.38.217.122Pakistan
PK110.38.217.161Pakistan
PK110.38.217.162Pakistan
PK110.38.219.211Pakistan
RO89.165.156.233Romania
SA88.85.228.90Saudi Arabia
SC41.86.56.47Seychelles
SV179.5.32.178El Salvador
SV179.5.32.182El Salvador
SV179.5.32.186El Salvador
SV179.5.32.190El Salvador
SV179.5.32.194El Salvador
SV179.5.33.137El Salvador
SV179.5.33.190El Salvador
SV179.5.33.202El Salvador
ZM155.0.27.5Zambia

List from greylisting: