Custom Search

Monday, June 26, 2017

Suspected Bot List [2017-06-25]

detection period: 2017-06-25 00:00-23:59 UTC
number of suspected bots' IPs listed here: 49

IP addresses listed here all exhibit strange network behavior. As I could not notify the victims for various reasons (no working abuse contact, mailbox over quota, etc.), I list them here instead. I have to emphasize that those are just *suspected* to be malware-infected computers.

List from fake open relays:

country codeIP addressCountry
AR181.231.28.20Argentina
IN203.115.109.254India
MO116.193.10.34Macau
MO116.193.10.35Macau
NL5.39.220.14Netherlands
NL5.39.220.15Netherlands
NL5.39.220.16Netherlands
NL5.39.220.17Netherlands
NL5.39.220.18Netherlands
NL5.39.220.19Netherlands
NL5.39.220.20Netherlands
NL5.39.220.21Netherlands
NL5.39.220.22Netherlands
NL5.39.220.23Netherlands
NL5.39.220.27Netherlands
RU176.118.237.85Russian Federation
TH103.3.65.51Thailand
TH103.253.73.95Thailand
TH203.151.206.113Thailand
UY167.56.130.139Uruguay
UY167.56.165.183Uruguay
ZA105.3.229.42South Africa
ZA196.46.23.122South Africa

List from greylisting:

country codeIP addressCountry
AR186.1.242.124Argentina
AR186.136.192.190Argentina
AR190.111.196.146Argentina
AR200.41.87.215Argentina
AZ91.135.244.44Azerbaijan
LK202.124.160.22Sri Lanka
NL5.39.220.14Netherlands
NL5.39.220.15Netherlands
NL5.39.220.16Netherlands
NL5.39.220.17Netherlands
NL5.39.220.18Netherlands
NL5.39.220.19Netherlands
NL5.39.220.20Netherlands
NL5.39.220.21Netherlands
NL5.39.220.22Netherlands
NL5.39.220.23Netherlands
NL5.39.220.25Netherlands
NL5.39.220.26Netherlands
NL5.39.220.27Netherlands
RU5.18.96.148Russian Federation
RU62.76.191.165Russian Federation
RU77.222.99.156Russian Federation
US68.188.71.230United States
US104.47.40.202United States
US104.47.42.200United States
US104.47.117.222United States

Labels:
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)